Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
Ran by lenha (administrator) on DESKTOP-HI8G2J4 (22-03-2019 19:09:00)
Running from F:\Download\scoped_dir6624_27267
Loaded Profiles: lenha (Available Profiles: lenha)
Platform: Windows 10 Pro Version 1809 17763.107 (X64) Language: Čeština (Česko)
Default browser: Opera
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Megaify Software Co.,Ltd. -> Megaify Software Co., Ltd.) C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Opera Software AS -> Opera Software) C:\Users\lenha\AppData\Local\Programs\Opera\58.0.3135.117\opera.exe
(Opera Software AS -> Opera Software) C:\Users\lenha\AppData\Local\Programs\Opera\58.0.3135.117\opera_crashreporter.exe
(Opera Software AS -> Opera Software) C:\Users\lenha\AppData\Local\Programs\Opera\58.0.3135.117\opera.exe
(Opera Software AS -> Opera Software) C:\Users\lenha\AppData\Local\Programs\Opera\58.0.3135.117\opera.exe
(Opera Software AS -> Opera Software) C:\Users\lenha\AppData\Local\Programs\Opera\58.0.3135.117\opera.exe
(Opera Software AS -> Opera Software) C:\Users\lenha\AppData\Local\Programs\Opera\58.0.3135.117\opera.exe
(Opera Software AS -> Opera Software) C:\Users\lenha\AppData\Local\Programs\Opera\58.0.3135.117\opera.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\lenha\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(eM Client, s.r.o. -> eM Client s.r.o.) C:\Program Files (x86)\eM Client\MailClient.exe
(eM Client, s.r.o. -> eM Client s.r.o.) C:\Program Files (x86)\eM Client\MailClient.exe
(ZONER software, a.s. -> ZONER software) C:\Program Files\Zoner\Photo Studio 19\Program32\ZPSTray.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Opera Software AS -> Opera Software) C:\Users\lenha\AppData\Local\Programs\Opera\58.0.3135.117\opera.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Opera Software AS -> Opera Software) C:\Users\lenha\AppData\Local\Programs\Opera\58.0.3135.117\opera.exe
(Trend Micro Inc.) [File not signed] F:\Download\scoped_dir6624_8278\hijackthis.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-4160050988-2886862043-3056562062-1001\...\Run: [eM Client] => C:\Program Files (x86)\eM Client\MailClient.exe [22928200 2019-03-12] (eM Client, s.r.o. -> eM Client s.r.o.)
HKU\S-1-5-21-4160050988-2886862043-3056562062-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 19\Program32\ZPSTRAY.EXE [604128 2019-01-18] (ZONER software, a.s. -> ZONER software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\update.bat [2018-12-16] () [File not signed]
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.88.1 192.168.163.98 80.251.240.44
Tcpip\..\Interfaces\{66f9c843-72f5-4b50-a4b3-90d4e3f8051d}: [DhcpNameServer] 192.168.88.1 192.168.163.98 80.251.240.44
HKLM\System\...\Parameters\PersistentRoutes: [104.96.147.3,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [111.221.29.177,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [111.221.29.253,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.40.37,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [134.170.115.60,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [134.170.165.248,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [134.170.165.253,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [134.170.185.70,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [134.170.30.202,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [137.116.81.24,255.255.255.255,0.0.0.0,1]
PersistentRoutes: There are 65 PersistentRoutes.
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-4160050988-2886862043-3056562062-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Opera:
=======
OPR StartupUrls: "hxxp://google.cz/"
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5381624 2018-09-15] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-03-22] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-03-22] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
S4 sedsvc; "C:\Program Files\rempl\sedsvc.exe" [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [610336 2019-03-21] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros)
R3 Envy24HFS; C:\WINDOWS\system32\drivers\Envy24HF.sys [150016 2019-03-21] (Microsoft Windows Hardware Compatibility Publisher -> VIA - IC Ensemble, Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_708ec8f9a4d134c6\nvlddmkm.sys [17544792 2019-03-21] (NVIDIA Corporation -> NVIDIA Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46472 2019-03-22] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2019-03-21] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [333792 2019-03-22] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [62432 2019-03-22] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-03-22 19:08 - 2019-03-22 19:09 - 000000000 ____D C:\FRST
2019-03-22 19:00 - 2019-03-22 19:00 - 000000000 ____D C:\Users\lenha\AppData\Local\D3DSCache
2019-03-22 18:54 - 2019-03-22 18:54 - 000000000 ___HD C:\OneDriveTemp
2019-03-22 18:50 - 2019-03-22 18:52 - 000000390 _____ C:\WINDOWS\Tasks\DriverToolkit Autorun.job
2019-03-22 18:50 - 2019-03-22 18:50 - 000002818 _____ C:\WINDOWS\System32\Tasks\DriverToolkit Autorun
2019-03-22 18:48 - 2019-03-22 18:48 - 000000000 ____D C:\Users\lenha\AppData\Local\PeerDistRepub
2019-03-22 15:45 - 2019-03-22 15:45 - 000000000 ____D C:\Users\lenha\AppData\Local\DriverToolkit
2019-03-22 15:45 - 2019-03-22 15:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverToolkit
2019-03-22 15:45 - 2019-03-22 15:45 - 000000000 ____D C:\Program Files (x86)\DriverToolkit
2019-03-22 15:34 - 2019-03-22 15:34 - 000000000 ____D C:\Users\lenha\AppData\Local\ElevatedDiagnostics
2019-03-22 15:21 - 2019-03-22 15:21 - 000000000 ____D C:\Users\lenha\AppData\Roaming\Mikrotik
2019-03-22 12:56 - 2019-03-22 12:56 - 000002031 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Zoner Photo Studio X.lnk
2019-03-22 12:56 - 2019-03-22 12:56 - 000000000 ____D C:\Users\lenha\AppData\Roaming\Zoner
2019-03-22 12:56 - 2019-03-22 12:56 - 000000000 ____D C:\Users\lenha\AppData\Local\Zoner
2019-03-22 12:55 - 2019-03-22 12:55 - 000000000 ____D C:\Program Files\Zoner
2019-03-22 12:36 - 2019-03-22 12:36 - 000000000 ____D C:\Users\lenha\AppData\Roaming\Macromedia
2019-03-22 12:35 - 2019-03-22 12:35 - 000000000 ____D C:\Users\lenha\AppData\Local\Adobe
2019-03-22 12:33 - 2019-03-22 12:33 - 000000000 ____D C:\ProgramData\Adobe
2019-03-22 12:33 - 2019-03-22 12:33 - 000000000 ____D C:\Program Files\Common Files\Adobe
2019-03-22 12:32 - 2019-03-22 12:32 - 000000000 ____D C:\ProgramData\Caphyon
2019-03-22 12:32 - 2019-03-22 12:32 - 000000000 ____D C:\Program Files (x86)\Adobe
2019-03-22 06:09 - 2019-03-22 06:18 - 000000000 ____D C:\ProgramData\Packages
2019-03-22 05:55 - 2019-03-22 10:30 - 000000000 ____D C:\Users\lenha\AppData\Local\PlaceholderTileLogoFolder
2019-03-22 05:54 - 2019-03-22 05:54 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-03-22 05:52 - 2019-03-22 15:40 - 000000000 ____D C:\Users\lenha\AppData\Local\ConnectedDevicesPlatform
2019-03-22 05:52 - 2019-03-22 05:52 - 000000020 ___SH C:\Users\lenha\ntuser.ini
2019-03-22 05:52 - 2019-03-22 05:52 - 000000000 ___RD C:\Users\lenha\3D Objects
2019-03-22 05:52 - 2019-03-22 05:52 - 000000000 ___HD C:\Users\lenha\MicrosoftEdgeBackups
2019-03-22 03:42 - 2019-03-22 18:52 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-03-22 03:42 - 2019-03-22 10:55 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-03-22 03:42 - 2019-03-22 03:42 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2019-03-22 03:42 - 2019-03-22 03:42 - 000007623 _____ C:\WINDOWS\diagerr.xml
2019-03-22 03:42 - 2019-03-22 03:42 - 000003514 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1553205429
2019-03-22 03:42 - 2019-03-22 03:42 - 000002860 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4160050988-2886862043-3056562062-1001
2019-03-22 03:40 - 2019-03-22 05:52 - 000000000 ____D C:\Users\lenha
2019-03-22 03:40 - 2019-03-22 03:40 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Šablony
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Soubory cookie
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Poslední
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Okolní tiskárny
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Okolní síť
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Nabídka Start
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Dokumenty
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Data aplikací
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\AppData\Local\Data aplikací
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 ____D C:\ProgramData\USOShared
2019-03-22 03:40 - 2018-09-15 08:29 - 000001105 _____ C:\Users\lenha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-03-22 03:40 - 2018-09-15 08:28 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2019-03-22 03:38 - 2019-03-22 18:52 - 000000000 ____D C:\ProgramData\NVIDIA
2019-03-22 03:38 - 2019-03-22 03:38 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2019-03-22 03:38 - 2019-03-22 03:38 - 000000000 ____D C:\Program Files\Common Files\Atheros
2019-03-22 03:38 - 2018-03-24 00:50 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2019-03-22 03:38 - 2018-03-24 00:02 - 005952392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2019-03-22 03:38 - 2018-03-24 00:02 - 002596320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2019-03-22 03:38 - 2018-03-24 00:02 - 001767824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2019-03-22 03:38 - 2018-03-24 00:02 - 000633224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2019-03-22 03:38 - 2018-03-24 00:02 - 000451040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2019-03-22 03:38 - 2018-03-24 00:02 - 000123840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2019-03-22 03:38 - 2018-03-24 00:02 - 000083072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2019-03-22 03:38 - 2018-03-21 12:22 - 008114212 _____ C:\WINDOWS\system32\nvcoproc.bin
2019-03-22 03:37 - 2019-03-22 18:28 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-03-22 03:37 - 2019-03-22 03:41 - 000258088 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-03-22 03:36 - 2019-03-22 03:42 - 000000000 ____D C:\Windows.old
2019-03-22 00:53 - 2019-03-22 03:36 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2019-03-22 00:51 - 2019-03-22 00:53 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2019-03-22 00:31 - 2019-03-22 00:31 - 000000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2019-03-22 00:27 - 2019-03-22 00:27 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2019-03-21 23:34 - 2019-03-21 23:34 - 000610336 _____ (Qualcomm Atheros) C:\WINDOWS\system32\Drivers\btfilter.sys
2019-03-21 23:34 - 2019-03-21 23:34 - 000271600 _____ (Qualcomm®Atheros®) C:\WINDOWS\system32\BtContextMenu.dll
2019-03-21 23:34 - 2019-03-21 23:34 - 000269048 _____ (Qualcomm Atheros Communications Inc.) C:\WINDOWS\system32\btcoinst.dll
2019-03-21 23:34 - 2019-03-21 23:34 - 000246804 _____ C:\WINDOWS\system32\Drivers\AtherosBT.bin
2019-03-21 23:34 - 2019-03-21 23:34 - 000098552 _____ (Qualcomm®Atheros®) C:\WINDOWS\system32\BtContextMenu.dll.muien-US
2019-03-21 23:34 - 2019-03-21 23:34 - 000046972 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x11020000.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000046908 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x31010000.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000046852 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x11020100.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000045868 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x01020201.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000044028 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x01020200.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000042908 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x31010100.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000040684 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x31010000_ss01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0xf0.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x21.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x11.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001922 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010100_40.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001802 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020100_40_SS01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001802 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020100_40_nf01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001802 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020100_40.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001796 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020000_40.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_SS01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_LV01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0xf1.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x22.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x12.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001512 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010100_40_0x01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001242 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001228 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x04.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001214 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x03.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001204 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x02.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001204 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001198 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_26.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001192 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_26_0x01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000296 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000278 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x04.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x03.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x02.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_26_0x01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_26.dfu
