Stránka 1 z 3

vyčistit notebook

Napsal: 27 bře 2019 15:02
od marvis
Dobrý den,prosím o vyčištení notebooku HP. Windows 10 a 64bitový operační systém. Vše se strašně spomalilo i načítání stránek na prohlížeči chrome. Děkuji vám za pomoc.

Re: vyčistit notebook

Napsal: 27 bře 2019 16:00
od Rudy
Zdravím!
Dejte logy FRST+Addition: http://forum.viry.cz/viewtopic.php?f=24&t=132509 .

Re: vyčistit notebook

Napsal: 27 bře 2019 16:26
od marvis
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
Ran by Josef (administrator) on DESKTOP-23MSNL0 (27-03-2019 16:15:33)
Running from C:\Users\Josef\Desktop
Loaded Profiles: Josef (Available Profiles: Josef)
Platform: Windows 10 Pro Version 1809 17763.379 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(ABBYY SOLUTIONS LIMITED -> ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Realtek Semiconductor Corp -> ) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\MsMpEng.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTServer.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20594.0_x64__8wekyb3d8bbwe\YourPhone.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\NisSrv.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Piriform Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsStore_11811.1001.18.0_x64__8wekyb3d8bbwe\WinStore.App.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1812.10048.0_x64__8wekyb3d8bbwe\Calculator.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9268672 2018-09-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [229592 2015-07-09] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1069296 2018-03-27] (Seznam.cz, a.s. -> )
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Run: [FTweakFCleaner] => C:\Program Files (x86)\FCleaner\FCleaner.exe [1763840 2010-06-21] (FTweak) [File not signed]
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Run: [Chromium] => c:\users\josef\appdata\local\chromium\application\chrome.exe [4149760 2017-09-22] (The Chromium Authors) [File not signed]
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [18594760 2018-09-07] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Josef\AppData\Roaming\Seznam.cz\szninstall.exe [1069296 2018-03-27] (Seznam.cz, a.s. -> )
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Josef\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [109808 2018-03-27] (Seznam.cz, a.s. -> )
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3146016 2019-03-06] (Valve -> Valve Corporation)
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [18594760 2018-09-07] (Piriform Ltd -> Piriform Ltd)
HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-18] (Fox Magic Software) [File not signed]
HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.169.1.254
Tcpip\..\Interfaces\{7387f5ed-7d4e-45fc-bbde-7ea963f43391}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{a93c2824-6465-406f-a73d-ed7c26793b57}: [DhcpNameServer] 192.169.1.254

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yahoo.com/?fr=avantsearch6
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: l2scvyi7.default-1550765587831
FF ProfilePath: C:\Users\Josef\AppData\Roaming\Mozilla\Firefox\Profiles\l2scvyi7.default-1550765587831 [2019-03-24]
FF Homepage: Mozilla\Firefox\Profiles\l2scvyi7.default-1550765587831 -> hxxps://www.seznam.cz/
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc -> Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc -> Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1243976712-1797555765-2480249262-1001: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\Josef\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-11-15] (RocketLife -> RocketLife, LLP)

