VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

iba kontrola 2 posty

https://forum.viry.cz:443/viewtopic.php?t=155905

Stránka 1 z 1

iba kontrola 2 posty

Napsal: 06 kvě 2019 10:20
od 5manager5
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 04-05.2019 01
Ran by saullerist (administrator) on DESKTOP-3SMP07F (TOSHIBA Satellite L650) (06-05-2019 11:14:19)
Running from C:\Users\saullerist\Downloads
Loaded Profiles: saullerist (Available Profiles: saullerist)
Platform: Windows 10 Home Version 1809 17763.475 (X64) Language: Slovenčina (Slovensko)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19021.18010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.26.28001.0_x64__8wekyb3d8bbwe\GameBar.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19041.481.0_x64__8wekyb3d8bbwe\YourPhone.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19031.11411.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11425.20190.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11425.20190.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1904.1-0\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1904.1-0\NisSrv.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsStore_11904.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [46506040 2019-04-09] (Google LLC -> )
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\MountPoints2: {00dad7f4-57c5-11e9-bba6-e8def69c9060} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\MountPoints2: {9dfc276b-a896-11e8-bb19-dc8510271f1a} - "F:\HiSuiteDownLoader.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.131\Installer\chrmstp.exe [2019-05-01] (Google LLC -> Google Inc.)
Startup: C:\Users\saullerist\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odoslanie do aplikácie OneNote.lnk [2018-01-25]
ShortcutTarget: Odoslanie do aplikácie OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {193C78C4-C63F-4C44-8C2F-0761587AA472} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-11-28] (Google Inc -> Google Inc.)
Task: {2701FB87-89E6-4597-BD87-F9683B1F5333} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2195016 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {2F45950E-3A8A-423C-AD42-1778C7BFB6AA} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [149032 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {42AD713B-C8F8-49AB-9AFA-512D7AAF1144} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2120816 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {4965A0C9-7537-40B9-BBC2-070577124DAE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-04-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {6854D6F2-67EC-4AE5-9E33-B8F9BD84FB6C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-11-28] (Google Inc -> Google Inc.)
Task: {6B573F03-653B-4244-9BA8-CBE0026187C7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-04-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {6EECD1D1-824A-4C8B-97F6-5E6190FD98E0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6204256 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {83CE6C76-3F28-489E-A7C6-794989F68298} - System32\Tasks\S-1-5-21-1796023744-1759536030-3900380101-1002\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [134144 2019-03-13] (Microsoft Windows -> Microsoft Corporation)
Task: {90A5B76B-2347-47F9-BFB2-29E8C968B485} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2195016 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {A9F6A282-2CAE-488B-A287-AB181656044C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-04-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {C0A45B0F-FBB9-461D-91FD-DAA55FAD5875} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [149032 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {C80682F9-EB45-4148-A7F9-EC46983AAA58} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26196056 2019-04-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {C85833EC-E1C6-4F1C-9C5A-6A7FF8101381} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26196056 2019-04-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {EEAB64D4-06D3-46D4-BC06-4F39A1A3612B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6204256 2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {EF23EB72-3B89-4376-8068-4C23411FCA77} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-04-24] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 195.146.128.62
Tcpip\..\Interfaces\{6f775dc0-2278-405d-8f3d-3e457ae63af2}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7244c322-f1af-4106-b553-eab76454f908}: [DhcpNameServer] 192.168.1.1 195.146.128.62
Tcpip\..\Interfaces\{996f449f-9a9e-4b6b-b51f-abdf64df7f30}: [DhcpNameServer] 192.168.1.1 195.146.128.62
Tcpip\..\Interfaces\{9dfcf0d8-e52f-4e05-8126-662ce4070db5}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
SearchScopes: HKU\S-1-5-21-1796023744-1759536030-3900380101-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2019-04-05] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-04-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-04-24] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-04-24] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-04-24] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-05-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-04-24] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 1rbvxtvy.default-1488821519198-1549379021480
FF ProfilePath: C:\Users\saullerist\AppData\Roaming\Mozilla\Firefox\Profiles\1rbvxtvy.default-1488821519198-1549379021480 [2019-05-06]
FF Homepage: Mozilla\Firefox\Profiles\1rbvxtvy.default-1488821519198-1549379021480 -> http://www.google.sk
FF Extension: (hotfix-update-xpi-intermediate) - C:\Users\saullerist\AppData\Roaming\Mozilla\Firefox\Profiles\1rbvxtvy.default-1488821519198-1549379021480\Extensions\hotfix-update-xpi-intermediate@mozilla.com.xpi [2019-05-04]
FF Extension: (Baidu Search Update) - C:\Users\saullerist\AppData\Roaming\Mozilla\Firefox\Profiles\1rbvxtvy.default-1488821519198-1549379021480\features\{f2f0512c-5db3-47fa-9646-27e62fa466f3}\baidu-code-update@mozillaonline.com.xpi [2019-05-04]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)

