Klient zásad skupin mě omezuje (mění mi nastavení)

[hodnyJetel]

Dobrý večer,
vůbec nevím proč ale klient zásad skupin ve službách nejde vypnout (přístup byl odepřen)
díky moc za check z mého logu, používám kaspersky free verzi

FRST (log):
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-10-2019
Ran by User (administrator) on DESKTOP-RKTN858 (Micro-Star International Co., Ltd. MS-7B25) (19-10-2019 22:10:13)
Running from C:\Users\User\Desktop
Loaded Profiles: User (Available Profiles: User)
Platform: Windows 10 Home Version 1903 18362.418 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0347413.inf_amd64_09c106fe9d27c4e3\B347422\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0347413.inf_amd64_09c106fe9d27c4e3\B347422\atiesrxx.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\avp.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\avpui.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SrTasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [879392 2019-06-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1972738465-3544600668-837316972-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-16] (Piriform Software Ltd -> Piriform Ltd)
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
CHR HKU\S-1-5-21-1972738465-3544600668-837316972-1001\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {22916BE6-DDFF-4745-9E32-8913734D2D1F} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [468992 2019-10-04] (Advanced Micro Devices, Inc.) [File not signed]
Task: {34946E65-F331-4F98-B827-EE7B0159F83E} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [791232 2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
Task: {4DD17FAD-9BD5-4633-883C-3270B4054E93} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61112 2019-10-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {6115A66D-14A9-4D6D-B4FB-C2B200722D7C} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992 2019-10-04] (Advanced Micro Devices, Inc.) [File not signed]
Task: {679BD102-66B7-47AB-8E9B-9880A488AEA3} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\Windows\system32\MRT.exe [127230528 2019-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {A2712814-1D65-4974-9704-8873CC9700EF} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-16] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {C419033D-A037-4A33-B494-23FCA62FD759} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [68280 2019-10-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {DAF7954D-6FBA-4A3E-8A51-EA445375665F} - System32\Tasks\AMDInstallUEP => C:\Program Files\AMD\InstallUEP\AMDInstallUEP.exe [2356736 2019-04-15] () [File not signed]
Task: {EFED2AF6-DC01-43E2-A910-371B7AE4C648} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-16] (Piriform Software Ltd -> Piriform Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.31.1
Tcpip\..\Interfaces\{1d8e42b3-28a5-4938-95a4-3abd4595f97f}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{1d8e42b3-28a5-4938-95a4-3abd4595f97f}: [DhcpNameServer] 192.168.31.1
HKLM\System\...\Parameters\PersistentRoutes: [104.87.88.177,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [104.89.242.39,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [104.96.147.3,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [111.221.29.177,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [111.221.29.253,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.34.230,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.40.37,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.61.100,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.61.64,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.61.68,255.255.255.255,0.0.0.0,1]
PersistentRoutes: There are 82 PersistentRoutes.


Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
BHO: Kaspersky Protection -> {9F904093-6E18-4536-BF5F-B03689CF00F0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\IEExt\ie_plugin.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
BHO-x32: Kaspersky Protection -> {9F904093-6E18-4536-BF5F-B03689CF00F0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\IEExt\ie_plugin.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
Toolbar: HKLM - Kaspersky Protection Toolbar - {EF293C5A-9F37-49FD-91C4-2B867063FC54} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\IEExt\ie_plugin.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {EF293C5A-9F37-49FD-91C4-2B867063FC54} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\IEExt\ie_plugin.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)

Edge:
======
DownloadDir: C:\Users\User\Downloads

FireFox:
========
FF DefaultProfile: axha87ah.default
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\axha87ah.default [2019-10-13]
FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\axha87ah.default\user.js [2019-10-13]
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release [2019-10-19]
FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\user.js [2019-10-13]
FF Extension: (Dark theme for Firefox) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\Extensions\{1afaee19-8dde-4b0e-8c84-f46ca0f02f06}.xpi [2019-09-25]
FF Extension: (No Name) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-09-25]
FF HKLM\...\Firefox\Extensions: [light_plugin_B29D4AD94F82454BBC9215BCBD7E80AE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Ochrana Kaspersky) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\FFExt\light_plugin_firefox\addon.xpi [2019-09-22]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_B29D4AD94F82454BBC9215BCBD7E80AE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\FFExt\light_plugin_firefox\addon.xpi
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-09-25] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-09-25] <==== ATTENTION

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/detail/elhpdacimkjpccooodognopfhbdgnpbk
CHR HKU\S-1-5-21-1972738465-3544600668-837316972-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhnkblpjbkfklfloegejegedcafpliaa] - hxxps://chrome.google.com/webstore/detail/dhnkblpjbkfklfloegejegedcafpliaa
CHR HKLM-x32\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/detail/elhpdacimkjpccooodognopfhbdgnpbk