Chrome:
=======
CHR HomePage: Default -> hxxps://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR DefaultSearchURL: Default -> hxxps://search.seznam.cz/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> seznam.cz
CHR DefaultSuggestURL: Default -> hxxps://suggest.fulltext.seznam.cz/fulltext_ff?phrase={searchTerms}
CHR Profile: C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default [2019-03-27]
CHR Extension: (Prezentace) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-02-24]
CHR Extension: (Dokumenty) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-02-24]
CHR Extension: (Disk Google) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-02-24]
CHR Extension: (YouTube) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-02-24]
CHR Extension: (Tabulky) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-02-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-02-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-02-24]
CHR Extension: (Gmail) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-02-24]
CHR Extension: (Chrome Media Router) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-02-24]
CHR HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bgjpfhpjcgdppjbgnpnjllokbmcdllig] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY SOLUTIONS LIMITED -> ABBYY)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [125656 2015-09-18] (Realtek Semiconductor Corp -> )
R2 esifsvc; C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe [1643064 2018-09-29] (Intel Corporation -> Intel Corporation)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (Hewlett-Packard Company -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [347512 2018-12-06] (HP Inc. -> HP Inc.)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [356824 2018-04-20] (Intel(R) pGFX -> Intel Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324552 2018-09-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
R2 RtkBtManServ; C:\WINDOWS\RtkBtManServ.exe [687072 2018-05-31] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5381128 2019-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [278616 2017-08-18] (Synaptics Incorporated -> Synaptics Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [77224 2018-09-29] (Intel Corporation -> Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [70568 2018-09-29] (Intel Corporation -> Intel Corporation)
R3 esif_lf; C:\WINDOWS\System32\drivers\esif_lf.sys [399784 2018-09-29] (Intel Corporation -> Intel Corporation)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-09-29] (Martin Malik - REALiX -> REALiX(tm))
R3 igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [7408584 2018-04-20] (Intel(R) pGFX -> Intel Corporation)
R3 necbatt; C:\WINDOWS\System32\drivers\necbatt.sys [37240 2018-09-29] (NEC Personal Computers, Ltd. -> NEC Personal Computers, Ltd.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1138000 2018-09-29] (Realtek Semiconductor Corp. -> Realtek )
R3 RtkBtFilter; C:\WINDOWS\System32\drivers\RtkBtfilter.sys [784264 2018-05-31] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
S3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [424384 2018-09-29] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
R3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [8336216 2018-09-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation )
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [55384 2017-08-18] (Synaptics Incorporated -> Synaptics Incorporated)
R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [146200 2018-09-29] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-02-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [333792 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [62432 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35360 2018-09-13] (HP Inc. -> HP)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-27 16:15 - 2019-03-27 16:18 - 000015398 _____ C:\Users\Josef\Desktop\FRST.txt
2019-03-27 16:14 - 2019-03-27 16:14 - 002434048 _____ (Farbar) C:\Users\Josef\Desktop\FRST64.exe
2019-03-27 14:23 - 2019-03-27 14:23 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2019-03-27 14:22 - 2019-03-03 01:45 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-03-27 14:22 - 2019-03-03 01:45 - 000179608 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2019-03-24 15:33 - 2019-03-24 15:33 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-03-24 15:31 - 2019-03-24 15:31 - 000000000 ____D C:\Users\Josef\AppData\Local\PackageStaging
2019-03-24 15:29 - 2019-03-24 15:29 - 000000020 ___SH C:\Users\Josef\ntuser.ini
2019-03-24 15:28 - 2019-03-27 14:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-03-24 15:28 - 2019-03-24 15:29 - 000002220 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2019-03-24 15:28 - 2019-03-24 15:28 - 000003604 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1513520202
2019-03-24 15:28 - 2019-03-24 15:28 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2019-03-24 15:28 - 2019-03-24 15:28 - 000003400 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2019-03-24 15:28 - 2019-03-24 15:28 - 000003176 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2019-03-24 15:28 - 2019-03-24 15:28 - 000002988 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2019-03-24 15:28 - 2019-03-24 15:28 - 000002860 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1243976712-1797555765-2480249262-1001
2019-03-24 15:28 - 2019-03-24 15:28 - 000002802 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForJosef
2019-03-24 15:28 - 2019-03-24 15:28 - 000002682 _____ C:\WINDOWS\System32\Tasks\HPCustParticipation HP DeskJet 5820 series
2019-03-24 15:28 - 2019-03-24 15:28 - 000002344 _____ C:\WINDOWS\System32\Tasks\FTweak FCleaner AutoCleanup
2019-03-24 15:28 - 2019-03-24 15:28 - 000000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2019-03-24 15:28 - 2019-03-24 15:28 - 000000000 ____D C:\WINDOWS\System32\Tasks\Macromedia
2019-03-24 15:28 - 2019-03-24 15:28 - 000000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard
2019-03-24 15:28 - 2019-03-24 15:28 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2019-03-24 15:27 - 2019-03-24 15:28 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2019-03-24 15:27 - 2019-03-24 15:28 - 000007623 _____ C:\WINDOWS\diagerr.xml
2019-03-24 15:20 - 2019-03-27 14:29 - 001693636 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-03-24 15:09 - 2019-03-24 15:09 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2019-03-24 15:04 - 2019-03-27 15:16 - 000000000 ____D C:\Users\Josef
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Šablony
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Soubory cookie
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Poslední
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Okolní tiskárny
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Okolní síť
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Nabídka Start
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Dokumenty
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Documents\Obrázky
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Documents\Hudba
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Documents\Filmy
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Data aplikací
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\AppData\Local\Data aplikací
2019-03-24 15:04 - 2018-09-15 08:29 - 000001105 _____ C:\Users\Josef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-03-24 15:03 - 2019-03-24 15:03 - 000002065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk
2019-03-24 15:01 - 2019-03-24 15:01 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2019-03-24 15:01 - 2019-03-24 15:01 - 000000000 ____D C:\ProgramData\USOShared
2019-03-24 15:01 - 2018-04-20 14:48 - 000099808 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2019-03-24 15:00 - 2019-03-24 11:01 - 002865152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2019-03-24 14:56 - 2019-03-26 18:01 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-03-24 14:56 - 2019-03-24 15:13 - 000449168 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-03-24 14:55 - 2019-03-24 15:29 - 000000000 ____D C:\Windows.old
2019-03-24 11:20 - 2019-03-24 14:55 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2019-03-24 11:17 - 2019-03-24 11:20 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2019-03-24 11:06 - 2019-03-24 11:06 - 011724288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 009941504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 007724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 005436184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 005112792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 004920832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 004488192 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2019-03-24 11:06 - 2019-03-24 11:06 - 003601920 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 003566080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 003551408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 003442176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2019-03-24 11:06 - 2019-03-24 11:06 - 002752360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 002469440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 002429752 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2019-03-24 11:06 - 2019-03-24 11:06 - 002323688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 002278240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 002160160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2019-03-24 11:06 - 2019-03-24 11:06 - 001969152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001294856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001289192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001282640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001258808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2019-03-24 11:06 - 2019-03-24 11:06 - 001200920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001077912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001072720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001057976 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001024920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000870400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000866152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000854784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000762272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000732160 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCacheProvider.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2019-03-24 11:06 - 2019-03-24 11:06 - 000454144 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000429056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000421688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSh.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2019-03-24 11:06 - 2019-03-24 11:06 - 000349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDistSh.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys
2019-03-24 11:06 - 2019-03-24 11:06 - 000301096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000263360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000241680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCleaner.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDist.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDist.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 026810368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 024616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 023440896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 020814848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 019284480 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 019023872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 012857856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 012151296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 008875008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 007897088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 007882240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 006069760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 004883968 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 004689408 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 003952952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 003923456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 003744256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 002986352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 002942464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 002392576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 002298880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 002127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001782272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001749504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001332224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001221528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 001182720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2019-03-24 11:05 - 2019-03-24 11:05 - 001166336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2019-03-24 11:05 - 2019-03-24 11:05 - 001131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001064448 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001047040 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001022464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000927232 _____ (Microsoft Corporation) C:\WINDOWS\system32\assignedaccessmanagersvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000883200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000829440 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000793088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000772608 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000662528 ____R (Microsoft Corporation) C:\WINDOWS\system32\MixedRealityCapture.Pipeline.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessManager.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000522312 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000427520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\regedit.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2019-03-24 11:05 - 2019-03-24 11:05 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regedit.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys
2019-03-24 11:05 - 2019-03-24 11:05 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000180736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2019-03-24 11:05 - 2019-03-24 11:05 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastingShellExt.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CastingShellExt.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2019-03-24 11:05 - 2019-03-24 11:05 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2019-03-24 11:05 - 2019-03-24 11:05 - 000098816 ____R (Microsoft Corporation) C:\WINDOWS\system32\MixedRealityCapture.Broker.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlahc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\PktMon.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfts.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfts.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 015224320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 007251456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 006548168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 006440960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 006309040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 005915936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 005764608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 005588184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 005205464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 005086208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 004627456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 004526080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 003729808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 003652656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 003427840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 003108864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002832896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002776712 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002765312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002689536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002447360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002346496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002275680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002086400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001899160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001860608 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001760768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001720936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001711616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001701376 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001688576 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001675712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001674480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001671864 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001590072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001572176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001476096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001467560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001457544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001294848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001279024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 001272552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdrecordcpu.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001271608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001254912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001221944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001168384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001162280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001098128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001072640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001026992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000964976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000953856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000918032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2019-03-24 11:04 - 2019-03-24 11:04 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000782968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000772408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000762880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000652824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000649272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000626176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000615936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000604248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.applicationmodel.datatransfer.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000591832 _____ C:\WINDOWS\SysWOW64\InputHost.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000548864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000514112 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-03-24 11:04 - 2019-03-24 11:04 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000373768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasppp.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000279376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000272648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000252536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWorkflowService.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spopk.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000114344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000091424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\nslookup.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nslookup.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBth.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureBioSysprep.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 022114960 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 006925824 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 005566464 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 004702704 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 004588744 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 004298752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 004019200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 003761664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 003504128 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 002926904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 002893312 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 002879488 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 002871312 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 002700792 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 002626360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 002073240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001994760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001969464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 001819136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001697744 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-03-24 11:03 - 2019-03-24 11:03 - 001671680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001644048 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001641400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001481488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001468440 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 001446400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001395248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001391096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 001360696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 001341880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-03-24 11:03 - 2019-03-24 11:03 - 001314304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001267712 _____ (Microsoft Corporation) C:\WINDOWS\system32\APMon.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001249792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001180248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001179168 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 001056272 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\refsutil.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2019-03-24 11:03 - 2019-03-24 11:03 - 000981816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000901632 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000888120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000860160 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2019-03-24 11:03 - 2019-03-24 11:03 - 000823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000808464 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000769536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000764216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000735760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000726416 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000655160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000619832 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000588304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2019-03-24 11:03 - 2019-03-24 11:03 - 000577536 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000553784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000535048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000496872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000474936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2019-03-24 11:03 - 2019-03-24 11:03 - 000460304 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000430904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000322576 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasppp.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000262456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000176440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\spopk.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000147256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 000146888 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 000121872 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000094224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000071184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBth.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 017520640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 009683256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 009670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 007883776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 007647256 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 007645392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 007556392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 005561856 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 005527552 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 005296640 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 004245280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 003983360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 003660288 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 003399168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 003382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 003378488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 003092480 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002637312 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 002630656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002618880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002488320 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 002437344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002187776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002185728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002141184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppAgent.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002085376 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002044416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001931264 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001903616 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001884672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001844448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001824768 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001797128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001715712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001700880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001664904 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001604096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001563336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001533440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001522488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001479480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001331536 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001315840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001287776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001199104 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001177088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CommonBridge.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001176064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 001087800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001078072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 001054200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001008128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000955392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000902144 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000864056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000863752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000836096 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000833064 _____ C:\WINDOWS\system32\InputHost.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000831288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000818832 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.applicationmodel.datatransfer.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.PrinterCustomActions.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000745984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000714240 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000609792 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000604336 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000566584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-03-24 11:02 - 2019-03-24 11:02 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\eeprov.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000400384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000336744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000330464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000294072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000275768 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000246584 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\smbwmiv2.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000175096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVemgr.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSrv.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000156984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000151872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000148480 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000114856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000097592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000074424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Common.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo-overrides.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UevAppMonitor.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000047136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpkinstall.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnsruprov.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 007688088 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 006132736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 005130752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 004991096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 003556352 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 003338328 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 003270144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002992640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002929152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002766648 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002720768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 002654208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002594872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002466304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002199864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002149368 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002021584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002013696 _____ C:\WINDOWS\system32\rdpnano.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001893888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001751352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001742104 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001672704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001616384 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001612600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001520208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001496064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001403920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001387496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001296576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001253688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 001209360 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001208320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001191512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001051960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 001043256 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 001022616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000982576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000970256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000918304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000895048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000871792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000865568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000854016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000828936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000822448 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000817464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000790328 _____ (Microsoft Corporation) C:\WINDOWS\system32\upshared.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000765960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000757664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000741888 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000680184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000667152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000651304 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000649528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000646632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000629576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000612368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000605496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000582240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000580024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000531976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000511800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000508216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000506408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000505656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000495624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000484976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000473616 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000449368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000444728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000419128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000408800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000404792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000402576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000398416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000395064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000387832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000386872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000375544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000355360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000306704 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000300024 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000276488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTF.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpprov.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureTimeAggregator.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MTF.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiohlp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000178696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000169784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiohlp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000140808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000138960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000115152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000090424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000083472 _____ (Microsoft Corporation) C:\WINDOWS\system32\vid.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000055608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mmcss.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000039304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000033056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rfxvmt.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000072 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2019-03-24 11:00 - 2019-03-24 11:00 - 001221120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000752136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000651576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000300344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000298296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000195896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000193032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000164344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000132104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000080400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2019-03-24 10:43 - 2019-03-24 14:55 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-03-24 10:43 - 2019-03-24 10:43 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2019-03-24 10:43 - 2019-03-24 10:43 - 000000000 ____D C:\Program Files\Reference Assemblies
2019-03-24 10:43 - 2019-03-24 10:43 - 000000000 ____D C:\Program Files\MSBuild
2019-03-24 10:43 - 2019-03-24 10:43 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2019-03-24 10:41 - 2019-03-24 10:41 - 001167960 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2019-03-24 10:41 - 2019-03-24 10:41 - 000780376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2019-03-24 10:41 - 2019-03-24 10:41 - 000126064 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2019-03-24 10:41 - 2019-03-24 10:41 - 000104560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-03-24 10:41 - 2019-03-24 10:41 - 000036896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2019-03-24 10:41 - 2019-03-24 10:41 - 000035440 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2019-03-24 10:39 - 2019-03-24 10:39 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2019-03-24 10:39 - 2019-03-24 10:39 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2019-03-24 10:38 - 2019-03-24 10:38 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2019-03-24 10:38 - 2019-03-24 10:38 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2019-03-24 10:38 - 2019-03-24 10:38 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2019-03-24 10:38 - 2019-03-24 10:38 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2019-03-24 10:18 - 2019-03-24 10:18 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2019-03-24 08:07 - 2019-03-24 15:30 - 000000000 ___DC C:\WINDOWS\Panther
2019-03-21 16:57 - 2019-03-21 17:35 - 000000364 _____ C:\WINDOWS\Tasks\HPCeeScheduleForJosef.job
2019-03-08 15:38 - 2019-03-08 15:38 - 000264148 _____ C:\Users\Josef\Desktop\Výplatní páska.pdf