Chrome:
=======
CHR Profile: C:\Users\saullerist\AppData\Local\Google\Chrome\User Data\Default [2019-05-06]
CHR Extension: (Prezentácie) - C:\Users\saullerist\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-03-06]
CHR Extension: (Magio GO) - C:\Users\saullerist\AppData\Local\Google\Chrome\User Data\Default\Extensions\anoiechkjklgabdfompidjolhpfdpjdd [2019-03-06]
CHR Extension: (Dokumenty) - C:\Users\saullerist\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-03-06]
CHR Extension: (Disk Google) - C:\Users\saullerist\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-03-06]
CHR Extension: (YouTube) - C:\Users\saullerist\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-03-06]
CHR Extension: (Tabuľky) - C:\Users\saullerist\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-03-06]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\saullerist\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-03-06]
CHR Extension: (VisualOn Chrome Plugin Helper) - C:\Users\saullerist\AppData\Local\Google\Chrome\User Data\Default\Extensions\icnlblaamineciagcjhkkgeinkpiebhe [2019-03-06]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\saullerist\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-03-06]
CHR Extension: (Gmail) - C:\Users\saullerist\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-02]
CHR Extension: (Chrome Media Router) - C:\Users\saullerist\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-04-25]
CHR HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [icnlblaamineciagcjhkkgeinkpiebhe] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [255472 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11146240 2019-04-26] (Microsoft Corporation -> Microsoft Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [278616 2017-05-04] (Synaptics Incorporated -> Synaptics Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\NisSrv.exe [3851264 2019-04-24] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MsMpEng.exe [118144 2019-04-24] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 a016bus; C:\WINDOWS\System32\drivers\a016bus.sys [109096 2008-01-18] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 a016mgmt; C:\WINDOWS\System32\drivers\a016mgmt.sys [130600 2008-01-18] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 a016obex; C:\WINDOWS\System32\drivers\a016obex.sys [125480 2008-01-18] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
R3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [21648880 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [674288 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R3 FwLnk; C:\WINDOWS\System32\drivers\FwLnk.sys [9216 2009-07-07] (Microsoft Windows Hardware Compatibility Publisher -> TOSHIBA Corporation)
S3 HWHandSet; C:\WINDOWS\System32\drivers\hw_quusbmdm.sys [226560 2018-12-12] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 hw_usbdev; C:\WINDOWS\System32\drivers\hw_usbdev.sys [116864 2018-12-12] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 L1C; C:\WINDOWS\System32\drivers\L1C63x64.sys [121344 2018-09-15] (Microsoft Windows -> Qualcomm Atheros Co., Ltd.)
R3 rtl8192se; C:\WINDOWS\System32\drivers\rtl8192se.sys [1222656 2018-09-15] (Microsoft Windows -> Realtek Semiconductor Corporation )
S3 s0016bus; C:\WINDOWS\System32\drivers\s0016bus.sys [115240 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016mgmt; C:\WINDOWS\System32\drivers\s0016mgmt.sys [137256 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016obex; C:\WINDOWS\System32\drivers\s0016obex.sys [136744 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016unic; C:\WINDOWS\System32\drivers\s0016unic.sys [151592 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0017bus; C:\WINDOWS\System32\drivers\s0017bus.sys [113704 2008-10-21] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0017mgmt; C:\WINDOWS\System32\drivers\s0017mgmt.sys [133160 2008-10-21] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0017obex; C:\WINDOWS\System32\drivers\s0017obex.sys [128552 2008-10-21] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0017unic; C:\WINDOWS\System32\drivers\s0017unic.sys [145960 2008-10-21] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1018bus; C:\WINDOWS\System32\drivers\s1018bus.sys [113704 2009-03-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1018mgmt; C:\WINDOWS\System32\drivers\s1018mgmt.sys [133160 2009-03-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1018obex; C:\WINDOWS\System32\drivers\s1018obex.sys [128552 2009-03-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1018unic; C:\WINDOWS\System32\drivers\s1018unic.sys [146472 2009-03-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1029bus; C:\WINDOWS\System32\drivers\s1029bus.sys [116264 2009-05-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1029mgmt; C:\WINDOWS\System32\drivers\s1029mgmt.sys [139304 2009-05-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1029obex; C:\WINDOWS\System32\drivers\s1029obex.sys [135208 2009-05-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1029unic; C:\WINDOWS\System32\drivers\s1029unic.sys [151592 2009-05-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1039mgmt; C:\WINDOWS\System32\drivers\s1039mgmt.sys [141424 2010-03-15] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1039obex; C:\WINDOWS\System32\drivers\s1039obex.sys [137328 2010-03-15] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1039unic; C:\WINDOWS\System32\drivers\s1039unic.sys [158320 2010-03-15] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s916bus; C:\WINDOWS\System32\drivers\s916bus.sys [108072 2007-11-02] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s916mgmt; C:\WINDOWS\System32\drivers\s916mgmt.sys [130088 2007-11-02] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s916obex; C:\WINDOWS\System32\drivers\s916obex.sys [124968 2007-11-02] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 se3ebus; C:\WINDOWS\System32\drivers\se3ebus.sys [107784 2007-04-10] (MCCI Corporation -> MCCI Corporation)
S3 se3emgmt; C:\WINDOWS\System32\drivers\se3emgmt.sys [126216 2007-04-10] (MCCI Corporation -> MCCI Corporation)
S3 se3eobex; C:\WINDOWS\System32\drivers\se3eobex.sys [123144 2007-04-10] (MCCI Corporation -> MCCI Corporation)
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [42184 2015-06-12] (Synaptics Incorporated -> Synaptics Incorporated)
S3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [51392 2016-11-23] (Synaptics Incorporated -> Synaptics Incorporated)
R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [45728 2015-10-07] (TOSHIBA CORPORATION -> Toshiba Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-04-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [344544 2019-04-24] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [60896 2019-04-24] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-05-06 11:08 - 2019-05-06 11:14 - 000051132 _____ C:\Users\saullerist\Downloads\Addition.txt
2019-05-06 11:04 - 2019-05-06 11:16 - 000024602 _____ C:\Users\saullerist\Downloads\FRST.txt
2019-05-06 11:03 - 2019-05-06 11:14 - 000000000 ____D C:\FRST
2019-05-06 11:03 - 2019-05-06 11:03 - 002430464 _____ (Farbar) C:\Users\saullerist\Downloads\FRST64.exe
2019-05-06 09:21 - 2019-05-06 10:15 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-05-04 11:15 - 2019-05-04 11:15 - 005436904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-05-04 11:15 - 2019-05-04 11:15 - 003551112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2019-05-04 11:15 - 2019-05-04 11:15 - 000263576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-05-04 11:15 - 2019-05-04 11:15 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fcon.dll
2019-05-04 11:15 - 2019-05-04 11:15 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncCsp.dll
2019-05-04 11:15 - 2019-05-04 11:15 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\EASPolicyManagerBrokerHost.exe
2019-05-04 11:14 - 2019-05-04 11:14 - 026810880 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 023441920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 020815360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 019025408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 012844032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 012140032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 009683472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-05-04 11:14 - 2019-05-04 11:14 - 006544256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 005210904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 004588544 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2019-05-04 11:14 - 2019-05-04 11:14 - 003426816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 003406848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 002777224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 002701512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 002393088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 002275888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 002205184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 002073960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 001994976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 001697960 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-05-04 11:14 - 2019-05-04 11:14 - 001674696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 001671352 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 001469168 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-05-04 11:14 - 2019-05-04 11:14 - 001467552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 001382912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000780632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000725696 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2019-05-04 11:14 - 2019-05-04 11:14 - 000673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000649064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000638376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000610304 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2019-05-04 11:14 - 2019-05-04 11:14 - 000553656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000540720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000514632 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000454160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2019-05-04 11:14 - 2019-05-04 11:14 - 000451080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiag.exe
2019-05-04 11:14 - 2019-05-04 11:14 - 000359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2019-05-04 11:14 - 2019-05-04 11:14 - 000349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000320512 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2019-05-04 11:14 - 2019-05-04 11:14 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiag.exe
2019-05-04 11:14 - 2019-05-04 11:14 - 000302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2019-05-04 11:14 - 2019-05-04 11:14 - 000254464 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2019-05-04 11:14 - 2019-05-04 11:14 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
2019-05-04 11:14 - 2019-05-04 11:14 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000122680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2019-05-04 11:14 - 2019-05-04 11:14 - 000086960 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe
2019-05-04 11:14 - 2019-05-04 11:14 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnosticsTool.exe
2019-05-04 11:13 - 2019-05-04 11:13 - 007645632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 005296640 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 004997096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 003982848 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 003657728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-05-04 11:13 - 2019-05-04 11:13 - 003384832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 002995712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 002720256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-05-04 11:13 - 2019-05-04 11:13 - 002469376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-05-04 11:13 - 2019-05-04 11:13 - 002189312 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 001768960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 001653760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 001605120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 001315328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 001253904 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-05-04 11:13 - 2019-05-04 11:13 - 001219640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 001054928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-05-04 11:13 - 2019-05-04 11:13 - 001044520 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-05-04 11:13 - 2019-05-04 11:13 - 000999424 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000806600 _____ C:\WINDOWS\SysWOW64\locale.nls
2019-05-04 11:13 - 2019-05-04 11:13 - 000806600 _____ C:\WINDOWS\system32\locale.nls
2019-05-04 11:13 - 2019-05-04 11:13 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000757664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-05-04 11:13 - 2019-05-04 11:13 - 000679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000676256 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000651576 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2019-05-04 11:13 - 2019-05-04 11:13 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2019-05-04 11:13 - 2019-05-04 11:13 - 000495616 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SDDS.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000421392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-05-04 11:13 - 2019-05-04 11:13 - 000366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000280592 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpnServiceDS.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000157200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000090640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-05-04 11:13 - 2019-05-04 11:13 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2019-05-04 11:13 - 2019-05-04 11:13 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2019-05-04 11:13 - 2019-05-04 11:13 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2019-05-04 11:13 - 2019-05-04 11:13 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2019-05-04 11:13 - 2019-05-04 11:13 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2019-05-04 11:13 - 2019-05-04 11:13 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2019-05-04 11:13 - 2019-05-04 11:13 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2019-05-04 11:13 - 2019-05-04 11:13 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2019-04-10 10:30 - 2019-04-10 10:30 - 007877120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 006071296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 004660224 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 003904512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 002925880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-04-10 10:30 - 2019-04-10 10:30 - 002438368 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 002022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 001701888 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 001672704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 001590064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 001496576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 001478968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 001221944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 001072640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 001019392 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000865784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000793832 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000653040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000604008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000474928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2019-04-10 10:30 - 2019-04-10 10:30 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2019-04-10 10:30 - 2019-04-10 10:30 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2019-04-10 10:30 - 2019-04-10 10:30 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-04-10 10:30 - 2019-04-10 10:30 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2019-04-07 10:19 - 2018-12-12 12:32 - 001721576 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01009.dll
2019-04-07 10:19 - 2018-12-12 12:32 - 000287232 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbnet.sys
2019-04-07 10:19 - 2018-12-12 12:32 - 000226560 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbmdm.sys
2019-04-07 10:19 - 2018-12-12 12:32 - 000127360 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_cdcacm.sys
2019-04-07 10:19 - 2018-12-12 12:32 - 000116864 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_usbdev.sys
2019-04-07 10:19 - 2018-12-12 12:32 - 000018944 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_usbccgpfilter.sys