2019-03-21 23:14 - 2019-03-22 15:43 - 000000000 ____D C:\Program Files\rempl
2019-03-21 23:14 - 2019-03-22 05:52 - 000000000 ____D C:\Program Files\CUAssistant
2019-03-21 23:14 - 2018-12-10 23:04 - 000592616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2019-03-21 23:13 - 2019-03-21 23:13 - 127411920 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-03-21 23:13 - 2019-03-21 23:13 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-03-21 23:12 - 2019-03-22 03:42 - 000000000 ___DC C:\WINDOWS\Panther
2019-03-21 23:11 - 2019-03-21 23:11 - 001997752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438813.dll
2019-03-21 23:11 - 2019-03-21 23:11 - 001682544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438813.dll
2019-03-21 23:11 - 2018-06-27 12:10 - 000131288 _____ (Microsoft Corporation) C:\WINDOWS\system32\osrss.dll
2019-03-21 23:10 - 2019-03-21 23:10 - 000000000 ____D C:\Users\lenha\AppData\Local\GHISLER
2019-03-21 23:09 - 2019-03-21 23:09 - 000000000 ____D C:\Users\lenha\AppData\Roaming\GHISLER
2019-03-21 23:08 - 2019-03-21 23:09 - 007664792 _____ (Ghisler Software GmbH) C:\Users\lenha\Downloads\tcmd922x32_64.exe
2019-03-21 23:03 - 2019-03-22 18:54 - 000000000 ____D C:\Users\lenha\AppData\Roaming\eM Client
2019-03-21 23:03 - 2019-03-21 23:03 - 000001133 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eM Client.lnk
2019-03-21 23:03 - 2019-03-21 23:03 - 000000000 ____D C:\Users\lenha\AppData\Local\eM Client
2019-03-21 23:03 - 2019-03-21 23:03 - 000000000 ____D C:\Users\lenha\AppData\Local\CEF
2019-03-21 23:03 - 2019-03-21 23:03 - 000000000 ____D C:\Program Files (x86)\eM Client
2019-03-21 23:02 - 2019-03-21 23:02 - 053764096 _____ C:\Users\lenha\Downloads\setup.msi
2019-03-21 23:01 - 2019-03-21 23:01 - 000000000 ____D C:\Users\lenha\AppData\Local\OneDrive
2019-03-21 22:58 - 2018-09-16 17:43 - 001660472 _____ C:\Users\lenha\OneDrive\Dokumenty\winbox (1).exe
2019-03-21 22:58 - 2018-01-30 15:28 - 000006382 _____ C:\Users\lenha\OneDrive\Dokumenty\zalozky_30.01.18.html
2019-03-21 22:58 - 2017-09-15 14:21 - 001588750 _____ C:\Users\lenha\OneDrive\Dokumenty\winbox.exe
2019-03-21 22:58 - 2017-06-02 21:39 - 000800904 _____ C:\Users\lenha\OneDrive\Dokumenty\palemoon-websetup.exe
2019-03-21 22:58 - 2017-05-25 10:29 - 002491932 _____ C:\Users\lenha\OneDrive\Dokumenty\Bitcoin_krok_za_krokem_ebook.pdf
2019-03-21 22:58 - 2015-08-16 21:10 - 000049776 _____ C:\Users\lenha\OneDrive\Dokumenty\Bc-prace-Vendula-Lenhartova (1).odt
2019-03-21 22:58 - 2014-02-06 09:03 - 000131072 _____ C:\Users\lenha\OneDrive\Dokumenty\Tahiti1.rom
2019-03-21 22:58 - 2014-02-06 09:03 - 000131072 _____ C:\Users\lenha\OneDrive\Dokumenty\Tahiti.rom
2019-03-21 22:58 - 2014-01-23 09:37 - 000131072 _____ C:\Users\lenha\OneDrive\Dokumenty\Tahiti.bin
2019-03-21 22:57 - 2019-03-21 22:57 - 028915808 _____ (Microsoft Corporation) C:\Users\lenha\Downloads\OneDriveSetup.exe
2019-03-21 22:57 - 2019-03-21 22:57 - 000001397 _____ C:\Users\lenha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2019-03-21 22:57 - 2019-03-21 22:57 - 000000000 ____D C:\Users\lenha\AppData\Local\Opera Software
2019-03-21 22:56 - 2019-03-22 18:56 - 001606102 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-03-21 22:56 - 2019-03-21 22:56 - 002165336 _____ (Opera Software) C:\Users\lenha\Downloads\OperaSetup.exe
2019-03-21 22:56 - 2019-03-21 22:56 - 000150016 _____ (VIA - IC Ensemble, Inc.) C:\WINDOWS\system32\Drivers\Envy24HF.sys
2019-03-21 22:56 - 2019-03-21 22:56 - 000035584 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\system32\Drivers\wdcsam64.sys
2019-03-21 22:56 - 2019-03-21 22:56 - 000000000 ____D C:\Users\lenha\AppData\Roaming\Opera Software
2019-03-21 22:55 - 2019-03-22 03:38 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2019-03-21 22:55 - 2019-03-22 03:38 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2019-03-21 22:55 - 2019-03-21 22:57 - 000000000 ____D C:\Users\lenha\AppData\Local\Comms
2019-03-21 22:55 - 2019-03-21 22:56 - 000000000 ____D C:\Users\lenha\AppData\Local\MicrosoftEdge
2019-03-21 22:55 - 2019-03-21 22:55 - 040278616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 035188992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 019855144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 016496768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 013571520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 012967056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 011132384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 011001504 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 004633920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 004318112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 003939624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 003719096 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001985112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6439135.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001690952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001683712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6439135.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001355216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001346128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001153752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001138720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001067552 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001065888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001061352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000998432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000950016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000902096 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000811808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000749312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000650232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000633040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000625504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000608344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000516024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000235424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2019-03-21 22:55 - 2019-03-21 22:55 - 000054272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000048407 _____ C:\WINDOWS\system32\nvinfo.pb
2019-03-21 22:55 - 2019-03-21 22:55 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2019-03-21 22:54 - 2019-03-22 18:54 - 000000000 ___RD C:\Users\lenha\OneDrive
2019-03-21 22:53 - 2019-03-22 18:48 - 000000000 ____D C:\Users\lenha\AppData\Local\Packages
2019-03-21 22:53 - 2019-03-22 15:23 - 000000000 ____D C:\Users\lenha\AppData\Local\VirtualStore
2019-03-21 22:53 - 2019-03-22 06:20 - 000000000 ____D C:\Users\lenha\AppData\Local\Publishers
2019-03-21 22:53 - 2019-03-22 05:52 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-03-21 22:53 - 2019-03-21 23:09 - 000000000 ____D C:\Users\lenha\AppData\Local\PackageStaging
2019-03-21 22:53 - 2019-03-21 22:53 - 000016148 _____ C:\WINDOWS\system32\DESKTOP-HI8G2J4_defaultuser0_HistoryPrediction.bin
2019-03-21 22:53 - 2019-03-21 22:53 - 000000000 ____D C:\Users\lenha\AppData\Roaming\Adobe
2019-03-21 22:53 - 2019-03-21 22:53 - 000000000 ____D C:\Users\lenha\AppData\Local\TileDataLayer
2019-03-21 22:52 - 2019-03-21 22:52 - 000195152 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Šablony
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Soubory cookie
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Poslední
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Okolní tiskárny
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Okolní síť
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Nabídka Start
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Dokumenty
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Data aplikací
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\ProgramData\Šablony
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\ProgramData\Plocha
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\ProgramData\Nabídka Start
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\ProgramData\Dokumenty
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\ProgramData\Data aplikací
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 ____D C:\WINDOWS\CSC
2019-03-21 22:41 - 2019-03-21 22:41 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2019-03-21 22:17 - 2019-03-21 22:17 - 000000000 ___HD C:\$SysReset
==================== One month (modified) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-03-22 18:56 - 2018-09-15 18:39 - 000682358 _____ C:\WINDOWS\system32\perfh005.dat
2019-03-22 18:56 - 2018-09-15 18:39 - 000137076 _____ C:\WINDOWS\system32\perfc005.dat
2019-03-22 18:56 - 2018-09-15 08:31 - 000000000 ____D C:\WINDOWS\INF
2019-03-22 18:54 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-03-22 18:50 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-03-22 18:50 - 2018-09-15 07:09 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2019-03-22 18:48 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-03-22 15:38 - 2018-09-15 08:23 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-03-22 15:35 - 2018-09-15 07:09 - 000000000 ____D C:\WINDOWS\servicing
2019-03-22 10:55 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\Windows Defender
2019-03-22 06:09 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\ServiceState
2019-03-22 03:58 - 2018-09-15 07:09 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2019-03-22 03:42 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\windows nt
2019-03-22 03:41 - 2018-09-15 08:33 - 000000000 __RHD C:\Users\Public\Libraries
2019-03-22 03:39 - 2018-09-15 08:33 - 000000000 ___RD C:\WINDOWS\PrintDialog
2019-03-22 03:38 - 2018-09-15 08:33 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2019-03-22 03:38 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\Help
2019-03-22 03:36 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2019-03-22 03:36 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\spool
2019-03-22 03:36 - 2018-09-15 08:31 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2019-03-22 03:36 - 2015-07-10 12:04 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2019-03-22 00:59 - 2018-09-15 08:36 - 000000000 ____D C:\WINDOWS\Setup
2019-03-22 00:54 - 2015-07-10 12:04 - 000000000 ____D C:\WINDOWS\InfusedApps
2019-03-22 00:53 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2019-03-22 00:53 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\Resources
2019-03-22 00:32 - 2018-09-15 08:39 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2019-03-22 00:32 - 2018-09-15 08:39 - 000302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2019-03-22 00:32 - 2018-09-15 08:37 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
2019-03-03 01:45 - 2018-09-15 08:36 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-03-03 01:45 - 2018-09-15 08:36 - 000179608 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\dllhost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17.03.2019
Ran by lenha (22-03-2019 19:09:48)
Running from F:\Download\scoped_dir6624_27267
Windows 10 Pro Version 1809 17763.107 (X64) (2019-03-22 02:42:25)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-4160050988-2886862043-3056562062-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4160050988-2886862043-3056562062-503 - Limited - Disabled)
Guest (S-1-5-21-4160050988-2886862043-3056562062-501 - Limited - Disabled)
lenha (S-1-5-21-4160050988-2886862043-3056562062-1001 - Administrator - Enabled) => C:\Users\lenha
WDAGUtilityAccount (S-1-5-21-4160050988-2886862043-3056562062-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Photoshop CC (HKLM-x32\...\Adobe Photoshop CC 19.0) (Version: 19.0 - Adobe)
DriverToolkit version 8.5.0.0 (HKLM-x32\...\{D66BF89F-B0A2-48F5-A2E4-242EB645AB76}_is1) (Version: 8.5.0.0 - Megaify Software)
eM Client (HKLM-x32\...\{5DAF1ADB-AD1D-457E-8803-6FA42EF5701D}) (Version: 7.2.34959.0 - eM Client Inc.)