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-27 16:15 - 2017-08-07 17:39 - 000000000 ____D C:\FRST
2019-03-27 15:08 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-03-27 14:57 - 2017-11-24 17:10 - 000000000 ____D C:\Users\Josef\Desktop\Nová složka
2019-03-27 14:47 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-03-27 14:30 - 2018-11-27 16:17 - 000000000 ____D C:\Program Files (x86)\Steam
2019-03-27 14:29 - 2018-09-15 18:39 - 000719460 _____ C:\WINDOWS\system32\perfh005.dat
2019-03-27 14:29 - 2018-09-15 18:39 - 000145488 _____ C:\WINDOWS\system32\perfc005.dat
2019-03-27 14:29 - 2018-09-15 08:31 - 000000000 ____D C:\WINDOWS\INF
2019-03-27 14:23 - 2017-11-24 16:38 - 000000000 __SHD C:\Users\Josef\IntelGraphicsProfiles
2019-03-27 14:20 - 2018-09-15 07:09 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-03-26 18:16 - 2018-09-15 08:23 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-03-26 18:07 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-03-26 18:05 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\appcompat
2019-03-24 15:49 - 2018-06-23 11:43 - 000000000 ____D C:\ProgramData\Packages
2019-03-24 15:49 - 2017-11-24 16:19 - 000000000 ____D C:\Users\Josef\AppData\Local\Packages
2019-03-24 15:32 - 2018-11-17 17:34 - 000000000 ____D C:\Program Files\rempl
2019-03-24 15:30 - 2017-11-24 16:19 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-03-24 15:30 - 2017-11-24 16:19 - 000000000 ___RD C:\Users\Josef\3D Objects
2019-03-24 15:30 - 2017-11-24 16:19 - 000000000 ____D C:\Users\Josef\AppData\Local\ConnectedDevicesPlatform
2019-03-24 15:29 - 2018-09-15 07:09 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2019-03-24 15:28 - 2018-09-15 08:33 - 000000000 ___RD C:\Program Files\Windows Defender
2019-03-24 15:28 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\windows nt
2019-03-24 15:27 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\Registration
2019-03-24 15:22 - 2018-09-15 08:33 - 000000000 ___RD C:\WINDOWS\PrintDialog
2019-03-24 15:20 - 2018-09-15 08:33 - 000000000 __RSD C:\WINDOWS\media
2019-03-24 15:20 - 2018-06-23 11:13 - 000023020 _____ C:\WINDOWS\system32\emptyregdb.dat
2019-03-24 15:17 - 2019-01-28 13:41 - 000000000 ____D C:\Users\Josef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Art Plus
2019-03-24 15:16 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2019-03-24 15:07 - 2018-12-01 17:52 - 000000000 ____D C:\Users\Josef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP
2019-03-24 15:02 - 2017-11-24 16:22 - 000021910 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2019-03-24 15:02 - 2017-11-24 16:22 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2019-03-24 14:59 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\ServiceState
2019-03-24 14:55 - 2018-11-27 16:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2019-03-24 14:55 - 2018-11-27 13:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2019-03-24 14:55 - 2018-11-24 11:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2019-03-24 14:55 - 2018-10-19 17:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2019-03-24 14:55 - 2018-10-19 17:11 - 000000000 ____D C:\WINDOWS\SHELLNEW
2019-03-24 14:55 - 2018-10-18 10:15 - 000000000 ____D C:\WINDOWS\cs
2019-03-24 14:55 - 2018-10-07 08:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-03-24 14:55 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-03-24 14:55 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2019-03-24 14:55 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\spool
2019-03-24 14:55 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-03-24 14:55 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-03-24 14:55 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-03-24 14:55 - 2018-09-15 08:31 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2019-03-24 14:55 - 2018-05-21 16:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2019-03-24 14:55 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2019-03-24 14:55 - 2018-03-04 11:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FCleaner
2019-03-24 14:55 - 2017-12-04 09:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
2019-03-24 14:55 - 2017-12-01 21:26 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
2019-03-24 14:55 - 2017-12-01 17:27 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2019-03-24 14:55 - 2017-11-26 10:35 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-03-24 14:55 - 2017-11-24 16:37 - 000000000 ____D C:\Program Files\Intel
2019-03-24 12:15 - 2018-09-15 08:36 - 000000000 ____D C:\WINDOWS\Setup
2019-03-24 11:29 - 2018-09-15 08:33 - 000000000 __RHD C:\Users\Public\Libraries
2019-03-24 11:29 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\InfusedApps
2019-03-24 11:22 - 2018-09-29 11:15 - 000000000 ____D C:\WINDOWS\system32\Intel
2019-03-24 11:22 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2019-03-24 11:22 - 2017-11-24 16:22 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2019-03-24 11:21 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\Resources
2019-03-24 11:21 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\Help
2019-03-24 11:21 - 2018-06-13 17:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2019-03-24 11:21 - 2017-12-17 19:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2019-03-24 11:21 - 2017-12-04 09:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2019-03-24 11:21 - 2017-11-24 16:22 - 000000000 ____D C:\Program Files\Realtek
2019-03-24 11:21 - 2017-11-24 16:17 - 000000000 ____D C:\Program Files\Synaptics
2019-03-24 11:11 - 2018-09-15 18:40 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2019-03-24 11:11 - 2018-09-15 18:40 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2019-03-24 11:11 - 2018-09-15 18:40 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\TextInput
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\migwiz
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\appraiser
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\ShellComponents
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-03-24 11:11 - 2018-09-15 07:09 - 000000000 ____D C:\WINDOWS\system32\Dism
2019-03-24 10:43 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2019-03-24 10:43 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\MUI
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\et-EE
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\es-MX
2019-03-13 15:04 - 2017-11-26 10:34 - 127411920 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-03-09 11:34 - 2017-11-24 16:47 - 000000000 ___RD C:\Users\Josef\OneDrive

==================== Files in the root of some directories =======

2017-11-30 17:58 - 2019-03-27 14:24 - 001032866 _____ () C:\Users\Josef\AppData\Local\BTServer.log
2017-12-01 20:35 - 2017-12-01 20:38 - 000004608 _____ () C:\Users\Josef\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-12-27 14:40 - 2018-12-27 14:40 - 000003269 _____ () C:\Users\Josef\AppData\Local\recently-used.xbel

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\dllhost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================

Re: vyčistit notebook

Napsal: 27 bře 2019 16:27
od marvis
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17.03.2019
Ran by Josef (27-03-2019 16:20:51)
Running from C:\Users\Josef\Desktop
Windows 10 Pro Version 1809 17763.379 (X64) (2019-03-24 14:29:37)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1243976712-1797555765-2480249262-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1243976712-1797555765-2480249262-503 - Limited - Disabled)
Guest (S-1-5-21-1243976712-1797555765-2480249262-501 - Limited - Disabled)
Josef (S-1-5-21-1243976712-1797555765-2480249262-1001 - Administrator - Enabled) => C:\Users\Josef
WDAGUtilityAccount (S-1-5-21-1243976712-1797555765-2480249262-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\{F9000000-0018-0000-0000-074957833700}) (Version: 9.01.513.58212 - ABBYY) Hidden
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Art Plus Calendar Designer LE 2.0.2 (HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Art Plus Calendar Designer) (Version: 2.0.2.208 - )
Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG)
Backup and Sync from Google (HKLM\...\{693CADB0-962B-4AC1-A939-9524B258C997}) (Version: 3.43.2448.9071 - Google, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.47 - Piriform)
Cyberlink PhotoDirector (HKLM\...\{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6618 - Název společnosti:) Hidden
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6618 - CyberLink Corp.)
CyberLink Power Media Player 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.6.7428 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
FCleaner 1.3.1.621 (HKLM-x32\...\FCleaner_is1) (Version: - FTweak, Inc.)
Fotogalerie (HKLM-x32\...\{F37D360D-9308-4BB1-8515-DC6B637B9486}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Google Chrome) (Version: 72.0.3626.81 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
HP DeskJet 5820 series Nápověda (HKLM-x32\...\{89D0B45E-D5AC-4B97-9C7D-6F0D2308A0CA}) (Version: 36.0.0 - HP)
HP Dropbox Plugin (HKLM-x32\...\{9FF252C8-B146-47A2-9336-3A1A83056F51}) (Version: 36.0.39.57346 - HP)
HP Google Drive Plugin (HKLM-x32\...\{BBF796CE-5068-47C7-8A6D-4120C0CE47E5}) (Version: 36.0.39.57346 - HP)
HP Photo Creations (HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\HP Photo Creations) (Version: 1.0.0.22192 - HP)
HP Support Assistant (HKLM-x32\...\{F322B446-B157-4257-B44F-4F22D41F8EDB}) (Version: 8.7.50.3 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{6E46D147-D977-4034-BEE6-B2EB5A4BE2E3}) (Version: 12.10.49.21 - HP Inc.)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4835 - Intel Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\OneDriveSetup.exe) (Version: 19.012.0121.0011 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{3D2CF65C-B544-4308-B996-700D3E5F6C4C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 1.0.0.46 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8395 - Realtek Semiconductor Corp.)
Seznam Software (HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\SeznamInstall) (Version: 2.1.32 - Seznam.cz)
Skype verze 8.34 (HKLM-x32\...\Skype_is1) (Version: 8.34 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Studie vylepšování produktu HP DeskJet 5820 series (HKLM\...\{CAE450AC-801B-44FC-A200-0244F6AD5479}) (Version: 36.1.108.65692 - Hewlett-Packard Co.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{FBA3961B-D1DF-493C-BC1F-E67D3B832895}) (Version: 2.56.0.0 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Základní software zařízení HP DeskJet 5820 series (HKLM\...\{322E6CCD-0436-478E-A61B-EB11869234C3}) (Version: 36.1.108.65692 - Hewlett-Packard Co.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1243976712-1797555765-2480249262-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-1243976712-1797555765-2480249262-1001_Classes\CLSID\{C591CFEA-E432-495d-A0BE-58E4CCD87B17}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2217832 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)
ContextMenuHandlers1: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => -> No File
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)
ContextMenuHandlers4: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2018-04-20] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => -> No File

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0325190F-3676-42AC-8DE9-E724619C4DB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {0FCDA225-D71C-48E8-8C6B-19C1C69BBD01} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {28637E51-E96E-4352-9ACC-1B2DE2906964} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe (HP Inc. -> HP Inc.)
Task: {375A8355-30E7-4732-9BC3-92C86BCAD82B} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {4B6DD31A-AB3D-43FC-88FD-8B3782ADA462} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe (HP Inc. -> HP Inc.)
Task: {61AAC478-11C5-4141-AC2B-BDF0041A407B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {61E13C1D-6739-4B6D-8136-50B8405C2EAA} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {63FB270F-8ACF-456B-A55D-6004962C84EA} - System32\Tasks\Opera scheduled Autoupdate 1513520202 => C:\Users\Josef\AppData\Local\Programs\Opera\launcher.exe (Opera Software AS -> Opera Software)
Task: {66561AC6-DBD2-48CD-8AFF-2B7FA4D13D34} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {68F82EA4-3BDF-49CB-8401-71A173B2AF53} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {788D3B2D-FE87-4DB7-BD23-3AEA917AC432} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {7D1A75FE-F8E0-49CE-BFAE-8F4EC6E0756F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe (HP Inc. -> HP Inc.)
Task: {8BE14521-D746-4FD7-909B-CB45B8EC5990} - System32\Tasks\HPCeeScheduleForJosef => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe (Hewlett-Packard Company -> HP Inc.)
Task: {9565C462-2973-4E6E-993D-7C9D496FACB0} - System32\Tasks\HPCustParticipation HP DeskJet 5820 series => C:\Program Files\HP\HP DeskJet 5820 series\Bin\HPCustPartic.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
Task: {956A4E33-122A-4046-A168-CBAE335EF153} - System32\Tasks\FTweak FCleaner AutoCleanup => C:\Program Files (x86)\FCleaner\FCleaner.exe (FTweak) [File not signed]
Task: {9A404F94-BB73-4A1B-AADE-33DE80D3DFA5} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe (HP Inc. -> HP Inc.)
Task: {C89A8961-F09C-4526-9FEE-0F0EE33EBC83} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe (HP Inc. -> HP Inc.)
Task: {CD1B12A2-D223-4138-A57E-44B1CD689DD3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd -> Piriform Ltd)
Task: {D12E13B4-B189-44FF-9DB5-AE8A8AADF1FA} - System32\Tasks\Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures
Task: {EADD26D2-90F9-4389-AE45-93C3CC88EB21} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {FDA0DF9D-6603-4343-8E1D-0A07D78243A4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe (HP Inc. -> HP Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\FTweak FCleaner AutoCleanup.job => C:\Program Files (x86)\FCleaner\FCleaner.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForJosef.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2017-12-19 19:19 - 2013-03-24 05:00 - 000391168 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMLMBW.DLL
2017-12-04 09:50 - 2017-12-04 09:48 - 000120320 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\E_ILMHJE.DLL
2008-04-11 11:54 - 2008-04-11 11:54 - 000348160 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\MSVCR71.dll
2019-03-24 15:10 - 2019-03-24 15:10 - 000097280 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.DLL