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-05-06 11:08 - 2018-09-15 09:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-05-06 11:04 - 2016-11-15 20:57 - 000000000 ____D C:\Users\saullerist\AppData\LocalLow\Mozilla
2019-05-06 10:17 - 2018-09-15 09:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-05-06 10:17 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-05-06 10:15 - 2019-02-05 17:03 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-05-06 10:15 - 2019-02-05 17:03 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-05-06 10:14 - 2018-10-04 12:02 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-05-04 20:06 - 2018-10-04 12:23 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-05-04 20:05 - 2018-09-15 08:09 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2019-05-04 13:04 - 2018-09-15 09:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-05-04 13:02 - 2016-11-18 20:49 - 000000000 ____D C:\Program Files\Microsoft Office
2019-05-04 12:07 - 2018-09-15 09:31 - 000000000 ____D C:\WINDOWS\INF
2019-05-04 11:46 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-05-04 11:43 - 2018-10-04 12:16 - 008641894 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-05-04 11:43 - 2016-11-28 18:10 - 005910402 _____ C:\WINDOWS\system32\perfh01B.dat
2019-05-04 11:43 - 2016-11-28 18:10 - 001762248 _____ C:\WINDOWS\system32\perfc01B.dat
2019-05-04 11:36 - 2018-10-04 12:02 - 000437632 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-05-04 11:34 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\TextInput
2019-05-04 11:33 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-05-04 11:33 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-05-04 11:18 - 2018-09-15 09:23 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-05-02 14:23 - 2019-03-31 15:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2019-05-02 13:35 - 2016-01-12 11:47 - 000000000 ___RD C:\Users\saullerist\Disk Google
2019-05-01 10:15 - 2017-10-18 10:41 - 000000000 ____D C:\Users\saullerist\AppData\Local\Packages
2019-05-01 09:56 - 2019-03-06 14:51 - 000002320 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-04-28 16:13 - 2019-02-13 22:29 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-04-28 16:13 - 2018-09-15 09:33 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-04-24 09:09 - 2018-03-01 11:27 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-04-19 22:11 - 2017-07-13 12:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2019-04-19 14:16 - 2017-10-18 12:56 - 000000000 ____D C:\Users\saullerist\AppData\Local\PlaceholderTileLogoFolder
2019-04-10 10:18 - 2016-11-18 19:24 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-04-10 10:13 - 2016-11-28 17:54 - 131129288 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-04-07 10:54 - 2018-10-04 11:21 - 000000000 ____D C:\Users\saullerist