Microsoft OneDrive (HKU\S-1-5-21-4160050988-2886862043-3056562062-1001\...\OneDriveSetup.exe) (Version: 19.012.0121.0011 - Microsoft Corporation)
Opera Stable 58.0.3135.117 (HKU\S-1-5-21-4160050988-2886862043-3056562062-1001\...\Opera 58.0.3135.117) (Version: 58.0.3135.117 - Opera Software)
Ovládací panel NVIDIA 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 391.35 - NVIDIA Corporation) Hidden
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.22 - Ghisler Software GmbH)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{FBA3961B-D1DF-493C-BC1F-E67D3B832895}) (Version: 2.56.0.0 - Microsoft Corporation)
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{344F3227-F502-4219-9DC4-1967E586FAFA}) (Version: 2.51.0.0 - Microsoft Corporation)
Zoner Photo Studio X (HKLM\...\ZonerPhotoStudioX_CZ_is1) (Version: 19.1809.2.93 - ZONER software)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-4160050988-2886862043-3056562062-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {2598A0F0-C130-4746-BED7-A8FC3216B11D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {421056A3-0F58-4EC9-959A-7E4906BFDDDB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {45CDE8E8-A1C8-427F-A2A5-5C37B31ABEE9} - System32\Tasks\Microsoft\Windows\CUAssistant\CULauncher => C:\Program Files\CUAssistant\culauncher.exe (Microsoft Windows -> Microsoft Corporation)
Task: {6D707A78-07CE-41BB-A09C-6E2FD342423A} - System32\Tasks\DriverToolkit Autorun => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe (Megaify Software Co.,Ltd. -> Megaify Software Co., Ltd.)
Task: {86795C9A-98E6-47B5-945D-0BE00386882B} - System32\Tasks\Opera scheduled Autoupdate 1553205429 => C:\Users\lenha\AppData\Local\Programs\Opera\launcher.exe (Opera Software AS -> Opera Software)
Task: {AB6BF5AE-24EE-4AEA-90AA-545F01B13CAC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {F92D7268-79C9-4CD3-AFE8-24D442B5FD41} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2019-03-22 19:04 - 2019-03-22 19:04 - 000388608 _____ (Trend Micro Inc.) [File not signed] F:\Download\scoped_dir6624_8278\hijackthis.exe
2019-01-24 12:23 - 2019-01-24 12:23 - 062831616 _____ () [File not signed] C:\Program Files (x86)\eM Client\libcef.DLL
2019-01-24 12:21 - 2019-01-24 12:21 - 000840078 _____ (SQLite Development Team) [File not signed] C:\Program Files (x86)\eM Client\SQLite\x86\sqlite3.dll
2019-03-22 12:55 - 2016-10-17 18:29 - 003842048 _____ (Terra Informatica Software, Inc.) [File not signed] C:\Program Files\Zoner\Photo Studio 19\Program32\sciter32.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2015-07-10 12:04 - 2019-03-22 18:49 - 000004933 _____ C:\WINDOWS\system32\drivers\etc\hosts
0.0.0.0 a.ads1.msn.com
0.0.0.0 a.ads2.msads.net
0.0.0.0 a.ads2.msn.com
0.0.0.0 a.rad.msn.com
0.0.0.0 a-0001.a-msedge.net
0.0.0.0 a-0002.a-msedge.net
0.0.0.0 a-0003.a-msedge.net
0.0.0.0 a-0004.a-msedge.net
0.0.0.0 a-0005.a-msedge.net
0.0.0.0 a-0006.a-msedge.net
0.0.0.0 a-0007.a-msedge.net
0.0.0.0 a-0008.a-msedge.net
0.0.0.0 a-0009.a-msedge.net
0.0.0.0 ac3.msn.com
0.0.0.0 ad.doubleclick.net
0.0.0.0 adnexus.net
0.0.0.0 adnxs.com
0.0.0.0 ads.msn.com
0.0.0.0 ads1.msads.net
0.0.0.0 ads1.msn.com
0.0.0.0 aidps.atdmt.com
0.0.0.0 aka-cdn-ns.adtech.de
0.0.0.0 a-msedge.net
0.0.0.0 apps.skype.com
0.0.0.0 az361816.vo.msecnd.net
0.0.0.0 az512334.vo.msecnd.net
0.0.0.0 b.ads1.msn.com
0.0.0.0 b.ads2.msads.net
0.0.0.0 b.rad.msn.com
0.0.0.0 bs.serving-sys.com
There are 92 more lines.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-4160050988-2886862043-3056562062-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\lenha\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img1.jpg
DNS Servers: 192.168.88.1 - 192.168.163.98
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
If an entry is included in the fixlist, it will be removed.
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{C117DEBC-A484-4FD5-B2E3-E7EA4EDD1BE6}F:\download\scoped_dir12396_20861\winbox (1).exe] => (Allow) F:\download\scoped_dir12396_20861\winbox (1).exe (Mikrotikls SIA -> )
FirewallRules: [UDP Query User{009F01C7-C20A-43DB-B8AE-B94B648A10CE}F:\download\scoped_dir12396_20861\winbox (1).exe] => (Allow) F:\download\scoped_dir12396_20861\winbox (1).exe (Mikrotikls SIA -> )
FirewallRules: [{73A59820-8767-4A18-9DD0-7FF472214B98}] => (Block) F:\download\scoped_dir12396_20861\winbox (1).exe (Mikrotikls SIA -> )
FirewallRules: [{47B64908-AEDE-421D-8FFD-C3D71AEBD2F8}] => (Block) F:\download\scoped_dir12396_20861\winbox (1).exe (Mikrotikls SIA -> )
FirewallRules: [TCP Query User{B272DA1F-918F-4E7B-81AE-EE1659ADC392}C:\users\lenha\onedrive\dokumenty\winbox.exe] => (Allow) C:\users\lenha\onedrive\dokumenty\winbox.exe () [File not signed]
FirewallRules: [UDP Query User{64571CDD-33AA-4858-9305-1DD9E38C19C2}C:\users\lenha\onedrive\dokumenty\winbox.exe] => (Allow) C:\users\lenha\onedrive\dokumenty\winbox.exe () [File not signed]
FirewallRules: [{AC2CDA9B-755D-4B05-B899-19787D927914}] => (Block) C:\users\lenha\onedrive\dokumenty\winbox.exe () [File not signed]
FirewallRules: [{CF0D121E-35E6-492B-BD4C-D43A15F7C367}] => (Block) C:\users\lenha\onedrive\dokumenty\winbox.exe () [File not signed]
FirewallRules: [TCP Query User{7C14C58A-94FE-4F09-AC9A-AC237F8D9D32}F:\download\winbox (1).exe] => (Allow) F:\download\winbox (1).exe (Mikrotikls SIA -> )
FirewallRules: [UDP Query User{869B5B84-369C-498A-9F10-7694840CB9E6}F:\download\winbox (1).exe] => (Allow) F:\download\winbox (1).exe (Mikrotikls SIA -> )
FirewallRules: [{60E6D465-398E-4850-BE86-7EF7620A2377}] => (Block) C:\windows\system32\svchost.exe (Microsoft Windows Publisher -> Microsoft Corporation)
FirewallRules: [{2765E0F4-2918-4A46-B9C9-43CDD8FCBA2B}] => (Block) C:\windows\systemapps\microsoft.windows.cortana_cw5n1h2txyewy\searchui.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{E02AB908-0A91-41DB-8504-5C385CC561BF}] => (Block) C:\Windows\explorer.exe (Microsoft Windows -> Microsoft Corporation)
==================== Restore Points =========================
22-03-2019 15:37:25 Windows Update
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/22/2019 06:11:23 AM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Získání licence koncového uživatele se nezdařilo. hr=0xC004C003
ID SKU=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
Error: (03/22/2019 06:11:23 AM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Podrobnosti chyby získávání licence
hr=0xC004C003
Error: (03/22/2019 06:11:20 AM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Získání licence koncového uživatele se nezdařilo. hr=0xC004C003
ID SKU=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
Error: (03/22/2019 06:11:20 AM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Podrobnosti chyby získávání licence
hr=0xC004C003
Error: (03/22/2019 06:02:53 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0xC004C003
Argument příkazového řádku:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (03/22/2019 06:02:52 AM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Získání licence koncového uživatele se nezdařilo. hr=0xC004C003
ID SKU=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
Error: (03/22/2019 06:02:52 AM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Podrobnosti chyby získávání licence
hr=0xC004C003
Error: (03/22/2019 06:02:50 AM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Získání licence koncového uživatele se nezdařilo. hr=0xC004C003
ID SKU=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
System errors:
=============
Error: (03/22/2019 06:54:10 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Spuštění pro serverovou aplikaci COM s identifikátorem CLSID
Windows.SecurityCenter.WscBrokerManager
a APPID
Není k dispozici
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (03/22/2019 06:54:10 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Spuštění pro serverovou aplikaci COM s identifikátorem CLSID
Windows.SecurityCenter.SecurityAppBroker
a APPID
Není k dispozici
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (03/22/2019 06:54:06 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-HI8G2J4)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Spuštění pro serverovou aplikaci COM s identifikátorem CLSID
Windows.SecurityCenter.WscCloudBackupProvider
a APPID
Není k dispozici
uživateli DESKTOP-HI8G2J4\lenha (SID: S-1-5-21-4160050988-2886862043-3056562062-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (03/22/2019 06:53:56 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-HI8G2J4)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-HI8G2J4\lenha (SID: S-1-5-21-4160050988-2886862043-3056562062-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (03/22/2019 06:53:46 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
a APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
uživateli NT AUTHORITY\LOCAL SERVICE (SID: S-1-5-19) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (03/22/2019 06:53:46 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
a APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
uživateli NT AUTHORITY\LOCAL SERVICE (SID: S-1-5-19) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (03/22/2019 06:39:23 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-HI8G2J4)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-HI8G2J4\lenha (SID: S-1-5-21-4160050988-2886862043-3056562062-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (03/22/2019 04:05:01 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-HI8G2J4)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-HI8G2J4\lenha (SID: S-1-5-21-4160050988-2886862043-3056562062-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Windows Defender:
===================================
Date: 2019-03-22 15:43:19.039
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Trojan:Win32/CoinMiner.BB!bit
ID: 2147716648
Závažnost: Vážné
Kategorie: Trojský kůň
Cesta: file:_J:\Photo.scr
Původ zjišťování: Místní počítač
Typ zjišťování: Konkrétní
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: DESKTOP-HI8G2J4\lenha
Název procesu: C:\totalcmd\TOTALCMD64.EXE
Verze podpisu: AV: 1.291.74.0, AS: 1.291.74.0, NIS: 1.291.74.0
Verze modulu: AM: 1.1.15800.1, NIS: 1.1.15800.1
Date: 2019-03-22 15:43:15.956
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Trojan:Win32/CoinMiner!rfn
ID: 2147693577
Závažnost: Vážné
Kategorie: Trojský kůň
Cesta: file:_J:\IMG001.exe
Původ zjišťování: Místní počítač
Typ zjišťování: Konkrétní
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: DESKTOP-HI8G2J4\lenha
Název procesu: C:\totalcmd\TOTALCMD64.EXE
Verze podpisu: AV: 1.291.74.0, AS: 1.291.74.0, NIS: 1.291.74.0
Verze modulu: AM: 1.1.15800.1, NIS: 1.1.15800.1
Date: 2019-03-22 15:31:33.433
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Trojan:Win32/CoinMiner!rfn
ID: 2147693577
Závažnost: Vážné
Kategorie: Trojský kůň
Cesta: file:_G:\IMG001.exe
Původ zjišťování: Místní počítač
Typ zjišťování: Konkrétní
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: DESKTOP-HI8G2J4\lenha
Název procesu: C:\totalcmd\TOTALCMD64.EXE
Verze podpisu: AV: 1.291.60.0, AS: 1.291.60.0, NIS: 1.291.60.0
Verze modulu: AM: 1.1.15800.1, NIS: 1.1.15800.1
Date: 2019-03-22 15:31:20.491
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Trojan:Win32/CoinMiner.BB!bit
ID: 2147716648
Závažnost: Vážné
Kategorie: Trojský kůň
Cesta: file:_G:\Photo.scr; file:_H:\Photo.scr
Původ zjišťování: Místní počítač
Typ zjišťování: Konkrétní
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: DESKTOP-HI8G2J4\lenha
Název procesu: C:\totalcmd\TOTALCMD64.EXE
Verze podpisu: AV: 1.291.60.0, AS: 1.291.60.0, NIS: 1.291.60.0
Verze modulu: AM: 1.1.15800.1, NIS: 1.1.15800.1
Date: 2019-03-22 15:31:17.437
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Trojan:Win32/CoinMiner!rfn
ID: 2147693577
Závažnost: Vážné
Kategorie: Trojský kůň
Cesta: file:_G:\IMG001.exe
Původ zjišťování: Místní počítač
Typ zjišťování: Konkrétní
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: DESKTOP-HI8G2J4\lenha
Název procesu: C:\totalcmd\TOTALCMD64.EXE
Verze podpisu: AV: 1.291.60.0, AS: 1.291.60.0, NIS: 1.291.60.0
Verze modulu: AM: 1.1.15800.1, NIS: 1.1.15800.1
Date: 2019-03-22 03:42:16.147
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o načtení podpisů a pokusí se o obnovení sady podpisů, jejichž správnost je potvrzena.
Podpisy, které se měly načíst: Aktuální
Kód chyby: 0x80070003
Popis chyby: Systém nemůže nalézt uvedenou cestu.
Verze podpisu: 0.0.0.0;0.0.0.0
Verze modulu: 0.0.0.0
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz
Percentage of memory in use: 17%
Total physical RAM: 16359.11 MB
Available physical RAM: 13534.66 MB
Total Virtual: 19303.11 MB
Available Virtual: 14806.18 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:223.03 GB) (Free:180.48 GB) NTFS
Drive d: (Data_D) (Fixed) (Total:237.75 GB) (Free:114.88 GB) NTFS
Drive e: () (Fixed) (Total:115.48 GB) (Free:35.59 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive f: (Data) (Fixed) (Total:117.19 GB) (Free:3.45 GB) NTFS
Drive g: (My Passport) (Fixed) (Total:3725.99 GB) (Free:3406.71 GB) NTFS
Drive h: (Video_data) (Fixed) (Total:115.69 GB) (Free:21.45 GB) NTFS
Drive i: (Data) (Fixed) (Total:227.62 GB) (Free:20.24 GB) NTFS
Drive j: (DATA) (Fixed) (Total:144.04 GB) (Free:28.26 GB) NTFS
Drive l: (MUSIK) (Fixed) (Total:931.51 GB) (Free:574.27 GB) NTFS
\\?\Volume{7a9df2d5-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{7a9df2d5-0000-0000-0000-60c837000000}\ () (Fixed) (Total:0.44 GB) (Free:0.06 GB) NTFS
\\?\Volume{bf1ed8f5-0000-0000-007e-000000000000}\ (PQSERVICE) (Fixed) (Total:9.76 GB) (Free:3.23 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 223.6 GB) (Disk ID: 7A9DF2D5)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 1AB8D7AA)
Partition 1: (Active) - (Size=237.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=227.6 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 298.1 GB) (Disk ID: BF1ED8F5)
Partition 1: (Not Active) - (Size=9.8 GB) - (Type=27)
Partition 2: (Active) - (Size=115.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=144 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=28.8 GB) - (Type=05)
========================================================
Disk: 3 (Size: 232.9 GB) (Disk ID: BCCCBCCC)
Partition 1: (Active) - (Size=117.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=115.7 GB) - (Type=0F Extended)
========================================================
Disk: 4 (Size: 3726 GB) (Disk ID: 16F2A91F)
Partition: GPT.
========================================================
Disk: 5 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: CE940487)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
PC je pomalé nejde načíst stránka v opeře
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119420
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: PC je pomalé nejde načíst stránka v opeře
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: PC je pomalé nejde načíst stránka v opeře
# -------------------------------Rudy píše:Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
# Malwarebytes AdwCleaner 7.2.7.0
# -------------------------------
# Build: 01-30-2019
# Database: 2019-03-21.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 03-23-2019
# Duration: 00:00:00
# OS: Windows 10 Pro
# Cleaned: 0
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
No malicious folders cleaned.
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
No malicious registry entries cleaned.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [2041 octets] - [23/03/2019 19:06:05]
AdwCleaner[C00].txt - [2059 octets] - [23/03/2019 19:06:14]
AdwCleaner[S01].txt - [1371 octets] - [23/03/2019 19:25:34]
AdwCleaner[S02].txt - [1432 octets] - [23/03/2019 19:27:14]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ##########
-
Rudy
- Site Admin
- Příspěvky: 119420
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: PC je pomalé nejde načíst stránka v opeře
Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:
Uložte do F:\Download\scoped_dir6624_27267 jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
SearchScopes: HKU\S-1-5-21-4160050988-2886862043-3056562062-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
J:\Photo.scr
J:\IMG001.exe
G:\Photo.scr
H:\Photo.scr
G:\IMG001.exe
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: PC je pomalé nejde načíst stránka v opeře
Rudy píše:Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:
Uložte do F:\Download\scoped_dir6624_27267 jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
SearchScopes: HKU\S-1-5-21-4160050988-2886862043-3056562062-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
J:\Photo.scr
J:\IMG001.exe
G:\Photo.scr
H:\Photo.scr
G:\IMG001.exe
EmptyTemp:
End
Re: PC je pomalé nejde načíst stránka v opeře
radek64 píše:Rudy píše:Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:
Uložte do F:\Download\scoped_dir6624_27267 jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
SearchScopes: HKU\S-1-5-21-4160050988-2886862043-3056562062-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
J:\Photo.scr
J:\IMG001.exe
G:\Photo.scr
H:\Photo.scr
G:\IMG001.exe
EmptyTemp:
End
Re: PC je pomalé nejde načíst stránka v opeře
radek64 píše:radek64 píše:Rudy píše:Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:
Uložte do F:\Download\scoped_dir6624_27267 jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
SearchScopes: HKU\S-1-5-21-4160050988-2886862043-3056562062-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
J:\Photo.scr
J:\IMG001.exe
G:\Photo.scr
H:\Photo.scr
G:\IMG001.exe
EmptyTemp:
End
Re: PC je pomalé nejde načíst stránka v opeře
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019radek64 píše:radek64 píše:radek64 píše:Rudy píše:Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:
Uložte do F:\Download\scoped_dir6624_27267 jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
SearchScopes: HKU\S-1-5-21-4160050988-2886862043-3056562062-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
J:\Photo.scr
J:\IMG001.exe
G:\Photo.scr
H:\Photo.scr
G:\IMG001.exe
EmptyTemp:
End
Ran by lenha (administrator) on DESKTOP-HI8G2J4 (24-03-2019 09:43:46)
Running from C:\Users\lenha\Downloads
Loaded Profiles: lenha (Available Profiles: lenha)
Platform: Windows 10 Pro Version 1809 17763.379 (X64) Language: Čeština (Česko)
Default browser: Opera
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\lenha\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(eM Client, s.r.o. -> eM Client s.r.o.) C:\Program Files (x86)\eM Client\MailClient.exe
(ZONER software, a.s. -> ZONER software) C:\Program Files\Zoner\Photo Studio 19\Program32\ZPSTray.exe
(eM Client, s.r.o. -> eM Client s.r.o.) C:\Program Files (x86)\eM Client\MailClient.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Ghisler Software GmbH -> Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [DLLSuite2016] => C:\Program Files (x86)\DLL Suite\DLLSuite.exe
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKU\S-1-5-21-4160050988-2886862043-3056562062-1001\...\Run: [eM Client] => C:\Program Files (x86)\eM Client\MailClient.exe [22928200 2019-03-12] (eM Client, s.r.o. -> eM Client s.r.o.)