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:302A9871 [230]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-09-29 14:46 - 2018-07-17 11:10 - 000000753 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Josef\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\adélka.jpg
DNS Servers: 192.169.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\Run: => "BtServer"
HKLM\...\StartupApproved\Run: => "HPRadioMgr"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKLM\...\StartupApproved\Run32: => "SecurityHealth"
HKLM\...\StartupApproved\Run32: => "seznam-listicka-distribuce"
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\StartupApproved\Run: => "cz.seznam.software.autoupdate"
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\StartupApproved\Run: => "cz.seznam.software.szndesktop"
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\StartupApproved\Run: => "CCleaner"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{82F637F5-C92B-4F43-92A7-B446A644E715}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe () [File not signed]
FirewallRules: [{FB01C807-3A2C-4300-B27B-D47AE05B641E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe () [File not signed]
FirewallRules: [{058365D9-B210-4864-9EC4-43B2848BD8BF}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3C5DB185-7100-4998-ACC9-DEA957FD4022}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8FC31054-CC0F-4998-B098-327E709B3EDE}] => (Allow) LPort=1900
FirewallRules: [{9A6DB10C-DDC4-4363-9D85-3B2953911AB0}] => (Allow) LPort=2869
FirewallRules: [{1A1CC153-C900-496E-8A24-3A7A67D19CE0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{B6B20DE4-577B-47F9-B78E-7E8117850CB9}C:\program files\openshot video editor\launch.exe] => (Allow) C:\program files\openshot video editor\launch.exe () [File not signed]
FirewallRules: [TCP Query User{66F92ADD-F095-4B66-8D81-FCE24DA16033}C:\program files\openshot video editor\launch.exe] => (Allow) C:\program files\openshot video editor\launch.exe () [File not signed]
FirewallRules: [{4AA77865-4D40-4936-91D1-11981D4E3364}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{B6214133-683E-4896-AEFC-5E29C5EC6E3C}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{064D8003-9D19-4148-BBB0-6AA17EA01889}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{8F273EEC-04E3-4BBE-B641-9F6E70396AAA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{3C9BDC02-ED72-4C2B-B8EE-E3B8D64E11E6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{1B8E8629-C08A-440D-9110-7BEF617E7B23}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{B72ECAD1-737A-42E7-B318-0EEFA7D9DE19}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{D37BC102-A9BA-4171-B88E-678B84421420}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{B56F0D7F-E241-4F0E-B06A-42E05992A3A9}] => (Allow) C:\Program Files\HP\HP DeskJet 5820 series\Bin\DeviceSetup.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{7151E89A-5C67-4882-B884-BA96260BF249}] => (Allow) LPort=5357
FirewallRules: [{7CB25E8E-EBCD-4988-B812-537B7C2D49F2}] => (Allow) C:\Program Files\HP\HP DeskJet 5820 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)

==================== Restore Points =========================

26-03-2019 18:13:21 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/27/2019 02:24:20 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Users\Josef\AppData\Local\chromium\Application\chrome.exe se nezdařilo.
Závislé sestavení 63.0.3223.0,language="*",type="win32",version="63.0.3223.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/27/2019 02:21:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AUDIODG.EXE, verze: 10.0.17763.348, časové razítko: 0xa0a39b52
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000000000
ID chybujícího procesu: 0xbe0
Čas spuštění chybující aplikace: 0x01d4e49ffc282073
Cesta k chybující aplikaci: C:\WINDOWS\system32\AUDIODG.EXE
Cesta k chybujícímu modulu: unknown
ID zprávy: 44804b0c-dae0-4bf3-bbf2-fefc418a7127
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (03/27/2019 02:18:28 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Users\Josef\AppData\Local\chromium\Application\chrome.exe se nezdařilo.
Závislé sestavení 63.0.3223.0,language="*",type="win32",version="63.0.3223.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/24/2019 03:33:13 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Users\Josef\AppData\Local\chromium\Application\chrome.exe se nezdařilo.
Závislé sestavení 63.0.3223.0,language="*",type="win32",version="63.0.3223.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/24/2019 03:20:31 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: Pokus získat stav uzlu clusteru se nezdařil. Vrácený kód chyby: 0x8007085A

Error: (03/24/2019 03:20:19 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: Pokus získat stav uzlu clusteru se nezdařil. Vrácený kód chyby: 0x8007085A

Error: (03/24/2019 03:20:18 PM) (Source: MSDTC 2) (EventID: 4104) (User: )
Description: Pokus získat stav uzlu clusteru se nezdařil. Vrácený kód chyby: 0x8007085A

Error: (03/24/2019 03:20:18 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: Pokus získat stav uzlu clusteru se nezdařil. Vrácený kód chyby: 0x8007085A


System errors:
=============
Error: (03/27/2019 02:32:58 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-23MSNL0)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-23MSNL0\Josef (SID: S-1-5-21-1243976712-1797555765-2480249262-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (03/27/2019 02:30:41 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-23MSNL0)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-23MSNL0\Josef (SID: S-1-5-21-1243976712-1797555765-2480249262-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (03/27/2019 02:25:05 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-23MSNL0)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-23MSNL0\Josef (SID: S-1-5-21-1243976712-1797555765-2480249262-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (03/27/2019 02:24:43 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Spuštění pro serverovou aplikaci COM s identifikátorem CLSID
Windows.SecurityCenter.WscBrokerManager
a APPID
Není k dispozici
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (03/27/2019 02:19:18 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Update Orchestrator Service byla ukončena s následující chybou:
Daná operace se vrátila, protože vypršel časový limit.

Error: (03/26/2019 06:03:30 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-23MSNL0)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-23MSNL0\Josef (SID: S-1-5-21-1243976712-1797555765-2480249262-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (03/26/2019 06:02:54 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-23MSNL0)
Description: Server Microsoft.Windows.Photos_2019.19011.19410.0_x64__8wekyb3d8bbwe!App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (03/26/2019 06:02:00 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění výchozí pro počítač neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{0358B920-0AC7-461F-98F4-58E32CD89148}
a APPID
{3EB3C877-1F16-487C-9050-104DBCD66683}
uživateli NT AUTHORITY\LOCAL SERVICE (SID: S-1-5-19) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.


==================== Memory info ===========================

Processor: Intel(R) Celeron(R) CPU N3050 @ 1.60GHz
Percentage of memory in use: 58%
Total physical RAM: 3938.27 MB
Available physical RAM: 1618.73 MB
Total Virtual: 5346.27 MB
Available Virtual: 2781.87 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:450.58 GB) (Free:373.68 GB) NTFS

\\?\Volume{bc94a63e-eb24-47f3-8a59-1689401a4711}\ () (Fixed) (Total:0.44 GB) (Free:0.04 GB) NTFS
\\?\Volume{a838c364-b3e8-4f78-b9df-07dc58bf186e}\ () (Fixed) (Total:0.8 GB) (Free:0.33 GB) NTFS
\\?\Volume{417b5dc1-e861-40d9-be35-d1f9dd043321}\ (RECOVERY) (Fixed) (Total:13.56 GB) (Free:1.46 GB) NTFS
\\?\Volume{522ce2ea-a1dc-4fe3-a78e-e2c86f220fd4}\ () (Fixed) (Total:0.25 GB) (Free:0.15 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 62DF951D)

Partition: GPT.

==================== End of Addition.txt ============================

Re: vyčistit notebook

Napsal: 27 bře 2019 16:59
od Rudy
Teď spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Re: vyčistit notebook

Napsal: 27 bře 2019 18:23
od marvis
# -------------------------------
# Malwarebytes AdwCleaner 7.2.7.0
# -------------------------------
# Build: 01-30-2019
# Database: 2019-03-25.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 03-27-2019
# Duration: 00:00:10
# OS: Windows 10 Pro
# Cleaned: 30
# Failed: 2


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\ProgramData\IObit\Advanced SystemCare
Deleted C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
Deleted C:\Users\Josef\AppData\LocalLow\IObit\Advanced SystemCare
Deleted C:\Users\Josef\AppData\Roaming\IObit\Advanced SystemCare
Deleted C:\ProgramData\IOBIT\Driver Booster
Deleted C:\Users\Josef\AppData\Roaming\IOBIT\Driver Booster
Deleted C:\OSTotoFolder
Deleted C:\Users\Josef\AppData\Roaming\SecurityXploded
Deleted C:\Program Files (x86)\Seznam.cz
Deleted C:\Users\Josef\AppData\Roaming\Seznam.cz

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKLM\Software\Wow6432Node\IObit\RealTimeProtector
Deleted HKLM\Software\Wow6432Node\IObit\Advanced SystemCare
Deleted HKLM\Software\Wow6432Node\IOBIT\ASC
Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}
Deleted HKLM\Software\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{BA935377-E17C-4475-B1BF-DE3110613A99}
Deleted HKLM\Software\Classes\Interface\{BA935377-E17C-4475-B1BF-DE3110613A99}
Deleted HKLM\Software\Wow6432Node\IObit\Driver Booster
Deleted HKCU\Software\csastats
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
Deleted HKCU\Software\SecurityXploded
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|cz.seznam.software.szndesktop
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Run|cz.seznam.software.szndesktop
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|cz.seznam.software.autoupdate
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Run|cz.seznam.software.autoupdate
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|seznam-listicka-distribuce
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run|seznam-listicka-distribuce
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
Deleted HKCU\Software\Seznam.cz
Deleted HKCU\Software\Mozilla\NativeMessagingHosts\sznpp_nm

***** [ Chromium (and derivatives) ] *****

Not Deleted Seznam doplněk - Email
Not Deleted Seznam doplněk - Esko

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4034 octets] - [27/03/2019 18:12:20]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Re: vyčistit notebook

Napsal: 27 bře 2019 18:55
od Rudy
OK. Dejte nové logy FRST+Addition.