==================== Files in the root of some directories =======

2017-07-31 11:22 - 2017-07-31 11:22 - 000029696 _____ () C:\Users\saullerist\AppData\Local\MSGBOX.EXE
2017-10-18 10:16 - 2018-12-05 21:23 - 000007597 _____ () C:\Users\saullerist\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ============================

Re: kontrola 2 posty

Napsal: 06 kvě 2019 10:21
od 5manager5
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-05.2019 01
Ran by saullerist (06-05-2019 11:17:08)
Running from C:\Users\saullerist\Downloads
Windows 10 Home Version 1809 17763.475 (X64) (2018-10-04 10:24:35)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1796023744-1759536030-3900380101-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1796023744-1759536030-3900380101-503 - Limited - Disabled)
Guest (S-1-5-21-1796023744-1759536030-3900380101-501 - Limited - Disabled)
saullerist (S-1-5-21-1796023744-1759536030-3900380101-1002 - Administrator - Enabled) => C:\Users\saullerist
WDAGUtilityAccount (S-1-5-21-1796023744-1759536030-3900380101-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AIDA64 Extreme v5.99 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.99 - FinalWire Ltd.)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Backup and Sync from Google (HKLM\...\{F9EEDE46-6409-4ECC-8AB6-7062464987A4}) (Version: 3.43.4275.9540 - Google, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 74.0.3729.131 - Spoločnosť Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.7 - Google LLC) Hidden
Microsoft Office 365 ProPlus - sk-sk (HKLM\...\O365ProPlusRetail - sk-sk) (Version: 16.0.11601.20144 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Mozilla Firefox 66.0.4 (x64 sk) (HKLM\...\Mozilla Firefox 66.0.4 (x64 sk)) (Version: 66.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 65.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.11601.20144 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.11601.20144 - Microsoft Corporation) Hidden
Skype verzia 8.44 (HKLM-x32\...\Skype_is1) (Version: 8.44 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.4.3.38 - Synaptics Incorporated)
voBrowserPluginHelper (HKLM-x32\...\{48DD7952-08CD-46F8-B16C-7E12ABB6F3C3}) (Version: 3.28.0.10679 - VisualOn Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-04-09] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-04-09] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-04-09] (Google LLC -> Google)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-04-09] (Google LLC -> Google)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-04-09] (Google LLC -> Google)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\saullerist\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --force-dark-mode
ShortcutWithArgument: C:\Users\saullerist\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"