HKU\S-1-5-21-4160050988-2886862043-3056562062-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 19\Program32\ZPSTRAY.EXE [604128 2019-01-18] (ZONER software, a.s. -> ZONER software)
HKU\S-1-5-21-4160050988-2886862043-3056562062-1001\...\Run: [AdobeBridge] => [X]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\update.bat [2018-12-16] () [File not signed]
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{66f9c843-72f5-4b50-a4b3-90d4e3f8051d}: [NameServer] 93.93.32.32,8.8.8.8
HKLM\System\...\Parameters\PersistentRoutes: [104.96.147.3,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [111.221.29.177,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [111.221.29.253,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.40.37,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [134.170.115.60,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [134.170.165.248,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [134.170.165.253,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [134.170.185.70,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [134.170.30.202,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [137.116.81.24,255.255.255.255,0.0.0.0,1]
PersistentRoutes: There are 65 PersistentRoutes.
Internet Explorer:
==================
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5381128 2019-03-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-03-22] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-03-22] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
S4 sedsvc; "C:\Program Files\rempl\sedsvc.exe" [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AthDfu; C:\WINDOWS\System32\Drivers\AthDfu.sys [55336 2019-03-21] (Atheros Communications Inc. -> Windows (R) Win 7 DDK provider)
R3 BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [610336 2019-03-21] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros)
R3 Envy24HFS; C:\WINDOWS\system32\drivers\Envy24HF.sys [150016 2019-03-21] (Microsoft Windows Hardware Compatibility Publisher -> VIA - IC Ensemble, Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_708ec8f9a4d134c6\nvlddmkm.sys [17544792 2019-03-21] (NVIDIA Corporation -> NVIDIA Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-03-22] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2019-03-21] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [333792 2019-03-22] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [62432 2019-03-22] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-03-24 09:34 - 2019-03-24 09:34 - 002434048 _____ (Farbar) C:\Users\lenha\Downloads\FRST64.exe
2019-03-24 09:24 - 2019-03-24 09:24 - 000000000 ___HD C:\OneDriveTemp
2019-03-24 00:03 - 2019-03-24 00:03 - 000877952 _____ C:\Users\lenha\OneDrive\Dokumenty\zalozky_24.03.19.html
2019-03-23 23:35 - 2019-03-23 23:35 - 000016329 _____ C:\Users\lenha\Downloads\FRST.zip
2019-03-23 23:35 - 2019-03-23 23:35 - 000007256 _____ C:\Users\lenha\Downloads\Addition.zip
2019-03-23 23:22 - 2019-03-23 23:22 - 000027549 _____ C:\Users\lenha\Downloads\Addition.txt
2019-03-23 23:21 - 2019-03-24 09:44 - 000008109 _____ C:\Users\lenha\Downloads\FRST.txt
2019-03-23 23:10 - 2019-03-23 23:22 - 000000000 ____D C:\Users\lenha\AppData\Roaming\Notepad++
2019-03-23 23:10 - 2019-03-23 23:10 - 000001104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2019-03-23 23:10 - 2019-03-23 23:10 - 000000000 ____D C:\Program Files (x86)\Notepad++
2019-03-23 23:02 - 2019-03-23 23:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2019-03-23 23:02 - 2019-03-23 23:02 - 000000000 ____D C:\Program Files\VS Revo Group
2019-03-23 22:47 - 2015-06-23 15:00 - 000088248 _____ (Microsoft Corporation) C:\WINDOWS\system32\vcruntime140.dll
2019-03-23 22:47 - 2015-06-23 15:00 - 000084816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vcruntime140.dll
2019-03-23 22:44 - 2016-08-11 03:18 - 000733848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp140d.dll
2019-03-23 22:41 - 2016-08-11 03:18 - 000980624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp140d.dll
2019-03-23 22:31 - 2019-03-23 22:31 - 000000000 ____D C:\Users\lenha\AppData\Local\NVIDIA
2019-03-23 22:25 - 2019-03-23 22:25 - 000001284 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2019-03-23 22:25 - 2019-03-23 22:25 - 000001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2019-03-23 22:25 - 2019-03-23 22:25 - 000001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2019-03-23 22:25 - 2019-03-23 22:25 - 000001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2019-03-23 22:25 - 2019-03-23 22:25 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2019-03-23 22:25 - 2019-03-23 22:25 - 000000000 ____D C:\Program Files\Adobe
2019-03-23 22:24 - 2019-03-23 22:24 - 000001600 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2019-03-23 22:24 - 2019-03-23 22:24 - 000001430 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2019-03-23 22:08 - 2019-03-23 22:51 - 000000000 ____D C:\Program Files (x86)\DLL Suite
2019-03-23 22:08 - 2019-03-23 22:08 - 026072872 _____ C:\Users\lenha\Downloads\DLLSuite.exe
2019-03-23 19:35 - 2019-03-23 19:35 - 002165376 _____ (Opera Software) C:\Users\lenha\Downloads\OperaSetup (1).exe
2019-03-23 19:35 - 2019-03-23 19:35 - 000004206 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1553366135
2019-03-23 19:35 - 2019-03-23 19:35 - 000001397 _____ C:\Users\lenha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2019-03-23 19:12 - 2019-03-23 19:12 - 026810368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 024616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 023440896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 022114960 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 020814848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 019284480 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 019023872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 017520640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 015224320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 012857856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 012151296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 011724288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 009941504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 009683256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 009670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 008875008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 007897088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 007883776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 007882240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 007724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 007688088 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 007647256 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 007645392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 007556392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 007251456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 006925824 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 006548168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 006440960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 006309040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 006132736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 006069760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 005915936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 005764608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 005588184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 005566464 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 005561856 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 005527552 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 005436184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 005296640 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 005205464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 005130752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 005112792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 005086208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 004991096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 004920832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 004883968 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 004702704 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 004689408 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 004627456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 004588744 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 004526080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 004298752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 004245280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 004019200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003983360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003952952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003923456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003761664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003744256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003729808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 003660288 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003652656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003601920 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003566080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003556352 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003551408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003504128 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003427840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003399168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003378488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 003338328 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003270144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003108864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 003092480 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002992640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002986352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002942464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002929152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002926904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 002879488 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002871312 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 002843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002776712 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002766648 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002765312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002752360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002720768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 002700792 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002689536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002654208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002637312 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 002630656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002626360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 002618880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002594872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002488320 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 002469440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002466304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002447360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002437344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002429752 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2019-03-23 19:12 - 2019-03-23 19:12 - 002392576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002346496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002323688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002298880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002278240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002275680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002199864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002187776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002185728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002160160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2019-03-23 19:12 - 2019-03-23 19:12 - 002149368 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002141184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppAgent.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002086400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002085376 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002073240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002044416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002021584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002013696 _____ C:\WINDOWS\system32\rdpnano.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 002001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001994760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001969464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 001969152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001931264 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001903616 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001899160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001893888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001884672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001860608 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001844448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001819136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001782272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001760768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001751352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001749504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001742104 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001720936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001715712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001711616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001701376 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001700880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001697744 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-03-23 19:12 - 2019-03-23 19:12 - 001688576 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001675712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001674480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001672704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001671864 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001671680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001664904 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001644048 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001641400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001616384 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001612600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001604096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001590072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001572176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001563336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001533440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001522488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001496064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001481488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001479480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001468440 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 001467560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001457544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001446400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001403920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001395248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001391096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001387496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001360696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 001341880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-03-23 19:12 - 2019-03-23 19:12 - 001332224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001331536 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001315840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001314304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001296576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001294856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001294848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001289192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001287776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001282640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001279024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 001272552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdrecordcpu.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001271608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001267712 _____ (Microsoft Corporation) C:\WINDOWS\system32\APMon.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 001258808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2019-03-23 19:12 - 2019-03-23 19:12 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001254912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001253688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 001249792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001221944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001221528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 001221120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 001209360 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001208320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001200920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001199104 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001191512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001182720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2019-03-23 19:12 - 2019-03-23 19:12 - 001180248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001179168 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 001177088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CommonBridge.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001176064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001168384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001166336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2019-03-23 19:12 - 2019-03-23 19:12 - 001162280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001098128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001087800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001078072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001077912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001072720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001072640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001064448 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001057976 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 001056272 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001054200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001051960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 001047040 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001043256 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001026992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001024920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001022616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001022464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\refsutil.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 001008128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2019-03-23 19:12 - 2019-03-23 19:12 - 000998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000982576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000981816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000970256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000964976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000955392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000953856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000927232 _____ (Microsoft Corporation) C:\WINDOWS\system32\assignedaccessmanagersvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000918304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000918032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2019-03-23 19:12 - 2019-03-23 19:12 - 000902144 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000901632 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000895048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000888120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000883200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000871792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000870400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000866152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000865568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000864056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000860160 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2019-03-23 19:12 - 2019-03-23 19:12 - 000854784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000854016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000836096 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000833064 _____ C:\WINDOWS\system32\InputHost.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000831288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000829440 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000828936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000822448 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000817464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000808464 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000793088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000790328 _____ (Microsoft Corporation) C:\WINDOWS\system32\upshared.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000782968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000772608 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000772408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000769536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000765960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000764216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000762880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000762272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.PrinterCustomActions.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000757664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000752136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000745984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000741888 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000735760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000732160 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCacheProvider.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000726416 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000714240 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000680184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000667152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000662528 ____R (Microsoft Corporation) C:\WINDOWS\system32\MixedRealityCapture.Pipeline.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000655160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000652824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000651576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000651304 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000649528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000649272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000646632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000629576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000626176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000619832 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessManager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000615936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000612368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000609792 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000605496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000604336 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000591832 _____ C:\WINDOWS\SysWOW64\InputHost.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000588304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000582240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000580024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000577536 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000566584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000553784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000548864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-03-23 19:12 - 2019-03-23 19:12 - 000535048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000531976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000522312 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000514112 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000511800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000508216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000506408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000505656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000496872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000495624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000484976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000474936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2019-03-23 19:12 - 2019-03-23 19:12 - 000473616 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000460304 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000454144 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000449368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000444728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000430904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000429056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000427520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000421688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSh.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000419128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\eeprov.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-03-23 19:12 - 2019-03-23 19:12 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000408800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000404792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000402576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000400384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000398416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000395064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000387832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000386872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000375544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000373768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\regedit.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000355360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDistSh.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000336744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000330464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regedit.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000322576 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000306704 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasppp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000301096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000300344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000300024 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000298296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000294072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasppp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000279376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000276488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTF.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000275768 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000272648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000263360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000262456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000252536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000246584 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000241680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCleaner.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\smbwmiv2.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDist.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpprov.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureTimeAggregator.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MTF.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiohlp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000195896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000193032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDist.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000180736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000178696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000176440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVemgr.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000169784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSrv.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000164344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\spopk.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000156984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiohlp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000151872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastingShellExt.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000148480 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000147256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000146888 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000140808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWorkflowService.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000138960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CastingShellExt.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000132104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spopk.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000121872 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000115152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000114856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000114344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000098816 ____R (Microsoft Corporation) C:\WINDOWS\system32\MixedRealityCapture.Broker.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000097592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000094224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlahc.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\PktMon.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000091424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000090424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\nslookup.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000083472 _____ (Microsoft Corporation) C:\WINDOWS\system32\vid.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000080400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nslookup.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000074424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000071184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBth.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Common.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo-overrides.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBth.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UevAppMonitor.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000055608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mmcss.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000047136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpkinstall.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000039304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnsruprov.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfts.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureBioSysprep.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys
2019-03-23 19:12 - 2019-03-23 19:12 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000033056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rfxvmt.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2019-03-23 19:12 - 2019-03-23 19:12 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfts.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2019-03-23 19:12 - 2019-03-23 19:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2019-03-23 19:12 - 2019-03-23 19:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2019-03-23 19:12 - 2019-03-23 19:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2019-03-23 19:12 - 2019-03-23 19:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2019-03-23 19:12 - 2019-03-23 19:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2019-03-23 19:12 - 2019-03-23 19:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2019-03-23 19:12 - 2019-03-23 19:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2019-03-23 19:12 - 2019-03-23 19:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2019-03-23 19:12 - 2019-03-23 19:12 - 000000072 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2019-03-23 19:05 - 2019-03-23 19:06 - 000000000 ____D C:\AdwCleaner
2019-03-22 21:57 - 2019-03-22 21:57 - 000000000 ____D C:\Users\lenha\polar
2019-03-22 21:57 - 2019-03-22 21:57 - 000000000 ____D C:\ProgramData\Package Cache
2019-03-22 21:57 - 2019-03-22 21:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Polar
2019-03-22 21:57 - 2019-03-22 21:57 - 000000000 ____D C:\Program Files (x86)\Polar
2019-03-22 21:56 - 2019-03-22 21:56 - 000000015 _____ C:\Users\lenha\advanced_ip_scanner_Comments.bin
2019-03-22 21:56 - 2019-03-22 21:56 - 000000015 _____ C:\Users\lenha\advanced_ip_scanner_Aliases.bin
2019-03-22 21:56 - 2019-03-22 21:56 - 000000004 _____ C:\Users\lenha\advanced_ip_scanner_MAC.bin
2019-03-22 21:56 - 2019-03-22 21:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced IP Scanner v2
2019-03-22 21:56 - 2019-03-22 21:56 - 000000000 ____D C:\Program Files (x86)\Advanced IP Scanner
2019-03-22 19:08 - 2019-03-24 09:43 - 000000000 ____D C:\FRST
2019-03-22 19:00 - 2019-03-22 19:00 - 000000000 ____D C:\Users\lenha\AppData\Local\D3DSCache
2019-03-22 18:48 - 2019-03-22 18:48 - 000000000 ____D C:\Users\lenha\AppData\Local\PeerDistRepub
2019-03-22 15:34 - 2019-03-22 15:34 - 000000000 ____D C:\Users\lenha\AppData\Local\ElevatedDiagnostics
2019-03-22 15:21 - 2019-03-22 15:21 - 000000000 ____D C:\Users\lenha\AppData\Roaming\Mikrotik
2019-03-22 12:56 - 2019-03-22 12:56 - 000002031 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Zoner Photo Studio X.lnk
2019-03-22 12:56 - 2019-03-22 12:56 - 000000000 ____D C:\Users\lenha\AppData\Roaming\Zoner
2019-03-22 12:56 - 2019-03-22 12:56 - 000000000 ____D C:\Users\lenha\AppData\Local\Zoner
2019-03-22 12:55 - 2019-03-22 12:55 - 000000000 ____D C:\Program Files\Zoner
2019-03-22 12:36 - 2019-03-22 12:36 - 000000000 ____D C:\Users\lenha\AppData\Roaming\Macromedia
2019-03-22 12:35 - 2019-03-23 22:49 - 000000000 ____D C:\Users\lenha\AppData\Local\Adobe
2019-03-22 12:33 - 2019-03-23 22:25 - 000000000 ____D C:\ProgramData\Adobe
2019-03-22 12:33 - 2019-03-23 22:25 - 000000000 ____D C:\Program Files\Common Files\Adobe
2019-03-22 12:32 - 2019-03-24 00:10 - 000000000 ____D C:\Program Files (x86)\Adobe
2019-03-22 12:32 - 2019-03-22 12:32 - 000000000 ____D C:\ProgramData\Caphyon
2019-03-22 06:09 - 2019-03-22 06:18 - 000000000 ____D C:\ProgramData\Packages
2019-03-22 05:55 - 2019-03-23 00:26 - 000000000 ____D C:\Users\lenha\AppData\Local\PlaceholderTileLogoFolder
2019-03-22 05:54 - 2019-03-22 05:54 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-03-22 05:52 - 2019-03-23 19:19 - 000000000 ___RD C:\Users\lenha\3D Objects
2019-03-22 05:52 - 2019-03-22 15:40 - 000000000 ____D C:\Users\lenha\AppData\Local\ConnectedDevicesPlatform
2019-03-22 05:52 - 2019-03-22 05:52 - 000000020 ___SH C:\Users\lenha\ntuser.ini
2019-03-22 05:52 - 2019-03-22 05:52 - 000000000 ___HD C:\Users\lenha\MicrosoftEdgeBackups
2019-03-22 03:42 - 2019-03-24 09:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-03-22 03:42 - 2019-03-22 10:55 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-03-22 03:42 - 2019-03-22 03:42 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2019-03-22 03:42 - 2019-03-22 03:42 - 000007623 _____ C:\WINDOWS\diagerr.xml
2019-03-22 03:42 - 2019-03-22 03:42 - 000002860 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4160050988-2886862043-3056562062-1001
2019-03-22 03:40 - 2019-03-23 23:10 - 000000000 ____D C:\Users\lenha
2019-03-22 03:40 - 2019-03-23 19:12 - 002865152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2019-03-22 03:40 - 2019-03-22 03:40 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Šablony
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Soubory cookie
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Poslední