Re: vyčistit notebook

Napsal: 27 bře 2019 19:16
od marvis
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
Ran by Josef (administrator) on DESKTOP-23MSNL0 (27-03-2019 19:06:44)
Running from C:\Users\Josef\Desktop
Loaded Profiles: Josef (Available Profiles: Josef)
Platform: Windows 10 Pro Version 1809 17763.379 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(ABBYY SOLUTIONS LIMITED -> ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Realtek Semiconductor Corp -> ) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\MsMpEng.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTServer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\NisSrv.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20594.0_x64__8wekyb3d8bbwe\YourPhone.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Piriform Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Users\Josef\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9268672 2018-09-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [229592 2015-07-09] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Run: [FTweakFCleaner] => C:\Program Files (x86)\FCleaner\FCleaner.exe [1763840 2010-06-21] (FTweak) [File not signed]
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Run: [Chromium] => c:\users\josef\appdata\local\chromium\application\chrome.exe [4149760 2017-09-22] (The Chromium Authors) [File not signed]
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [18594760 2018-09-07] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3146016 2019-03-06] (Valve -> Valve Corporation)
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [18594760 2018-09-07] (Piriform Ltd -> Piriform Ltd)
HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-18] (Fox Magic Software) [File not signed]
HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.169.1.254
Tcpip\..\Interfaces\{7387f5ed-7d4e-45fc-bbde-7ea963f43391}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{a93c2824-6465-406f-a73d-ed7c26793b57}: [DhcpNameServer] 192.169.1.254

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yahoo.com/?fr=avantsearch6
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: l2scvyi7.default-1550765587831
FF ProfilePath: C:\Users\Josef\AppData\Roaming\Mozilla\Firefox\Profiles\l2scvyi7.default-1550765587831 [2019-03-24]
FF Homepage: Mozilla\Firefox\Profiles\l2scvyi7.default-1550765587831 -> hxxps://www.seznam.cz/
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc -> Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc -> Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1243976712-1797555765-2480249262-1001: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\Josef\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-11-15] (RocketLife -> RocketLife, LLP)

Chrome:
=======
CHR HomePage: Default -> hxxps://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR DefaultSearchURL: Default -> hxxps://search.seznam.cz/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> seznam.cz
CHR DefaultSuggestURL: Default -> hxxps://suggest.fulltext.seznam.cz/fulltext_ff?phrase={searchTerms}
CHR Profile: C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default [2019-03-27]
CHR Extension: (Prezentace) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-02-24]
CHR Extension: (Dokumenty) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-02-24]
CHR Extension: (Disk Google) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-02-24]
CHR Extension: (YouTube) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-02-24]
CHR Extension: (Tabulky) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-02-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-02-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-02-24]
CHR Extension: (Gmail) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-02-24]
CHR Extension: (Chrome Media Router) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-02-24]
CHR HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bgjpfhpjcgdppjbgnpnjllokbmcdllig] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY SOLUTIONS LIMITED -> ABBYY)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [125656 2015-09-18] (Realtek Semiconductor Corp -> )
R2 esifsvc; C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe [1643064 2018-09-29] (Intel Corporation -> Intel Corporation)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (Hewlett-Packard Company -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [347512 2018-12-06] (HP Inc. -> HP Inc.)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [356824 2018-04-20] (Intel(R) pGFX -> Intel Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324552 2018-09-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
R2 RtkBtManServ; C:\WINDOWS\RtkBtManServ.exe [687072 2018-05-31] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5381128 2019-03-24] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [278616 2017-08-18] (Synaptics Incorporated -> Synaptics Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [77224 2018-09-29] (Intel Corporation -> Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [70568 2018-09-29] (Intel Corporation -> Intel Corporation)
R3 esif_lf; C:\WINDOWS\System32\drivers\esif_lf.sys [399784 2018-09-29] (Intel Corporation -> Intel Corporation)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-09-29] (Martin Malik - REALiX -> REALiX(tm))
R3 igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [7408584 2018-04-20] (Intel(R) pGFX -> Intel Corporation)
R3 necbatt; C:\WINDOWS\System32\drivers\necbatt.sys [37240 2018-09-29] (NEC Personal Computers, Ltd. -> NEC Personal Computers, Ltd.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1138000 2018-09-29] (Realtek Semiconductor Corp. -> Realtek )
R3 RtkBtFilter; C:\WINDOWS\System32\drivers\RtkBtfilter.sys [784264 2018-05-31] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
S3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [424384 2018-09-29] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
R3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [8336216 2018-09-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation )
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [55384 2017-08-18] (Synaptics Incorporated -> Synaptics Incorporated)
R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [146200 2018-09-29] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-02-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [333792 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [62432 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35360 2018-09-13] (HP Inc. -> HP)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-27 19:06 - 2019-03-27 19:09 - 000014683 _____ C:\Users\Josef\Desktop\FRST.txt
2019-03-27 18:16 - 2019-03-27 18:16 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2019-03-27 18:11 - 2019-03-27 18:13 - 000000000 ____D C:\AdwCleaner
2019-03-27 18:09 - 2019-03-27 18:09 - 007316688 _____ (Malwarebytes) C:\Users\Josef\Desktop\adwcleaner_7.2.7.0.exe
2019-03-27 16:14 - 2019-03-27 16:14 - 002434048 _____ (Farbar) C:\Users\Josef\Desktop\FRST64.exe
2019-03-27 14:22 - 2019-03-03 01:45 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-03-27 14:22 - 2019-03-03 01:45 - 000179608 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2019-03-24 15:33 - 2019-03-24 15:33 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-03-24 15:31 - 2019-03-24 15:31 - 000000000 ____D C:\Users\Josef\AppData\Local\PackageStaging
2019-03-24 15:29 - 2019-03-24 15:29 - 000000020 ___SH C:\Users\Josef\ntuser.ini
2019-03-24 15:28 - 2019-03-27 18:14 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-03-24 15:28 - 2019-03-27 16:57 - 000003256 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForJosef
2019-03-24 15:28 - 2019-03-24 15:29 - 000002220 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2019-03-24 15:28 - 2019-03-24 15:28 - 000003604 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1513520202
2019-03-24 15:28 - 2019-03-24 15:28 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2019-03-24 15:28 - 2019-03-24 15:28 - 000003400 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2019-03-24 15:28 - 2019-03-24 15:28 - 000003176 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2019-03-24 15:28 - 2019-03-24 15:28 - 000002988 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2019-03-24 15:28 - 2019-03-24 15:28 - 000002860 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1243976712-1797555765-2480249262-1001
2019-03-24 15:28 - 2019-03-24 15:28 - 000002682 _____ C:\WINDOWS\System32\Tasks\HPCustParticipation HP DeskJet 5820 series
2019-03-24 15:28 - 2019-03-24 15:28 - 000002344 _____ C:\WINDOWS\System32\Tasks\FTweak FCleaner AutoCleanup
2019-03-24 15:28 - 2019-03-24 15:28 - 000000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2019-03-24 15:28 - 2019-03-24 15:28 - 000000000 ____D C:\WINDOWS\System32\Tasks\Macromedia
2019-03-24 15:28 - 2019-03-24 15:28 - 000000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard
2019-03-24 15:28 - 2019-03-24 15:28 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2019-03-24 15:27 - 2019-03-24 15:28 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2019-03-24 15:27 - 2019-03-24 15:28 - 000007623 _____ C:\WINDOWS\diagerr.xml
2019-03-24 15:20 - 2019-03-27 18:18 - 001693636 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-03-24 15:09 - 2019-03-24 15:09 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2019-03-24 15:04 - 2019-03-27 18:20 - 000000000 ____D C:\Users\Josef
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Šablony
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Soubory cookie
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Poslední
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Okolní tiskárny
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Okolní síť
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Nabídka Start
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Dokumenty
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Documents\Obrázky
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Documents\Hudba
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Documents\Filmy
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\Data aplikací
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2019-03-24 15:04 - 2019-03-24 15:04 - 000000000 _SHDL C:\Users\Josef\AppData\Local\Data aplikací
2019-03-24 15:04 - 2018-09-15 08:29 - 000001105 _____ C:\Users\Josef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-03-24 15:03 - 2019-03-24 15:03 - 000002065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk
2019-03-24 15:01 - 2019-03-24 15:01 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2019-03-24 15:01 - 2019-03-24 15:01 - 000000000 ____D C:\ProgramData\USOShared
2019-03-24 15:01 - 2018-04-20 14:48 - 000099808 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2019-03-24 15:00 - 2019-03-24 11:01 - 002865152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2019-03-24 14:56 - 2019-03-27 19:05 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-03-24 14:56 - 2019-03-24 15:13 - 000449168 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-03-24 14:55 - 2019-03-24 15:29 - 000000000 ____D C:\Windows.old
2019-03-24 11:20 - 2019-03-24 14:55 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2019-03-24 11:17 - 2019-03-24 11:20 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2019-03-24 11:06 - 2019-03-24 11:06 - 011724288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 009941504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 007724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 005436184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 005112792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 004920832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 004488192 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2019-03-24 11:06 - 2019-03-24 11:06 - 003601920 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 003566080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 003551408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 003442176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2019-03-24 11:06 - 2019-03-24 11:06 - 002752360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 002469440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 002429752 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2019-03-24 11:06 - 2019-03-24 11:06 - 002323688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 002278240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 002160160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2019-03-24 11:06 - 2019-03-24 11:06 - 001969152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001294856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001289192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001282640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001258808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2019-03-24 11:06 - 2019-03-24 11:06 - 001200920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001077912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001072720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001057976 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 001024920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000870400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000866152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000854784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000762272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000732160 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCacheProvider.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2019-03-24 11:06 - 2019-03-24 11:06 - 000454144 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000429056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000421688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSh.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2019-03-24 11:06 - 2019-03-24 11:06 - 000349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDistSh.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys
2019-03-24 11:06 - 2019-03-24 11:06 - 000301096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000263360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000241680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCleaner.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDist.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDist.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
2019-03-24 11:06 - 2019-03-24 11:06 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 026810368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 024616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 023440896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 020814848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 019284480 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 019023872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 012857856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 012151296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 008875008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 007897088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 007882240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 006069760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 004883968 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 004689408 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 003952952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 003923456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 003744256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 002986352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 002942464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 002392576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 002298880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 002127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001782272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001749504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001332224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001221528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 001182720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2019-03-24 11:05 - 2019-03-24 11:05 - 001166336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2019-03-24 11:05 - 2019-03-24 11:05 - 001131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001064448 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001047040 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001022464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 001018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000927232 _____ (Microsoft Corporation) C:\WINDOWS\system32\assignedaccessmanagersvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000883200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000829440 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000793088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000772608 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000662528 ____R (Microsoft Corporation) C:\WINDOWS\system32\MixedRealityCapture.Pipeline.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessManager.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000522312 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000427520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\regedit.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2019-03-24 11:05 - 2019-03-24 11:05 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regedit.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys
2019-03-24 11:05 - 2019-03-24 11:05 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000180736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2019-03-24 11:05 - 2019-03-24 11:05 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastingShellExt.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CastingShellExt.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2019-03-24 11:05 - 2019-03-24 11:05 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2019-03-24 11:05 - 2019-03-24 11:05 - 000098816 ____R (Microsoft Corporation) C:\WINDOWS\system32\MixedRealityCapture.Broker.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlahc.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\PktMon.exe
2019-03-24 11:05 - 2019-03-24 11:05 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfts.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfts.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll
2019-03-24 11:05 - 2019-03-24 11:05 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 015224320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 007251456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 006548168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 006440960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 006309040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 005915936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 005764608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 005588184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 005205464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 005086208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 004627456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 004526080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 003729808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 003652656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 003427840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 003108864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002832896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002776712 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002765312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002689536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002447360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002346496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002275680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002086400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 002001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001899160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001860608 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001760768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001720936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001711616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001701376 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001688576 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001675712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001674480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001671864 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001590072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001572176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001476096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001467560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001457544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001294848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001279024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 001272552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdrecordcpu.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001271608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001254912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001221944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001168384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001162280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001098128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001072640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 001026992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000964976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000953856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000918032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2019-03-24 11:04 - 2019-03-24 11:04 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000782968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000772408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000762880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000652824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000649272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000626176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000615936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000604248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.applicationmodel.datatransfer.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000591832 _____ C:\WINDOWS\SysWOW64\InputHost.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000548864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000514112 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-03-24 11:04 - 2019-03-24 11:04 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000373768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasppp.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000279376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000272648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000252536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWorkflowService.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spopk.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000114344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000091424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\nslookup.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nslookup.exe
2019-03-24 11:04 - 2019-03-24 11:04 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBth.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2019-03-24 11:04 - 2019-03-24 11:04 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureBioSysprep.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 022114960 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 006925824 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 005566464 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 004702704 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 004588744 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 004298752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 004019200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 003761664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 003504128 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 002926904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 002893312 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 002879488 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 002871312 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 002700792 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 002626360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 002073240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001994760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001969464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 001819136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001697744 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-03-24 11:03 - 2019-03-24 11:03 - 001671680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001644048 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001641400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001481488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001468440 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 001446400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001395248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001391096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 001360696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 001341880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-03-24 11:03 - 2019-03-24 11:03 - 001314304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001267712 _____ (Microsoft Corporation) C:\WINDOWS\system32\APMon.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001249792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001180248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001179168 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 001056272 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 001010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\refsutil.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2019-03-24 11:03 - 2019-03-24 11:03 - 000981816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000901632 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000888120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000860160 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2019-03-24 11:03 - 2019-03-24 11:03 - 000823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000808464 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000769536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000764216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000735760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000726416 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000655160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000619832 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000588304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2019-03-24 11:03 - 2019-03-24 11:03 - 000577536 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000553784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000535048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000496872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000474936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2019-03-24 11:03 - 2019-03-24 11:03 - 000460304 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000430904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000322576 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasppp.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000262456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000176440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\spopk.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000147256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 000146888 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2019-03-24 11:03 - 2019-03-24 11:03 - 000121872 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000094224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2019-03-24 11:03 - 2019-03-24 11:03 - 000071184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBth.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-03-24 11:03 - 2019-03-24 11:03 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 017520640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 009683256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 009670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 007883776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 007647256 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 007645392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 007556392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 005561856 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 005527552 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 005296640 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 004245280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 003983360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 003660288 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 003399168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 003382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 003378488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 003092480 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002637312 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 002630656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002618880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002488320 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 002437344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002187776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002185728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002141184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppAgent.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002085376 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 002044416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001931264 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001903616 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001884672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001844448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001824768 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001797128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001715712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001700880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001664904 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001604096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001563336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001533440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001522488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001479480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001331536 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001315840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001287776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001199104 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001177088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CommonBridge.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001176064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 001087800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001078072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 001054200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 001008128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000955392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000902144 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000864056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000863752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000836096 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000833064 _____ C:\WINDOWS\system32\InputHost.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000831288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000818832 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.applicationmodel.datatransfer.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.PrinterCustomActions.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000745984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000714240 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000609792 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000604336 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000566584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-03-24 11:02 - 2019-03-24 11:02 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\eeprov.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000400384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000336744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000330464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000294072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000275768 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000246584 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\smbwmiv2.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000175096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVemgr.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSrv.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000156984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000151872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000148480 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000114856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000097592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000074424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Common.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo-overrides.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UevAppMonitor.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000047136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpkinstall.exe
2019-03-24 11:02 - 2019-03-24 11:02 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnsruprov.dll
2019-03-24 11:02 - 2019-03-24 11:02 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys
2019-03-24 11:02 - 2019-03-24 11:02 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 007688088 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 006132736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 005130752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 004991096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 003556352 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 003338328 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 003270144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002992640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002929152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002766648 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002720768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 002654208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002594872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002466304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002199864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002149368 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002021584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 002013696 _____ C:\WINDOWS\system32\rdpnano.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001893888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001751352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001742104 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001672704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001616384 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001612600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001520208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001496064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001403920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001387496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001296576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001253688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 001209360 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001208320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001191512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001051960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 001043256 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 001022616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000982576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000970256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000918304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000895048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000871792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000865568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000854016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000828936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000822448 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000817464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000790328 _____ (Microsoft Corporation) C:\WINDOWS\system32\upshared.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000765960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000757664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000741888 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000680184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000667152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000651304 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000649528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000646632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000629576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000612368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000605496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000582240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000580024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000531976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000511800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000508216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000506408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000505656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000495624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000484976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000473616 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000449368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000444728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000419128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000408800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000404792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000402576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000398416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000395064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000387832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000386872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000375544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000355360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000306704 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000300024 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000276488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTF.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpprov.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureTimeAggregator.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MTF.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiohlp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000178696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000169784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiohlp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000140808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000138960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000115152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000090424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000083472 _____ (Microsoft Corporation) C:\WINDOWS\system32\vid.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000055608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mmcss.sys
2019-03-24 11:01 - 2019-03-24 11:01 - 000039304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2019-03-24 11:01 - 2019-03-24 11:01 - 000033056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rfxvmt.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2019-03-24 11:01 - 2019-03-24 11:01 - 000000072 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2019-03-24 11:00 - 2019-03-24 11:00 - 001221120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000752136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000651576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000300344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000298296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000195896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000193032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000164344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000132104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000080400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2019-03-24 11:00 - 2019-03-24 11:00 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2019-03-24 10:43 - 2019-03-24 14:55 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-03-24 10:43 - 2019-03-24 10:43 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2019-03-24 10:43 - 2019-03-24 10:43 - 000000000 ____D C:\Program Files\Reference Assemblies
2019-03-24 10:43 - 2019-03-24 10:43 - 000000000 ____D C:\Program Files\MSBuild
2019-03-24 10:43 - 2019-03-24 10:43 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2019-03-24 10:41 - 2019-03-24 10:41 - 001167960 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2019-03-24 10:41 - 2019-03-24 10:41 - 000780376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2019-03-24 10:41 - 2019-03-24 10:41 - 000126064 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2019-03-24 10:41 - 2019-03-24 10:41 - 000104560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-03-24 10:41 - 2019-03-24 10:41 - 000036896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2019-03-24 10:41 - 2019-03-24 10:41 - 000035440 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2019-03-24 10:39 - 2019-03-24 10:39 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2019-03-24 10:39 - 2019-03-24 10:39 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2019-03-24 10:38 - 2019-03-24 10:38 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2019-03-24 10:38 - 2019-03-24 10:38 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2019-03-24 10:38 - 2019-03-24 10:38 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2019-03-24 10:38 - 2019-03-24 10:38 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2019-03-24 10:18 - 2019-03-24 10:18 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2019-03-24 08:07 - 2019-03-24 15:30 - 000000000 ___DC C:\WINDOWS\Panther
2019-03-21 16:57 - 2019-03-27 18:14 - 000000364 _____ C:\WINDOWS\Tasks\HPCeeScheduleForJosef.job