==================== Loaded Modules (Whitelisted) ==============

2019-04-04 17:59 - 2019-04-04 17:59 - 000020480 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM\453778468c735b80efcbfe68fbc778c0\MOM.ni.exe
2019-04-04 17:59 - 2019-04-04 17:59 - 000391680 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Implementation\2c2b2eb2a6786beba668ee1541e72ba9\MOM.Implementation.ni.dll
2019-04-04 17:55 - 2019-04-04 17:55 - 000132096 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundation\ed9bb42e2dffb77a34d3cfad58ed6bc8\LOG.Foundation.ni.dll
2019-04-04 17:55 - 2019-04-04 17:55 - 000146432 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat5023f8e7#\d9b18dc7146a6ecf9257541edf76dd7b\LOG.Foundation.Private.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000289792 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat03490438#\1d2eae12bccb8d9c7cd39aaf70298cda\LOG.Foundation.Implementation.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Foundation\f6738466a2bf8899c1e0f04b7edc4eb3\MOM.Foundation.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000085504 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundatcaafa75b#\83a814326ecfb551ae3d09c74ccfad18\LOG.Foundation.Implementation.Private.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000199168 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CCC.Implementation\0b138f9cb1cc6920194714cc7737ff63\CCC.Implementation.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000055296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\NEWAEM.Foundation\49f45ffa400cbe279d4c0579a2144463\NEWAEM.Foundation.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CCC\0efd9099ec5cd45f35b7be234feb3464\CCC.ni.exe
2019-04-04 17:56 - 2019-04-04 17:56 - 000295424 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundation\56fe3b16c785a4875248bb483003e02a\CLI.Foundation.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000060928 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat60cdf5df#\3a99177a3a7c07bef7bde98857945848\CLI.Foundation.XManifest.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000228352 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6692ca50#\b8733cc9bbd6804ec467e680cde52768\CLI.Component.Runtime.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000149504 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone59f353b4#\193c54da3f50519f3e4853109ada710a\CLI.Component.Runtime.Shared.Private.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000089088 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat3d5d3945#\b0690038103d44a3c8e21994f189f5eb\CLI.Foundation.Private.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone1b4a8c97#\c1954861b5a5de1201292c977ff5348c\CLI.Component.Runtime.Shared.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000122368 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ATICCCom\ee455f23abb2aece4f891eeb6ab6f88f\ATICCCom.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000263168 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server\fc6c73c05c385093f3fe75a606c57045\AEM.Server.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000890368 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ADL.Foundation\cd76e6b530065b14602e8dc6b533e176\ADL.Foundation.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000013824 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server.Shared\b4f0a206efd4941e89d6a71d65ad77e1\AEM.Server.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000275968 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.5d945b6b#\7020866f3689b77642f3ed31630ef938\AEM.Plugin.Source.Kit.Server.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000090624 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat619559bd#\4a6e5165b8c3a2b914d574d652dadaac\CLI.Foundation.CoreAudioAPI.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.2b6a6775#\b35b3b258b074fce669ed3b0f31d2734\AEM.Plugin.Hotkeys.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000015360 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.674d2b8a#\1c89887dd27021a07380b82b3dcf2801\AEM.Plugin.WinMessages.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000117248 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0601\7933bbd6d5db0b4016420a910f160ecd\DEM.Graphics.I0601.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000026112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Foundation\ad894de0fc6b234e120c1a01a85dfd0d\DEM.Foundation.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000015872 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics\a4627f0f8362ee444e840eb78a13807e\DEM.Graphics.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000036352 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I1010\d0e4e834feae034ad13e4464cbea32d3\DEM.Graphics.I1010.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 003187712 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G962aa464#\8ac63a78aec82eb4032c214613b2ae6b\CLI.Caste.Graphics.Runtime.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 002786304 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60a7b4d1#\689436e2027123ab89149d29dfdcbebe\CLI.Caste.Graphics.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.GD.Shared\02719de73ee19f1ef943493a16abf484\AEM.Plugin.GD.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000022528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Actions5dc83b46#\756da6395722d0eb45fbf9dd1b8cb5a7\AEM.Actions.CCAA.Shared.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000083456 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0709\181c28bd13b18d5ed64afaaca28c6afd\DEM.Graphics.I0709.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000023552 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceManf163905a#\1459f5d6d494a4e0203a445553132565\ResourceManagement.Foundation.Private.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000018944 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0804\44d1b9eb041dbec6e925152f29676f38\DEM.Graphics.I0804.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000038400 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60338cc0#\07e73efce48d4a3bc8e9763074434528\CLI.Caste.Graphics.Runtime.Shared.Private.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000085504 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ae5e117c#\707924b3543cac2d2733c1cca1459953\CLI.Aspect.DisplaysColour2.Graphics.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000451584 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.acb9d930#\6fac1867e4e3eaad6658bf1cdaa35349\CLI.Aspect.DeviceProperty.Graphics.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000206336 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4542c692#\cb211f8ae2c0fef31cbeb18dc159d53a\CLI.Aspect.DeviceCRT.Graphics.Shared.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000014848 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0912\12910139fdb17dc8b1347cb03d8320b4\DEM.Graphics.I0912.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000014336 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0706\fe54647f2d523a94ac0fba0e79cae800\DEM.Graphics.I0706.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000013312 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0712\9c816376dcdcb13631d778d088bf2a52\DEM.Graphics.I0712.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000290816 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9b707b25#\644928c0bceaeadf05fd37574068dff0\CLI.Aspect.DeviceProperty.Graphics.Runtime.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 001131008 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Combine7332395e#\017cc5610098a22a116c4bfc79443c26\CLI.Combined.Graphics.Aspects2.Runtime.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000154112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a0ae52bc#\5ab497984ea39de2f3643904f2dffa3e\CLI.Aspect.DeviceLCD.Graphics.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000355840 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.7ec2db45#\9bb1208b4156ba6420c7809b845722b7\CLI.Aspect.DeviceDFP.Graphics.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000124928 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3399d0ec#\233f1fae3f33b7dff2b5408a91307d56\CLI.Aspect.CustomFormats.Graphics.Shared.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000011776 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0812\3a296ab6225118e7c5143b33268fbf6e\DEM.Graphics.I0812.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000011264 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0805\6cf8e1cf42529820665a7d314047ee0f\DEM.Graphics.I0805.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000727552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8d333b6b#\a7490253225c04130ad39d3df07543a2\CLI.Aspect.Radeon3D.Graphics.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.88aba5d2#\54085cb4fb6a90f26e39183f6a0d978a\AEM.Plugin.REG.Shared.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000236032 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.eda8935e#\6edf6fa6b0d56b335f7768ce6e3e8444\CLI.Aspect.MMVideo.Graphics.Shared.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000014336 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0906\4006cf523e37951c40fab71d8a099702\DEM.Graphics.I0906.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000130048 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.46819220#\490532ecac51dc1452521bb33a5d537e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000073216 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.59a12d95#\6ceafc23981c0e0271ae31540b47477f\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000016384 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.54d8abe3#\dcfbc3bbf945ba50937bfa1ecd873ef9\AEM.Plugin.DPPE.Shared.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000046592 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ef3eaa4d#\2a6408f36c31598490e577c3c66cf2b1\CLI.Aspect.TransCode.Graphics.Runtime.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000104448 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3a6f1658#\3ba8dc3298c1db311f8e9ab94a1d6f69\CLI.Aspect.TransCode.Graphics.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000026112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.37d3d968#\fb837398efb225a4750ff99e086b4713\CLI.Aspect.AMDHome.Graphics.Shared.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000017920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c854b457#\009a2051b59ca5a683bd549f53aee4be\CLI.Aspect.HotkeysHandling.Graphics.Shared.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000062976 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8350f5c6#\26f81a04a18f1f2c3dc741e6527a217c\CLI.Aspect.UpdateNotification.Graphics.Runtime.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000050176 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.f480a2f3#\41b061ba637d98cadfb621d34a574d22\CLI.Aspect.UpdateNotification.Graphics.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 001144320 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Localizatio01dbc1c0#\b2214ee0a861a1a176798ea408501a7d\Localization.Foundation.Private.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000056320 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a6cd7fff#\2d2d2652f18ddc107a8fd868a1dbb8bb\CLI.Aspect.FPS.Graphics.Runtime.