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Okolní tiskárny
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Okolní síť
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Nabídka Start
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Dokumenty
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\Data aplikací
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 _SHDL C:\Users\lenha\AppData\Local\Data aplikací
2019-03-22 03:40 - 2019-03-22 03:40 - 000000000 ____D C:\ProgramData\USOShared
2019-03-22 03:40 - 2018-09-15 08:29 - 000001105 _____ C:\Users\lenha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-03-22 03:38 - 2019-03-24 09:40 - 000000000 ____D C:\ProgramData\NVIDIA
2019-03-22 03:38 - 2019-03-22 03:38 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2019-03-22 03:38 - 2019-03-22 03:38 - 000000000 ____D C:\Program Files\Common Files\Atheros
2019-03-22 03:38 - 2018-03-24 00:50 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2019-03-22 03:38 - 2018-03-24 00:02 - 005952392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2019-03-22 03:38 - 2018-03-24 00:02 - 002596320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2019-03-22 03:38 - 2018-03-24 00:02 - 001767824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2019-03-22 03:38 - 2018-03-24 00:02 - 000633224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2019-03-22 03:38 - 2018-03-24 00:02 - 000451040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2019-03-22 03:38 - 2018-03-24 00:02 - 000123840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2019-03-22 03:38 - 2018-03-24 00:02 - 000083072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2019-03-22 03:38 - 2018-03-21 12:22 - 008114212 _____ C:\WINDOWS\system32\nvcoproc.bin
2019-03-22 03:37 - 2019-03-23 23:09 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-03-22 03:37 - 2019-03-23 22:49 - 004931208 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-03-22 03:36 - 2019-03-22 03:42 - 000000000 ____D C:\Windows.old
2019-03-22 00:53 - 2019-03-22 03:36 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2019-03-22 00:51 - 2019-03-22 00:53 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2019-03-22 00:31 - 2019-03-22 00:31 - 000000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2019-03-22 00:27 - 2019-03-22 00:27 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2019-03-21 23:34 - 2019-03-21 23:34 - 000610336 _____ (Qualcomm Atheros) C:\WINDOWS\system32\Drivers\btfilter.sys
2019-03-21 23:34 - 2019-03-21 23:34 - 000271600 _____ (Qualcomm®Atheros®) C:\WINDOWS\system32\BtContextMenu.dll
2019-03-21 23:34 - 2019-03-21 23:34 - 000269048 _____ (Qualcomm Atheros Communications Inc.) C:\WINDOWS\system32\btcoinst.dll
2019-03-21 23:34 - 2019-03-21 23:34 - 000098552 _____ (Qualcomm®Atheros®) C:\WINDOWS\system32\BtContextMenu.dll.muien-US
2019-03-21 23:34 - 2019-03-21 23:34 - 000046972 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x11020000.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000046908 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x31010000.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000046852 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x11020100.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000045868 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x01020201.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000044028 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x01020200.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000042908 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x31010100.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000040684 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x31010000_ss01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0xf0.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x21.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x11.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001922 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010100_40.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001802 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020100_40_SS01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001802 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020100_40_nf01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001802 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020100_40.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001796 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020000_40.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_SS01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_LV01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0xf1.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x22.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x12.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001512 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010100_40_0x01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001242 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001228 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x04.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001214 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x03.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001204 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x02.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001204 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001198 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_26.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000001192 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_26_0x01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000296 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000278 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x04.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x03.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x02.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_26_0x01.dfu
2019-03-21 23:34 - 2019-03-21 23:34 - 000000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_26.dfu
2019-03-21 23:14 - 2019-03-22 15:43 - 000000000 ____D C:\Program Files\rempl
2019-03-21 23:14 - 2019-03-22 05:52 - 000000000 ____D C:\Program Files\CUAssistant
2019-03-21 23:14 - 2018-12-10 23:04 - 000592616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2019-03-21 23:13 - 2019-03-21 23:13 - 127411920 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-03-21 23:13 - 2019-03-21 23:13 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-03-21 23:12 - 2019-03-22 03:42 - 000000000 ___DC C:\WINDOWS\Panther
2019-03-21 23:11 - 2019-03-21 23:11 - 001997752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438813.dll
2019-03-21 23:11 - 2019-03-21 23:11 - 001682544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438813.dll
2019-03-21 23:11 - 2018-06-27 12:10 - 000131288 _____ (Microsoft Corporation) C:\WINDOWS\system32\osrss.dll
2019-03-21 23:10 - 2019-03-21 23:10 - 000000000 ____D C:\Users\lenha\AppData\Local\GHISLER
2019-03-21 23:09 - 2019-03-21 23:09 - 000000000 ____D C:\Users\lenha\AppData\Roaming\GHISLER
2019-03-21 23:08 - 2019-03-21 23:09 - 007664792 _____ (Ghisler Software GmbH) C:\Users\lenha\Downloads\tcmd922x32_64.exe
2019-03-21 23:03 - 2019-03-24 09:41 - 000000000 ____D C:\Users\lenha\AppData\Roaming\eM Client
2019-03-21 23:03 - 2019-03-21 23:03 - 000001133 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eM Client.lnk
2019-03-21 23:03 - 2019-03-21 23:03 - 000000000 ____D C:\Users\lenha\AppData\Local\eM Client
2019-03-21 23:03 - 2019-03-21 23:03 - 000000000 ____D C:\Users\lenha\AppData\Local\CEF
2019-03-21 23:03 - 2019-03-21 23:03 - 000000000 ____D C:\Program Files (x86)\eM Client
2019-03-21 23:02 - 2019-03-21 23:02 - 053764096 _____ C:\Users\lenha\Downloads\setup.msi
2019-03-21 23:01 - 2019-03-21 23:01 - 000000000 ____D C:\Users\lenha\AppData\Local\OneDrive
2019-03-21 22:58 - 2018-09-16 17:43 - 001660472 _____ C:\Users\lenha\OneDrive\Dokumenty\winbox (1).exe
2019-03-21 22:58 - 2018-01-30 15:28 - 000006382 _____ C:\Users\lenha\OneDrive\Dokumenty\zalozky_30.01.18.html
2019-03-21 22:58 - 2017-09-15 14:21 - 001588750 _____ C:\Users\lenha\OneDrive\Dokumenty\winbox.exe
2019-03-21 22:58 - 2017-06-02 21:39 - 000800904 _____ C:\Users\lenha\OneDrive\Dokumenty\palemoon-websetup.exe
2019-03-21 22:58 - 2017-05-25 10:29 - 002491932 _____ C:\Users\lenha\OneDrive\Dokumenty\Bitcoin_krok_za_krokem_ebook.pdf
2019-03-21 22:58 - 2015-08-16 21:10 - 000049776 _____ C:\Users\lenha\OneDrive\Dokumenty\Bc-prace-Vendula-Lenhartova (1).odt
2019-03-21 22:58 - 2014-02-06 09:03 - 000131072 _____ C:\Users\lenha\OneDrive\Dokumenty\Tahiti1.rom
2019-03-21 22:58 - 2014-02-06 09:03 - 000131072 _____ C:\Users\lenha\OneDrive\Dokumenty\Tahiti.rom
2019-03-21 22:58 - 2014-01-23 09:37 - 000131072 _____ C:\Users\lenha\OneDrive\Dokumenty\Tahiti.bin
2019-03-21 22:57 - 2019-03-21 22:57 - 028915808 _____ (Microsoft Corporation) C:\Users\lenha\Downloads\OneDriveSetup.exe
2019-03-21 22:57 - 2019-03-21 22:57 - 000000000 ____D C:\Users\lenha\AppData\Local\Opera Software
2019-03-21 22:56 - 2019-03-23 23:28 - 001606102 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-03-21 22:56 - 2019-03-21 22:56 - 002165336 _____ (Opera Software) C:\Users\lenha\Downloads\OperaSetup.exe
2019-03-21 22:56 - 2019-03-21 22:56 - 000150016 _____ (VIA - IC Ensemble, Inc.) C:\WINDOWS\system32\Drivers\Envy24HF.sys
2019-03-21 22:56 - 2019-03-21 22:56 - 000035584 _____ (Western Digital Technologies, Inc.) C:\WINDOWS\system32\Drivers\wdcsam64.sys
2019-03-21 22:56 - 2019-03-21 22:56 - 000000000 ____D C:\Users\lenha\AppData\Roaming\Opera Software
2019-03-21 22:55 - 2019-03-22 03:38 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2019-03-21 22:55 - 2019-03-22 03:38 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2019-03-21 22:55 - 2019-03-21 22:57 - 000000000 ____D C:\Users\lenha\AppData\Local\Comms
2019-03-21 22:55 - 2019-03-21 22:56 - 000000000 ____D C:\Users\lenha\AppData\Local\MicrosoftEdge
2019-03-21 22:55 - 2019-03-21 22:55 - 040278616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 035188992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 019855144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 016496768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 013571520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 012967056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 011132384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 011001504 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 004633920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 004318112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 003939624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 003719096 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001985112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6439135.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001690952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001683712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6439135.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001355216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001346128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001153752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001138720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001067552 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001065888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 001061352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000998432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000950016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000902096 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000811808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000749312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000650232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000633040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000625504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000608344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000516024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000235424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2019-03-21 22:55 - 2019-03-21 22:55 - 000054272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2019-03-21 22:55 - 2019-03-21 22:55 - 000048407 _____ C:\WINDOWS\system32\nvinfo.pb
2019-03-21 22:55 - 2019-03-21 22:55 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2019-03-21 22:54 - 2019-03-24 09:41 - 000000000 ___RD C:\Users\lenha\OneDrive
2019-03-21 22:53 - 2019-03-23 22:31 - 000000000 ____D C:\Users\lenha\AppData\Roaming\Adobe
2019-03-21 22:53 - 2019-03-23 19:19 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-03-21 22:53 - 2019-03-22 21:35 - 000000000 ____D C:\Users\lenha\AppData\Local\Packages
2019-03-21 22:53 - 2019-03-22 15:23 - 000000000 ____D C:\Users\lenha\AppData\Local\VirtualStore
2019-03-21 22:53 - 2019-03-22 06:20 - 000000000 ____D C:\Users\lenha\AppData\Local\Publishers
2019-03-21 22:53 - 2019-03-21 23:09 - 000000000 ____D C:\Users\lenha\AppData\Local\PackageStaging
2019-03-21 22:53 - 2019-03-21 22:53 - 000016148 _____ C:\WINDOWS\system32\DESKTOP-HI8G2J4_defaultuser0_HistoryPrediction.bin
2019-03-21 22:53 - 2019-03-21 22:53 - 000000000 ____D C:\Users\lenha\AppData\Local\TileDataLayer
2019-03-21 22:52 - 2019-03-21 22:52 - 000195152 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys
2019-03-21 22:51 - 2019-03-21 22:51 - 000246804 _____ C:\WINDOWS\system32\Drivers\AtherosBT.bin
2019-03-21 22:51 - 2019-03-21 22:51 - 000055336 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\AthDfu.sys
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Šablony
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Soubory cookie
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Poslední
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Okolní tiskárny
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Okolní síť
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Nabídka Start
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Dokumenty
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\Data aplikací
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\ProgramData\Šablony
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\ProgramData\Plocha
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\ProgramData\Nabídka Start
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\ProgramData\Dokumenty
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 _SHDL C:\ProgramData\Data aplikací
2019-03-21 22:47 - 2019-03-21 22:47 - 000000000 ____D C:\WINDOWS\CSC
2019-03-21 22:41 - 2019-03-21 22:41 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2019-03-21 22:17 - 2019-03-21 22:17 - 000000000 ___HD C:\$SysReset
==================== One month (modified) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-03-24 09:42 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-03-24 09:40 - 2018-09-15 07:09 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2019-03-23 23:28 - 2018-09-15 18:39 - 000682358 _____ C:\WINDOWS\system32\perfh005.dat
2019-03-23 23:28 - 2018-09-15 18:39 - 000137076 _____ C:\WINDOWS\system32\perfc005.dat
2019-03-23 23:28 - 2018-09-15 08:31 - 000000000 ____D C:\WINDOWS\INF
2019-03-23 22:24 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-03-23 19:20 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-03-23 19:17 - 2018-09-15 18:40 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2019-03-23 19:17 - 2018-09-15 18:40 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2019-03-23 19:17 - 2018-09-15 18:40 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2019-03-23 19:17 - 2018-09-15 08:33 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-03-23 19:17 - 2018-09-15 08:33 - 000000000 ___RD C:\Program Files\Windows Defender
2019-03-23 19:17 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\TextInput
2019-03-23 19:17 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2019-03-23 19:17 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2019-03-23 19:17 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-03-23 19:17 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\migwiz
2019-03-23 19:17 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\appraiser
2019-03-23 19:17 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-03-23 19:17 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\ShellComponents
2019-03-23 19:17 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-03-23 19:17 - 2018-09-15 07:09 - 000000000 ____D C:\WINDOWS\system32\Dism
2019-03-23 19:13 - 2018-09-15 08:23 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-03-23 19:09 - 2018-09-15 07:09 - 000000000 ____D C:\WINDOWS\servicing
2019-03-22 21:35 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-03-22 06:09 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\ServiceState
2019-03-22 03:58 - 2018-09-15 07:09 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2019-03-22 03:42 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\windows nt
2019-03-22 03:41 - 2018-09-15 08:33 - 000000000 __RHD C:\Users\Public\Libraries
2019-03-22 03:40 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\USOPrivate
2019-03-22 03:39 - 2018-09-15 08:33 - 000000000 ___RD C:\WINDOWS\PrintDialog
2019-03-22 03:38 - 2018-09-15 08:33 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2019-03-22 03:38 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\Help
2019-03-22 03:36 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2019-03-22 03:36 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\spool
2019-03-22 03:36 - 2018-09-15 08:31 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2019-03-22 03:36 - 2015-07-10 12:04 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2019-03-22 00:59 - 2018-09-15 08:36 - 000000000 ____D C:\WINDOWS\Setup
2019-03-22 00:54 - 2015-07-10 12:04 - 000000000 ____D C:\WINDOWS\InfusedApps
2019-03-22 00:53 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2019-03-22 00:53 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\Resources
2019-03-22 00:32 - 2018-09-15 08:37 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
2019-03-03 01:45 - 2018-09-15 08:36 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-03-03 01:45 - 2018-09-15 08:36 - 000179608 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\dllhost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of FRST.txt ============================
-
Rudy
- Site Admin
- Příspěvky: 119420
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: PC je pomalé nejde načíst stránka v opeře
Potřebuji vidět obsah souboru fixlog.txt. Najdete ho v C:\Users\lenha\Downloads.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: PC je pomalé nejde načíst stránka v opeře
Fix result of Farbar Recovery Scan Tool (x64) Version: 17.03.2019Rudy píše:Potřebuji vidět obsah souboru fixlog.txt. Najdete ho v C:\Users\lenha\Downloads.
Ran by lenha (24-03-2019 09:39:40) Run:1
Running from F:\Download\scoped_dir6624_27267
Loaded Profiles: lenha (Available Profiles: lenha)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
SearchScopes: HKU\S-1-5-21-4160050988-2886862043-3056562062-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
J:\Photo.scr
J:\IMG001.exe
G:\Photo.scr
H:\Photo.scr
G:\IMG001.exe
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
"HKU\S-1-5-21-4160050988-2886862043-3056562062-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"J:\Photo.scr" => not found
"J:\IMG001.exe" => not found
"G:\Photo.scr" => not found
"H:\Photo.scr" => not found
"G:\IMG001.exe" => not found
=========== EmptyTemp: ==========
BITS transfer queue => 6053888 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 15851310 B
Java, Flash, Steam htmlcache => 343 B
Windows/system/drivers => 3402334 B
Edge => 362210227 B
Chrome => 0 B
Firefox => 0 B
Opera => 38746091 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 7218 B
LocalService => 0 B
NetworkService => 7292 B
NetworkService => 0 B
lenha => 74005252 B
RecycleBin => 0 B
EmptyTemp: => 477.1 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 09:39:48 ====
Re: PC je pomalé nejde načíst stránka v opeře
Prakticky opera vůbec nejede, jen sporadicky , podotýkám - úplně čistá instalace W10 , jen synchronizace opery a jinak žádné programy nainstalované, jen poštovní klient, eM Client + Zoner X . Internet jede přes Edge.radek64 píše:Fix result of Farbar Recovery Scan Tool (x64) Version: 17.03.2019Rudy píše:Potřebuji vidět obsah souboru fixlog.txt. Najdete ho v C:\Users\lenha\Downloads.
Ran by lenha (24-03-2019 09:39:40) Run:1
Running from F:\Download\scoped_dir6624_27267
Loaded Profiles: lenha (Available Profiles: lenha)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
SearchScopes: HKU\S-1-5-21-4160050988-2886862043-3056562062-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
J:\Photo.scr
J:\IMG001.exe
G:\Photo.scr
H:\Photo.scr
G:\IMG001.exe
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
"HKU\S-1-5-21-4160050988-2886862043-3056562062-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"J:\Photo.scr" => not found
"J:\IMG001.exe" => not found
"G:\Photo.scr" => not found
"H:\Photo.scr" => not found
"G:\IMG001.exe" => not found
=========== EmptyTemp: ==========
BITS transfer queue => 6053888 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 15851310 B
Java, Flash, Steam htmlcache => 343 B
Windows/system/drivers => 3402334 B
Edge => 362210227 B
Chrome => 0 B
Firefox => 0 B
Opera => 38746091 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 7218 B
LocalService => 0 B
NetworkService => 7292 B
NetworkService => 0 B
lenha => 74005252 B
RecycleBin => 0 B
EmptyTemp: => 477.1 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 09:39:48 ====
-
Rudy
- Site Admin
- Příspěvky: 119420
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: PC je pomalé nejde načíst stránka v opeře
OK. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: PC je pomalé nejde načíst stránka v opeře
Ne opera stále nespustitelná i po přeinstalaci .Rudy píše:OK. Nastala nějaká změna?
Objevuje se nepravidelně Uclaut.net
-
Rudy
- Site Admin
- Příspěvky: 119420
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: PC je pomalé nejde načíst stránka v opeře
Zkusíme vyčistit prohlížeče. Spusťte postupně tyto utility:
1. Stahnete Zoek.exe http://download.bleepingcomputer.com/smeenk/zoek.exe a ulozte jej na plochu
Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize
Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.
a
2. Junkware removal tool: https://www.stahuj.cz/utility_a_ostatni ... moval-tool
•Ulozte nejlepe na plochu
•Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
•Probehne vytvoreni zalohy a nasledne prohledavani
•Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte.
1. Stahnete Zoek.exe http://download.bleepingcomputer.com/smeenk/zoek.exe a ulozte jej na plochu
Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize
autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;
Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.
a
2. Junkware removal tool: https://www.stahuj.cz/utility_a_ostatni ... moval-tool
•Ulozte nejlepe na plochu
•Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
•Probehne vytvoreni zalohy a nasledne prohledavani
•Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: PC je pomalé nejde načíst stránka v opeře
Zoek.exe v5.0.0.2 Updated 03-May-2018(Online Version)Rudy píše:Zkusíme vyčistit prohlížeče. Spusťte postupně tyto utility:
1. Stahnete Zoek.exe http://download.bleepingcomputer.com/smeenk/zoek.exe a ulozte jej na plochu
Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize
autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;
Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.
a
2. Junkware removal tool: https://www.stahuj.cz/utility_a_ostatni ... moval-tool
•Ulozte nejlepe na plochu
•Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
•Probehne vytvoreni zalohy a nasledne prohledavani
•Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte.
Tool run by lenha on 25.03.2019 at 12:25:40,66.
Microsoft Windows 10 Pro 10.0.17763 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\lenha\OneDrive\Plocha\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
25.03.2019 12:27:38 Zoek.exe System Restore Point Created Successfully.
==== Empty Folders Check ======================
C:\PROGRA~3\Comms deleted successfully
C:\PROGRA~3\SoftwareDistribution deleted successfully
C:\Users\lenha\AppData\Local\DBG deleted successfully
C:\Users\lenha\AppData\Local\GHISLER deleted successfully
C:\Users\lenha\AppData\Local\PackageStaging deleted successfully
C:\Users\lenha\AppData\Local\PeerDistRepub deleted successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Packages deleted successfully
==== Deleting CLSID Registry Keys ======================
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\windows\SysNative\Tasks\AviraSystemSpeedupUpdate deleted
C:\PROGRA~3\ReimageRepair deleted
C:\PROGRA~3\Package Cache deleted
C:\WINDOWS\Reimage.ini deleted
"C:\WINDOWS\Installer\acfdc.msi" deleted
==== Orphaned Tasks deleted from Registry ======================
AviraSystemSpeedupUpdate deleted
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
==== All HKLM and HKCU SearchScopes ======================
HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTer ... ORM=IE11SR
==== Reset Google Chrome ======================
C:\Users\lenha\Appdata\Roaming\Opera Software\Opera Stable\Preferences was reset successfully
C:\Users\lenha\Appdata\Roaming\Opera Software\Opera Stable\Preferences.backup was reset successfully
C:\Users\lenha\Appdata\Roaming\Opera Software\Opera Stable\Secure Preferences was reset successfully
C:\Users\lenha\Appdata\Roaming\Opera Software\Opera Stable\Secure Preferences.backup was reset successfully
C:\Users\lenha\Appdata\Roaming\Opera Software\Opera Stable\Web Data will be reset at reboot
C:\Users\lenha\Appdata\Roaming\Opera Software\Opera Stable\Web Data-journal will be reset at reboot
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5070027319DF8DD4D9B59968F1FAD32E deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{37200705-FD91-4DD8-9D5B-99861FAF3DE2} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Avira System Speedup_is1 deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\5070027319DF8DD4D9B59968F1FAD32E deleted successfully
==== Empty IE Cache ======================
C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\lenha\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\lenha\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Edge Cache ======================
Edge Cache is not empty, a reboot is needed
==== Empty Chrome Cache ======================
C:\Users\lenha\AppData\Local\Opera Software\Opera Stable\Cache will be emptied at reboot
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
No Java Cache Found
==== C:\zoek_backup content ======================
C:\zoek_backup (files=34 folders=13 77774998 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\lenha\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot
==== After Reboot ======================
==== Reset Hosts File ======================
Hosts File Reset Successfully
==== Empty Temp Folders ======================
C:\WINDOWS\Temp successfully emptied
C:\Users\lenha\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\lenha\Appdata\Roaming\Opera Software\Opera Stable\Web Data" not found
"C:\Users\lenha\Appdata\Roaming\Opera Software\Opera Stable\Web Data-journal" not found
"C:\Users\lenha\AppData\Local\Opera Software\Opera Stable\Cache\data_0" deleted
"C:\Users\lenha\AppData\Local\Opera Software\Opera Stable\Cache\data_1" deleted
"C:\Users\lenha\AppData\Local\Opera Software\Opera Stable\Cache\data_2" deleted
"C:\Users\lenha\AppData\Local\Opera Software\Opera Stable\Cache\data_3" deleted
"C:\Users\lenha\AppData\Local\Opera Software\Opera Stable\Cache\index" deleted
"C:\Users\lenha\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001" not found
"C:\Users\lenha\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002" not found
"C:\Users\lenha\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge" not found
"C:\Users\lenha\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp" not found
==== EOF on 25.03.2019 at 16:40:09,25 ======================
Přispějete na provoz fóra?