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-27 19:06 - 2017-08-07 17:39 - 000000000 ____D C:\FRST
2019-03-27 18:23 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-03-27 18:18 - 2018-09-15 18:39 - 000719460 _____ C:\WINDOWS\system32\perfh005.dat
2019-03-27 18:18 - 2018-09-15 18:39 - 000145488 _____ C:\WINDOWS\system32\perfc005.dat
2019-03-27 18:18 - 2018-09-15 08:31 - 000000000 ____D C:\WINDOWS\INF
2019-03-27 18:16 - 2018-11-27 16:17 - 000000000 ____D C:\Program Files (x86)\Steam
2019-03-27 18:16 - 2017-11-24 16:38 - 000000000 __SHD C:\Users\Josef\IntelGraphicsProfiles
2019-03-27 18:13 - 2018-09-29 11:04 - 000000000 ____D C:\Users\Josef\AppData\LocalLow\IObit
2019-03-27 18:13 - 2018-09-29 11:02 - 000000000 ____D C:\Users\Josef\AppData\Roaming\IObit
2019-03-27 18:13 - 2018-09-29 11:02 - 000000000 ____D C:\ProgramData\IObit
2019-03-27 18:13 - 2018-09-15 07:09 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-03-27 14:57 - 2017-11-24 17:10 - 000000000 ____D C:\Users\Josef\Desktop\Nová složka
2019-03-27 14:47 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-03-26 18:16 - 2018-09-15 08:23 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-03-26 18:07 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-03-26 18:05 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\appcompat
2019-03-24 15:49 - 2018-06-23 11:43 - 000000000 ____D C:\ProgramData\Packages
2019-03-24 15:49 - 2017-11-24 16:19 - 000000000 ____D C:\Users\Josef\AppData\Local\Packages
2019-03-24 15:32 - 2018-11-17 17:34 - 000000000 ____D C:\Program Files\rempl
2019-03-24 15:30 - 2017-11-24 16:19 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-03-24 15:30 - 2017-11-24 16:19 - 000000000 ___RD C:\Users\Josef\3D Objects
2019-03-24 15:30 - 2017-11-24 16:19 - 000000000 ____D C:\Users\Josef\AppData\Local\ConnectedDevicesPlatform
2019-03-24 15:29 - 2018-09-15 07:09 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2019-03-24 15:28 - 2018-09-15 08:33 - 000000000 ___RD C:\Program Files\Windows Defender
2019-03-24 15:28 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\windows nt
2019-03-24 15:27 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\Registration
2019-03-24 15:22 - 2018-09-15 08:33 - 000000000 ___RD C:\WINDOWS\PrintDialog
2019-03-24 15:20 - 2018-09-15 08:33 - 000000000 __RSD C:\WINDOWS\media
2019-03-24 15:20 - 2018-06-23 11:13 - 000023020 _____ C:\WINDOWS\system32\emptyregdb.dat
2019-03-24 15:17 - 2019-01-28 13:41 - 000000000 ____D C:\Users\Josef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Art Plus
2019-03-24 15:16 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2019-03-24 15:07 - 2018-12-01 17:52 - 000000000 ____D C:\Users\Josef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP
2019-03-24 15:02 - 2017-11-24 16:22 - 000021910 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2019-03-24 15:02 - 2017-11-24 16:22 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2019-03-24 15:01 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\USOPrivate
2019-03-24 14:59 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\ServiceState
2019-03-24 14:55 - 2018-11-27 16:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2019-03-24 14:55 - 2018-11-27 13:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2019-03-24 14:55 - 2018-11-24 11:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2019-03-24 14:55 - 2018-10-19 17:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2019-03-24 14:55 - 2018-10-19 17:11 - 000000000 ____D C:\WINDOWS\SHELLNEW
2019-03-24 14:55 - 2018-10-18 10:15 - 000000000 ____D C:\WINDOWS\cs
2019-03-24 14:55 - 2018-10-07 08:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-03-24 14:55 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-03-24 14:55 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2019-03-24 14:55 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\spool
2019-03-24 14:55 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-03-24 14:55 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-03-24 14:55 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-03-24 14:55 - 2018-09-15 08:31 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2019-03-24 14:55 - 2018-05-21 16:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2019-03-24 14:55 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2019-03-24 14:55 - 2018-03-04 11:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FCleaner
2019-03-24 14:55 - 2017-12-04 09:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
2019-03-24 14:55 - 2017-12-01 21:26 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
2019-03-24 14:55 - 2017-12-01 17:27 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2019-03-24 14:55 - 2017-11-26 10:35 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-03-24 14:55 - 2017-11-24 16:37 - 000000000 ____D C:\Program Files\Intel
2019-03-24 12:15 - 2018-09-15 08:36 - 000000000 ____D C:\WINDOWS\Setup
2019-03-24 11:29 - 2018-09-15 08:33 - 000000000 __RHD C:\Users\Public\Libraries
2019-03-24 11:29 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\InfusedApps
2019-03-24 11:22 - 2018-09-29 11:15 - 000000000 ____D C:\WINDOWS\system32\Intel
2019-03-24 11:22 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2019-03-24 11:22 - 2017-11-24 16:22 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2019-03-24 11:21 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\Resources
2019-03-24 11:21 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\Help
2019-03-24 11:21 - 2018-06-13 17:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2019-03-24 11:21 - 2017-12-17 19:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2019-03-24 11:21 - 2017-12-04 09:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2019-03-24 11:21 - 2017-11-24 16:22 - 000000000 ____D C:\Program Files\Realtek
2019-03-24 11:21 - 2017-11-24 16:17 - 000000000 ____D C:\Program Files\Synaptics
2019-03-24 11:11 - 2018-09-15 18:40 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2019-03-24 11:11 - 2018-09-15 18:40 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2019-03-24 11:11 - 2018-09-15 18:40 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\TextInput
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\migwiz
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\appraiser
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\ShellComponents
2019-03-24 11:11 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-03-24 11:11 - 2018-09-15 07:09 - 000000000 ____D C:\WINDOWS\system32\Dism
2019-03-24 10:43 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2019-03-24 10:43 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\MUI
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\et-EE
2019-03-24 10:39 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\es-MX
2019-03-13 15:04 - 2017-11-26 10:34 - 127411920 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-03-09 11:34 - 2017-11-24 16:47 - 000000000 ___RD C:\Users\Josef\OneDrive

==================== Files in the root of some directories =======

2017-11-30 17:58 - 2019-03-27 19:05 - 001034546 _____ () C:\Users\Josef\AppData\Local\BTServer.log
2017-12-01 20:35 - 2017-12-01 20:38 - 000004608 _____ () C:\Users\Josef\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-12-27 14:40 - 2018-12-27 14:40 - 000003269 _____ () C:\Users\Josef\AppData\Local\recently-used.xbel

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\dllhost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================

Re: vyčistit notebook

Napsal: 27 bře 2019 19:17
od marvis
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17.03.2019
Ran by Josef (27-03-2019 19:11:35)
Running from C:\Users\Josef\Desktop
Windows 10 Pro Version 1809 17763.379 (X64) (2019-03-24 14:29:37)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1243976712-1797555765-2480249262-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1243976712-1797555765-2480249262-503 - Limited - Disabled)
Guest (S-1-5-21-1243976712-1797555765-2480249262-501 - Limited - Disabled)
Josef (S-1-5-21-1243976712-1797555765-2480249262-1001 - Administrator - Enabled) => C:\Users\Josef
WDAGUtilityAccount (S-1-5-21-1243976712-1797555765-2480249262-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\{F9000000-0018-0000-0000-074957833700}) (Version: 9.01.513.58212 - ABBYY) Hidden
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Art Plus Calendar Designer LE 2.0.2 (HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Art Plus Calendar Designer) (Version: 2.0.2.208 - )
Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG)
Backup and Sync from Google (HKLM\...\{693CADB0-962B-4AC1-A939-9524B258C997}) (Version: 3.43.2448.9071 - Google, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.47 - Piriform)
Cyberlink PhotoDirector (HKLM\...\{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6618 - Název společnosti:) Hidden
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6618 - CyberLink Corp.)
CyberLink Power Media Player 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.6.7428 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
FCleaner 1.3.1.621 (HKLM-x32\...\FCleaner_is1) (Version: - FTweak, Inc.)
Fotogalerie (HKLM-x32\...\{F37D360D-9308-4BB1-8515-DC6B637B9486}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\Google Chrome) (Version: 72.0.3626.81 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
HP DeskJet 5820 series Nápověda (HKLM-x32\...\{89D0B45E-D5AC-4B97-9C7D-6F0D2308A0CA}) (Version: 36.0.0 - HP)
HP Dropbox Plugin (HKLM-x32\...\{9FF252C8-B146-47A2-9336-3A1A83056F51}) (Version: 36.0.39.57346 - HP)
HP Google Drive Plugin (HKLM-x32\...\{BBF796CE-5068-47C7-8A6D-4120C0CE47E5}) (Version: 36.0.39.57346 - HP)
HP Photo Creations (HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\HP Photo Creations) (Version: 1.0.0.22192 - HP)
HP Support Assistant (HKLM-x32\...\{F322B446-B157-4257-B44F-4F22D41F8EDB}) (Version: 8.7.50.3 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{6E46D147-D977-4034-BEE6-B2EB5A4BE2E3}) (Version: 12.10.49.21 - HP Inc.)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4835 - Intel Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\OneDriveSetup.exe) (Version: 19.012.0121.0011 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{3D2CF65C-B544-4308-B996-700D3E5F6C4C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 1.0.0.46 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8395 - Realtek Semiconductor Corp.)
Skype verze 8.34 (HKLM-x32\...\Skype_is1) (Version: 8.34 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Studie vylepšování produktu HP DeskJet 5820 series (HKLM\...\{CAE450AC-801B-44FC-A200-0244F6AD5479}) (Version: 36.1.108.65692 - Hewlett-Packard Co.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{FBA3961B-D1DF-493C-BC1F-E67D3B832895}) (Version: 2.56.0.0 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Základní software zařízení HP DeskJet 5820 series (HKLM\...\{322E6CCD-0436-478E-A61B-EB11869234C3}) (Version: 36.1.108.65692 - Hewlett-Packard Co.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1243976712-1797555765-2480249262-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-1243976712-1797555765-2480249262-1001_Classes\CLSID\{C591CFEA-E432-495d-A0BE-58E4CCD87B17}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2217832 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)
ContextMenuHandlers1: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => -> No File
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)
ContextMenuHandlers4: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2018-04-20] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => -> No File

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0325190F-3676-42AC-8DE9-E724619C4DB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {0FCDA225-D71C-48E8-8C6B-19C1C69BBD01} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {28637E51-E96E-4352-9ACC-1B2DE2906964} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe (HP Inc. -> HP Inc.)
Task: {375A8355-30E7-4732-9BC3-92C86BCAD82B} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {4B6DD31A-AB3D-43FC-88FD-8B3782ADA462} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe (HP Inc. -> HP Inc.)
Task: {61AAC478-11C5-4141-AC2B-BDF0041A407B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {61E13C1D-6739-4B6D-8136-50B8405C2EAA} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {63FB270F-8ACF-456B-A55D-6004962C84EA} - System32\Tasks\Opera scheduled Autoupdate 1513520202 => C:\Users\Josef\AppData\Local\Programs\Opera\launcher.exe (Opera Software AS -> Opera Software)
Task: {66561AC6-DBD2-48CD-8AFF-2B7FA4D13D34} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {68F82EA4-3BDF-49CB-8401-71A173B2AF53} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {788D3B2D-FE87-4DB7-BD23-3AEA917AC432} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {7D1A75FE-F8E0-49CE-BFAE-8F4EC6E0756F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe (HP Inc. -> HP Inc.)
Task: {8BE14521-D746-4FD7-909B-CB45B8EC5990} - System32\Tasks\HPCeeScheduleForJosef => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe (Hewlett-Packard Company -> HP Inc.)
Task: {9565C462-2973-4E6E-993D-7C9D496FACB0} - System32\Tasks\HPCustParticipation HP DeskJet 5820 series => C:\Program Files\HP\HP DeskJet 5820 series\Bin\HPCustPartic.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
Task: {956A4E33-122A-4046-A168-CBAE335EF153} - System32\Tasks\FTweak FCleaner AutoCleanup => C:\Program Files (x86)\FCleaner\FCleaner.exe (FTweak) [File not signed]
Task: {9A404F94-BB73-4A1B-AADE-33DE80D3DFA5} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe (HP Inc. -> HP Inc.)
Task: {C89A8961-F09C-4526-9FEE-0F0EE33EBC83} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe (HP Inc. -> HP Inc.)
Task: {CD1B12A2-D223-4138-A57E-44B1CD689DD3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd -> Piriform Ltd)
Task: {D12E13B4-B189-44FF-9DB5-AE8A8AADF1FA} - System32\Tasks\Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures
Task: {EADD26D2-90F9-4389-AE45-93C3CC88EB21} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {FDA0DF9D-6603-4343-8E1D-0A07D78243A4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe (HP Inc. -> HP Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\FTweak FCleaner AutoCleanup.job => C:\Program Files (x86)\FCleaner\FCleaner.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForJosef.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2017-12-19 19:19 - 2013-03-24 05:00 - 000391168 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMLMBW.DLL
2017-12-04 09:50 - 2017-12-04 09:48 - 000120320 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\E_ILMHJE.DLL
2008-04-11 11:54 - 2008-04-11 11:54 - 000348160 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\MSVCR71.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:302A9871 [230]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-09-29 14:46 - 2018-07-17 11:10 - 000000753 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Josef\Pictures\2019\IMG_20190324_134353_HDR.jpg
DNS Servers: 192.169.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\Run: => "BtServer"
HKLM\...\StartupApproved\Run: => "HPRadioMgr"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKLM\...\StartupApproved\Run32: => "SecurityHealth"
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1243976712-1797555765-2480249262-1001\...\StartupApproved\Run: => "CCleaner"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{82F637F5-C92B-4F43-92A7-B446A644E715}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe () [File not signed]
FirewallRules: [{FB01C807-3A2C-4300-B27B-D47AE05B641E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe () [File not signed]
FirewallRules: [{058365D9-B210-4864-9EC4-43B2848BD8BF}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3C5DB185-7100-4998-ACC9-DEA957FD4022}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8FC31054-CC0F-4998-B098-327E709B3EDE}] => (Allow) LPort=1900
FirewallRules: [{9A6DB10C-DDC4-4363-9D85-3B2953911AB0}] => (Allow) LPort=2869
FirewallRules: [{1A1CC153-C900-496E-8A24-3A7A67D19CE0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{B6B20DE4-577B-47F9-B78E-7E8117850CB9}C:\program files\openshot video editor\launch.exe] => (Allow) C:\program files\openshot video editor\launch.exe () [File not signed]
FirewallRules: [TCP Query User{66F92ADD-F095-4B66-8D81-FCE24DA16033}C:\program files\openshot video editor\launch.exe] => (Allow) C:\program files\openshot video editor\launch.exe () [File not signed]
FirewallRules: [{4AA77865-4D40-4936-91D1-11981D4E3364}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{B6214133-683E-4896-AEFC-5E29C5EC6E3C}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{064D8003-9D19-4148-BBB0-6AA17EA01889}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{8F273EEC-04E3-4BBE-B641-9F6E70396AAA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{3C9BDC02-ED72-4C2B-B8EE-E3B8D64E11E6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{1B8E8629-C08A-440D-9110-7BEF617E7B23}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{B72ECAD1-737A-42E7-B318-0EEFA7D9DE19}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{D37BC102-A9BA-4171-B88E-678B84421420}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{B56F0D7F-E241-4F0E-B06A-42E05992A3A9}] => (Allow) C:\Program Files\HP\HP DeskJet 5820 series\Bin\DeviceSetup.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{7151E89A-5C67-4882-B884-BA96260BF249}] => (Allow) LPort=5357
FirewallRules: [{7CB25E8E-EBCD-4988-B812-537B7C2D49F2}] => (Allow) C:\Program Files\HP\HP DeskJet 5820 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)

==================== Restore Points =========================

26-03-2019 18:13:21 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/27/2019 06:16:23 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Users\Josef\AppData\Local\chromium\Application\chrome.exe se nezdařilo.
Závislé sestavení 63.0.3223.0,language="*",type="win32",version="63.0.3223.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/27/2019 02:24:20 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Users\Josef\AppData\Local\chromium\Application\chrome.exe se nezdařilo.
Závislé sestavení 63.0.3223.0,language="*",type="win32",version="63.0.3223.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/27/2019 02:21:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AUDIODG.EXE, verze: 10.0.17763.348, časové razítko: 0xa0a39b52
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000000000
ID chybujícího procesu: 0xbe0
Čas spuštění chybující aplikace: 0x01d4e49ffc282073
Cesta k chybující aplikaci: C:\WINDOWS\system32\AUDIODG.EXE
Cesta k chybujícímu modulu: unknown
ID zprávy: 44804b0c-dae0-4bf3-bbf2-fefc418a7127
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (03/27/2019 02:18:28 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Users\Josef\AppData\Local\chromium\Application\chrome.exe se nezdařilo.
Závislé sestavení 63.0.3223.0,language="*",type="win32",version="63.0.3223.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/24/2019 03:33:13 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Users\Josef\AppData\Local\chromium\Application\chrome.exe se nezdařilo.
Závislé sestavení 63.0.3223.0,language="*",type="win32",version="63.0.3223.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/24/2019 03:20:31 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: Pokus získat stav uzlu clusteru se nezdařil. Vrácený kód chyby: 0x8007085A

Error: (03/24/2019 03:20:19 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: Pokus získat stav uzlu clusteru se nezdařil. Vrácený kód chyby: 0x8007085A

Error: (03/24/2019 03:20:18 PM) (Source: MSDTC 2) (EventID: 4104) (User: )
Description: Pokus získat stav uzlu clusteru se nezdařil. Vrácený kód chyby: 0x8007085A


System errors:
=============
Error: (03/27/2019 07:05:47 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-23MSNL0)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-23MSNL0\Josef (SID: S-1-5-21-1243976712-1797555765-2480249262-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (03/27/2019 06:22:22 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-23MSNL0)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-23MSNL0\Josef (SID: S-1-5-21-1243976712-1797555765-2480249262-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (03/27/2019 06:16:42 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Spuštění pro serverovou aplikaci COM s identifikátorem CLSID
Windows.SecurityCenter.SecurityAppBroker
a APPID
Není k dispozici
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (03/27/2019 06:16:42 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Spuštění pro serverovou aplikaci COM s identifikátorem CLSID
Windows.SecurityCenter.WscBrokerManager
a APPID
Není k dispozici
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (03/27/2019 06:15:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Windows Presentation Foundation Font Cache 3.0.0.0 neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (03/27/2019 06:15:48 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby FontCache3.0.0.0 bylo dosaženo časového limitu (30000 ms).

Error: (03/27/2019 06:13:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Adobe Acrobat Update Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/27/2019 06:13:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba ABBYY FineReader 9.0 Sprint Licensing Service byla neočekávaně ukončena. Tento stav nastal již 1krát.


Windows Defender:
===================================
Date: 2019-03-27 18:07:28.802
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {9ACFD766-EBBD-4C5F-B846-C59C9C122453}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2019-03-27 17:10:09.842
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {637DC4B1-5132-4028-9FB2-CB263E69AA27}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

==================== Memory info ===========================

Processor: Intel(R) Celeron(R) CPU N3050 @ 1.60GHz
Percentage of memory in use: 58%
Total physical RAM: 3938.27 MB
Available physical RAM: 1643.13 MB
Total Virtual: 5346.27 MB
Available Virtual: 3002.33 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:450.58 GB) (Free:371.1 GB) NTFS

\\?\Volume{bc94a63e-eb24-47f3-8a59-1689401a4711}\ () (Fixed) (Total:0.44 GB) (Free:0.04 GB) NTFS
\\?\Volume{a838c364-b3e8-4f78-b9df-07dc58bf186e}\ () (Fixed) (Total:0.8 GB) (Free:0.33 GB) NTFS
\\?\Volume{417b5dc1-e861-40d9-be35-d1f9dd043321}\ (RECOVERY) (Fixed) (Total:13.56 GB) (Free:1.46 GB) NTFS
\\?\Volume{522ce2ea-a1dc-4fe3-a78e-e2c86f220fd4}\ () (Fixed) (Total:0.25 GB) (Free:0.15 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 62DF951D)

Partition: GPT.

==================== End of Addition.txt ============================

Re: vyčistit notebook

Napsal: 27 bře 2019 19:57
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => -> No File
ContextMenuHandlers4: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers6: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => -> No File
Task: {0325190F-3676-42AC-8DE9-E724619C4DB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {0FCDA225-D71C-48E8-8C6B-19C1C69BBD01} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Josef\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: vyčistit notebook

Napsal: 28 bře 2019 15:21
od marvis
Fix result of Farbar Recovery Scan Tool (x64) Version: 17.03.2019
Ran by Josef (28-03-2019 15:13:03) Run:1
Running from C:\Users\Josef\Desktop
Loaded Profiles: Josef (Available Profiles: Josef)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => -> No File
ContextMenuHandlers4: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers6: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => -> No File
Task: {0325190F-3676-42AC-8DE9-E724619C4DB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {0FCDA225-D71C-48E8-8C6B-19C1C69BBD01} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Josef\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\IObitUnstaler => removed successfully
HKLM\Software\Classes\CLSID\{836AB26C-2DE4-41D3-AC24-4C6C2699B960} => not found
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\IObitUnstaler => removed successfully
HKLM\Software\Classes\CLSID\{836AB26C-2DE4-41D3-AC24-4C6C2699B960} => not found
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\IObitUnstaler => removed successfully
HKLM\Software\Classes\CLSID\{836AB26C-2DE4-41D3-AC24-4C6C2699B960} => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0325190F-3676-42AC-8DE9-E724619C4DB9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0325190F-3676-42AC-8DE9-E724619C4DB9}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0FCDA225-D71C-48E8-8C6B-19C1C69BBD01}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FCDA225-D71C-48E8-8C6B-19C1C69BBD01}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore" => not found
C:\Users\Josef\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 10510336 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 26393169 B
Java, Flash, Steam htmlcache => 108343725 B
Windows/system/drivers => 81462 B
Edge => 1196092 B
Chrome => 42005763 B
Firefox => 18573187 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
LocalService => 0 B
NetworkService => 7386 B
NetworkService => 0 B
Josef => 2351506 B

RecycleBin => 786638 B
EmptyTemp: => 200.5 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 15:14:41 ====

Re: vyčistit notebook

Napsal: 28 bře 2019 15:57
od Rudy
Smazáno, log by již měl být OK.

Re: vyčistit notebook

Napsal: 28 bře 2019 16:11
od marvis
Je to pořád stejné, dlouhé načítání stránek.

Re: vyčistit notebook

Napsal: 28 bře 2019 17:16
od Rudy
OK. Ještě vyčistíme prohlížeče. Spusťte postupně tyto utility:

1. Stahnete Zoek.exe http://download.bleepingcomputer.com/smeenk/zoek.exe a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize




autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;





Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.

a

2. Junkware removal tool: https://www.stahuj.cz/utility_a_ostatni ... oval-tool/
•Ulozte nejlepe na plochu
•Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
•Probehne vytvoreni zalohy a nasledne prohledavani
•Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte.

Re: vyčistit notebook

Napsal: 28 bře 2019 18:25
od marvis
Nejde mi to stáhnout, píše to že byl nalezen virus