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000037888 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.52c6dbaa#\9da310d12274a8b13f9be12c077ba6e0\CLI.Aspect.FPS.Graphics.Shared.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000304640 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F36b07a2b#\60310c9b6dc85fed4a1cc5562699c0ec\CLI.Caste.Fuel.Runtime.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F24de14fe#\a24431c2e9d3021134dcef6e3866f917\CLI.Caste.Fuel.Shared.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000037888 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Fuel.Foundation\125af145f48dc65360982bb3ae937c49\Fuel.Foundation.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000043520 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pdb36d56e#\eabf493d5abb791704dbdfed36ca0e84\CLI.Caste.Platform.Runtime.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pac40511b#\7a8af5c86eeb002bba34482799500e15\CLI.Caste.Platform.Shared.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000045056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.382a3def#\e6fbff9fab46391304cf88b918357208\CLI.Aspect.AMDOverDrive.Platform.Shared.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000337408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c7aaa0f8#\1c56616c5e799297bf3d9084641b5aa4\CLI.Aspect.OverDrive5.Graphics.Shared.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H18c99613#\2d1a167488216da8401d64c114c78d96\CLI.Caste.HydraVision.Runtime.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H92ba4e46#\5aedf0b7051ebf81b8ebf339ba5b7608\CLI.Caste.HydraVision.Shared.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000050688 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Runtime\5e1fe82912cd1132c96d4e984521165e\CLI.Caste.A4.Runtime.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Shared\16d509754e7df5bfc10dfcb747517dc3\CLI.Caste.A4.Shared.ni.dll
2019-04-04 17:55 - 2019-04-04 17:55 - 000032256 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\A4.Foundation\e2cb754eecdfd7eba412f537972043a8\A4.Foundation.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000250368 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Server\47cf652e7395d426b505c2485a0e4544\APM.Server.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000056320 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Foundation\30649d97f68218dc3f3f9aa12a7fb9aa\APM.Foundation.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componeb4d0485c#\de8f1c990eddb3554d5844c3720e5fe1\CLI.Component.Runtime.Extension.EEU.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.0a1309f7#\b829d41249ab10e219d8c842da743dc4\AEM.Plugin.EEU.Shared.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000910336 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6bf88b08#\d64d5fc6c3cf857abd6f005bd4b74f99\CLI.Component.Dashboard.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000133632 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone168638d1#\f7b89c08556bfa8f30251023b764723b\CLI.Component.Client.Shared.Private.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000019968 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef1fd67b2#\a685e446b9378b38102b8ed742630fea\CLI.Component.Client.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000086016 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef4cf054f#\4d7e818dcd9ae40e6213526bad812b46\CLI.Component.Dashboard.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 001605632 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componec89c3bec#\7cb674f2f268125fea2821e173719df0\CLI.Component.Dashboard.Shared.Private.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000884736 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone26c9c557#\d739d0f8a78969625aef8612ee39dc69\CLI.Component.Systemtray.ni.dll
2019-04-04 17:59 - 2019-04-04 17:59 - 000242688 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceMan446ca0e5#\61c0e7ca17e8eb9e2884ebc3c05f20ad\ResourceManagement.Foundation.Implementation.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000259584 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.73911eb5#\dd70be3ff0dfbc89882add3a338b7e54\CLI.Aspect.WirelessDisplay.Graphics.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000574976 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gee7d2dbc#\0c576e7afdb4703848b2ba7eb9a357e7\CLI.Caste.Graphics.Dashboard.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 001537536 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gd9d9b43b#\fa04d4c4564f4837c761f4484757b9ef\CLI.Caste.Graphics.Dashboard.Shared.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000090112 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ec8786e5#\1f01580736b79adf40c1a93bcba8d4bf\CLI.Aspect.AMDHome.Graphics.Dashboard.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000270848 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e8635fc7#\483c963fdf39cafe197ba89cdce73bee\CLI.Aspect.InfoCentre.Graphics.Dashboard.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 007986176 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Combine0616f305#\b1bf18d28de95be5d3c91e5a31b661e5\CLI.Combined.Graphics.Aspects1.Dashboard.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000446464 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8e996306#\0668ed43b4d1652885d4fbb53a44b239\CLI.Aspect.CrossDisplay.Graphics.Dashboard.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000066560 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b0a7c1fb#\2bf88f3d493ffee330424131422dac77\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 006323200 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e6d9f3a8#\ad2168450c4e8714808c7e507c2b3b40\CLI.Aspect.DeviceDFP.Graphics.Dashboard.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 003282432 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e9fd7406#\396b002acaf3fd9bb735d34d00a63fc7\CLI.Aspect.Radeon3D.Graphics.Dashboard.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000666112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.846fa813#\7ae3c991f05302f4bbaeba6b80e31f50\CLI.Aspect.MMVideo.Graphics.Dashboard.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000073728 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4bbb0755#\0e8dcdf70337a7c80da92ee64966e951\CLI.Aspect.TransCode.Graphics.Dashboard.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000152064 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.21d2ac78#\58d5486b6cd1a3109c4b1f8ef53aa620\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000081920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a765109e#\1c2f0bbc88ef4cbf42ac5be2dbe1798a\CLI.Aspect.UpdateNotification.Graphics.Dashboard.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000087552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9cd1e9e7#\81d7c7eb7d14020d00d1051f9ad5ab05\CLI.Aspect.FPS.Graphics.Dashboard.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000027648 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Ff3085433#\212a85174105d74527a0f2d96e035e70\CLI.Caste.Fuel.Dashboard.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000024064 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pfeefa2b6#\fda37ab6c52040ec92d3dc21ef839569\CLI.Caste.Platform.Dashboard.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Hbb906c0b#\f451c2dc2ed198cc6e609122ec62516d\CLI.Caste.HydraVision.Dashboard.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 000027648 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Af820fedc#\41c8b168cb4e82f3e26df1f36a5345f7\CLI.Caste.A4.Dashboard.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 001052672 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundatd3771151#\d077f961ee27b319b0dea198383fb9ee\CLI.Foundation.Client.ni.dll
2019-04-04 17:58 - 2019-04-04 17:58 - 000168960 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone29e547cc#\c23e591930536d5d7882798c666ec169\CLI.Component.Dashboard.ProfileManager2.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 002497536 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.Wfbf9373c#\6e7192c582f66dd51f910c83a3e40190\Microsoft.WindowsAPICodePack.Shell.ni.dll
2019-04-04 17:56 - 2019-04-04 17:56 - 000332800 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.W8090224c#\df7114da3283ab49a88eacda7d54659d\Microsoft.WindowsAPICodePack.ni.dll
2019-04-04 17:57 - 2019-04-04 17:57 - 001642496 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.aa59351a#\ac16067229f5bf5eea9fbe7fbba80eda\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.ni.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-11-18 17:42 - 2017-03-13 17:31 - 000000753 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\saullerist\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
DNS Servers: 192.168.1.1 - 195.146.128.62
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\Run32: => "WindowsDefender"
HKLM\...\StartupApproved\Run32: => "SecurityHealth"
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\StartupApproved\StartupFolder: => "Odoslanie do aplikácie OneNote.lnk"
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\StartupApproved\Run: => "Uninstall C:\Users\saullerist\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\amd64"
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\StartupApproved\Run: => "GoogleDriveSync"
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_DDAEB60A3A4C412D731C2E4868511E36"
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\StartupApproved\Run: => "Lync"
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\StartupApproved\Run: => "Application Restart #0"
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{96F24225-AD4A-4AFF-8D3A-363187479AAE}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{3761C488-F5D5-4F97-9691-A30BC8D877A8}C:\programdata\visualon\browserpluginhelper\browserpluginhelper.exe] => (Allow) C:\programdata\visualon\browserpluginhelper\browserpluginhelper.exe () [File not signed]
FirewallRules: [UDP Query User{410F752C-E358-46C7-80A9-9BC4D686DEC3}C:\programdata\visualon\browserpluginhelper\browserpluginhelper.exe] => (Allow) C:\programdata\visualon\browserpluginhelper\browserpluginhelper.exe () [File not signed]
FirewallRules: [{FEE2D03D-AC6C-4F0C-8B4F-0E999206BC50}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{CC524643-1988-4C66-B367-92E56128E8FC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{EFD81993-5B86-43FB-A1A4-55DBE23855E5}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FDEA683A-651F-496E-82D1-4C15CCBC7145}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5B61C3F1-101E-4A1B-9246-74B76BDD8925}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{03B7FBFC-E2A1-4285-A9DF-0D262E90935D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{B0084E05-A5A5-444A-AFA3-5A2A09A8FD12}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{1B48D0A0-8DE2-4658-B50A-4FD57C2C83A5}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{1E0AAB2B-97B1-42F0-949E-5235E6F213E6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)
FirewallRules: [{192E1B84-8454-4D47-9F47-41C83AF37B17}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{98B4298E-EB0D-464D-A617-87AA16154177}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