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD External Events Utility; C:\Windows\System32\DriverStore\FileRepository\u0347413.inf_amd64_09c106fe9d27c4e3\B347422\atiesrxx.exe [508520 2019-10-16] (Advanced Micro Devices, Inc. -> AMD)
R2 AVP20.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\avp.exe [357416 2019-03-21] (Kaspersky Lab -> AO Kaspersky Lab)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8457232 2019-08-26] (BattlEye Innovations e.K. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [802432 2019-08-26] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 klvssbridge64_20.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\vssbridge64.exe [438928 2019-03-21] (Kaspersky Lab -> AO Kaspersky Lab)
S3 mracsvc; C:\Windows\System32\mracsvc.exe [18953880 2019-10-07] (Mail.Ru LLC -> LLC Mail.Ru)
S2 RtkAudioUniversalService; C:\Windows\System32\RtkAudUService64.exe [879392 2019-06-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\NisSrv.exe [3630832 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MsMpEng.exe [103168 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdkmdag; C:\Windows\System32\DriverStore\FileRepository\u0347413.inf_amd64_09c106fe9d27c4e3\B347422\atikmdag.sys [60654696 2019-10-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\Windows\System32\DriverStore\FileRepository\u0347413.inf_amd64_09c106fe9d27c4e3\B347422\atikmpag.sys [597608 2019-10-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [103456 2019-09-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
S3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [108152 2019-07-24] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [246912 2019-02-16] (Kaspersky Lab -> AO Kaspersky Lab)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [135520 2019-07-09] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-10-13] (Martin Malik - REALiX -> REALiX(tm))
R0 iaStorAC; C:\Windows\System32\drivers\iaStorAC.sys [1096192 2019-10-13] (Intel(R) Rapid Storage Technology -> Intel Corporation)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [76624 2019-03-19] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [129152 2019-08-02] (Kaspersky Lab -> AO Kaspersky Lab)
R1 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [93312 2019-03-12] (Kaspersky Lab -> AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [37816 2019-01-24] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [251520 2019-08-02] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klgse; C:\Windows\System32\DRIVERS\klgse.sys [514688 2019-06-13] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [1204856 2019-09-12] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP20.0\Bases\klids.sys [197760 2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [996992 2019-08-02] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klim6; C:\Windows\system32\DRIVERS\klim6.sys [58192 2019-03-19] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [79184 2019-03-18] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [59512 2019-03-18] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [51328 2019-03-13] (Kaspersky Lab -> AO Kaspersky Lab)
S3 klpnpflt; C:\Windows\system32\DRIVERS\klpnpflt.sys [45904 2019-03-10] (Kaspersky Lab -> AO Kaspersky Lab)
R0 klupd_klif_arkmon; C:\Windows\System32\Drivers\klupd_klif_arkmon.sys [251256 2019-10-12] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\Windows\System32\Drivers\klupd_klif_kimul.sys [99152 2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_klark; C:\Windows\System32\Drivers\klupd_klif_klark.sys [306248 2019-10-17] (Kaspersky Lab -> AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\Windows\System32\Drivers\klupd_klif_klbg.sys [119744 2019-10-18] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_mark; C:\Windows\System32\Drivers\klupd_klif_mark.sys [204520 2019-10-12] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [105600 2019-03-05] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [210280 2019-03-13] (Kaspersky Lab -> AO Kaspersky Lab)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [232272 2019-03-19] (Kaspersky Lab -> AO Kaspersky Lab)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [20936 2019-06-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [225944 2019-09-21] (Malwarebytes Inc -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [275232 2019-09-21] (Malwarebytes Corporation -> Malwarebytes)
R3 MEIx64; C:\Windows\System32\DriverStore\FileRepository\heci.inf_amd64_85021432489d6a1c\x64\TeeDriverW8x64.sys [266128 2019-04-17] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
S3 mracdrv; C:\Windows\System32\drivers\mracdrv.sys [18189864 2019-10-07] (Mail.Ru LLC -> LLC Mail.Ru)
R3 netr28ux; C:\Windows\System32\drivers\netr28ux.sys [2224128 2019-03-19] (Microsoft Windows -> MediaTek Inc.)
R3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [56840 2019-10-13] (Synaptics Incorporated -> Synaptics Incorporated)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166752 2019-07-09] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46472 2019-09-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [346336 2019-09-18] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [53984 2019-09-18] (Microsoft Windows -> Microsoft Corporation)
S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [X]
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [X]
S3 cpuz143; \??\C:\Windows\temp\cpuz143\cpuz143_x64.sys [X]
U4 DiagTrack; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-10-19 22:10 - 2019-10-19 22:11 - 000018136 _____ C:\Users\User\Desktop\FRST.txt
2019-10-19 22:09 - 2019-10-19 22:10 - 000000000 ____D C:\FRST
2019-10-19 22:06 - 2019-10-19 22:06 - 000000000 ____D C:\Users\User\AppData\LocalLow\AMD
2019-10-19 22:06 - 2019-10-19 22:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2019-10-19 22:06 - 2019-10-19 22:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Problem Report Wizard
2019-10-19 22:05 - 2019-10-19 22:05 - 007636680 _____ (Malwarebytes) C:\Users\User\Desktop\adwcleaner_7.4.1.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 001072480 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 001072480 _____ C:\Windows\system32\vulkan-1.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000929280 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000929280 _____ C:\Windows\SysWOW64\vulkan-1.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000851560 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000851560 _____ C:\Windows\system32\vulkaninfo.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000709216 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000709216 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000574056 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Rapidfire64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000493160 _____ C:\Windows\system32\dgtrayicon.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000484968 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\Rapidfire.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000480360 _____ C:\Windows\system32\GameManager64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000416872 _____ C:\Windows\system32\EEURestart.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000381544 _____ C:\Windows\SysWOW64\GameManager32.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000348776 _____ C:\Windows\system32\clinfo.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000183912 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000162920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000158824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000152680 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000138344 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000090728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mcl64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000075368 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mcl32.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000046696 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\RapidFireServer64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000043624 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\RapidFireServer.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000019768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\detoured.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000019768 _____ (Microsoft Corporation) C:\Windows\system32\detoured.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 068015208 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdhip64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 003915368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amfrt64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 003516520 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amfrt32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 001713768 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 001242720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 001242720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000941152 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000768608 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000760936 _____ (AMD) C:\Windows\system32\atieclxx.exe
2019-10-19 22:05 - 2019-10-16 19:33 - 000553576 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmcl64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000468584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000466536 _____ C:\Windows\system32\amdlogum.exe
2019-10-19 22:05 - 2019-10-16 19:33 - 000439912 _____ C:\Windows\system32\atieah64.exe
2019-10-19 22:05 - 2019-10-16 19:33 - 000383584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmcl32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000352352 _____ C:\Windows\SysWOW64\atieah32.exe
2019-10-19 22:05 - 2019-10-16 19:33 - 000242280 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000214120 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000178752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000157592 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000135784 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000134760 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000125544 _____ (AMD) C:\Windows\system32\atimuixx.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000124008 _____ C:\Windows\system32\atidxx64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000121448 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000120936 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdxc64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000107104 _____ C:\Windows\SysWOW64\atidxx32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000105576 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdxc32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000070248 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ati2erec.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 059440232 _____ C:\Windows\system32\amdcomgr64.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 049335912 _____ C:\Windows\SysWOW64\amdcomgr.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 001686000 _____ (AMD) C:\Windows\system32\amf-mft-mjpeg-decoder64.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 001365352 _____ (AMD) C:\Windows\SysWOW64\amf-mft-mjpeg-decoder32.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000554072 _____ C:\Windows\system32\amdmiracast.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000472680 _____ C:\Windows\system32\amdgfxinfo64.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000381544 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000134832 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000128112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000128112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000119232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000107728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000107728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2019-10-19 22:04 - 2019-10-19 22:04 - 001616384 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2019-10-19 21:59 - 2019-10-19 22:00 - 435261632 _____ (AMD Inc.) C:\Users\User\Downloads\win10-64bit-radeon-software-adrenalin-2019-edition-19.10.1-oct17.exe
2019-10-19 20:30 - 2019-10-19 20:30 - 000069789 _____ C:\Users\User\Desktop\untitled2.flp
2019-10-19 16:48 - 2019-10-19 21:22 - 000000000 ____D C:\Users\User\Downloads\Half Life 2 CZ Kolekce
2019-10-19 16:05 - 2019-10-19 16:07 - 000002884 _____ C:\Users\User\Downloads\OOSU10.ini
2019-10-19 16:05 - 2019-10-19 16:05 - 001236344 _____ (O&O Software GmbH) C:\Users\User\Downloads\OOSU10.exe
2019-10-18 16:24 - 2019-10-18 16:24 - 000001771 _____ C:\Users\Public\Desktop\Defraggler.lnk
2019-10-18 16:24 - 2019-10-18 16:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2019-10-18 16:24 - 2019-10-18 16:24 - 000000000 ____D C:\Program Files\Defraggler
2019-10-18 16:20 - 2019-10-18 16:20 - 006404096 _____ (Piriform Ltd) C:\Users\User\Downloads\dfsetup222.exe
2019-10-17 16:25 - 2019-10-17 16:25 - 000306248 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klark.sys
2019-10-17 16:24 - 2019-10-18 09:10 - 000119744 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klbg.sys
2019-10-17 16:22 - 2019-10-17 16:22 - 000106327 _____ C:\Users\User\Desktop\untitled.flp
2019-10-13 12:35 - 2019-10-19 21:52 - 076451840 _____ C:\Windows\system32\config\SOFTWARE
2019-10-13 12:35 - 2019-10-19 21:52 - 000385024 _____ C:\Windows\system32\config\DEFAULT
2019-10-13 12:35 - 2019-10-19 21:52 - 000057344 _____ C:\Windows\system32\config\SAM
2019-10-13 12:35 - 2019-10-19 21:52 - 000045056 _____ C:\Windows\system32\config\SECURITY
2019-10-13 12:35 - 2019-10-13 12:35 - 076451840 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2019-10-13 12:35 - 2019-10-13 12:35 - 006348800 _____ C:\Windows\system32\config\DRIVERS.iodefrag.bak
2019-10-13 12:35 - 2019-10-13 12:35 - 000385024 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2019-10-13 12:35 - 2019-10-13 12:35 - 000057344 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2019-10-13 12:35 - 2019-10-13 12:35 - 000045056 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2019-10-13 12:31 - 2019-10-13 12:31 - 001096192 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorAC.sys
2019-10-13 12:31 - 2019-10-13 12:31 - 000592752 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1d65x64.sys
2019-10-13 12:31 - 2019-10-13 12:31 - 000134344 _____ (Intel Corporation) C:\Windows\system32\NicCo4.dll
2019-10-13 12:31 - 2019-10-13 12:31 - 000099704 _____ (Intel Corporation) C:\Windows\system32\NicInstD.dll
2019-10-13 12:31 - 2019-10-13 12:31 - 000089464 _____ (Intel Corporation) C:\Windows\system32\e1dmsg.dll
2019-10-13 12:30 - 2019-10-13 12:30 - 000056840 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2019-10-13 12:30 - 2019-10-13 12:30 - 000003130 _____ C:\Windows\system32\e1d65x64.din
2019-10-13 12:23 - 2019-10-13 12:23 - 000027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2019-10-13 12:19 - 2019-10-13 12:20 - 047845504 _____ (IObit ) C:\Users\User\Downloads\advanced-systemcare-setup.exe
2019-10-12 23:20 - 2019-10-12 23:20 - 000000032 _____ C:\Users\User\d4ac4633ebd6440fa397b84f1bc94a3c.7z
2019-10-12 16:45 - 2019-10-12 20:55 - 000204520 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_mark.sys
2019-10-12 16:45 - 2019-10-12 16:45 - 000251256 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_arkmon.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 025900544 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 025443840 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 022628352 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 019849216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 019811840 _____ (Microsoft Corporation) C:\Windows\system32\HologramWorld.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 018019840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 017787392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 014816256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 009928504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 008010752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 007754240 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 007600664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 007195648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 007015936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 006517640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 006232064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 005915648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 005041664 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 004562688 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 004538880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 004129616 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 004012544 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 003771392 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 003701760 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 003525592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002861568 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002762504 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2019-10-12 16:36 - 2019-10-12 16:36 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2019-10-12 16:36 - 2019-10-12 16:36 - 002723328 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 002703360 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002494440 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002456064 _____ (Microsoft Corporation) C:\Windows\system32\InstallService.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002448712 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002422592 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
2019-10-12 16:36 - 2019-10-12 16:36 - 002314648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002284032 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002236144 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002138472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVCORE.DLL
2019-10-12 16:36 - 2019-10-12 16:36 - 002114048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.CloudStore.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002095104 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002081976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002000168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001952360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001847808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsservices.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001830200 _____ (Microsoft Corporation) C:\Windows\system32\rdpserverbase.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001748480 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001743672 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001730560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallService.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001721144 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001687040 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001664928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001656392 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001610752 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001563648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001562424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpserverbase.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001439744 _____ (Microsoft Corporation) C:\Windows\system32\usocoreworker.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 001394488 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 001319936 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001283072 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001273392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001217904 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 001214976 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001152016 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001149712 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 001098712 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001084432 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001072952 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 001066496 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001012792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000923136 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000904208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000890472 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000882688 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000880088 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000856576 _____ C:\Windows\system32\MBR2GPT.EXE
2019-10-12 16:36 - 2019-10-12 16:36 - 000844800 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000843776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000842752 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000829536 _____ (Microsoft Corporation) C:\Windows\system32\BioIso.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000818688 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000774672 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000758584 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000717312 _____ (Microsoft Corporation) C:\Windows\system32\mousocoreworker.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000701952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.FileExplorer.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000690176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000679880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000669496 _____ (Microsoft Corporation) C:\Windows\system32\computecore.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000598024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000596992 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000595456 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000578560 _____ (Microsoft Corporation) C:\Windows\system32\SppExtComObj.Exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000537600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000533504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000530432 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000520192 _____ (Microsoft Corporation) C:\Windows\system32\usosvc.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000516544 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000516408 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000515896 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000513536 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000496640 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.FileExplorer.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000466416 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000462848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000462136 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000456504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 000452408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000436536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 000429568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000422008 _____ (Microsoft Corporation) C:\Windows\system32\SgrmEnclave_secure.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000412152 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000404392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000380216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000355840 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicSvc.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000324408 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000300184 _____ (Microsoft Corporation) C:\Windows\system32\skci.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000261632 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicCapsule.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000247856 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000231936 _____ (Microsoft Corporation) C:\Windows\system32\InstallServiceTasks.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000227840 _____ (Microsoft Corporation) C:\Windows\system32\IndexedDbLegacy.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000225080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 000224768 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2019-10-12 16:36 - 2019-10-12 16:36 - 000224256 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000220472 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000204800 _____ (Microsoft Corporation) C:\Windows\system32\iisRtl.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000202040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000199480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000197632 _____ (Microsoft Corporation) C:\Windows\system32\Win32CompatibilityAppraiserCSP.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000193592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2019-10-12 16:36 - 2019-10-12 16:36 - 000179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallServiceTasks.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IndexedDbLegacy.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000169472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisRtl.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000165832 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000158720 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000150328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000139776 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000122880 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000121856 _____ (Microsoft Corporation) C:\Windows\system32\updatecsp.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000117048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bindflt.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 000108032 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000089088 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicAgent.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\CustomInstallExec.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iemigplugin.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\ahadmin.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000052736 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000039304 _____ (Microsoft Corporation) C:\Windows\system32\NtlmShared.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000037176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wimmount.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 000033048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NtlmShared.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicPS.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ahadmin.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\bindflt.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\cngkeyhelper.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDJPN.DLL
2019-10-12 16:36 - 2019-10-12 16:36 - 000011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngkeyhelper.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbd106.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2019-10-12 16:30 - 2019-09-20 06:36 - 000492544 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2019-10-12 16:30 - 2019-09-20 06:14 - 000390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2019-10-12 16:19 - 2019-10-12 16:19 - 000003110 _____ C:\Windows\system32\Tasks\AMDLinkUpdate
2019-10-10 15:38 - 2019-10-10 15:38 - 000000000 ____D C:\Users\User\AppData\Local\Chromium
2019-10-10 10:38 - 2019-10-10 10:38 - 000001109 _____ C:\Users\Public\Desktop\L.A. Noire.lnk
2019-10-10 10:38 - 2019-10-10 10:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\L.A. Noire
2019-10-10 10:30 - 2019-10-10 10:38 - 000000000 ____D C:\Program Files (x86)\L.A. Noire
2019-10-09 20:05 - 2019-10-09 20:15 - 000000000 ____D C:\Program Files (x86)\L.A. Noire - The Complete Edition (CZ; MULTi6) [Repack] by Teagan
2019-10-09 16:34 - 2019-10-19 22:06 - 000003162 _____ C:\Windows\system32\Tasks\StartCN
2019-10-09 16:34 - 2019-10-19 22:06 - 000003082 _____ C:\Windows\system32\Tasks\StartDVR
2019-10-09 16:34 - 2019-10-09 16:34 - 000000000 ____D C:\Program Files (x86)\AMD
2019-10-09 16:31 - 2019-10-12 23:24 - 000002746 _____ C:\Windows\system32\Tasks\AMDInstallUEP
2019-10-09 16:30 - 2019-10-09 16:30 - 028290000 _____ (AMD Inc.) C:\Users\User\Downloads\radeon-software-adrenalin-2019-19.10.1-minimalsetup-191007_64bit.exe
2019-10-09 16:08 - 2019-10-09 16:08 - 000182890 _____ C:\Users\User\Desktop\hl7hourwar.flp
2019-10-07 18:49 - 2019-10-19 09:36 - 000004210 _____ C:\Windows\system32\Tasks\CCleaner Update
2019-10-07 18:48 - 2019-10-13 10:47 - 000000000 ____D C:\Users\User\AppData\Local\Spotify
2019-10-07 18:48 - 2019-10-13 10:26 - 000000000 ____D C:\Users\User\AppData\Roaming\Spotify
2019-10-07 18:48 - 2019-10-07 18:48 - 025439168 _____ (Piriform Software Ltd) C:\Users\User\Downloads\cctrialsetup.exe
2019-10-07 18:48 - 2019-10-07 18:48 - 000903680 _____ (Spotify Ltd) C:\Users\User\Downloads\SpotifySetup.exe
2019-10-07 18:48 - 2019-10-07 18:48 - 000001845 _____ C:\Users\User\Desktop\Spotify.lnk
2019-10-07 18:48 - 2019-10-07 18:48 - 000001831 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2019-10-07 18:03 - 2019-10-07 18:03 - 000000000 ____D C:\Users\User\AppData\Local\CrashRpt
2019-10-07 18:02 - 2019-10-07 18:02 - 018953880 _____ (LLC Mail.Ru) C:\Windows\system32\mracsvc.exe
2019-10-07 18:02 - 2019-10-07 18:02 - 018189864 _____ (LLC Mail.Ru) C:\Windows\system32\Drivers\mracdrv.sys
2019-10-07 14:45 - 2019-10-07 14:45 - 003915984 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\SET3964.tmp
2019-10-07 14:45 - 2019-10-07 14:45 - 001714384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\SET3B76.tmp
2019-10-07 14:45 - 2019-10-07 14:45 - 000135384 _____ (Khronos Group) C:\Windows\system32\SET34C7.tmp
2019-10-07 13:56 - 2019-10-07 13:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2019-10-07 13:56 - 2019-10-07 13:56 - 000000000 ____D C:\Program Files\qBittorrent
2019-10-06 12:22 - 2019-10-06 12:23 - 000065872 _____ C:\Users\User\Downloads\hl5.flm
2019-10-05 12:20 - 2019-10-05 12:20 - 004481536 _____ (Microsoft Corporation) C:\Windows\system32\DHolographicDisplay.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 001510752 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 001505320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 001297936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 001244944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000939008 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000904704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\opengl32.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000742912 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000722944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fveapi.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.Internal.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000524800 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2019-10-05 12:20 - 2019-10-05 12:20 - 000417280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000401408 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000387832 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fveapibase.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glu32.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvvmtransport.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000055296 _____ (Microsoft Corporation) C:\Windows\system32\admwprox.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000053760 _____ (Microsoft Corporation) C:\Windows\system32\BdeUISrv.exe
2019-10-05 12:20 - 2019-10-05 12:20 - 000018944 _____ (Microsoft Corporation) C:\Windows\system32\iisreset.exe
2019-10-05 12:20 - 2019-10-05 12:20 - 000015360 _____ (Microsoft Corporation) C:\Windows\system32\wamregps.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\iisrstap.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 007905000 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 007848192 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 007263992 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 006425600 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 006227624 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 006164480 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 006084048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 005865272 _____ (Microsoft Corporation) C:\Windows\system32\spwizimg.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 005764872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 005105152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 004612520 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 004046336 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 003964056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 003742032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneCoreUAPCommonProxyStub.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 003727360 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 003590968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 003553280 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 003386880 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 003184128 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 003105280 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002821120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002799616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 002772032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002590208 _____ C:\Windows\system32\dwmscene.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002552120 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002466304 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002258856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002160640 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002132280 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002120704 _____ (Microsoft Corporation) C:\Windows\system32\WpcDesktopMonSvc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002120272 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002069504 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001957008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001942528 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001940952 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001913296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001857024 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001845408 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001835008 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001819136 _____ (Microsoft Corporation) C:\Windows\system32\CoreShell.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001788728 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001757096 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-10-05 12:19 - 2019-10-05 12:19 - 001692160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001664376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001657856 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001616784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001616608 _____ (Microsoft Corporation) C:\Windows\system32\ttdrecordcpu.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001607680 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001543168 _____ (Microsoft Corporation) C:\Windows\system32\WindowManagement.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001512320 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 001482040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 001473488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001413704 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001412096 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001383856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001372160 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001366128 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-10-05 12:19 - 2019-10-05 12:19 - 001334064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ttdrecordcpu.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001263616 _____ (Microsoft Corporation) C:\Windows\system32\opengl32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001261800 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001182240 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 001178816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001154656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001150240 _____ (Microsoft Corporation) C:\Windows\system32\InputHost.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001091584 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001080320 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001054872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001047968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001036800 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001029432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 001023128 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001009152 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000984376 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000975872 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000950784 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000944664 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000931840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000923136 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000893952 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000875008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000874296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000858112 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000841216 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000839680 _____ (Microsoft Corporation) C:\Windows\system32\d3d9on12.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCoreProvisioning.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000833312 _____ (Microsoft Corporation) C:\Windows\system32\pkeyhelper.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000792296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputHost.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000784384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000783480 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000775768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000772656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000765440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000759488 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000750080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.Search.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000735232 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000732176 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000702464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000674072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000673080 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000656960 _____ (Microsoft Corporation) C:\Windows\system32\d3d11on12.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000652800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000647168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000639400 _____ (Microsoft Corporation) C:\Windows\system32\msvcp_win.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.Search.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000623104 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000617784 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000612864 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000606208 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000599552 _____ (Microsoft Corporation) C:\Windows\system32\SmsRouterSvc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000599040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000598016 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000589384 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000587776 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_PCDisplay.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000568336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000563200 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000558592 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000551952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Vid.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000551936 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000551424 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000550400 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000546816 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000541696 _____ (Microsoft Corporation) C:\Windows\system32\ResourceMapper.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000541480 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000539648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9on12.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000518656 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000510464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000507704 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000507152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000501232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp_win.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000500736 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2019-10-05 12:19 - 2019-10-05 12:19 - 000487576 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase_enclave.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000483328 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000476672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000476672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000469504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000463272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000457216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cldflt.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000450560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxdiagn.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000450360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11on12.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000449888 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000448000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsEnvironment.Desktop.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000442704 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000441144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000415808 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000398728 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000392704 _____ (Microsoft Corporation) C:\Windows\system32\NotificationControllerPS.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000383984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000382976 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000379840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000375720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000369664 _____ (Microsoft Corporation) C:\Windows\system32\dxdiag.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000363624 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000359424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\MbbCx.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000355000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000346624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000342896 _____ (Microsoft Corporation) C:\Windows\system32\ttdwriter.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000334936 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\ComposableShellProxyStub.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000315904 _____ (Microsoft Corporation) C:\Windows\system32\dmenterprisediagnostics.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000315392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxdiag.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000293344 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000285696 _____ (Microsoft Corporation) C:\Windows\system32\directxdatabaseupdater.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000285256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000284160 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000283688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ttdwriter.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000282112 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.AppDefaults.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000278080 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000275968 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000275456 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_CapabilityAccess.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000268800 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000268288 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000265216 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\UpdateDeploymentProvider.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000252416 _____ (Microsoft Corporation) C:\Windows\system32\wpnservice.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winnat.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000248832 _____ (Microsoft Corporation) C:\Windows\system32\ManageCI.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000244736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Gpu.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\policymanagerprecheck.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000236544 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000236520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000236032 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000235008 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000223032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000221696 _____ (Microsoft Corporation) C:\Windows\system32\dxgiadaptercache.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000210744 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000208384 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000208184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000206336 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000201016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000199480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\container.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000179512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000178176 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000176440 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000176152 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000174080 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000173568 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000169472 _____ (Microsoft Corporation) C:\Windows\system32\SpatialAudioLicenseSrv.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000163328 _____ (Microsoft Corporation) C:\Windows\system32\glu32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000162304 _____ (Microsoft Corporation) C:\Windows\system32\fwbase.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000159112 _____ (Microsoft Corporation) C:\Windows\system32\devobj.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ComposableShellProxyStub.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000155648 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_AppExecutionAlias.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000152408 _____ (Microsoft Corporation) C:\Windows\system32\KerbClientShared.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000151568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbus.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_BackgroundApps.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imm32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000140800 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000140496 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prntvpt.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000137864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000137728 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000132608 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_ForceSync.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000132408 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000132096 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinAUG.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000127064 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000125232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KerbClientShared.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\ApplicationControlCSP.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000119840 _____ (Microsoft Corporation) C:\Windows\system32\OpenWith.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000116904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\EaseOfAccessDialog.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000110080 _____ C:\Windows\system32\ResBParser.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000107008 _____ (Microsoft Corporation) C:\Windows\system32\CoreShellExtFramework.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000105832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpenWith.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000105272 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000103936 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000100664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbkmcl.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000093712 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000093184 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000092672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000092624 _____ (Microsoft Corporation) C:\Windows\system32\taskhostw.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EaseOfAccessDialog.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000089544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000088352 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000084496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\rdvvmtransport.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000079376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\uaspstor.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sethc.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\tetheringclient.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000073024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000071680 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000066832 _____ (Microsoft Corporation) C:\Windows\system32\iumcrypt.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\CertEnrollCtrl.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidspi.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\AssignedAccessRuntime.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\devrtl.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\audioresourceregistrar.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\pnppolicy.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000053248 _____ C:\Windows\system32\Drivers\UsbPmApi.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000052752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmstorfl.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000052224 _____ (Microsoft Corporation) C:\Windows\system32\tetheringconfigsp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnrollCtrl.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000047616 _____ C:\Windows\system32\UsbPmApi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AssignedAccessRuntime.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000047000 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000045568 _____ (Microsoft Corporation) C:\Windows\system32\cellulardatacapabilityhandler.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000043536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storvsc.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\WiredNetworkCSP.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\IcsEntitlementHost.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\enrollmentapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000028936 _____ (Microsoft Corporation) C:\Windows\system32\vmbuspipe.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000027648 _____ (Microsoft Corporation) C:\Windows\system32\Win32_DeviceGuard.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\CSystemEventsBrokerClient.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000021544 _____ (Microsoft Corporation) C:\Windows\system32\kdhvcom.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000020944 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000019456 _____ (Microsoft Corporation) C:\Windows\system32\wmsgapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000016696 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\d3d8thk.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\pacjsworker.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000011576 _____ (Microsoft Corporation) C:\Windows\system32\uxlibres.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCertResources.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000003584 _____ (Microsoft Corporation) C:\Windows\system32\TpmCertResources.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tier2punctuations.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth9.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth12.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth11.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth10.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2019-10-04 18:02 - 2019-10-04 18:02 - 003471376 _____ C:\Windows\SysWOW64\atiumdva.cap
2019-10-04 18:02 - 2019-10-04 18:02 - 003437632 _____ C:\Windows\system32\atiumd6a.cap
2019-10-04 17:56 - 2019-10-04 17:56 - 000553456 _____ C:\Windows\SysWOW64\atiapfxx.blb
2019-10-04 17:56 - 2019-10-04 17:56 - 000553456 _____ C:\Windows\system32\atiapfxx.blb
2019-10-03 19:52 - 2019-10-03 19:52 - 000000000 ____D C:\Users\User\AppData\Local\modloader
2019-10-03 19:52 - 2019-10-03 19:52 - 000000000 ____D C:\ProgramData\modloader
2019-10-03 18:16 - 2019-10-03 18:16 - 000000000 ____D C:\Users\User\AppData\Local\2K Games
2019-10-03 17:15 - 2019-10-03 17:15 - 000000000 ____D C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2019-10-03 17:15 - 2019-10-03 17:15 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2019-10-03 17:15 - 2019-10-03 17:15 - 000000000 ____D C:\Program Files (x86)\AGEIA Technologies
2019-10-03 17:14 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2019-10-03 16:48 - 2019-10-03 16:48 - 684982272 _____ C:\Users\User\Downloads\codex-call.of.duty.modern.warfare.remastered.iso
2019-10-03 14:57 - 2019-10-03 14:57 - 000000000 ____D C:\Users\User\AppData\Local\My Games
2019-10-03 14:03 - 2019-10-03 14:03 - 000001353 _____ C:\Users\User\Desktop\Far Cry 2.lnk
2019-10-03 14:03 - 2019-10-03 14:03 - 000000000 ____D C:\Users\User\AppData\Roaming\Far Cry 2
2019-10-03 14:03 - 2019-10-03 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2019-10-03 14:00 - 2019-10-03 14:00 - 000000000 ____D C:\Program Files (x86)\R.G. Mechanics
2019-10-02 19:07 - 2019-10-02 19:25 - 1210318848 _____ C:\Users\User\Downloads\Far Cry 1 & 2 - Česká Kolekce.iso
2019-09-29 19:16 - 2019-09-29 19:16 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2019-09-29 01:25 - 2019-09-29 01:25 - 000000000 ____D C:\Users\User\AppData\Local\Oblivion
2019-09-29 00:45 - 2019-09-29 00:51 - 000002198 _____ C:\Users\Public\Desktop\olivion.lnk
2019-09-29 00:45 - 2019-09-29 00:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks
2019-09-29 00:45 - 2019-09-29 00:45 - 000000000 ____D C:\Program Files (x86)\Bethesda Softworks
2019-09-29 00:14 - 2019-09-29 00:31 - 000000000 ____D C:\Users\User\Downloads\The Elder Scrolls - IV - Oblivion CZ 5th Anniversary Edition
2019-09-29 00:03 - 2019-09-04 03:56 - 000835480 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-09-29 00:03 - 2019-09-04 03:56 - 000179816 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2019-09-26 18:27 - 2019-09-26 18:37 - 000000000 ____D C:\Program Files (x86)\FreeArc
2019-09-25 19:59 - 2019-10-13 12:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LCPD First Response
2019-09-25 16:56 - 2019-10-19 22:09 - 000000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
2019-09-25 16:56 - 2019-09-25 16:56 - 000000000 ____D C:\Users\User\AppData\Roaming\Mozilla
2019-09-25 16:56 - 2019-09-25 16:56 - 000000000 ____D C:\Users\User\AppData\Local\Mozilla
2019-09-25 16:55 - 2019-10-12 19:51 - 000001011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-09-25 16:55 - 2019-10-12 19:51 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-09-25 16:55 - 2019-09-25 16:56 - 000000000 ____D C:\ProgramData\Mozilla
2019-09-25 16:55 - 2019-09-25 16:55 - 000000999 _____ C:\Users\Public\Desktop\Firefox.lnk
2019-09-25 11:00 - 2019-10-09 16:31 - 000000060 _____ C:\ProgramData\SoftwareUpdateTemp.xml
2019-09-25 11:00 - 2019-09-25 11:00 - 000000000 ____D C:\Users\User\AppData\Roaming\ATI
2019-09-25 11:00 - 2019-09-25 11:00 - 000000000 ____D C:\ProgramData\ATI
2019-09-22 18:45 - 2019-09-22 18:45 - 000000000 ____D C:\Users\User\Documents\OpenIV
2019-09-22 18:42 - 2019-09-22 18:45 - 000001313 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\OpenIV.lnk
2019-09-22 18:42 - 2019-09-22 18:45 - 000000000 ____D C:\Users\User\AppData\Local\New Technology Studio
2019-09-22 15:26 - 2019-10-10 15:38 - 000000000 ____D C:\Users\User\Documents\Rockstar Games
2019-09-22 14:34 - 2019-10-19 21:55 - 000032768 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.product_registry.kvdb-shm
2019-09-22 14:34 - 2019-10-19 21:55 - 000032768 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.browser_extension_registry.kvdb-shm
2019-09-22 14:34 - 2019-10-19 21:55 - 000032768 _____ C:\Windows\SysWOW64\antimalware.patch_management.product_registry.kvdb-shm
2019-09-22 14:34 - 2019-10-13 13:09 - 000032992 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.product_registry.kvdb-wal
2019-09-22 14:34 - 2019-10-07 13:56 - 000045352 _____ C:\Windows\SysWOW64\antimalware.patch_management.product_registry.kvdb-wal
2019-09-22 14:34 - 2019-09-22 14:34 - 000012288 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.product_registry.kvdb
2019-09-22 14:34 - 2019-09-22 14:34 - 000012288 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.browser_extension_registry.kvdb
2019-09-22 14:34 - 2019-09-22 14:34 - 000012288 _____ C:\Windows\SysWOW64\antimalware.patch_management.product_registry.kvdb
2019-09-22 14:34 - 2019-09-22 14:34 - 000000000 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.browser_extension_registry.kvdb-wal
2019-09-22 13:31 - 2019-09-22 13:31 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2019-09-22 12:31 - 2019-09-22 12:31 - 000003392 _____ C:\Windows\system32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
2019-09-22 12:30 - 2019-10-19 22:10 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2019-09-22 12:30 - 2019-09-25 19:33 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2019-09-22 12:30 - 2019-09-22 12:31 - 000000000 ____D C:\Program Files\Common Files\AV
2019-09-22 12:30 - 2019-09-22 12:30 - 000099152 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_kimul.sys
2019-09-22 12:30 - 2019-09-22 12:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security
2019-09-22 12:30 - 2019-08-02 14:39 - 000996992 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2019-09-22 12:30 - 2019-08-02 14:39 - 000251520 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2019-09-22 12:30 - 2013-05-06 08:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2019-09-21 23:14 - 2019-09-21 23:14 - 000000000 __SHD C:\ProgramData\SecuROM
2019-09-21 23:14 - 2019-09-21 23:14 - 000000000 ____D C:\Users\User\AppData\Local\Rockstar Games
2019-09-21 23:14 - 2019-09-21 23:14 - 000000000 ____D C:\ProgramData\XLive
2019-09-21 23:08 - 2019-09-21 23:08 - 000275232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2019-09-21 23:07 - 2019-09-21 23:07 - 000000000 ____D C:\Windows\SysWOW64\BestPractices
2019-09-21 23:07 - 2019-09-21 23:07 - 000000000 ____D C:\Windows\system32\BestPractices
2019-09-21 21:21 - 2019-10-19 17:40 - 000000000 ____D C:\Users\User\AppData\Roaming\qBittorrent
2019-09-21 21:21 - 2019-09-21 21:21 - 000000000 ____D C:\Users\User\AppData\Local\qBittorrent
2019-09-21 16:57 - 2019-09-21 16:57 - 000225944 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2019-09-19 10:02 - 2019-09-19 10:02 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-09-19 10:02 - 2019-06-26 13:00 - 000020936 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-10-19 22:06 - 2019-08-24 12:20 - 000000000 ____D C:\Users\User\AppData\Local\AMD
2019-10-19 22:06 - 2019-08-24 12:20 - 000000000 ____D C:\Program Files\AMD
2019-10-19 22:06 - 2019-03-19 06:50 - 000000000 ____D C:\Windows\INF
2019-10-19 22:04 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-10-19 22:01 - 2019-09-06 18:05 - 000000000 ____D C:\AMD
2019-10-19 21:58 - 2019-08-24 12:08 - 001963158 _____ C:\Windows\system32\PerfStringBackup.INI
2019-10-19 21:58 - 2019-03-19 13:55 - 000810566 _____ C:\Windows\system32\perfh005.dat
2019-10-19 21:58 - 2019-03-19 13:55 - 000187596 _____ C:\Windows\system32\perfc005.dat
2019-10-19 21:53 - 2019-08-24 12:57 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-10-19 21:52 - 2019-08-24 12:20 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2019-10-19 21:52 - 2019-03-19 06:37 - 000262144 _____ C:\Windows\system32\config\BBI
2019-10-19 21:36 - 2019-08-26 19:03 - 000000000 ____D C:\Program Files (x86)\Steam
2019-10-19 19:28 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\LiveKernelReports
2019-10-19 17:58 - 2019-08-24 12:57 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-10-18 13:43 - 2019-09-03 17:30 - 000000000 ____D C:\Program Files (x86)\IObit
2019-10-18 13:40 - 2019-09-03 17:31 - 000000000 ____D C:\Users\User\AppData\LocalLow\IObit
2019-10-18 13:39 - 2019-09-03 17:29 - 000000000 ____D C:\Users\User\AppData\Roaming\IObit
2019-10-18 09:13 - 2019-09-04 12:53 - 000000000 ____D C:\Program Files\CCleaner
2019-10-18 09:12 - 2019-09-03 17:29 - 000000000 ____D C:\ProgramData\IObit
2019-10-14 09:15 - 2019-03-19 06:37 - 000032768 _____ C:\Windows\system32\config\ELAM
2019-10-13 13:09 - 2019-09-03 17:30 - 000000000 ____D C:\ProgramData\ProductData
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ___RD C:\Windows\PrintDialog
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\oobe
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\inetsrv
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\Dism
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SystemResources
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\oobe
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\inetsrv
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\Dism
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\bcastdvr
2019-10-12 23:46 - 2019-09-06 18:09 - 000002452 _____ C:\Windows\system32\Tasks\ModifyLinkUpdate
2019-10-12 23:21 - 2019-09-06 13:35 - 000000000 ____D C:\Program Files (x86)\Nox
2019-10-12 23:21 - 2019-09-06 13:34 - 000000000 ____D C:\Users\User\AppData\Local\Nox
2019-10-12 23:19 - 2019-09-06 13:36 - 000000000 ____D C:\Users\User\AppData\Local\NoxSrv
2019-10-12 23:19 - 2019-09-06 13:36 - 000000000 ____D C:\Users\User\.android
2019-10-12 23:19 - 2019-09-06 13:35 - 000000000 ____D C:\Users\User\vmlogs
2019-10-12 16:40 - 2019-08-26 21:19 - 000000000 ____D C:\Windows\system32\MRT
2019-10-12 16:38 - 2019-08-26 21:18 - 127230528 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-10-12 16:38 - 2019-03-19 06:37 - 000000000 ____D C:\Windows\CbsTemp
2019-10-12 09:03 - 2019-08-26 21:46 - 000000000 ____D C:\Users\User\AppData\Local\DayZ Launcher
2019-10-10 23:20 - 2019-09-17 15:03 - 000000000 ____D C:\Users\User\Desktop\My Songs
2019-10-10 10:39 - 2019-09-08 18:51 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
2019-10-09 16:51 - 2019-08-26 19:40 - 000000000 ____D C:\Users\User\AppData\Local\DayZ
2019-10-07 18:49 - 2019-09-04 12:53 - 000000865 _____ C:\Users\Public\Desktop\CCleaner.lnk
2019-10-07 16:55 - 2019-09-10 19:42 - 000001337 _____ C:\Users\User\Desktop\City Car Driving.lnk
2019-10-06 12:02 - 2019-08-26 21:11 - 000000000 ____D C:\Users\User\AppData\Local\ElevatedDiagnostics
2019-10-05 20:05 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\AppReadiness
2019-10-05 20:03 - 2019-08-24 12:13 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-10-05 20:03 - 2019-08-24 12:13 - 000000000 ___RD C:\Users\User\3D Objects
2019-10-05 20:01 - 2019-08-24 12:56 - 000258096 _____ C:\Windows\system32\FNTCACHE.DAT
2019-10-05 19:59 - 2019-03-19 06:52 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2019-10-05 19:59 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\WinMetadata
2019-10-05 19:59 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\migwiz
2019-10-05 19:59 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\PolicyDefinitions
2019-10-03 19:21 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\spool
2019-10-03 14:04 - 2019-08-26 22:41 - 000000000 ____D C:\Users\User\Documents\My Games
2019-10-03 14:04 - 2019-08-24 12:20 - 000000000 ____D C:\Users\User\AppData\Local\D3DSCache
2019-09-29 02:48 - 2019-08-24 12:05 - 000000000 ____D C:\Windows\minidump
2019-09-29 02:06 - 2019-08-24 12:13 - 000000000 ____D C:\Users\User\AppData\Local\VirtualStore
2019-09-29 01:01 - 2019-09-08 18:51 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2019-09-25 16:56 - 2019-09-04 14:03 - 000000000 ____D C:\Users\User\AppData\Local\Google
2019-09-25 16:56 - 2019-09-04 14:03 - 000000000 ____D C:\Program Files (x86)\Google
2019-09-22 12:30 - 2019-03-19 06:52 - 000000000 ___HD C:\Windows\ELAMBKUP
2019-09-21 23:07 - 2019-09-11 13:50 - 000000000 ____D C:\inetpub
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\es-MX
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\lv-LV
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\lt-LT
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\et-EE
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\es-MX
2019-09-21 22:46 - 2019-09-08 18:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2019-09-21 14:34 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\WinBioPlugIns

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ============================

Addition (log):
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-10-2019
Ran by User (19-10-2019 22:12:56)
Running from C:\Users\User\Desktop
Windows 10 Home Version 1903 18362.418 (X64) (2019-08-24 10:05:29)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1972738465-3544600668-837316972-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1972738465-3544600668-837316972-503 - Limited - Disabled)
Guest (S-1-5-21-1972738465-3544600668-837316972-501 - Limited - Disabled)
User (S-1-5-21-1972738465-3544600668-837316972-1001 - Administrator - Enabled) => C:\Users\User
WDAGUtilityAccount (S-1-5-21-1972738465-3544600668-837316972-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Total Security (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
FW: Kaspersky Total Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.10.1 - Advanced Micro Devices, Inc.)
Branding64 (HKLM\...\{EE2AFCE4-0238-4DE0-A140-1647021627C1}) (Version: 1.00.0001 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.62 - Piriform)
City Car Driving (HKLM-x32\...\City Car Driving_is1) (Version: - )
Defraggler (HKLM\...\Defraggler) (Version: 2.22 - Piriform)
Far Cry 2 (HKLM-x32\...\Far Cry 2_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
Grand Theft Auto IV (HKLM-x32\...\{5454083B-1308-4485-BF17-1110000D8301}) (Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games)
Kaspersky Total Security (HKLM-x32\...\{D891550B-ACFE-4797-B368-BCFC434BBEB1}) (Version: 20.0.14.1085 - Kaspersky) Hidden
Kaspersky Total Security (HKLM-x32\...\InstallWIX_{D891550B-ACFE-4797-B368-BCFC434BBEB1}) (Version: 20.0.14.1085 - Kaspersky)
L.A. Noire verzia 1.3.2617 (HKLM-x32\...\L.A. Noire_is1) (Version: 1.3.2617 - CzTorrent.net)
Lightning Oblivion Shivering Isles Czech (HKLM-x32\...\lgooblivionshiveringislesczech_is1) (Version: 1.0.1.091227 - michal zobec, lightning group company)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.14.26429 (HKLM-x32\...\{80586c77-db42-44bb-bfc8-7aebbb220c00}) (Version: 14.14.26429.4 - Microsoft Corporation)
Mozilla Firefox 69.0.3 (x64 cs) (HKLM\...\Mozilla Firefox 69.0.3 (x64 cs)) (Version: 69.0.3 - Mozilla)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
Oblivion - Horse Armor Pack (HKLM-x32\...\{3ABEBD00-299D-4DCA-967F-B912163AB5EA}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion - Mehrunes Razor (HKLM-x32\...\{EF295F5C-7B57-47AA-8889-6B3E8E214E89}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion - Orrery (HKLM-x32\...\{EC425CFC-EE78-4A91-AA25-3BFA65B75364}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion - Spell Tomes (HKLM-x32\...\{16D919E6-F019-4E15-BFBE-4A85EF19DA57}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion - Thieves Den (HKLM-x32\...\{FFFFFD17-B460-41EB-93F1-C48ABAD63828}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion - Vile Lair (HKLM-x32\...\{520F4B09-3A51-47A2-82B0-9FF1DC2D20FA}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion - Wizard's Tower (HKLM-x32\...\{2F2E3D62-8B8C-448F-8900-451325E50948}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion (HKLM-x32\...\{35CB6715-41F8-4F99-8881-6FC75BF054B0}) (Version: 1.2.0416 - Bethesda Softworks)
OpenIV (HKU\S-1-5-21-1972738465-3544600668-837316972-1001\...\OpenIV) (Version: 3.1.1033 - .black/OpenIV Team)
qBittorrent 4.1.8 (HKLM-x32\...\qBittorrent) (Version: 4.1.8 - The qBittorrent project)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.1 - Rockstar Games)
Spotify (HKU\S-1-5-21-1972738465-3544600668-837316972-1001\...\Spotify) (Version: 1.1.17.543.geb9254e9 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
WinRAR 5.71 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1972738465-3544600668-837316972-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1972738465-3544600668-837316972-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1972738465-3544600668-837316972-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1972738465-3544600668-837316972-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1972738465-3544600668-837316972-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1972738465-3544600668-837316972-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
ContextMenuHandlers1: [DefragglerShellExtension] -> [CC]{4380C993-0C43-4E02-9A7A-0D40B6EA7590} => -> No File
ContextMenuHandlers1: [Kaspersky Anti-Virus 20.0] -> {6E1B4453-548D-4C43-A4AB-DE8D1D3DE17B} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\ShellEx.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
ContextMenuHandlers1: [WinRAR] -> [CC]{B41DB860-64E4-11D2-9906-E49FADC173CA} => -> No File
ContextMenuHandlers1: [WinRAR32] -> [CC]{B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> No File
ContextMenuHandlers2: [Kaspersky Anti-Virus 20.0] -> {6E1B4453-548D-4C43-A4AB-DE8D1D3DE17B} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\ShellEx.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
ContextMenuHandlers4: [Kaspersky Anti-Virus 20.0] -> {6E1B4453-548D-4C43-A4AB-DE8D1D3DE17B} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\ShellEx.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2019-10-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [DefragglerShellExtension] -> [CC]{4380C993-0C43-4E02-9A7A-0D40B6EA7590} => -> No File
ContextMenuHandlers6: [Kaspersky Anti-Virus 20.0] -> {6E1B4453-548D-4C43-A4AB-DE8D1D3DE17B} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\ShellEx.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)

==================== Codecs (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [msacm.vorbis] => C:\Windows\system32\vorbis.acm [1470976 2015-03-11] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [File not signed]
HKLM\...\Drivers32: [msacm.vorbis] => C:\Windows\SysWOW64\vorbis.acm [1554944 2015-03-11] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [File not signed]

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============


==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-1972738465-3544600668-837316972-1001\Software\Classes\regfile: regedit.exe "%1" <==== ATTENTION

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-09-14 14:29 - 2019-09-14 14:37 - 000020449 _____ C:\Windows\system32\drivers\etc\hosts

0.0.0.0 ars.smartscreen.microsoft.com
0.0.0.0 az361816.vo.msecnd.net
0.0.0.0 az512334.vo.msecnd.net
0.0.0.0 blob.weather.microsoft.com
0.0.0.0 candycrushsoda.king.com
0.0.0.0 cdn.content.prod.cms.msn.com
0.0.0.0 cdn.onenote.net
0.0.0.0 choice.microsoft.com
0.0.0.0 choice.microsoft.com.nsatc.net
0.0.0.0 client.wns.windows.com
0.0.0.0 client-s.gateway.messenger.live.com
0.0.0.0 clientconfig.passport.net
0.0.0.0 deploy.static.akamaitechnologies.com
0.0.0.0 device.auth.xboxlive.com
0.0.0.0 dmd.metaservices.microsoft.com
0.0.0.0 dns.msftncsi.com
0.0.0.0 feedback.microsoft-hohm.com
0.0.0.0 feedback.search.microsoft.com
0.0.0.0 feedback.windows.com
0.0.0.0 img-s-msn-com.akamaized.net
0.0.0.0 insiderppe.cloudapp.net
0.0.0.0 licensing.mp.microsoft.com
0.0.0.0 mediaredirect.microsoft.com
0.0.0.0 msftncsi.com
0.0.0.0 officeclient.microsoft.com
0.0.0.0 oneclient.sfx.ms
0.0.0.0 pti.store.microsoft.com
0.0.0.0 query.prod.cms.rt.microsoft.com
0.0.0.0 register.cdpcs.microsoft.com
0.0.0.0 s0.2mdn.net

There are 472 more lines.


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\
HKCU\Environment\\Path -> %USERPROFILE%\AppData\Local\Microsoft\WindowsApps
HKU\S-1-5-21-1972738465-3544600668-837316972-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\User\Desktop\Half_Life_Half_Life_3_video_games-1150275.png
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

MSCONFIG\Services: BTAGService => 3
MSCONFIG\Services: PhoneSvc => 3
MSCONFIG\Services: SensorDataService => 3
MSCONFIG\Services: SensorService => 3
MSCONFIG\Services: SensrSvc => 3
MSCONFIG\Services: SharedAccess => 3
MSCONFIG\Services: TapiSrv => 3
MSCONFIG\Services: TermService => 3
MSCONFIG\Services: vds => 3
MSCONFIG\Services: XblGameSave => 3
MSCONFIG\Services: XboxGipSvc => 3
MSCONFIG\Services: XboxNetApiSvc => 3
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKU\S-1-5-21-1972738465-3544600668-837316972-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{B793DC27-0570-4D50-8733-C24DE19C6DD8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{9260EE1C-2832-49A8-B460-BBA03AE14D76}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{95D5EBC0-9AAA-491B-90BC-2CB78F4038B9}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{396FABB2-E899-4181-A5F1-3032D9B03C02}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{05D813AB-C0AB-4A34-A3BA-40041E45CDE9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe (Valve -> )
FirewallRules: [{43226EEA-DD03-45C6-8A30-ED1FF7CFF3FA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe (Valve -> )
FirewallRules: [{34323EDF-7C65-4D5E-B757-96F3237F9F3F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Source SDK Base 2007\hl2.exe () [File not signed]
FirewallRules: [{F81C4E17-6E22-4903-AEB1-4EAB2826AF3F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Source SDK Base 2007\hl2.exe () [File not signed]
FirewallRules: [{6EE117A7-F264-47D2-BADB-AAB1724FB692}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Source SDK Base 2013 Singleplayer\hl2.exe (Valve -> )
FirewallRules: [{04AAC40C-B3B5-4CF2-A565-C08D11B5674D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Source SDK Base 2013 Singleplayer\hl2.exe (Valve -> )
FirewallRules: [{96F31533-9DDD-4493-9636-E0193A967351}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SourceSDK\bin\SDKLauncher.exe (Valve -> )
FirewallRules: [{C2B8E2D5-10B0-4842-9404-473BDA2A07CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SourceSDK\bin\SDKLauncher.exe (Valve -> )
FirewallRules: [{A11A82E9-420E-41EA-A4A1-3CDE12BBFB12}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Source SDK Base\hl2.exe () [File not signed]
FirewallRules: [{688B1ABD-AF42-4509-A87B-C33CD25C2196}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Source SDK Base\hl2.exe () [File not signed]
FirewallRules: [{27026928-379E-47E4-9851-A119F37D5A5B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{A70125D3-2897-4F01-B3B2-CD9DF6CF5965}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )

==================== Restore Points =========================

11-10-2019 18:37:58 Naplánovaný kontrolní bod
13-10-2019 12:29:35 Driver Booster : Standardní řadič SATA AHCI

==================== Faulty Device Manager Devices =============

Name: AMD High Definition Audio Device
Description: AMD High Definition Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Advanced Micro Devices
Service: AtiHDAudioService
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Standardní klávesnice PS/2
Description: Standardní klávesnice PS/2
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní klávesnice)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Enumerátor virtuálního síťového adaptéru NDIS
Description: Enumerátor virtuálního síťového adaptéru NDIS
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisVirtualBus
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Myš Microsoft PS/2
Description: Myš Microsoft PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Intel(R) Ethernet Connection (7) I219-V
Description: Intel(R) Ethernet Connection (7) I219-V
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service: e1dexpress
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/19/2019 10:06:19 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x8007001f, Zařízení připojené k systému nefunguje.
.


Operace:
Spouštění asynchronní operace

Kontext:
Aktuální stav: DoSnapshotSet

Error: (10/19/2019 10:05:39 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny IVssAsrWriterBackup::GetDiskComponents došlo k neočekávané chybě. hr= 0x8007085a, Služba Pracovní stanice nebyla spuštěna.
.


Operace:
Událost OnIdentify
Shromažďování dat modulu pro zápis

Kontext:
Kontext spuštění: ASR Writer
ID třídy modulu pro zápis: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Název modulu pro zápis: ASR Writer
ID instance modulu pro zápis: {c8384f0a-f5ab-4c15-bf0a-2f962e3be054}

Error: (10/19/2019 09:52:46 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (10/19/2019 09:06:10 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-1972738465-3544600668-837316972-1001}/>.

Error: (10/19/2019 07:28:07 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-1972738465-3544600668-837316972-1001}/>.

Error: (10/19/2019 04:13:49 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-1972738465-3544600668-837316972-1001}/>.

Error: (10/19/2019 12:17:00 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-1972738465-3544600668-837316972-1001}/>.

Error: (10/19/2019 09:47:06 AM) (Source: MsiInstaller) (EventID: 1013) (User: DESKTOP-RKTN858)
Description: Product: NVIDIA PhysX -- Installation terminated


System errors:
=============
Error: (10/19/2019 09:53:46 PM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Služba NetMsmqActivator závisí na následující službě: msmq. Tato služba pravděpodobně není nainstalována.

Error: (10/19/2019 04:15:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (10/19/2019 04:15:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba sdílení portů Net.Tcp byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.

Error: (10/19/2019 04:15:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Adaptér naslouchání Net.Tcp byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.

Error: (10/19/2019 04:15:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Adaptér naslouchání Net.Pipe byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.

Error: (10/19/2019 04:15:13 PM) (Source: WAS) (EventID: 5175) (User: )
Description: Došlo k neočekávanému odpojení adaptéru naslouchání, který obsluhuje protokol net.pipe.

Error: (10/19/2019 04:15:13 PM) (Source: WAS) (EventID: 5175) (User: )
Description: Došlo k neočekávanému odpojení adaptéru naslouchání, který obsluhuje protokol net.tcp.

Error: (10/19/2019 04:14:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Uživatelská služba schránky_3c2f9 neuspěla při spuštění v důsledku následující chyby:
Přístup byl odepřen.


Windows Defender:
===================================
Date: 2019-09-22 12:20:25.998
Description:
Řízený přístup ke složkám zablokoval pro C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV - Complete Edition\EFLC\EFLC.exe možnost upravit %userprofile%\Documents.
Čas detekce: 2019-09-22T10:20:25.997Z
Uživatel: DESKTOP-RKTN858\User
Cesta: %userprofile%\Documents
Název procesu: C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV - Complete Edition\EFLC\EFLC.exe
Verze bezpečnostních informací: 1.301.1896.0
Verze modulu: 1.1.16300.1
Verze produktu: 4.18.1908.7

Date: 2019-09-22 12:17:22.548
Description:
Řízený přístup ke složkám zablokoval pro C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV - Complete Edition\EFLC\EFLC.exe možnost upravit %userprofile%\Documents.
Čas detekce: 2019-09-22T10:17:22.541Z
Uživatel: DESKTOP-RKTN858\User
Cesta: %userprofile%\Documents
Název procesu: C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV - Complete Edition\EFLC\EFLC.exe
Verze bezpečnostních informací: 1.301.1896.0
Verze modulu: 1.1.16300.1
Verze produktu: 4.18.1908.7

Date: 2019-09-22 00:25:15.505
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {D26FC31F-08A7-4B5C-B661-67F55272E698}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2019-09-21 23:57:24.815
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {3B606745-FCF3-484C-A779-96EFAD7EA67A}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2019-09-21 23:15:23.466
Description:
Řízený přístup ke složkám zablokoval pro C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV - Complete Edition\GTAIV\GTAIV.exe možnost upravit %userprofile%\Documents.
Čas detekce: 2019-09-21T21:15:23.465Z
Uživatel: DESKTOP-RKTN858\User
Cesta: %userprofile%\Documents
Název procesu: C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV - Complete Edition\GTAIV\GTAIV.exe
Verze bezpečnostních informací: 1.301.1812.0
Verze modulu: 1.1.16300.1
Verze produktu: 4.18.1908.7

Date: 2019-09-17 18:36:35.615
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.301.1304.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16300.1
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-09-17 18:36:35.615
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.301.1304.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16300.1
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-09-17 18:36:35.615
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.301.1304.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16300.1
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-09-17 18:36:35.608
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.301.1304.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16300.1
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-09-17 18:36:35.608
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.301.1304.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16300.1
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

CodeIntegrity:
===================================

Date: 2019-10-19 21:57:00.721
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-19 21:57:00.704
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-19 21:57:00.686
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-19 21:57:00.668
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-19 21:57:00.649
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-19 21:57:00.631
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-19 21:57:00.613
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-19 21:57:00.594
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 2.60 03/25/2019
Motherboard: Micro-Star International Co., Ltd. H310-F PRO (MS-7B25)
Processor: Intel(R) Core(TM) i3-9100F CPU @ 3.60GHz
Percentage of memory in use: 30%
Total physical RAM: 8129.61 MB
Available physical RAM: 5661.17 MB
Total Virtual: 9409.61 MB
Available Virtual: 5691.22 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.88 GB) (Free:596.94 GB) NTFS

\\?\Volume{f5f587c7-e683-4ce3-9cd0-10b306965eb5}\ (Obnovení) (Fixed) (Total:0.52 GB) (Free:0.1 GB) NTFS
\\?\Volume{9ce7fc94-59cc-4071-948b-96963eaa524e}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 973BAFF4)

Partition: GPT.

==================== End of Addition.txt ============================
Tato nastavení spravuje vaše organizace... (proč???)

[Conder]

Ahoj

Preco chces tuto sluzbu zakazat? Je to legitimna systemova sluzba, navyse sa takymito zasahmi moze znefunkcnit OS.

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

• Uloz na plochu a ukonci vsetky programy
• Spusti AdwCleaner ako spravca
• Odsuhlas licencne podmienky
• Klikni na Skenovat nyni (Scan now) a pockaj na dokoncenie
• Nechaj zaskrtnute vsetky nalezy
• Klikni na Cisteni a opravy (Clean and Repair) a potvrd restart PC teraz
• Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
• Otvori sa log, jeho obsah sem skopiruj

[hodnyJetel]

Myslím že tam byl přidán nějakým sajrajtem, nejsem si jistý jestli je v pořádku že si sám může měnit nastavení Defenderu a Firefoxu...
Tady je log z Adwcleaneru po restartu:
# -------------------------------
# Malwarebytes AdwCleaner 7.4.1.0
# -------------------------------
# Build: 09-04-2019
# Database: 2019-08-27.1 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 10-20-2019
# Duration: 00:00:03
# OS: Windows 10 Home
# Cleaned: 7
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
Deleted C:\ProgramData\IObit\Advanced SystemCare
Deleted C:\Users\User\AppData\LocalLow\IObit\Advanced SystemCare
Deleted C:\Users\User\AppData\Roaming\IObit\Advanced SystemCare
Deleted C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKLM\Software\Wow6432Node\IOBIT\ASC
Deleted HKLM\Software\Wow6432Node\IObit\Advanced SystemCare

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner_Debug.log - [7799 octets] - [20/10/2019 01:48:50]
AdwCleaner[S00].txt - [1939 octets] - [20/10/2019 01:49:35]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

[hodnyJetel]

https://ctrlv.cz/y1rf
Ještě jsem si všiml že u některých složek mám povoléné nějaké sdílení, dalo by se to nějak vypnout? Ani nevím s kým to sdílím...

[Conder]

AdwCleaner zmazal programy od IObit. Len doplnim, ze odporucam nepouzivat programy od IObit (napr. Driver Booster, Advanced SystemCare, Uninstaller, atd.) - su to cinske smejdy, ktore mozu poskodit system.

Poprosim o obidva noev logy z FRST.

O ake zdielanie zlozek ide?

[hodnyJetel]

Tak ASC je pryč a už na nějak ani nemrknu Používám CCleaner
Tady je 1. log z FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-10-2019
Ran by User (administrator) on DESKTOP-RKTN858 (Micro-Star International Co., Ltd. MS-7B25) (20-10-2019 09:14:47)
Running from C:\Users\User\Desktop
Loaded Profiles: User (Available Profiles: User)
Platform: Windows 10 Home Version 1903 18362.418 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0347413.inf_amd64_09c106fe9d27c4e3\B347422\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0347413.inf_amd64_09c106fe9d27c4e3\B347422\atiesrxx.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\avp.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\avpui.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\usocoreworker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [879392 2019-06-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1972738465-3544600668-837316972-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-16] (Piriform Software Ltd -> Piriform Ltd)
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
CHR HKU\S-1-5-21-1972738465-3544600668-837316972-1001\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {22916BE6-DDFF-4745-9E32-8913734D2D1F} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [468992 2019-10-04] (Advanced Micro Devices, Inc.) [File not signed]
Task: {34946E65-F331-4F98-B827-EE7B0159F83E} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [791232 2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
Task: {4DD17FAD-9BD5-4633-883C-3270B4054E93} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61112 2019-10-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {6115A66D-14A9-4D6D-B4FB-C2B200722D7C} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992 2019-10-04] (Advanced Micro Devices, Inc.) [File not signed]
Task: {679BD102-66B7-47AB-8E9B-9880A488AEA3} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\Windows\system32\MRT.exe [127230528 2019-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {A2712814-1D65-4974-9704-8873CC9700EF} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-16] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {C419033D-A037-4A33-B494-23FCA62FD759} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [68280 2019-10-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {DAF7954D-6FBA-4A3E-8A51-EA445375665F} - System32\Tasks\AMDInstallUEP => C:\Program Files\AMD\InstallUEP\AMDInstallUEP.exe [2356736 2019-04-15] () [File not signed]
Task: {EFED2AF6-DC01-43E2-A910-371B7AE4C648} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-16] (Piriform Software Ltd -> Piriform Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.31.1
Tcpip\..\Interfaces\{1d8e42b3-28a5-4938-95a4-3abd4595f97f}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{1d8e42b3-28a5-4938-95a4-3abd4595f97f}: [DhcpNameServer] 192.168.31.1
HKLM\System\...\Parameters\PersistentRoutes: [104.87.88.177,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [104.89.242.39,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [104.96.147.3,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [111.221.29.177,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [111.221.29.253,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.34.230,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.40.37,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.61.100,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.61.64,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.61.68,255.255.255.255,0.0.0.0,1]
PersistentRoutes: There are 82 PersistentRoutes.


Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
BHO: Kaspersky Protection -> {9F904093-6E18-4536-BF5F-B03689CF00F0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\IEExt\ie_plugin.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
BHO-x32: Kaspersky Protection -> {9F904093-6E18-4536-BF5F-B03689CF00F0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\IEExt\ie_plugin.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
Toolbar: HKLM - Kaspersky Protection Toolbar - {EF293C5A-9F37-49FD-91C4-2B867063FC54} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\IEExt\ie_plugin.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {EF293C5A-9F37-49FD-91C4-2B867063FC54} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\IEExt\ie_plugin.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)

Edge:
======
DownloadDir: C:\Users\User\Downloads

FireFox:
========
FF DefaultProfile: axha87ah.default
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\axha87ah.default [2019-10-13]
FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\axha87ah.default\user.js [2019-10-13]
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release [2019-10-20]
FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\user.js [2019-10-13]
FF Extension: (Dark theme for Firefox) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\Extensions\{1afaee19-8dde-4b0e-8c84-f46ca0f02f06}.xpi [2019-09-25]
FF Extension: (No Name) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-09-25]
FF HKLM\...\Firefox\Extensions: [light_plugin_B29D4AD94F82454BBC9215BCBD7E80AE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Ochrana Kaspersky) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\FFExt\light_plugin_firefox\addon.xpi [2019-09-22]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_B29D4AD94F82454BBC9215BCBD7E80AE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\FFExt\light_plugin_firefox\addon.xpi
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-09-25] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-09-25] <==== ATTENTION

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/detail/elhpdacimkjpccooodognopfhbdgnpbk
CHR HKU\S-1-5-21-1972738465-3544600668-837316972-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhnkblpjbkfklfloegejegedcafpliaa] - hxxps://chrome.google.com/webstore/detail/dhnkblpjbkfklfloegejegedcafpliaa
CHR HKLM-x32\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/detail/elhpdacimkjpccooodognopfhbdgnpbk

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD External Events Utility; C:\Windows\System32\DriverStore\FileRepository\u0347413.inf_amd64_09c106fe9d27c4e3\B347422\atiesrxx.exe [508520 2019-10-16] (Advanced Micro Devices, Inc. -> AMD)
R2 AVP20.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\avp.exe [357416 2019-03-21] (Kaspersky Lab -> AO Kaspersky Lab)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8457232 2019-08-26] (BattlEye Innovations e.K. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [802432 2019-08-26] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 klvssbridge64_20.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\vssbridge64.exe [438928 2019-03-21] (Kaspersky Lab -> AO Kaspersky Lab)
S3 mracsvc; C:\Windows\System32\mracsvc.exe [18953880 2019-10-07] (Mail.Ru LLC -> LLC Mail.Ru)
R2 RtkAudioUniversalService; C:\Windows\System32\RtkAudUService64.exe [879392 2019-06-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\NisSrv.exe [3630832 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MsMpEng.exe [103168 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdkmdag; C:\Windows\System32\DriverStore\FileRepository\u0347413.inf_amd64_09c106fe9d27c4e3\B347422\atikmdag.sys [60654696 2019-10-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\Windows\System32\DriverStore\FileRepository\u0347413.inf_amd64_09c106fe9d27c4e3\B347422\atikmpag.sys [597608 2019-10-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [103456 2019-09-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
S3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [108152 2019-07-24] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [246912 2019-02-16] (Kaspersky Lab -> AO Kaspersky Lab)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [135520 2019-07-09] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-10-13] (Martin Malik - REALiX -> REALiX(tm))
R0 iaStorAC; C:\Windows\System32\drivers\iaStorAC.sys [1096192 2019-10-13] (Intel(R) Rapid Storage Technology -> Intel Corporation)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [76624 2019-03-19] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [129152 2019-08-02] (Kaspersky Lab -> AO Kaspersky Lab)
R1 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [93312 2019-03-12] (Kaspersky Lab -> AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [37816 2019-01-24] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [251520 2019-08-02] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klgse; C:\Windows\System32\DRIVERS\klgse.sys [514688 2019-06-13] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [1204856 2019-09-12] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP20.0\Bases\klids.sys [197760 2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [996992 2019-08-02] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klim6; C:\Windows\system32\DRIVERS\klim6.sys [58192 2019-03-19] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [79184 2019-03-18] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [59512 2019-03-18] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [51328 2019-03-13] (Kaspersky Lab -> AO Kaspersky Lab)
S3 klpnpflt; C:\Windows\system32\DRIVERS\klpnpflt.sys [45904 2019-03-10] (Kaspersky Lab -> AO Kaspersky Lab)
R0 klupd_klif_arkmon; C:\Windows\System32\Drivers\klupd_klif_arkmon.sys [251256 2019-10-12] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\Windows\System32\Drivers\klupd_klif_kimul.sys [99152 2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_klark; C:\Windows\System32\Drivers\klupd_klif_klark.sys [306248 2019-10-17] (Kaspersky Lab -> AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\Windows\System32\Drivers\klupd_klif_klbg.sys [119744 2019-10-18] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_mark; C:\Windows\System32\Drivers\klupd_klif_mark.sys [204520 2019-10-12] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [105600 2019-03-05] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [210280 2019-03-13] (Kaspersky Lab -> AO Kaspersky Lab)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [232272 2019-03-19] (Kaspersky Lab -> AO Kaspersky Lab)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [20936 2019-06-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [225944 2019-09-21] (Malwarebytes Inc -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [275232 2019-09-21] (Malwarebytes Corporation -> Malwarebytes)
R3 MEIx64; C:\Windows\System32\DriverStore\FileRepository\heci.inf_amd64_85021432489d6a1c\x64\TeeDriverW8x64.sys [266128 2019-04-17] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
S3 mracdrv; C:\Windows\System32\drivers\mracdrv.sys [18189864 2019-10-07] (Mail.Ru LLC -> LLC Mail.Ru)
R3 netr28ux; C:\Windows\System32\drivers\netr28ux.sys [2224128 2019-03-19] (Microsoft Windows -> MediaTek Inc.)
R3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [56840 2019-10-13] (Synaptics Incorporated -> Synaptics Incorporated)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166752 2019-07-09] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46472 2019-09-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [346336 2019-09-18] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [53984 2019-09-18] (Microsoft Windows -> Microsoft Corporation)
S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [X]
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [X]
S3 cpuz143; \??\C:\Windows\temp\cpuz143\cpuz143_x64.sys [X]
U4 DiagTrack; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-10-20 09:14 - 2019-10-20 09:15 - 000017545 _____ C:\Users\User\Desktop\FRST.txt
2019-10-20 01:48 - 2019-10-20 01:50 - 000000000 ____D C:\AdwCleaner
2019-10-20 01:48 - 2019-10-20 01:48 - 007622344 _____ (Malwarebytes) C:\Users\User\Desktop\adwcleaner_7.4.1.exe
2019-10-20 01:09 - 2019-10-20 01:09 - 000000232 _____ C:\Users\User\Desktop\(6) VOJTĚCH OTRÁVEN V DEN SVÝCH NAROZENIN (pozvánka) - YouTube.URL
2019-10-19 23:58 - 2019-10-20 00:02 - 000000000 ____D C:\Program Files (x86)\Spyware Terminator
2019-10-19 23:57 - 2019-10-19 23:58 - 009694960 _____ (Crawler Group ) C:\Users\User\Downloads\SpywareTerminatorSetup.exe
2019-10-19 22:48 - 2019-10-19 22:48 - 000000229 _____ C:\Users\User\Desktop\VIRY.CZ • Zobrazit fórum - Řešení problémů, logy.URL
2019-10-19 22:09 - 2019-10-20 09:15 - 000000000 ____D C:\FRST
2019-10-19 22:06 - 2019-10-19 22:06 - 000000000 ____D C:\Users\User\AppData\LocalLow\AMD
2019-10-19 22:06 - 2019-10-19 22:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2019-10-19 22:06 - 2019-10-19 22:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Problem Report Wizard
2019-10-19 22:05 - 2019-10-16 19:34 - 001072480 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 001072480 _____ C:\Windows\system32\vulkan-1.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000929280 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000929280 _____ C:\Windows\SysWOW64\vulkan-1.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000851560 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000851560 _____ C:\Windows\system32\vulkaninfo.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000709216 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000709216 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000574056 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Rapidfire64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000493160 _____ C:\Windows\system32\dgtrayicon.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000484968 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\Rapidfire.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000480360 _____ C:\Windows\system32\GameManager64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000416872 _____ C:\Windows\system32\EEURestart.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000381544 _____ C:\Windows\SysWOW64\GameManager32.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000348776 _____ C:\Windows\system32\clinfo.exe
2019-10-19 22:05 - 2019-10-16 19:34 - 000183912 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000162920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000158824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000152680 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000138344 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000090728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mcl64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000075368 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mcl32.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000046696 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\RapidFireServer64.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000043624 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\RapidFireServer.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000019768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\detoured.dll
2019-10-19 22:05 - 2019-10-16 19:34 - 000019768 _____ (Microsoft Corporation) C:\Windows\system32\detoured.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 068015208 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdhip64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 003915368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amfrt64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 003516520 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amfrt32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 001713768 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 001242720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 001242720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000941152 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000768608 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000760936 _____ (AMD) C:\Windows\system32\atieclxx.exe
2019-10-19 22:05 - 2019-10-16 19:33 - 000553576 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmcl64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000468584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000466536 _____ C:\Windows\system32\amdlogum.exe
2019-10-19 22:05 - 2019-10-16 19:33 - 000439912 _____ C:\Windows\system32\atieah64.exe
2019-10-19 22:05 - 2019-10-16 19:33 - 000383584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmcl32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000352352 _____ C:\Windows\SysWOW64\atieah32.exe
2019-10-19 22:05 - 2019-10-16 19:33 - 000242280 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000214120 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000178752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000157592 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000135784 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000134760 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000125544 _____ (AMD) C:\Windows\system32\atimuixx.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000124008 _____ C:\Windows\system32\atidxx64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000121448 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000120936 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdxc64.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000107104 _____ C:\Windows\SysWOW64\atidxx32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000105576 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdxc32.dll
2019-10-19 22:05 - 2019-10-16 19:33 - 000070248 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ati2erec.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 059440232 _____ C:\Windows\system32\amdcomgr64.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 049335912 _____ C:\Windows\SysWOW64\amdcomgr.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 001686000 _____ (AMD) C:\Windows\system32\amf-mft-mjpeg-decoder64.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 001365352 _____ (AMD) C:\Windows\SysWOW64\amf-mft-mjpeg-decoder32.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000554072 _____ C:\Windows\system32\amdmiracast.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000472680 _____ C:\Windows\system32\amdgfxinfo64.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000381544 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000134832 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000128112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000128112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000119232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000107728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2019-10-19 22:05 - 2019-10-16 19:32 - 000107728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2019-10-19 22:04 - 2019-10-19 22:04 - 001616384 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2019-10-19 21:59 - 2019-10-19 22:00 - 435261632 _____ (AMD Inc.) C:\Users\User\Downloads\win10-64bit-radeon-software-adrenalin-2019-edition-19.10.1-oct17.exe
2019-10-19 20:30 - 2019-10-19 20:30 - 000069789 _____ C:\Users\User\Desktop\untitled2.flp
2019-10-19 16:48 - 2019-10-19 21:22 - 000000000 ____D C:\Users\User\Downloads\Half Life 2 CZ Kolekce
2019-10-19 16:05 - 2019-10-19 16:07 - 000002884 _____ C:\Users\User\Downloads\OOSU10.ini
2019-10-19 16:05 - 2019-10-19 16:05 - 001236344 _____ (O&O Software GmbH) C:\Users\User\Downloads\OOSU10.exe
2019-10-18 16:24 - 2019-10-18 16:24 - 000001771 _____ C:\Users\Public\Desktop\Defraggler.lnk
2019-10-18 16:24 - 2019-10-18 16:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2019-10-18 16:24 - 2019-10-18 16:24 - 000000000 ____D C:\Program Files\Defraggler
2019-10-18 16:20 - 2019-10-18 16:20 - 006404096 _____ (Piriform Ltd) C:\Users\User\Downloads\dfsetup222.exe
2019-10-17 16:25 - 2019-10-17 16:25 - 000306248 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klark.sys
2019-10-17 16:24 - 2019-10-18 09:10 - 000119744 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klbg.sys
2019-10-17 16:22 - 2019-10-17 16:22 - 000106327 _____ C:\Users\User\Desktop\untitled.flp
2019-10-13 12:35 - 2019-10-20 01:51 - 076451840 _____ C:\Windows\system32\config\SOFTWARE
2019-10-13 12:35 - 2019-10-20 01:50 - 000385024 _____ C:\Windows\system32\config\DEFAULT
2019-10-13 12:35 - 2019-10-20 01:50 - 000057344 _____ C:\Windows\system32\config\SAM
2019-10-13 12:35 - 2019-10-20 01:50 - 000045056 _____ C:\Windows\system32\config\SECURITY
2019-10-13 12:35 - 2019-10-13 12:35 - 076451840 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2019-10-13 12:35 - 2019-10-13 12:35 - 006348800 _____ C:\Windows\system32\config\DRIVERS.iodefrag.bak
2019-10-13 12:35 - 2019-10-13 12:35 - 000385024 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2019-10-13 12:35 - 2019-10-13 12:35 - 000057344 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2019-10-13 12:35 - 2019-10-13 12:35 - 000045056 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2019-10-13 12:31 - 2019-10-13 12:31 - 001096192 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorAC.sys
2019-10-13 12:31 - 2019-10-13 12:31 - 000592752 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1d65x64.sys
2019-10-13 12:31 - 2019-10-13 12:31 - 000134344 _____ (Intel Corporation) C:\Windows\system32\NicCo4.dll
2019-10-13 12:31 - 2019-10-13 12:31 - 000099704 _____ (Intel Corporation) C:\Windows\system32\NicInstD.dll
2019-10-13 12:31 - 2019-10-13 12:31 - 000089464 _____ (Intel Corporation) C:\Windows\system32\e1dmsg.dll
2019-10-13 12:30 - 2019-10-13 12:30 - 000056840 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2019-10-13 12:30 - 2019-10-13 12:30 - 000003130 _____ C:\Windows\system32\e1d65x64.din
2019-10-13 12:23 - 2019-10-13 12:23 - 000027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2019-10-13 12:19 - 2019-10-13 12:20 - 047845504 _____ (IObit ) C:\Users\User\Downloads\advanced-systemcare-setup.exe
2019-10-12 23:20 - 2019-10-12 23:20 - 000000032 _____ C:\Users\User\d4ac4633ebd6440fa397b84f1bc94a3c.7z
2019-10-12 16:45 - 2019-10-12 20:55 - 000204520 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_mark.sys
2019-10-12 16:45 - 2019-10-12 16:45 - 000251256 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_arkmon.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 025900544 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 025443840 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 022628352 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 019849216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 019811840 _____ (Microsoft Corporation) C:\Windows\system32\HologramWorld.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 018019840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 017787392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 014816256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 009928504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 008010752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 007754240 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 007600664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 007195648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 007015936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 006517640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 006232064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 005915648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 005041664 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 004562688 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 004538880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 004129616 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 004012544 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 003771392 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 003701760 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 003525592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002861568 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002762504 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2019-10-12 16:36 - 2019-10-12 16:36 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2019-10-12 16:36 - 2019-10-12 16:36 - 002723328 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 002703360 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002494440 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002456064 _____ (Microsoft Corporation) C:\Windows\system32\InstallService.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002448712 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002422592 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
2019-10-12 16:36 - 2019-10-12 16:36 - 002314648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002284032 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002236144 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002138472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVCORE.DLL
2019-10-12 16:36 - 2019-10-12 16:36 - 002114048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.CloudStore.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002095104 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002081976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 002000168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001952360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001847808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsservices.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001830200 _____ (Microsoft Corporation) C:\Windows\system32\rdpserverbase.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001748480 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001743672 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001730560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallService.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001721144 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001687040 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001664928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001656392 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001610752 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001563648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001562424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpserverbase.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001439744 _____ (Microsoft Corporation) C:\Windows\system32\usocoreworker.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 001394488 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 001319936 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001283072 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001273392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001217904 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 001214976 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001152016 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001149712 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 001098712 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001084432 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001072952 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 001066496 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 001012792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000923136 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000904208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000890472 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000882688 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000880088 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000856576 _____ C:\Windows\system32\MBR2GPT.EXE
2019-10-12 16:36 - 2019-10-12 16:36 - 000844800 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000843776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000842752 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000829536 _____ (Microsoft Corporation) C:\Windows\system32\BioIso.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000818688 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000774672 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000758584 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000717312 _____ (Microsoft Corporation) C:\Windows\system32\mousocoreworker.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000701952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.FileExplorer.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000690176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000679880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000669496 _____ (Microsoft Corporation) C:\Windows\system32\computecore.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000598024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000596992 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000595456 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000578560 _____ (Microsoft Corporation) C:\Windows\system32\SppExtComObj.Exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000537600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000533504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000530432 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000520192 _____ (Microsoft Corporation) C:\Windows\system32\usosvc.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000516544 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000516408 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000515896 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000513536 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000496640 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.FileExplorer.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000466416 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000462848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000462136 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000456504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 000452408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000436536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 000429568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000422008 _____ (Microsoft Corporation) C:\Windows\system32\SgrmEnclave_secure.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000412152 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000404392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000380216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000355840 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicSvc.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000324408 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000300184 _____ (Microsoft Corporation) C:\Windows\system32\skci.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000261632 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicCapsule.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000247856 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000231936 _____ (Microsoft Corporation) C:\Windows\system32\InstallServiceTasks.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000227840 _____ (Microsoft Corporation) C:\Windows\system32\IndexedDbLegacy.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000225080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 000224768 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2019-10-12 16:36 - 2019-10-12 16:36 - 000224256 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000220472 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000204800 _____ (Microsoft Corporation) C:\Windows\system32\iisRtl.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000202040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000199480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000197632 _____ (Microsoft Corporation) C:\Windows\system32\Win32CompatibilityAppraiserCSP.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000193592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2019-10-12 16:36 - 2019-10-12 16:36 - 000179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallServiceTasks.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IndexedDbLegacy.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000169472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisRtl.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000165832 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000158720 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000150328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000139776 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000122880 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000121856 _____ (Microsoft Corporation) C:\Windows\system32\updatecsp.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000117048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bindflt.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 000108032 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000089088 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicAgent.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\CustomInstallExec.exe
2019-10-12 16:36 - 2019-10-12 16:36 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iemigplugin.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\ahadmin.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000052736 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000039304 _____ (Microsoft Corporation) C:\Windows\system32\NtlmShared.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000037176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wimmount.sys
2019-10-12 16:36 - 2019-10-12 16:36 - 000033048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NtlmShared.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicPS.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ahadmin.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\bindflt.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\cngkeyhelper.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDJPN.DLL
2019-10-12 16:36 - 2019-10-12 16:36 - 000011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngkeyhelper.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbd106.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2019-10-12 16:36 - 2019-10-12 16:36 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2019-10-12 16:30 - 2019-09-20 06:36 - 000492544 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2019-10-12 16:30 - 2019-09-20 06:14 - 000390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2019-10-12 16:19 - 2019-10-12 16:19 - 000003110 _____ C:\Windows\system32\Tasks\AMDLinkUpdate
2019-10-10 15:38 - 2019-10-10 15:38 - 000000000 ____D C:\Users\User\AppData\Local\Chromium
2019-10-10 10:38 - 2019-10-10 10:38 - 000001109 _____ C:\Users\Public\Desktop\L.A. Noire.lnk
2019-10-10 10:38 - 2019-10-10 10:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\L.A. Noire
2019-10-10 10:30 - 2019-10-10 10:38 - 000000000 ____D C:\Program Files (x86)\L.A. Noire
2019-10-09 20:05 - 2019-10-09 20:15 - 000000000 ____D C:\Program Files (x86)\L.A. Noire - The Complete Edition (CZ; MULTi6) [Repack] by Teagan
2019-10-09 16:34 - 2019-10-19 22:06 - 000003162 _____ C:\Windows\system32\Tasks\StartCN
2019-10-09 16:34 - 2019-10-19 22:06 - 000003082 _____ C:\Windows\system32\Tasks\StartDVR
2019-10-09 16:34 - 2019-10-09 16:34 - 000000000 ____D C:\Program Files (x86)\AMD
2019-10-09 16:31 - 2019-10-12 23:24 - 000002746 _____ C:\Windows\system32\Tasks\AMDInstallUEP
2019-10-09 16:30 - 2019-10-09 16:30 - 028290000 _____ (AMD Inc.) C:\Users\User\Downloads\radeon-software-adrenalin-2019-19.10.1-minimalsetup-191007_64bit.exe
2019-10-09 16:08 - 2019-10-09 16:08 - 000182890 _____ C:\Users\User\Desktop\hl7hourwar.flp
2019-10-07 18:49 - 2019-10-20 09:13 - 000004210 _____ C:\Windows\system32\Tasks\CCleaner Update
2019-10-07 18:48 - 2019-10-13 10:47 - 000000000 ____D C:\Users\User\AppData\Local\Spotify
2019-10-07 18:48 - 2019-10-13 10:26 - 000000000 ____D C:\Users\User\AppData\Roaming\Spotify
2019-10-07 18:48 - 2019-10-07 18:48 - 025439168 _____ (Piriform Software Ltd) C:\Users\User\Downloads\cctrialsetup.exe
2019-10-07 18:48 - 2019-10-07 18:48 - 000903680 _____ (Spotify Ltd) C:\Users\User\Downloads\SpotifySetup.exe
2019-10-07 18:48 - 2019-10-07 18:48 - 000001845 _____ C:\Users\User\Desktop\Spotify.lnk
2019-10-07 18:48 - 2019-10-07 18:48 - 000001831 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2019-10-07 18:03 - 2019-10-07 18:03 - 000000000 ____D C:\Users\User\AppData\Local\CrashRpt
2019-10-07 18:02 - 2019-10-07 18:02 - 018953880 _____ (LLC Mail.Ru) C:\Windows\system32\mracsvc.exe
2019-10-07 18:02 - 2019-10-07 18:02 - 018189864 _____ (LLC Mail.Ru) C:\Windows\system32\Drivers\mracdrv.sys
2019-10-07 14:45 - 2019-10-07 14:45 - 003915984 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\SET3964.tmp
2019-10-07 14:45 - 2019-10-07 14:45 - 001714384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\SET3B76.tmp
2019-10-07 14:45 - 2019-10-07 14:45 - 000135384 _____ (Khronos Group) C:\Windows\system32\SET34C7.tmp
2019-10-07 13:56 - 2019-10-07 13:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2019-10-07 13:56 - 2019-10-07 13:56 - 000000000 ____D C:\Program Files\qBittorrent
2019-10-06 12:22 - 2019-10-06 12:23 - 000065872 _____ C:\Users\User\Downloads\hl5.flm
2019-10-05 12:20 - 2019-10-05 12:20 - 004481536 _____ (Microsoft Corporation) C:\Windows\system32\DHolographicDisplay.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 001510752 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 001505320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 001297936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 001244944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000939008 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000904704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\opengl32.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000742912 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000722944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fveapi.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.Internal.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000524800 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2019-10-05 12:20 - 2019-10-05 12:20 - 000417280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000401408 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000387832 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fveapibase.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glu32.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvvmtransport.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000055296 _____ (Microsoft Corporation) C:\Windows\system32\admwprox.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000053760 _____ (Microsoft Corporation) C:\Windows\system32\BdeUISrv.exe
2019-10-05 12:20 - 2019-10-05 12:20 - 000018944 _____ (Microsoft Corporation) C:\Windows\system32\iisreset.exe
2019-10-05 12:20 - 2019-10-05 12:20 - 000015360 _____ (Microsoft Corporation) C:\Windows\system32\wamregps.dll
2019-10-05 12:20 - 2019-10-05 12:20 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\iisrstap.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 007905000 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 007848192 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 007263992 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 006425600 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 006227624 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 006164480 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 006084048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 005865272 _____ (Microsoft Corporation) C:\Windows\system32\spwizimg.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 005764872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 005105152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 004612520 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 004046336 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 003964056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 003742032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneCoreUAPCommonProxyStub.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 003727360 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 003590968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 003553280 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 003386880 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 003184128 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 003105280 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002821120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002799616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 002772032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002590208 _____ C:\Windows\system32\dwmscene.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002552120 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002466304 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002258856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002160640 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002132280 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002120704 _____ (Microsoft Corporation) C:\Windows\system32\WpcDesktopMonSvc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002120272 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 002069504 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001957008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001942528 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001940952 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001913296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001857024 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001845408 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001835008 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001819136 _____ (Microsoft Corporation) C:\Windows\system32\CoreShell.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001788728 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001757096 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-10-05 12:19 - 2019-10-05 12:19 - 001692160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001664376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001657856 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001616784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001616608 _____ (Microsoft Corporation) C:\Windows\system32\ttdrecordcpu.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001607680 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001543168 _____ (Microsoft Corporation) C:\Windows\system32\WindowManagement.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001512320 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 001482040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 001473488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001413704 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001412096 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001383856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001372160 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001366128 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-10-05 12:19 - 2019-10-05 12:19 - 001334064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ttdrecordcpu.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001263616 _____ (Microsoft Corporation) C:\Windows\system32\opengl32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001261800 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001182240 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 001178816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001154656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001150240 _____ (Microsoft Corporation) C:\Windows\system32\InputHost.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001091584 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001080320 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001054872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001047968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001036800 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001029432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 001023128 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 001009152 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000984376 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000975872 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000950784 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000944664 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000931840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000923136 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000893952 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000875008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000874296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000858112 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000841216 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000839680 _____ (Microsoft Corporation) C:\Windows\system32\d3d9on12.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCoreProvisioning.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000833312 _____ (Microsoft Corporation) C:\Windows\system32\pkeyhelper.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000792296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputHost.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000784384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000783480 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000775768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000772656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000765440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000759488 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000750080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.Search.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000735232 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000732176 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000702464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000674072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000673080 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000656960 _____ (Microsoft Corporation) C:\Windows\system32\d3d11on12.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000652800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000647168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000639400 _____ (Microsoft Corporation) C:\Windows\system32\msvcp_win.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.Search.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000623104 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000617784 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000612864 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000606208 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000599552 _____ (Microsoft Corporation) C:\Windows\system32\SmsRouterSvc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000599040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000598016 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000589384 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000587776 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_PCDisplay.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000568336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000563200 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000558592 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000551952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Vid.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000551936 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000551424 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000550400 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000546816 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000541696 _____ (Microsoft Corporation) C:\Windows\system32\ResourceMapper.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000541480 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000539648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9on12.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000518656 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000510464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000507704 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000507152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000501232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp_win.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000500736 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2019-10-05 12:19 - 2019-10-05 12:19 - 000487576 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase_enclave.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000483328 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000476672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000476672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000469504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000463272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000457216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cldflt.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000450560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxdiagn.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000450360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11on12.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000449888 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000448000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsEnvironment.Desktop.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000442704 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000441144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000415808 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000398728 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000392704 _____ (Microsoft Corporation) C:\Windows\system32\NotificationControllerPS.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000383984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000382976 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000379840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000375720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000369664 _____ (Microsoft Corporation) C:\Windows\system32\dxdiag.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000363624 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000359424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\MbbCx.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000355000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000346624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000342896 _____ (Microsoft Corporation) C:\Windows\system32\ttdwriter.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000334936 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\ComposableShellProxyStub.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000315904 _____ (Microsoft Corporation) C:\Windows\system32\dmenterprisediagnostics.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000315392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxdiag.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000293344 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000285696 _____ (Microsoft Corporation) C:\Windows\system32\directxdatabaseupdater.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000285256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000284160 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000283688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ttdwriter.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000282112 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.AppDefaults.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000278080 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000275968 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000275456 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_CapabilityAccess.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000268800 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000268288 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000265216 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\UpdateDeploymentProvider.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000252416 _____ (Microsoft Corporation) C:\Windows\system32\wpnservice.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winnat.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000248832 _____ (Microsoft Corporation) C:\Windows\system32\ManageCI.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000244736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Gpu.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\policymanagerprecheck.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000236544 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000236520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000236032 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000235008 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000223032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000221696 _____ (Microsoft Corporation) C:\Windows\system32\dxgiadaptercache.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000210744 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000208384 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000208184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000206336 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000201016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000199480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\container.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000179512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000178176 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000176440 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000176152 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000174080 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000173568 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000169472 _____ (Microsoft Corporation) C:\Windows\system32\SpatialAudioLicenseSrv.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000163328 _____ (Microsoft Corporation) C:\Windows\system32\glu32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000162304 _____ (Microsoft Corporation) C:\Windows\system32\fwbase.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000159112 _____ (Microsoft Corporation) C:\Windows\system32\devobj.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ComposableShellProxyStub.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000155648 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_AppExecutionAlias.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000152408 _____ (Microsoft Corporation) C:\Windows\system32\KerbClientShared.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000151568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbus.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_BackgroundApps.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imm32.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000140800 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000140496 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prntvpt.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000137864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000137728 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000132608 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_ForceSync.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000132408 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000132096 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinAUG.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000127064 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000125232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KerbClientShared.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\ApplicationControlCSP.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000119840 _____ (Microsoft Corporation) C:\Windows\system32\OpenWith.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000116904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\EaseOfAccessDialog.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000110080 _____ C:\Windows\system32\ResBParser.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000107008 _____ (Microsoft Corporation) C:\Windows\system32\CoreShellExtFramework.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000105832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpenWith.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000105272 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000103936 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000100664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbkmcl.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000093712 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000093184 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000092672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000092624 _____ (Microsoft Corporation) C:\Windows\system32\taskhostw.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EaseOfAccessDialog.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000089544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000088352 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000084496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\rdvvmtransport.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000079376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\uaspstor.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sethc.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\tetheringclient.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000073024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000071680 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000066832 _____ (Microsoft Corporation) C:\Windows\system32\iumcrypt.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\CertEnrollCtrl.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidspi.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\AssignedAccessRuntime.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\devrtl.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\audioresourceregistrar.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\pnppolicy.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000053248 _____ C:\Windows\system32\Drivers\UsbPmApi.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000052752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmstorfl.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000052224 _____ (Microsoft Corporation) C:\Windows\system32\tetheringconfigsp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnrollCtrl.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000047616 _____ C:\Windows\system32\UsbPmApi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AssignedAccessRuntime.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000047000 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000045568 _____ (Microsoft Corporation) C:\Windows\system32\cellulardatacapabilityhandler.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000043536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storvsc.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\WiredNetworkCSP.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\IcsEntitlementHost.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\enrollmentapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000028936 _____ (Microsoft Corporation) C:\Windows\system32\vmbuspipe.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2019-10-05 12:19 - 2019-10-05 12:19 - 000027648 _____ (Microsoft Corporation) C:\Windows\system32\Win32_DeviceGuard.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\CSystemEventsBrokerClient.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000021544 _____ (Microsoft Corporation) C:\Windows\system32\kdhvcom.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000020944 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000019456 _____ (Microsoft Corporation) C:\Windows\system32\wmsgapi.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000016696 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\d3d8thk.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\pacjsworker.exe
2019-10-05 12:19 - 2019-10-05 12:19 - 000011576 _____ (Microsoft Corporation) C:\Windows\system32\uxlibres.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCertResources.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000003584 _____ (Microsoft Corporation) C:\Windows\system32\TpmCertResources.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tier2punctuations.dll
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth9.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth12.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth11.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth10.bin
2019-10-05 12:19 - 2019-10-05 12:19 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2019-10-04 18:02 - 2019-10-04 18:02 - 003471376 _____ C:\Windows\SysWOW64\atiumdva.cap
2019-10-04 18:02 - 2019-10-04 18:02 - 003437632 _____ C:\Windows\system32\atiumd6a.cap
2019-10-04 17:56 - 2019-10-04 17:56 - 000553456 _____ C:\Windows\SysWOW64\atiapfxx.blb
2019-10-04 17:56 - 2019-10-04 17:56 - 000553456 _____ C:\Windows\system32\atiapfxx.blb
2019-10-03 19:52 - 2019-10-03 19:52 - 000000000 ____D C:\Users\User\AppData\Local\modloader
2019-10-03 19:52 - 2019-10-03 19:52 - 000000000 ____D C:\ProgramData\modloader
2019-10-03 18:16 - 2019-10-03 18:16 - 000000000 ____D C:\Users\User\AppData\Local\2K Games
2019-10-03 17:15 - 2019-10-03 17:15 - 000000000 ____D C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2019-10-03 17:15 - 2019-10-03 17:15 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2019-10-03 17:15 - 2019-10-03 17:15 - 000000000 ____D C:\Program Files (x86)\AGEIA Technologies
2019-10-03 17:14 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2019-10-03 16:48 - 2019-10-03 16:48 - 684982272 _____ C:\Users\User\Downloads\codex-call.of.duty.modern.warfare.remastered.iso
2019-10-03 14:57 - 2019-10-03 14:57 - 000000000 ____D C:\Users\User\AppData\Local\My Games
2019-10-03 14:03 - 2019-10-03 14:03 - 000001353 _____ C:\Users\User\Desktop\Far Cry 2.lnk
2019-10-03 14:03 - 2019-10-03 14:03 - 000000000 ____D C:\Users\User\AppData\Roaming\Far Cry 2
2019-10-03 14:03 - 2019-10-03 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2019-10-03 14:00 - 2019-10-03 14:00 - 000000000 ____D C:\Program Files (x86)\R.G. Mechanics
2019-10-02 19:07 - 2019-10-02 19:25 - 1210318848 _____ C:\Users\User\Downloads\Far Cry 1 & 2 - Česká Kolekce.iso
2019-09-29 19:16 - 2019-09-29 19:16 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2019-09-29 01:25 - 2019-09-29 01:25 - 000000000 ____D C:\Users\User\AppData\Local\Oblivion
2019-09-29 00:45 - 2019-09-29 00:51 - 000002198 _____ C:\Users\Public\Desktop\olivion.lnk
2019-09-29 00:45 - 2019-09-29 00:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks
2019-09-29 00:45 - 2019-09-29 00:45 - 000000000 ____D C:\Program Files (x86)\Bethesda Softworks
2019-09-29 00:14 - 2019-09-29 00:31 - 000000000 ____D C:\Users\User\Downloads\The Elder Scrolls - IV - Oblivion CZ 5th Anniversary Edition
2019-09-29 00:03 - 2019-09-04 03:56 - 000835480 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-09-29 00:03 - 2019-09-04 03:56 - 000179816 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2019-09-26 18:27 - 2019-09-26 18:37 - 000000000 ____D C:\Program Files (x86)\FreeArc
2019-09-25 19:59 - 2019-10-13 12:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LCPD First Response
2019-09-25 16:56 - 2019-10-20 09:13 - 000000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
2019-09-25 16:56 - 2019-09-25 16:56 - 000000000 ____D C:\Users\User\AppData\Roaming\Mozilla
2019-09-25 16:56 - 2019-09-25 16:56 - 000000000 ____D C:\Users\User\AppData\Local\Mozilla
2019-09-25 16:55 - 2019-10-12 19:51 - 000001011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-09-25 16:55 - 2019-10-12 19:51 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-09-25 16:55 - 2019-09-25 16:56 - 000000000 ____D C:\ProgramData\Mozilla
2019-09-25 16:55 - 2019-09-25 16:55 - 000000999 _____ C:\Users\Public\Desktop\Firefox.lnk
2019-09-25 11:00 - 2019-10-09 16:31 - 000000060 _____ C:\ProgramData\SoftwareUpdateTemp.xml
2019-09-25 11:00 - 2019-09-25 11:00 - 000000000 ____D C:\Users\User\AppData\Roaming\ATI
2019-09-25 11:00 - 2019-09-25 11:00 - 000000000 ____D C:\ProgramData\ATI
2019-09-22 18:45 - 2019-09-22 18:45 - 000000000 ____D C:\Users\User\Documents\OpenIV
2019-09-22 18:42 - 2019-09-22 18:45 - 000001313 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\OpenIV.lnk
2019-09-22 18:42 - 2019-09-22 18:45 - 000000000 ____D C:\Users\User\AppData\Local\New Technology Studio
2019-09-22 15:26 - 2019-10-10 15:38 - 000000000 ____D C:\Users\User\Documents\Rockstar Games
2019-09-22 14:34 - 2019-10-20 01:52 - 000032768 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.product_registry.kvdb-shm
2019-09-22 14:34 - 2019-10-20 01:52 - 000032768 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.browser_extension_registry.kvdb-shm
2019-09-22 14:34 - 2019-10-19 21:55 - 000032768 _____ C:\Windows\SysWOW64\antimalware.patch_management.product_registry.kvdb-shm
2019-09-22 14:34 - 2019-10-13 13:09 - 000032992 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.product_registry.kvdb-wal
2019-09-22 14:34 - 2019-10-07 13:56 - 000045352 _____ C:\Windows\SysWOW64\antimalware.patch_management.product_registry.kvdb-wal
2019-09-22 14:34 - 2019-09-22 14:34 - 000012288 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.product_registry.kvdb
2019-09-22 14:34 - 2019-09-22 14:34 - 000012288 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.browser_extension_registry.kvdb
2019-09-22 14:34 - 2019-09-22 14:34 - 000012288 _____ C:\Windows\SysWOW64\antimalware.patch_management.product_registry.kvdb
2019-09-22 14:34 - 2019-09-22 14:34 - 000000000 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.browser_extension_registry.kvdb-wal
2019-09-22 13:31 - 2019-09-22 13:31 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2019-09-22 12:31 - 2019-09-22 12:31 - 000003392 _____ C:\Windows\system32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
2019-09-22 12:30 - 2019-10-20 09:15 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2019-09-22 12:30 - 2019-09-25 19:33 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2019-09-22 12:30 - 2019-09-22 12:31 - 000000000 ____D C:\Program Files\Common Files\AV
2019-09-22 12:30 - 2019-09-22 12:30 - 000099152 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_kimul.sys
2019-09-22 12:30 - 2019-09-22 12:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security
2019-09-22 12:30 - 2019-08-02 14:39 - 000996992 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2019-09-22 12:30 - 2019-08-02 14:39 - 000251520 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2019-09-22 12:30 - 2013-05-06 08:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2019-09-21 23:14 - 2019-09-21 23:14 - 000000000 __SHD C:\ProgramData\SecuROM
2019-09-21 23:14 - 2019-09-21 23:14 - 000000000 ____D C:\Users\User\AppData\Local\Rockstar Games
2019-09-21 23:14 - 2019-09-21 23:14 - 000000000 ____D C:\ProgramData\XLive
2019-09-21 23:08 - 2019-09-21 23:08 - 000275232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2019-09-21 23:07 - 2019-09-21 23:07 - 000000000 ____D C:\Windows\SysWOW64\BestPractices
2019-09-21 23:07 - 2019-09-21 23:07 - 000000000 ____D C:\Windows\system32\BestPractices
2019-09-21 21:21 - 2019-10-19 17:40 - 000000000 ____D C:\Users\User\AppData\Roaming\qBittorrent
2019-09-21 21:21 - 2019-09-21 21:21 - 000000000 ____D C:\Users\User\AppData\Local\qBittorrent
2019-09-21 16:57 - 2019-09-21 16:57 - 000225944 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-10-20 02:02 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-10-20 01:58 - 2019-08-24 12:08 - 001963158 _____ C:\Windows\system32\PerfStringBackup.INI
2019-10-20 01:58 - 2019-03-19 13:55 - 000810566 _____ C:\Windows\system32\perfh005.dat
2019-10-20 01:58 - 2019-03-19 13:55 - 000187596 _____ C:\Windows\system32\perfc005.dat
2019-10-20 01:58 - 2019-03-19 06:50 - 000000000 ____D C:\Windows\INF
2019-10-20 01:51 - 2019-08-24 12:57 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-10-20 01:50 - 2019-09-03 17:31 - 000000000 ____D C:\Users\User\AppData\LocalLow\IObit
2019-10-20 01:50 - 2019-09-03 17:29 - 000000000 ____D C:\Users\User\AppData\Roaming\IObit
2019-10-20 01:50 - 2019-09-03 17:29 - 000000000 ____D C:\ProgramData\IObit
2019-10-20 01:50 - 2019-08-24 12:20 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2019-10-20 01:50 - 2019-03-19 06:37 - 000262144 _____ C:\Windows\system32\config\BBI
2019-10-19 22:06 - 2019-08-24 12:20 - 000000000 ____D C:\Users\User\AppData\Local\AMD
2019-10-19 22:06 - 2019-08-24 12:20 - 000000000 ____D C:\Program Files\AMD
2019-10-19 22:01 - 2019-09-06 18:05 - 000000000 ____D C:\AMD
2019-10-19 21:36 - 2019-08-26 19:03 - 000000000 ____D C:\Program Files (x86)\Steam
2019-10-19 19:28 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\LiveKernelReports
2019-10-19 17:58 - 2019-08-24 12:57 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-10-18 13:43 - 2019-09-03 17:30 - 000000000 ____D C:\Program Files (x86)\IObit
2019-10-18 09:13 - 2019-09-04 12:53 - 000000000 ____D C:\Program Files\CCleaner
2019-10-14 09:15 - 2019-03-19 06:37 - 000032768 _____ C:\Windows\system32\config\ELAM
2019-10-13 13:09 - 2019-09-03 17:30 - 000000000 ____D C:\ProgramData\ProductData
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ___RD C:\Windows\PrintDialog
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\oobe
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\inetsrv
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\Dism
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SystemResources
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\oobe
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\inetsrv
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\Dism
2019-10-13 00:13 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\bcastdvr
2019-10-12 23:46 - 2019-09-06 18:09 - 000002452 _____ C:\Windows\system32\Tasks\ModifyLinkUpdate
2019-10-12 23:21 - 2019-09-06 13:35 - 000000000 ____D C:\Program Files (x86)\Nox
2019-10-12 23:21 - 2019-09-06 13:34 - 000000000 ____D C:\Users\User\AppData\Local\Nox
2019-10-12 23:19 - 2019-09-06 13:36 - 000000000 ____D C:\Users\User\AppData\Local\NoxSrv
2019-10-12 23:19 - 2019-09-06 13:35 - 000000000 ____D C:\Users\User\vmlogs
2019-10-12 16:40 - 2019-08-26 21:19 - 000000000 ____D C:\Windows\system32\MRT
2019-10-12 16:38 - 2019-08-26 21:18 - 127230528 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-10-12 16:38 - 2019-03-19 06:37 - 000000000 ____D C:\Windows\CbsTemp
2019-10-12 09:03 - 2019-08-26 21:46 - 000000000 ____D C:\Users\User\AppData\Local\DayZ Launcher
2019-10-10 23:20 - 2019-09-17 15:03 - 000000000 ____D C:\Users\User\Desktop\My Songs
2019-10-10 10:39 - 2019-09-08 18:51 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
2019-10-09 16:51 - 2019-08-26 19:40 - 000000000 ____D C:\Users\User\AppData\Local\DayZ
2019-10-07 18:49 - 2019-09-04 12:53 - 000000865 _____ C:\Users\Public\Desktop\CCleaner.lnk
2019-10-07 16:55 - 2019-09-10 19:42 - 000001337 _____ C:\Users\User\Desktop\City Car Driving.lnk
2019-10-06 12:02 - 2019-08-26 21:11 - 000000000 ____D C:\Users\User\AppData\Local\ElevatedDiagnostics
2019-10-05 20:05 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\AppReadiness
2019-10-05 20:03 - 2019-08-24 12:13 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-10-05 20:03 - 2019-08-24 12:13 - 000000000 ___RD C:\Users\User\3D Objects
2019-10-05 20:01 - 2019-08-24 12:56 - 000258096 _____ C:\Windows\system32\FNTCACHE.DAT
2019-10-05 19:59 - 2019-03-19 06:52 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2019-10-05 19:59 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\WinMetadata
2019-10-05 19:59 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\migwiz
2019-10-05 19:59 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\PolicyDefinitions
2019-10-03 19:21 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\spool
2019-10-03 14:04 - 2019-08-26 22:41 - 000000000 ____D C:\Users\User\Documents\My Games
2019-10-03 14:04 - 2019-08-24 12:20 - 000000000 ____D C:\Users\User\AppData\Local\D3DSCache
2019-09-29 02:48 - 2019-08-24 12:05 - 000000000 ____D C:\Windows\minidump
2019-09-29 02:06 - 2019-08-24 12:13 - 000000000 ____D C:\Users\User\AppData\Local\VirtualStore
2019-09-29 01:01 - 2019-09-08 18:51 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2019-09-25 16:56 - 2019-09-04 14:03 - 000000000 ____D C:\Users\User\AppData\Local\Google
2019-09-25 16:56 - 2019-09-04 14:03 - 000000000 ____D C:\Program Files (x86)\Google
2019-09-22 12:30 - 2019-03-19 06:52 - 000000000 ___HD C:\Windows\ELAMBKUP
2019-09-21 23:07 - 2019-09-11 13:50 - 000000000 ____D C:\inetpub
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\es-MX
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\lv-LV
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\lt-LT
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\et-EE
2019-09-21 23:07 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\es-MX
2019-09-21 22:46 - 2019-09-08 18:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2019-09-21 14:34 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\WinBioPlugIns

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ============================

[hodnyJetel]

Zde je 2. log Addition
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-10-2019
Ran by User (20-10-2019 09:16:25)
Running from C:\Users\User\Desktop
Windows 10 Home Version 1903 18362.418 (X64) (2019-08-24 10:05:29)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1972738465-3544600668-837316972-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1972738465-3544600668-837316972-503 - Limited - Disabled)
Guest (S-1-5-21-1972738465-3544600668-837316972-501 - Limited - Disabled)
User (S-1-5-21-1972738465-3544600668-837316972-1001 - Administrator - Enabled) => C:\Users\User
WDAGUtilityAccount (S-1-5-21-1972738465-3544600668-837316972-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Total Security (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
FW: Kaspersky Total Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.10.1 - Advanced Micro Devices, Inc.)
Branding64 (HKLM\...\{EE2AFCE4-0238-4DE0-A140-1647021627C1}) (Version: 1.00.0001 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.62 - Piriform)
City Car Driving (HKLM-x32\...\City Car Driving_is1) (Version: - )
Defraggler (HKLM\...\Defraggler) (Version: 2.22 - Piriform)
Far Cry 2 (HKLM-x32\...\Far Cry 2_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
Grand Theft Auto IV (HKLM-x32\...\{5454083B-1308-4485-BF17-1110000D8301}) (Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games)
Kaspersky Total Security (HKLM-x32\...\{D891550B-ACFE-4797-B368-BCFC434BBEB1}) (Version: 20.0.14.1085 - Kaspersky) Hidden
Kaspersky Total Security (HKLM-x32\...\InstallWIX_{D891550B-ACFE-4797-B368-BCFC434BBEB1}) (Version: 20.0.14.1085 - Kaspersky)
L.A. Noire verzia 1.3.2617 (HKLM-x32\...\L.A. Noire_is1) (Version: 1.3.2617 - CzTorrent.net)
Lightning Oblivion Shivering Isles Czech (HKLM-x32\...\lgooblivionshiveringislesczech_is1) (Version: 1.0.1.091227 - michal zobec, lightning group company)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.14.26429 (HKLM-x32\...\{80586c77-db42-44bb-bfc8-7aebbb220c00}) (Version: 14.14.26429.4 - Microsoft Corporation)
Mozilla Firefox 69.0.3 (x64 cs) (HKLM\...\Mozilla Firefox 69.0.3 (x64 cs)) (Version: 69.0.3 - Mozilla)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
Oblivion - Horse Armor Pack (HKLM-x32\...\{3ABEBD00-299D-4DCA-967F-B912163AB5EA}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion - Mehrunes Razor (HKLM-x32\...\{EF295F5C-7B57-47AA-8889-6B3E8E214E89}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion - Orrery (HKLM-x32\...\{EC425CFC-EE78-4A91-AA25-3BFA65B75364}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion - Spell Tomes (HKLM-x32\...\{16D919E6-F019-4E15-BFBE-4A85EF19DA57}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion - Thieves Den (HKLM-x32\...\{FFFFFD17-B460-41EB-93F1-C48ABAD63828}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion - Vile Lair (HKLM-x32\...\{520F4B09-3A51-47A2-82B0-9FF1DC2D20FA}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion - Wizard's Tower (HKLM-x32\...\{2F2E3D62-8B8C-448F-8900-451325E50948}) (Version: 1.00.0000 - Bethesda Softworks)
Oblivion (HKLM-x32\...\{35CB6715-41F8-4F99-8881-6FC75BF054B0}) (Version: 1.2.0416 - Bethesda Softworks)
OpenIV (HKU\S-1-5-21-1972738465-3544600668-837316972-1001\...\OpenIV) (Version: 3.1.1033 - .black/OpenIV Team)
qBittorrent 4.1.8 (HKLM-x32\...\qBittorrent) (Version: 4.1.8 - The qBittorrent project)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.1 - Rockstar Games)
Spotify (HKU\S-1-5-21-1972738465-3544600668-837316972-1001\...\Spotify) (Version: 1.1.17.543.geb9254e9 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
WinRAR 5.71 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1972738465-3544600668-837316972-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1972738465-3544600668-837316972-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1972738465-3544600668-837316972-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1972738465-3544600668-837316972-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1972738465-3544600668-837316972-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1972738465-3544600668-837316972-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
ContextMenuHandlers1: [DefragglerShellExtension] -> [CC]{4380C993-0C43-4E02-9A7A-0D40B6EA7590} => -> No File
ContextMenuHandlers1: [Kaspersky Anti-Virus 20.0] -> {6E1B4453-548D-4C43-A4AB-DE8D1D3DE17B} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\ShellEx.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
ContextMenuHandlers1: [WinRAR] -> [CC]{B41DB860-64E4-11D2-9906-E49FADC173CA} => -> No File
ContextMenuHandlers1: [WinRAR32] -> [CC]{B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> No File
ContextMenuHandlers2: [Kaspersky Anti-Virus 20.0] -> {6E1B4453-548D-4C43-A4AB-DE8D1D3DE17B} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\ShellEx.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
ContextMenuHandlers4: [Kaspersky Anti-Virus 20.0] -> {6E1B4453-548D-4C43-A4AB-DE8D1D3DE17B} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\ShellEx.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2019-10-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [DefragglerShellExtension] -> [CC]{4380C993-0C43-4E02-9A7A-0D40B6EA7590} => -> No File
ContextMenuHandlers6: [Kaspersky Anti-Virus 20.0] -> {6E1B4453-548D-4C43-A4AB-DE8D1D3DE17B} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\ShellEx.dll [2019-09-22] (Kaspersky Lab -> AO Kaspersky Lab)

==================== Codecs (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [msacm.vorbis] => C:\Windows\system32\vorbis.acm [1470976 2015-03-11] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [File not signed]
HKLM\...\Drivers32: [msacm.vorbis] => C:\Windows\SysWOW64\vorbis.acm [1554944 2015-03-11] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [File not signed]

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============


==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-1972738465-3544600668-837316972-1001\Software\Classes\regfile: regedit.exe "%1" <==== ATTENTION

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-09-14 14:29 - 2019-09-14 14:37 - 000020449 _____ C:\Windows\system32\drivers\etc\hosts

0.0.0.0 ars.smartscreen.microsoft.com
0.0.0.0 az361816.vo.msecnd.net
0.0.0.0 az512334.vo.msecnd.net
0.0.0.0 blob.weather.microsoft.com
0.0.0.0 candycrushsoda.king.com
0.0.0.0 cdn.content.prod.cms.msn.com
0.0.0.0 cdn.onenote.net
0.0.0.0 choice.microsoft.com
0.0.0.0 choice.microsoft.com.nsatc.net
0.0.0.0 client.wns.windows.com
0.0.0.0 client-s.gateway.messenger.live.com
0.0.0.0 clientconfig.passport.net
0.0.0.0 deploy.static.akamaitechnologies.com
0.0.0.0 device.auth.xboxlive.com
0.0.0.0 dmd.metaservices.microsoft.com
0.0.0.0 dns.msftncsi.com
0.0.0.0 feedback.microsoft-hohm.com
0.0.0.0 feedback.search.microsoft.com
0.0.0.0 feedback.windows.com
0.0.0.0 img-s-msn-com.akamaized.net
0.0.0.0 insiderppe.cloudapp.net
0.0.0.0 licensing.mp.microsoft.com
0.0.0.0 mediaredirect.microsoft.com
0.0.0.0 msftncsi.com
0.0.0.0 officeclient.microsoft.com
0.0.0.0 oneclient.sfx.ms
0.0.0.0 pti.store.microsoft.com
0.0.0.0 query.prod.cms.rt.microsoft.com
0.0.0.0 register.cdpcs.microsoft.com
0.0.0.0 s0.2mdn.net

There are 472 more lines.


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\
HKCU\Environment\\Path -> %USERPROFILE%\AppData\Local\Microsoft\WindowsApps
HKU\S-1-5-21-1972738465-3544600668-837316972-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\User\Desktop\Half_Life_Half_Life_3_video_games-1150275.png
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

MSCONFIG\Services: BTAGService => 3
MSCONFIG\Services: PhoneSvc => 3
MSCONFIG\Services: SensorDataService => 3
MSCONFIG\Services: SensorService => 3
MSCONFIG\Services: SensrSvc => 3
MSCONFIG\Services: SharedAccess => 3
MSCONFIG\Services: TapiSrv => 3
MSCONFIG\Services: TermService => 3
MSCONFIG\Services: vds => 3
MSCONFIG\Services: XblGameSave => 3
MSCONFIG\Services: XboxGipSvc => 3
MSCONFIG\Services: XboxNetApiSvc => 3
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKU\S-1-5-21-1972738465-3544600668-837316972-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{B793DC27-0570-4D50-8733-C24DE19C6DD8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{9260EE1C-2832-49A8-B460-BBA03AE14D76}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{95D5EBC0-9AAA-491B-90BC-2CB78F4038B9}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{396FABB2-E899-4181-A5F1-3032D9B03C02}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{05D813AB-C0AB-4A34-A3BA-40041E45CDE9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe (Valve -> )
FirewallRules: [{43226EEA-DD03-45C6-8A30-ED1FF7CFF3FA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe (Valve -> )
FirewallRules: [{34323EDF-7C65-4D5E-B757-96F3237F9F3F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Source SDK Base 2007\hl2.exe () [File not signed]
FirewallRules: [{F81C4E17-6E22-4903-AEB1-4EAB2826AF3F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Source SDK Base 2007\hl2.exe () [File not signed]
FirewallRules: [{6EE117A7-F264-47D2-BADB-AAB1724FB692}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Source SDK Base 2013 Singleplayer\hl2.exe (Valve -> )
FirewallRules: [{04AAC40C-B3B5-4CF2-A565-C08D11B5674D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Source SDK Base 2013 Singleplayer\hl2.exe (Valve -> )
FirewallRules: [{96F31533-9DDD-4493-9636-E0193A967351}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SourceSDK\bin\SDKLauncher.exe (Valve -> )
FirewallRules: [{C2B8E2D5-10B0-4842-9404-473BDA2A07CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SourceSDK\bin\SDKLauncher.exe (Valve -> )
FirewallRules: [{A11A82E9-420E-41EA-A4A1-3CDE12BBFB12}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Source SDK Base\hl2.exe () [File not signed]
FirewallRules: [{688B1ABD-AF42-4509-A87B-C33CD25C2196}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Source SDK Base\hl2.exe () [File not signed]
FirewallRules: [{27026928-379E-47E4-9851-A119F37D5A5B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{A70125D3-2897-4F01-B3B2-CD9DF6CF5965}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )

==================== Restore Points =========================

11-10-2019 18:37:58 Naplánovaný kontrolní bod
13-10-2019 12:29:35 Driver Booster : Standardní řadič SATA AHCI

==================== Faulty Device Manager Devices =============

Name: AMD High Definition Audio Device
Description: AMD High Definition Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Advanced Micro Devices
Service: AtiHDAudioService
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Microsoft Device Association Root Enumerator
Description: Obecné softwarové zařízení
Class Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
Manufacturer: Microsoft
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Standardní klávesnice PS/2
Description: Standardní klávesnice PS/2
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní klávesnice)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Enumerátor virtuálního síťového adaptéru NDIS
Description: Enumerátor virtuálního síťového adaptéru NDIS
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisVirtualBus
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Myš Microsoft PS/2
Description: Myš Microsoft PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Intel(R) Ethernet Connection (7) I219-V
Description: Intel(R) Ethernet Connection (7) I219-V
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service: e1dexpress
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/20/2019 01:50:19 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (10/20/2019 01:50:19 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (10/20/2019 01:50:19 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (10/20/2019 01:50:19 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (10/19/2019 11:20:10 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-1972738465-3544600668-837316972-1001}/>.

Error: (10/19/2019 10:06:19 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x8007001f, Zařízení připojené k systému nefunguje.
.


Operace:
Spouštění asynchronní operace

Kontext:
Aktuální stav: DoSnapshotSet

Error: (10/19/2019 10:05:39 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny IVssAsrWriterBackup::GetDiskComponents došlo k neočekávané chybě. hr= 0x8007085a, Služba Pracovní stanice nebyla spuštěna.
.


Operace:
Událost OnIdentify
Shromažďování dat modulu pro zápis

Kontext:
Kontext spuštění: ASR Writer
ID třídy modulu pro zápis: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Název modulu pro zápis: ASR Writer
ID instance modulu pro zápis: {c8384f0a-f5ab-4c15-bf0a-2f962e3be054}

Error: (10/19/2019 09:52:46 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]


System errors:
=============
Error: (10/20/2019 09:11:30 AM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: )
Description: Na miniportu TP-LINK Wireless USB Adapter, {1d8e42b3-28a5-4938-95a4-3abd4595f97f}, došlo k události 74.

Error: (10/20/2019 01:51:23 AM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Služba NetMsmqActivator závisí na následující službě: msmq. Tato služba pravděpodobně není nainstalována.

Error: (10/19/2019 09:53:46 PM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Služba NetMsmqActivator závisí na následující službě: msmq. Tato služba pravděpodobně není nainstalována.

Error: (10/19/2019 04:15:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (10/19/2019 04:15:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba sdílení portů Net.Tcp byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.

Error: (10/19/2019 04:15:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Adaptér naslouchání Net.Tcp byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.

Error: (10/19/2019 04:15:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Adaptér naslouchání Net.Pipe byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.

Error: (10/19/2019 04:15:13 PM) (Source: WAS) (EventID: 5175) (User: )
Description: Došlo k neočekávanému odpojení adaptéru naslouchání, který obsluhuje protokol net.pipe.


Windows Defender:
===================================
Date: 2019-09-22 12:20:25.998
Description:
Řízený přístup ke složkám zablokoval pro C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV - Complete Edition\EFLC\EFLC.exe možnost upravit %userprofile%\Documents.
Čas detekce: 2019-09-22T10:20:25.997Z
Uživatel: DESKTOP-RKTN858\User
Cesta: %userprofile%\Documents
Název procesu: C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV - Complete Edition\EFLC\EFLC.exe
Verze bezpečnostních informací: 1.301.1896.0
Verze modulu: 1.1.16300.1
Verze produktu: 4.18.1908.7

Date: 2019-09-22 12:17:22.548
Description:
Řízený přístup ke složkám zablokoval pro C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV - Complete Edition\EFLC\EFLC.exe možnost upravit %userprofile%\Documents.
Čas detekce: 2019-09-22T10:17:22.541Z
Uživatel: DESKTOP-RKTN858\User
Cesta: %userprofile%\Documents
Název procesu: C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV - Complete Edition\EFLC\EFLC.exe
Verze bezpečnostních informací: 1.301.1896.0
Verze modulu: 1.1.16300.1
Verze produktu: 4.18.1908.7

Date: 2019-09-22 00:25:15.505
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {D26FC31F-08A7-4B5C-B661-67F55272E698}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2019-09-21 23:57:24.815
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {3B606745-FCF3-484C-A779-96EFAD7EA67A}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2019-09-21 23:15:23.466
Description:
Řízený přístup ke složkám zablokoval pro C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV - Complete Edition\GTAIV\GTAIV.exe možnost upravit %userprofile%\Documents.
Čas detekce: 2019-09-21T21:15:23.465Z
Uživatel: DESKTOP-RKTN858\User
Cesta: %userprofile%\Documents
Název procesu: C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV - Complete Edition\GTAIV\GTAIV.exe
Verze bezpečnostních informací: 1.301.1812.0
Verze modulu: 1.1.16300.1
Verze produktu: 4.18.1908.7

Date: 2019-09-17 18:36:35.615
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.301.1304.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16300.1
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-09-17 18:36:35.615
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.301.1304.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16300.1
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-09-17 18:36:35.615
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.301.1304.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16300.1
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-09-17 18:36:35.608
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.301.1304.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16300.1
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-09-17 18:36:35.608
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.301.1304.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16300.1
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

CodeIntegrity:
===================================

Date: 2019-10-20 01:54:40.530
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-20 01:54:40.512
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-20 01:54:40.493
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-20 01:54:40.474
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-20 01:54:40.455
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-20 01:54:40.435
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-20 01:54:40.417
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

Date: 2019-10-20 01:54:40.397
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 20.0\x64\antimalware_provider.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 2.60 03/25/2019
Motherboard: Micro-Star International Co., Ltd. H310-F PRO (MS-7B25)
Processor: Intel(R) Core(TM) i3-9100F CPU @ 3.60GHz
Percentage of memory in use: 28%
Total physical RAM: 8129.61 MB
Available physical RAM: 5851.48 MB
Total Virtual: 9409.61 MB
Available Virtual: 6453.3 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.88 GB) (Free:596.88 GB) NTFS

\\?\Volume{f5f587c7-e683-4ce3-9cd0-10b306965eb5}\ (Obnovení) (Fixed) (Total:0.52 GB) (Free:0.1 GB) NTFS
\\?\Volume{9ce7fc94-59cc-4071-948b-96963eaa524e}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 973BAFF4)

Partition: GPT.

==================== End of Addition.txt ============================

[hodnyJetel]

Ten Shell proces se mi nějak nezdá...
https://ctrlv.cz/Kzlj part 1 správce úloh
https://ctrlv.cz/Ye6m part 2 správce úloh

https://ctrlv.cz/jBvR part 1 služby
https://ctrlv.cz/cJG5 part 2 služby

https://ctrlv.cz/UmPV nechápu proč má oprávnění složek TrustedInstaller
https://ctrlv.cz/wZI1 ten zásad skupin se se*e všude kam se dá...

[hodnyJetel]

Ten powershell se nedá ani vypnout, přístup byl odepřen
https://ctrlv.cz/7rtj

[Conder]

Procesy aj sluzby v screenshote vyzeraju OK, nic nestandardne tam nevidim. Proces "WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe" patri k programu Klavesnica na obrazovke.

TrustedInstaller je systemovy ucet potrebny pre fungovanie OS.

A co sa tyka toho PowerShellu, tak to je takisto standardny zaznam v registroch (vytvoreny Windowsom), aby bolo mozne spustit PowerShell (nahrada za prikazovy riadok) z kontextoveho menu.

Opat opakujem, ze neodporucam robit podobne zasahy do OS, ak s urcitostou nevies, co vlastne robis alebo naco sluzia dane sluzby/nastavenia, inak riskujes poskodenie OS.

Fixlist nizsie by mal okrem ineho odstranit obmedzenia vo Firefoxe a precistit PC od zbytocnosti.

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
  File: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  CMD: type "C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\axha87ah.default\user.js"
  CMD: type "C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\user.js"
  CMD: type "C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js"
  CMD: type "C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg"
  CMD: dir "C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP"
  
  GroupPolicy: Restriction ? <==== ATTENTION
  FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
  CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
  CHR HKU\S-1-5-21-1972738465-3544600668-837316972-1001\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
  HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
  HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
  HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
  HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
  FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\axha87ah.default\user.js [2019-10-13]
  FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\user.js [2019-10-13]
  FF Extension: (No Name) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-09-25]
  FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-09-25] <==== ATTENTION (Points to *.cfg file)
  FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-09-25] <==== ATTENTION
  S3 mracsvc; C:\Windows\System32\mracsvc.exe [18953880 2019-10-07] (Mail.Ru LLC -> LLC Mail.Ru)
  S3 mracdrv; C:\Windows\System32\drivers\mracdrv.sys [18189864 2019-10-07] (Mail.Ru LLC -> LLC Mail.Ru)
  S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [X]
  S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [X]
  S3 cpuz143; \??\C:\Windows\temp\cpuz143\cpuz143_x64.sys [X]
  2019-10-13 12:19 - 2019-10-13 12:20 - 047845504 _____ (IObit ) C:\Users\User\Downloads\advanced-systemcare-setup.exe
  2019-10-07 18:02 - 2019-10-07 18:02 - 018953880 _____ (LLC Mail.Ru) C:\Windows\system32\mracsvc.exe
  2019-10-07 18:02 - 2019-10-07 18:02 - 018189864 _____ (LLC Mail.Ru) C:\Windows\system32\Drivers\mracdrv.sys
  2019-10-03 17:15 - 2019-10-03 17:15 - 000000000 ____D C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
  2019-10-20 01:50 - 2019-09-03 17:31 - 000000000 ____D C:\Users\User\AppData\LocalLow\IObit
  2019-10-20 01:50 - 2019-09-03 17:29 - 000000000 ____D C:\Users\User\AppData\Roaming\IObit
  2019-10-20 01:50 - 2019-09-03 17:29 - 000000000 ____D C:\ProgramData\IObit
  2019-10-18 13:43 - 2019-09-03 17:30 - 000000000 ____D C:\Program Files (x86)\IObit
  
  ContextMenuHandlers1: [DefragglerShellExtension] -> [CC]{4380C993-0C43-4E02-9A7A-0D40B6EA7590} =>  -> No File
  ContextMenuHandlers1: [WinRAR] -> [CC]{B41DB860-64E4-11D2-9906-E49FADC173CA} =>  -> No File
  ContextMenuHandlers1: [WinRAR32] -> [CC]{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>  -> No File
  ContextMenuHandlers6: [DefragglerShellExtension] -> [CC]{4380C993-0C43-4E02-9A7A-0D40B6EA7590} =>  -> No File
  HKU\S-1-5-21-1972738465-3544600668-837316972-1001\Software\Classes\regfile: regedit.exe "%1" <==== ATTENTION
  
  C:\Program Files\IObit
  C:\Program Files (x86)\IObit
  C:\Program Files\Common Files\IObit
  C:\ProgramData\IObit
  C:\ProgramData\ProductData
  C:\Users\User\AppData\Local\IObit
  C:\Users\User\AppData\LocalLow\IObit
  C:\Users\User\AppData\Roaming\IObit
  C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*Driver Booster*
  C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*Advanced SystemCare*
  C:\Users\Default\AppData\Local\IObit
  C:\Users\Default\AppData\LocalLow\IObit
  C:\Users\Default\AppData\Roaming\IObit
  C:\Users\Public\Desktop\*Driver Booster*
  C:\Users\Public\Desktop\*Advanced SystemCare*
  C:\Windows\IObit
  C:\Windows\Tasks\ImCleanDisabled
  C:\ProgramData\{13CFD044-61E4-4EAC-AD61-02536D961216}
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 5
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
  
  Hosts:
  EmptyTemp:
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

[hodnyJetel]

Opravu jsem provedl a postuji zde log:
Fix result of Farbar Recovery Scan Tool (x64) Version: 20-10-2019
Ran by User (20-10-2019 19:54:55) Run:1
Running from C:\Users\User\Desktop
Loaded Profiles: User (Available Profiles: User)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
CMD: type "C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\axha87ah.default\user.js"
CMD: type "C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\user.js"
CMD: type "C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js"
CMD: type "C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg"
CMD: dir "C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP"

GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
CHR HKU\S-1-5-21-1972738465-3544600668-837316972-1001\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\axha87ah.default\user.js [2019-10-13]
FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\user.js [2019-10-13]
FF Extension: (No Name) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-09-25]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-09-25] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-09-25] <==== ATTENTION
S3 mracsvc; C:\Windows\System32\mracsvc.exe [18953880 2019-10-07] (Mail.Ru LLC -> LLC Mail.Ru)
S3 mracdrv; C:\Windows\System32\drivers\mracdrv.sys [18189864 2019-10-07] (Mail.Ru LLC -> LLC Mail.Ru)
S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [X]
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [X]
S3 cpuz143; \??\C:\Windows\temp\cpuz143\cpuz143_x64.sys [X]
2019-10-13 12:19 - 2019-10-13 12:20 - 047845504 _____ (IObit ) C:\Users\User\Downloads\advanced-systemcare-setup.exe
2019-10-07 18:02 - 2019-10-07 18:02 - 018953880 _____ (LLC Mail.Ru) C:\Windows\system32\mracsvc.exe
2019-10-07 18:02 - 2019-10-07 18:02 - 018189864 _____ (LLC Mail.Ru) C:\Windows\system32\Drivers\mracdrv.sys
2019-10-03 17:15 - 2019-10-03 17:15 - 000000000 ____D C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2019-10-20 01:50 - 2019-09-03 17:31 - 000000000 ____D C:\Users\User\AppData\LocalLow\IObit
2019-10-20 01:50 - 2019-09-03 17:29 - 000000000 ____D C:\Users\User\AppData\Roaming\IObit
2019-10-20 01:50 - 2019-09-03 17:29 - 000000000 ____D C:\ProgramData\IObit
2019-10-18 13:43 - 2019-09-03 17:30 - 000000000 ____D C:\Program Files (x86)\IObit

ContextMenuHandlers1: [DefragglerShellExtension] -> [CC]{4380C993-0C43-4E02-9A7A-0D40B6EA7590} => -> No File
ContextMenuHandlers1: [WinRAR] -> [CC]{B41DB860-64E4-11D2-9906-E49FADC173CA} => -> No File
ContextMenuHandlers1: [WinRAR32] -> [CC]{B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> No File
ContextMenuHandlers6: [DefragglerShellExtension] -> [CC]{4380C993-0C43-4E02-9A7A-0D40B6EA7590} => -> No File
HKU\S-1-5-21-1972738465-3544600668-837316972-1001\Software\Classes\regfile: regedit.exe "%1" <==== ATTENTION

C:\Program Files\IObit
C:\Program Files (x86)\IObit
C:\Program Files\Common Files\IObit
C:\ProgramData\IObit
C:\ProgramData\ProductData
C:\Users\User\AppData\Local\IObit
C:\Users\User\AppData\LocalLow\IObit
C:\Users\User\AppData\Roaming\IObit
C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*Driver Booster*
C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*Advanced SystemCare*
C:\Users\Default\AppData\Local\IObit
C:\Users\Default\AppData\LocalLow\IObit
C:\Users\Default\AppData\Roaming\IObit
C:\Users\Public\Desktop\*Driver Booster*
C:\Users\Public\Desktop\*Advanced SystemCare*
C:\Windows\IObit
C:\Windows\Tasks\ImCleanDisabled
C:\ProgramData\{13CFD044-61E4-4EAC-AD61-02536D961216}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 5
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========



Count : 25359
Average :
Sum : 1987013894
Maximum :
Minimum :
Property : Length




========= End of Powershell: =========


========================= File: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi ========================

C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
File not signed
MD5: DDDA5AA67B1FE347F85E47F26466B8D0
Creation and modification date: 2019-09-25 17:14 - 2019-09-25 17:14
Size: 001225992
Attributes: ----A
Company Name:
Internal Name:
Original Name:
Product:
Description:
File Version:
Product Version:
Copyright:
VirusTotal: https://www.virustotal.com/file/e5e00d6 ... 571283702/

====== End of File: ======


========= type "C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\axha87ah.default\user.js" =========

user_pref("network.http.pipelining.maxrequests", 8);
user_pref("network.http.request.max-start-delay", 0);
user_pref("network.http.max-connections", 48);
user_pref("network.http.max-connections-per-server", 16);
user_pref("network.http.max-persistent-connections-per-proxy", 16);
user_pref("network.http.max-persistent-connections-per-server", 8);
user_pref("browser.turbo.enabled", true);
user_pref("browser.display.show_image_placeholders", true);
user_pref("browser.chrome.favicons", false);
user_pref("browser.urlbar.autocomplete.enabled", true);
user_pref("browser.cache.memory.capacity", 65536);
user_pref("content.notify.ontimer", true);
user_pref("content.interrupt.parsing", true);
user_pref("content.max.tokenizing.time", 2250000);
user_pref("content.switch.threshold", 750000);
user_pref("plugin.expose_full_path", true);
user_pref("ui.submenuDelay", 0);

========= End of CMD: =========


========= type "C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\user.js" =========

user_pref("network.http.pipelining.maxrequests", 8);
user_pref("network.http.request.max-start-delay", 0);
user_pref("network.http.max-connections", 48);
user_pref("network.http.max-connections-per-server", 16);
user_pref("network.http.max-persistent-connections-per-proxy", 16);
user_pref("network.http.max-persistent-connections-per-server", 8);
user_pref("browser.turbo.enabled", true);
user_pref("browser.display.show_image_placeholders", true);
user_pref("browser.chrome.favicons", false);
user_pref("browser.urlbar.autocomplete.enabled", true);
user_pref("browser.cache.memory.capacity", 65536);
user_pref("content.notify.ontimer", true);
user_pref("content.interrupt.parsing", true);
user_pref("content.max.tokenizing.time", 2250000);
user_pref("content.switch.threshold", 750000);
user_pref("plugin.expose_full_path", true);
user_pref("ui.submenuDelay", 0);

========= End of CMD: =========


========= type "C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js" =========

// kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js
pref("general.config.obscure_value", 0);
pref("general.config.filename", "kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg");

========= End of CMD: =========


========= type "C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg" =========

// kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg
lockPref("security.enterprise_roots.enabled", true);

========= End of CMD: =========


========= dir "C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP" =========

Volume in drive C has no label.
Volume Serial Number is 7A2F-97F3

Directory of C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP

03.10.2019 17:15 <DIR> .
03.10.2019 17:15 <DIR> ..
19.10.2019 09:47 200˙704 WiseCustomCalla.dll
1 File(s) 200˙704 bytes
2 Dir(s) 632˙050˙089˙984 bytes free

========= End of CMD: =========

C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
HKU\S-1-5-21-1972738465-3544600668-837316972-1001\SOFTWARE\Policies\Google => removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\axha87ah.default\user.js => moved successfully
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\user.js => moved successfully
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rcbodf9x.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi => moved successfully
C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js => moved successfully
C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg => moved successfully
HKLM\System\CurrentControlSet\Services\mracsvc => removed successfully
mracsvc => service removed successfully
HKLM\System\CurrentControlSet\Services\mracdrv => removed successfully
mracdrv => service removed successfully
HKLM\System\CurrentControlSet\Services\AscFileFilter => removed successfully
AscFileFilter => service removed successfully
HKLM\System\CurrentControlSet\Services\AscRegistryFilter => removed successfully
AscRegistryFilter => service removed successfully
HKLM\System\CurrentControlSet\Services\cpuz143 => removed successfully
cpuz143 => service removed successfully
C:\Users\User\Downloads\advanced-systemcare-setup.exe => moved successfully
C:\Windows\system32\mracsvc.exe => moved successfully
C:\Windows\system32\Drivers\mracdrv.sys => moved successfully
C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP => moved successfully
C:\Users\User\AppData\LocalLow\IObit => moved successfully
C:\Users\User\AppData\Roaming\IObit => moved successfully
C:\ProgramData\IObit => moved successfully
C:\Program Files (x86)\IObit => moved successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\DefragglerShellExtension => removed successfully
HKLM\Software\Classes\CLSID\[CC]{4380C993-0C43-4E02-9A7A-0D40B6EA7590} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR => removed successfully
HKLM\Software\Classes\CLSID\[CC]{B41DB860-64E4-11D2-9906-E49FADC173CA} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 => removed successfully
HKLM\Software\Classes\CLSID\[CC]{B41DB860-8EE4-11D2-9906-E49FADC173CA} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\DefragglerShellExtension => removed successfully
HKLM\Software\Classes\CLSID\[CC]{4380C993-0C43-4E02-9A7A-0D40B6EA7590} => not found
HKU\S-1-5-21-1972738465-3544600668-837316972-1001\Software\Classes\regfile => removed successfully
"C:\Program Files\IObit" => not found
"C:\Program Files (x86)\IObit" => not found
"C:\Program Files\Common Files\IObit" => not found
"C:\ProgramData\IObit" => not found
C:\ProgramData\ProductData => moved successfully
"C:\Users\User\AppData\Local\IObit" => not found
"C:\Users\User\AppData\LocalLow\IObit" => not found
"C:\Users\User\AppData\Roaming\IObit" => not found

=========== "C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*Driver Booster*" ==========

not found

========= End -> "C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*Driver Booster*" ========


=========== "C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*Advanced SystemCare*" ==========

not found

========= End -> "C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*Advanced SystemCare*" ========

"C:\Users\Default\AppData\Local\IObit" => not found
"C:\Users\Default\AppData\LocalLow\IObit" => not found
"C:\Users\Default\AppData\Roaming\IObit" => not found

=========== "C:\Users\Public\Desktop\*Driver Booster*" ==========

not found

========= End -> "C:\Users\Public\Desktop\*Driver Booster*" ========


=========== "C:\Users\Public\Desktop\*Advanced SystemCare*" ==========

not found

========= End -> "C:\Users\Public\Desktop\*Advanced SystemCare*" ========

"C:\Windows\IObit" => not found
C:\Windows\Tasks\ImCleanDisabled => moved successfully
"C:\ProgramData\{13CFD044-61E4-4EAC-AD61-02536D961216}" => not found
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 5" => not found
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare" => not found
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 7888896 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 8553521 B
Java, Flash, Steam htmlcache => 404821500 B
Windows/system/drivers => 0 B
Edge => 32768 B
Chrome => 0 B
Firefox => 30288681 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 29246 B
NetworkService => 29246 B
User => 204640526 B

RecycleBin => 0 B
EmptyTemp: => 625.9 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 19:56:13 ====

[Conder]

Ako to vyzera s PC?

Plocha ma cca 1.8 GB. Odporucam presunut vsetky subory a zlozky z plochy do dokumentov a na ploche nechat iba odkazy/zastupcov. Prilis velka velkost plochy moze sposobit spomalenie systemu.

Nastavoval si tieto Persistent Routes?

HKLM\System\...\Parameters\PersistentRoutes: [104.87.88.177,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [104.89.242.39,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [104.96.147.3,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [111.221.29.177,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [111.221.29.253,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.34.230,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.40.37,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.61.100,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.61.64,255.255.255.255,0.0.0.0,1]
HKLM\System\...\Parameters\PersistentRoutes: [131.253.61.68,255.255.255.255,0.0.0.0,1]
PersistentRoutes: There are 82 PersistentRoutes.

[hodnyJetel]

Teď jsem se přihlašoval a hodilo mi to tabulku že jsem se nemohl úspěšně přihlásit, řešení bylo oznámeno formou odhlásit se a přihlásit znovu (bylo vidět defaultní logo windows a jiná citlivost myši)
Vůbec nevím co ty routery dělají a nic takového jsem nenastavoval nebo o tom nevím, udělal jsem debloat odinstalací defaultních aplikací, vypnutí telemetrie a do souboru hosts vložil nějaké adresy abych se na ně nemohl připojovat podle tutoriálu někde na YT

[hodnyJetel]

Tak nevím proč, ale hosts se mi resetoval...
a to sdílení mám pořád zaplé i když to nastavení sdílení tiskáren a souborů mám vyplé...
https://ctrlv.cz/UtNt
https://ctrlv.cz/LMsb
https://ctrlv.cz/cmfL

[hodnyJetel]

soubor hosts jsem stáhl zde: http://winhelp2002.mvps.org/hosts.htm
a přesunul do etc...
https://ctrlv.cz/3wPh