==================== Restore Points =========================

19-04-2019 11:46:24 Scheduled Checkpoint
26-04-2019 19:07:16 Scheduled Checkpoint
04-05-2019 11:01:08 Windows Update

==================== Faulty Device Manager Devices =============

Name: Qualcomm Atheros AR8152 PCI-E Fast Ethernet Controller (NDIS 6.30)
Description: Qualcomm Atheros AR8152 PCI-E Fast Ethernet Controller (NDIS 6.30)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros
Service: L1C
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/05/2019 02:30:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: Asphalt8.exe, verzia: 0.0.0.0, časová značka: 0x5caaf413
Názov chybujúceho modulu: Asphalt8.exe, verzia: 0.0.0.0, časová značka: 0x5caaf413
Kód výnimky: 0xc0000005
Odstup chyby: 0x00b1568e
Identifikácia chybujúceho procesu: 0x26a0
Čas spustenia chybujúcej aplikácie: 0x01d5033c987cdf79
Cesta chybujúcej aplikácie: C:\Program Files\WindowsApps\GAMELOFTSA.Asphalt8Airborne_4.2.0.10_x86__0pp20fcewvvtj\Asphalt8.exe
Cesta chybujúceho modulu: C:\Program Files\WindowsApps\GAMELOFTSA.Asphalt8Airborne_4.2.0.10_x86__0pp20fcewvvtj\Asphalt8.exe
Identifikácia hlásenia: 69edeabe-5968-4417-a3d0-491753e471e4
Celé meno chybujúceho balíka: GAMELOFTSA.Asphalt8Airborne_4.2.0.10_x86__0pp20fcewvvtj
Identifikácia chybujúcej aplikácie vzhľadom na balík: App

Error: (05/05/2019 02:30:44 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Asphalt8.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 0164568E
Stack:

Error: (05/04/2019 09:13:07 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (05/04/2019 01:30:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: Asphalt8.exe, verzia: 0.0.0.0, časová značka: 0x5caaf413
Názov chybujúceho modulu: Asphalt8.exe, verzia: 0.0.0.0, časová značka: 0x5caaf413
Kód výnimky: 0xc0000005
Odstup chyby: 0x00b1568e
Identifikácia chybujúceho procesu: 0x14b0
Čas spustenia chybujúcej aplikácie: 0x01d5026a12a931d6
Cesta chybujúcej aplikácie: C:\Program Files\WindowsApps\GAMELOFTSA.Asphalt8Airborne_4.2.0.10_x86__0pp20fcewvvtj\Asphalt8.exe
Cesta chybujúceho modulu: C:\Program Files\WindowsApps\GAMELOFTSA.Asphalt8Airborne_4.2.0.10_x86__0pp20fcewvvtj\Asphalt8.exe
Identifikácia hlásenia: 63a885cd-5aa7-4911-a9e6-80e7725a4748
Celé meno chybujúceho balíka: GAMELOFTSA.Asphalt8Airborne_4.2.0.10_x86__0pp20fcewvvtj
Identifikácia chybujúcej aplikácie vzhľadom na balík: App

Error: (05/04/2019 01:30:56 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Asphalt8.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 00E6568E
Stack:

Error: (05/03/2019 09:13:05 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (05/02/2019 09:13:03 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (05/01/2019 09:13:09 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0


System errors:
=============
Error: (05/06/2019 09:44:30 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-3SMP07F)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user DESKTOP-3SMP07F\saullerist SID (S-1-5-21-1796023744-1759536030-3900380101-1002) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/05/2019 05:55:46 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-3SMP07F)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user DESKTOP-3SMP07F\saullerist SID (S-1-5-21-1796023744-1759536030-3900380101-1002) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/05/2019 05:22:41 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-3SMP07F)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user DESKTOP-3SMP07F\saullerist SID (S-1-5-21-1796023744-1759536030-3900380101-1002) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/04/2019 08:09:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscDataProtection
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/04/2019 08:09:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.SecurityAppBroker
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/04/2019 08:09:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscBrokerManager
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/04/2019 11:59:37 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.SecurityAppBroker
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/04/2019 11:59:37 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscBrokerManager
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.


Windows Defender:
===================================
Date: 2019-05-03 19:25:16.919
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {F2F352DD-49E5-497C-A303-BAB7E13D2684}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-05-02 15:23:57.051
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {AFCBBCA4-D558-47A0-A216-2479437981CB}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-04-21 16:57:06.436
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {866C76C0-D4CE-4768-A161-005C03B9ADCE}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-04-21 15:25:08.460
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {AC1EF536-C930-4590-9DD4-4237247ECDDC}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-04-20 14:54:21.258
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {27861E98-6FA5-466A-8650-58241ED87F08}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-04-29 22:20:30.842
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.293.461.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15900.4
Error code: 0x8024402c
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

CodeIntegrity:
===================================

Date: 2019-02-13 21:31:05.903
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system.

Date: 2019-02-13 21:31:05.867
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system.

Date: 2019-02-13 21:31:05.609
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system.

Date: 2019-02-13 21:31:05.560
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system.

Date: 2019-02-13 21:31:05.470
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\dsreg.dll because the set of per-page image hashes could not be found on the system.

Date: 2019-02-13 21:31:05.428
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\dsreg.dll because the set of per-page image hashes could not be found on the system.

Date: 2019-02-13 21:31:01.531
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

Date: 2019-02-13 21:31:01.332
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

BIOS: INSYDE 1.40 05/17/2010
Motherboard: TOSHIBA Portable PC
Processor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
Percentage of memory in use: 78%
Total physical RAM: 3958.85 MB
Available physical RAM: 838.52 MB
Total Virtual: 4982.85 MB
Available Virtual: 1361.29 MB

==================== Drives ================================

Drive c: (WINDOWS) (Fixed) (Total:296.96 GB) (Free:249.2 GB) NTFS
Drive d: (Data) (Fixed) (Total:297.92 GB) (Free:294.02 GB) NTFS

\\?\Volume{18c6abd2-0000-0000-0000-100000000000}\ (SYSTEM) (Fixed) (Total:0.39 GB) (Free:0.18 GB) NTFS
\\?\Volume{18c6abd2-0000-0000-0000-a0564a000000}\ () (Fixed) (Total:0.89 GB) (Free:0.35 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 596.2 GB) (Disk ID: 18C6ABD2)
Partition 1: (Active) - (Size=400 MB) - (Type=27)
Partition 2: (Not Active) - (Size=297 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=915 MB) - (Type=27)
Partition 4: (Not Active) - (Size=297.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Re: iba kontrola 2 posty

Napsal: 06 kvě 2019 18:48
od JaRon
Logy su rovnake, bez problemov

Re: iba kontrola 2 posty

Napsal: 07 kvě 2019 07:47
od 5manager5
díky a poslal som správny log :)

Re: iba kontrola 2 posty

Napsal: 07 kvě 2019 07:57
od JaRon
preventivne doporucujem spustit s príkazového riadku chkdsk /f

Re: iba kontrola 2 posty

Napsal: 08 kvě 2019 11:29
od 5manager5
skúsil som a čo mi to malo ukázať?

Re: iba kontrola 2 posty

Napsal: 08 kvě 2019 14:28
od JaRon
Ponukne Ti naplanovat spustenie pri dalsom starte, das Ano
a po najblizsom restarte sa spusti chkdsk - ak najde chyby na disku ich opravi

Re: iba kontrola 2 posty

Napsal: 09 kvě 2019 09:18
od 5manager5
ok, hotovo môžeš zamknúť :)

Re: iba kontrola 2 posty

Napsal: 09 kvě 2019 09:24
od JaRon
dobre :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz