VIRY.CZ

Dobrý den,
prosím o radu, PC se seká, poté musím restartovat... Děkuju"

Loaded Profiles: KUBÍK (Available Profiles: KUBÍK)
Platform: Windows 10 Pro Version 1903 18362.657 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe
(AMD) [File not signed] C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe
(AMD) [File not signed] C:\Program Files\AMD\Performance Profile Client\AUEPMaster.exe
(AMD) [File not signed] C:\Program Files\AMD\Performance Profile Client\AUEPUF.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(Avast Software s.r.o. -> Avast Software) C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\wsc_proxy.exe
(Discord Inc. -> Discord Inc.) C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\Win64\UnrealCEFSubProcess.exe
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\browserhost.exe
(McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\KUBÍK\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12002.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\NisSrv.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(YENKEE) [File not signed] C:\Program Files\Gaming\YMS 3017\YMS 3017.EXE

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8530176 2018-03-30] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407232 2018-03-30] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [277664 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [325704 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [644552 2019-07-04] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [31613840 2020-03-02] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3365840 2020-02-11] (Valve -> Valve Corporation)
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Run: [Chromium] => "c:\users\kubÍk\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Run: [Discord] => C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe [90950968 2020-02-24] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-16] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Run: [Wargaming.net Game Center] => C:\ProgramData\Wargaming.net\GameCenter\wgc.exe [2414456 2020-02-05] (Wargaming.net Limited -> Wargaming.net)
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\MountPoints2: {ea09a92c-8c1a-11e9-9358-806e6f6e6963} - "D:\start.exe"
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Bubbles.scr [807936 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.122\Installer\chrmstp.exe [2020-02-29] (Google LLC -> Google LLC)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {16929D17-78C6-4E7C-832F-2DE106BCEF55} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992 2019-06-05] (Advanced Micro Devices, Inc.) [File not signed]
Task: {2B0299EF-1865-4B48-B2E7-F4595F38C404} - System32\Tasks\G6-GmTaskPlan => C:\Program Files\Trust\GXT 168\GXT168GamingMouse.exe [3411456 2018-12-01] (Trust International BV) [File not signed]
Task: {2CACEEDF-885F-48C6-AA9F-0E6CA1822A48} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [66952 2019-06-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {2CDE1F88-4065-401E-80A5-087DE76DDA04} - System32\Tasks\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [3942704 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
Task: {4B22F06E-AAA2-457F-AD47-B41DE524496E} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3894664 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
Task: {51E7A6F4-16F8-4629-9285-02C69F3481C0} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [58760 2019-06-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {5F1238C7-B2C5-4C0E-B003-B7E5FBBA3CB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-06-11] (Google Inc -> Google Inc.)
Task: {668D35AB-0EC3-448F-85F8-8443FA5E7785} - System32\Tasks\AMDInstallUEP => C:\Program Files\AMD\InstallUEP\AMDInstallUEP.exe [2355712 2019-02-12] () [File not signed]
Task: {6D90B27F-7FE2-4757-AF87-2985499672C3} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1692296 2020-02-29] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {79DF3038-CE89-4688-8C15-72CAE9538C0E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-06-11] (Google Inc -> Google Inc.)
Task: {A94DC723-C189-42C0-814A-BFC54B457209} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1660520 2020-02-29] (Avast Software s.r.o. -> Avast Software)
Task: {B6656C72-ACD8-41FA-9D34-4DD425812551} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [468992 2019-06-05] (Advanced Micro Devices, Inc.) [File not signed]
Task: {CCF0A45C-9976-46CA-94C7-A516ADBF62FD} - System32\Tasks\Sstt2-TaskPlan => C:\Program Files\Gaming\YMS 3017\YMS 3017.EXE [3366912 2019-01-06] (YENKEE) [File not signed]
Task: {F3741C78-5FE1-4E54-83BC-5CC2D68A5F23} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-16] (Piriform Software Ltd -> Piriform Ltd)
Task: {F47DF28A-DFBF-441C-8C8F-1E27D3BED538} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-16] (Piriform Software Ltd -> Piriform Software Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{f98b8b71-1a67-4921-9970-181eff5bed8d}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-02-29] (McAfee, LLC -> McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_221\bin\ssv.dll [2019-07-29] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-02-29] (McAfee, LLC -> McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_221\bin\jp2ssv.dll [2019-07-29] (Oracle America, Inc. -> Oracle Corporation)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-02-29]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Plugin-x32: @java.com/DTPlugin,version=11.221.2 -> C:\Program Files (x86)\Java\jre1.8.0_221\bin\dtplugin\npDeployJava1.dll [2019-07-29] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.221.2 -> C:\Program Files (x86)\Java\jre1.8.0_221\bin\plugin2\npjp2.dll [2019-07-29] (Oracle America, Inc. -> Oracle Corporation)

Chrome:
=======
CHR DefaultProfile: ",
CHR Profile: C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default [2020-03-04]
CHR Notifications: Default -> hxxps://check-now.online; hxxps://info.qplay.cz; hxxps://joviatranson.info; hxxps://maranhesduve.club; hxxps://news-jupiter.com; hxxps://solicencers.info; hxxps://uploadhaven.com; hxxps://www.facebook.com; hxxps://www.pvpro.com
CHR Extension: (Prezentace) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-06-14]
CHR Extension: (Dokumenty) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-06-14]
CHR Extension: (Disk Google) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-06-14]
CHR Extension: (YouTube) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-06-14]
CHR Extension: (Tabulky) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-06-14]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2020-02-16]
CHR Extension: (HTTPS Everywhere) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2019-12-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-07]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-03-01]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-06]
CHR Extension: (Gmail) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-14]
CHR Extension: (Chrome Media Router) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-02-29]
CHR Profile: C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Guest Profile [2020-01-24]
CHR Profile: C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\System Profile [2020-01-24]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD External Events Utility; C:\windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe [508000 2019-09-18] (Advanced Micro Devices, Inc. -> AMD)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6046624 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R2 AUEPLauncher; C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe [43008 2019-06-04] (AMD) [File not signed]
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [413472 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57536 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
S2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [413544 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [6094272 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 AvgWscReporter; C:\Program Files\AVG\Antivirus\wsc_proxy.exe [110608 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8413472 2020-02-17] (BattlEye Innovations e.K. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2019-05-22] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 igfxCUIService2.0.0.0; C:\windows\system32\igfxCUIService.exe [373728 2017-11-16] (Intel(R) pGFX -> Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6933272 2020-03-04] (Malwarebytes Inc -> Malwarebytes)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [920656 2020-02-29] (McAfee, LLC -> McAfee, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2019-09-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\NisSrv.exe [2433136 2019-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MsMpEng.exe [109896 2019-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdkmdag; C:\windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atikmdag.sys [55249504 2019-09-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 AMDKMDAP; C:\windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atikmpag.sys [595040 2019-09-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\windows\System32\drivers\amdkmpfd.sys [103664 2019-06-07] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 aswArDisk; C:\windows\System32\drivers\aswArDisk.sys [37864 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\windows\System32\drivers\aswArPot.sys [205576 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\windows\System32\drivers\aswbidsdriver.sys [271120 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\windows\System32\drivers\aswbidsh.sys [206608 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\windows\System32\drivers\aswbuniv.sys [64272 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\windows\System32\drivers\aswElam.sys [16304 2020-03-03] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswHdsKe; C:\windows\System32\drivers\aswHdsKe.sys [279360 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\windows\System32\drivers\aswKbd.sys [42976 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\windows\System32\drivers\aswMonFlt.sys [175400 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\windows\System32\drivers\aswRdr2.sys [110560 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\windows\System32\drivers\aswRvrt.sys [84056 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\windows\System32\drivers\aswSnx.sys [848672 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\windows\System32\drivers\aswSP.sys [458584 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\windows\System32\drivers\aswStm.sys [235184 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\windows\System32\drivers\aswVmm.sys [316256 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R3 AtiHDAudioService; C:\windows\system32\drivers\AtihdWT6.sys [108152 2019-05-09] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R0 avgArDisk; C:\windows\System32\drivers\avgArDisk.sys [37928 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgArPot; C:\windows\System32\drivers\avgArPot.sys [206160 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgbidsdriver; C:\windows\System32\drivers\avgbidsdriver.sys [271704 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgbidsh; C:\windows\System32\drivers\avgbidsh.sys [207192 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgbuniv; C:\windows\System32\drivers\avgbuniv.sys [64344 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgElam; C:\windows\System32\drivers\avgElam.sys [16520 2020-03-03] (Microsoft Windows Early Launch Anti-malware Publisher -> AVG Technologies CZ, s.r.o.)
S3 avgKbd; C:\windows\System32\drivers\avgKbd.sys [43560 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\windows\System32\drivers\avgMonFlt.sys [175472 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
U5 avgNetSec; C:\Windows\System32\Drivers\avgNetSec.sys [553104 2019-10-02] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.)
S3 avgRdr; C:\windows\System32\drivers\avgRdr2.sys [111144 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\windows\System32\drivers\avgRvrt.sys [84096 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgSnx; C:\windows\System32\drivers\avgSnx.sys [849256 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\windows\System32\drivers\avgSP.sys [459168 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgStm; C:\windows\System32\drivers\avgStm.sys [235280 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgVmm; C:\windows\System32\drivers\avgVmm.sys [316840 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R3 IntcAzAudAddService; C:\windows\system32\drivers\RTDVHD64.sys [2594048 2018-03-30] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
R2 MBAMChameleon; C:\windows\System32\Drivers\MbamChameleon.sys [214496 2020-03-04] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\windows\System32\DRIVERS\MbamElam.sys [20936 2020-03-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\windows\System32\Drivers\mbamswissarmy.sys [248968 2020-03-04] (Malwarebytes Inc -> Malwarebytes)
S2 SSPORT; C:\windows\system32\Drivers\SSPORT.sys [19016 2019-05-31] (HP Inc. -> )
S0 WdBoot; C:\windows\System32\drivers\wd\WdBoot.sys [47496 2019-06-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\windows\System32\drivers\wd\WdFilter.sys [337632 2019-06-14] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\windows\System32\drivers\wd\WdNisDrv.sys [53984 2019-06-14] (Microsoft Windows -> Microsoft Corporation)
U3 avgbdisk; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-04 17:30 - 2020-03-04 17:31 - 000027332 _____ C:\Users\KUBÍK\Desktop\FRST.txt
2020-03-04 17:30 - 2020-03-04 17:30 - 000000000 ____D C:\FRST
2020-03-04 17:27 - 2020-03-04 17:27 - 002279424 _____ (Farbar) C:\Users\KUBÍK\Desktop\FRST64.exe
2020-03-04 15:46 - 2020-03-03 18:30 - 000368056 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2020-03-04 15:41 - 2020-03-04 15:41 - 006122168 _____ (TeamViewer) C:\Users\KUBÍK\Downloads\TeamViewerQS_cs-idc5dq4nsx.exe
2020-03-04 15:41 - 2020-03-04 15:41 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\TeamViewer
2020-03-04 15:36 - 2020-03-04 15:36 - 009341712 _____ (AVAST Software) C:\Users\Public\Desktop\avast_free_antivirus_setup_online_x64.exe
2020-03-04 15:23 - 2020-03-04 17:26 - 000248968 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamswissarmy.sys
2020-03-04 15:23 - 2020-03-04 15:23 - 000214496 _____ (Malwarebytes) C:\windows\system32\Drivers\MbamChameleon.sys
2020-03-04 15:23 - 2020-03-04 15:23 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\cache
2020-03-04 15:21 - 2020-03-04 15:21 - 000230080 _____ (AVAST Software) C:\Users\KUBÍK\Downloads\avast_free_antivirus_setup_online (1).exe
2020-03-03 18:30 - 2020-03-03 18:30 - 000235184 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2020-03-03 18:30 - 2020-03-03 18:30 - 000175400 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2020-03-03 13:13 - 2020-03-03 13:12 - 000368088 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\avgBoot.exe
2020-03-03 13:13 - 2020-03-03 13:12 - 000235280 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgStm.sys
2020-03-03 13:13 - 2020-03-03 13:12 - 000175472 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgMonFlt.sys
2020-03-02 19:18 - 2020-03-02 19:18 - 000000000 ____D C:\ftb
2020-03-02 19:16 - 2020-03-02 19:16 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\ftblauncher
2020-03-02 19:16 - 2020-03-02 19:16 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\ftblauncher
2020-02-29 16:49 - 2020-02-29 17:56 - 1231027316 _____ C:\Users\KUBÍK\Downloads\Stranger.Things.S01E01.720p.x264_CZ tit.mkv
2020-02-20 17:56 - 2020-02-20 21:00 - 1334364160 _____ C:\Users\KUBÍK\Downloads\16-Doctor Strange-CZ dabing by kalco.avi
2020-02-15 08:05 - 2020-02-15 08:05 - 000001899 _____ C:\Users\KUBÍK\Desktop\Game Center.lnk
2020-02-14 20:18 - 2020-02-14 20:18 - 000000000 ____D C:\ProgramData\ssh
2020-02-14 15:08 - 2020-02-14 15:08 - 025900032 _____ (Microsoft Corporation) C:\windows\system32\edgehtml.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 025444352 _____ (Microsoft Corporation) C:\windows\system32\Hydrogen.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 022635008 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 019850240 _____ (Microsoft Corporation) C:\windows\SysWOW64\edgehtml.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 019813376 _____ (Microsoft Corporation) C:\windows\system32\HologramWorld.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 018026496 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 009929016 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 008013824 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 007905208 _____ (Microsoft Corporation) C:\windows\system32\windows.storage.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 007754752 _____ (Microsoft Corporation) C:\windows\system32\Chakra.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 007600448 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Protection.PlayReady.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 007263992 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 007259648 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 007017472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 006519752 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 006435840 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 006284800 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 006167552 _____ (Microsoft Corporation) C:\windows\system32\twinui.pcshell.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 006083832 _____ (Microsoft Corporation) C:\windows\SysWOW64\windows.storage.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 005912064 _____ (Microsoft Corporation) C:\windows\SysWOW64\Chakra.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 005764664 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 005502464 _____ (Microsoft Corporation) C:\windows\system32\cdp.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 005112320 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 005041664 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004856832 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004575232 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004562896 _____ (Microsoft Corporation) C:\windows\system32\sppsvc.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 004538880 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004470784 _____ (Microsoft Corporation) C:\windows\system32\InputService.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004348616 _____ (Microsoft Corporation) C:\windows\system32\Windows.Mirage.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004308480 _____ (Microsoft Corporation) C:\windows\SysWOW64\cdp.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004129416 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004005888 _____ (Microsoft Corporation) C:\windows\system32\EdgeContent.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003967888 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 003820032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003792384 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003728896 _____ (Microsoft Corporation) C:\windows\system32\win32kfull.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 003550208 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003525592 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003484672 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003372440 _____ (Microsoft Corporation) C:\windows\system32\combase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003263488 _____ (Microsoft Corporation) C:\windows\system32\tquery.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003243080 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Mirage.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002988552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 002870272 _____ (Microsoft Corporation) C:\windows\system32\mssrch.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002861568 _____ (Microsoft Corporation) C:\windows\system32\xpsservices.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002800128 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32kfull.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 002773776 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002766088 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002755584 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2020-02-14 15:08 - 2020-02-14 15:08 - 002755584 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2020-02-14 15:08 - 2020-02-14 15:08 - 002703872 _____ (Microsoft Corporation) C:\windows\system32\WebRuntimeManager.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002584008 _____ (Microsoft Corporation) C:\windows\SysWOW64\combase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002561536 _____ (Microsoft Corporation) C:\windows\SysWOW64\tquery.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002493720 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002314952 _____ (Microsoft Corporation) C:\windows\SysWOW64\msmpeg2vdec.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002305536 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssrch.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002260176 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002230232 _____ (Microsoft Corporation) C:\windows\system32\mfasfsrcsnk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002225160 _____ (Microsoft Corporation) C:\windows\system32\ResetEngine.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002084576 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002071552 _____ (Microsoft Corporation) C:\windows\system32\ISM.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002032128 _____ C:\windows\system32\rdpnano.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001999960 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001916744 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001858560 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001841152 _____ C:\windows\system32\TextInputMethodFormatter.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001835128 _____ (Microsoft Corporation) C:\windows\system32\mfsrcsnk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001830200 _____ (Microsoft Corporation) C:\windows\system32\rdpserverbase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001757096 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2020-02-14 15:08 - 2020-02-14 15:08 - 001743680 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001726480 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001693184 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001687040 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001664696 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001664680 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001657856 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001655880 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001610240 _____ (Microsoft Corporation) C:\windows\system32\HologramCompositor.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001602560 _____ (Microsoft Corporation) C:\windows\system32\dosvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001562424 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpserverbase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001541632 _____ (Microsoft Corporation) C:\windows\system32\wbengine.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001540096 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001512320 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001505592 _____ (Microsoft Corporation) C:\windows\system32\rdpbase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001489064 _____ (Microsoft Corporation) C:\windows\system32\mfsvr.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001482040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 001481216 _____ (Microsoft Corporation) C:\windows\system32\rdpsharercom.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001480192 _____ (Microsoft Corporation) C:\windows\system32\usocoreworker.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001417760 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsrcsnk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001412096 _____ (Microsoft Corporation) C:\windows\system32\SystemSettings.Handlers.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001398584 _____ (Microsoft Corporation) C:\windows\system32\hvix64.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001394168 _____ (Microsoft Corporation) C:\windows\system32\WinTypes.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001372160 _____ (Microsoft Corporation) C:\windows\system32\NotificationController.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001366128 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2020-02-14 15:08 - 2020-02-14 15:08 - 001319936 _____ (Microsoft Corporation) C:\windows\system32\webplatstorageserver.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001300280 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 001284096 _____ (Microsoft Corporation) C:\windows\system32\werconcpl.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001283592 _____ (Microsoft Corporation) C:\windows\system32\SecConfig.efi
2020-02-14 15:08 - 2020-02-14 15:08 - 001273856 _____ (Microsoft Corporation) C:\windows\system32\rdpcore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001272360 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfasfsrcsnk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001260544 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpsharercom.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001218120 _____ (Microsoft Corporation) C:\windows\system32\ClipUp.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001216000 _____ (Microsoft Corporation) C:\windows\system32\sdclt.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001214976 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001213752 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpbase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001195008 _____ (Microsoft Corporation) C:\windows\system32\sdengin2.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001182232 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001170960 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001154448 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001151816 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001105776 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001098720 _____ (Microsoft Corporation) C:\windows\system32\DolbyDecMFT.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001097216 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Immersive.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001083904 _____ (Microsoft Corporation) C:\windows\system32\MusUpdateHandlers.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001083392 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001080832 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpcore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001077264 _____ (Microsoft Corporation) C:\windows\system32\hvax64.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001060352 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001051448 _____ (Microsoft Corporation) C:\windows\system32\pidgenx.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001009664 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001000960 _____ (Microsoft Corporation) C:\windows\system32\Windows.Mirage.Internal.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000996352 _____ (Microsoft Corporation) C:\windows\system32\sysmain.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000974336 _____ (Microsoft Corporation) C:\windows\system32\uDWM.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000952416 _____ (Microsoft Corporation) C:\windows\SysWOW64\DolbyDecMFT.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000949248 _____ (Microsoft Corporation) C:\windows\system32\SecurityHealthSSO.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000928120 _____ (Microsoft Corporation) C:\windows\system32\SecurityHealthService.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000923136 _____ (Microsoft Corporation) C:\windows\system32\EdgeManager.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000916480 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Core.TextInput.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000913408 _____ (Microsoft Corporation) C:\windows\system32\rasmans.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000904504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ReAgent.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000895488 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Immersive.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000892488 _____ (Microsoft Corporation) C:\windows\SysWOW64\WinTypes.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000891736 _____ (Microsoft Corporation) C:\windows\system32\ci.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000890368 _____ (Microsoft Corporation) C:\windows\system32\HolographicExtensions.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000882688 _____ (Microsoft Corporation) C:\windows\system32\CPFilters.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000875448 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000864256 _____ (Microsoft Corporation) C:\windows\system32\netlogon.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000857088 _____ C:\windows\system32\MBR2GPT.EXE
2020-02-14 15:08 - 2020-02-14 15:08 - 000852480 _____ (Microsoft Corporation) C:\windows\system32\ieproxy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000851968 _____ (Microsoft Corporation) C:\windows\system32\SearchIndexer.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000843776 _____ (Microsoft Corporation) C:\windows\SysWOW64\webplatstorageserver.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000839680 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000828216 _____ (Microsoft Corporation) C:\windows\system32\AppVClient.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000824848 _____ (Microsoft Corporation) C:\windows\system32\NetSetupEngine.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000805888 _____ (Microsoft Corporation) C:\windows\system32\cscui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000805376 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000788992 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000784384 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000783480 _____ (Microsoft Corporation) C:\windows\system32\tcblaunch.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000774664 _____ (Microsoft Corporation) C:\windows\system32\securekernel.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000768488 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000758800 _____ (Microsoft Corporation) C:\windows\system32\wimgapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000749568 _____ (Microsoft Corporation) C:\windows\system32\FrameServer.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000747320 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000705536 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000704512 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.FileExplorer.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000701440 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Mirage.Internal.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\CPFilters.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000685056 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000679368 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000678928 _____ (Microsoft Corporation) C:\windows\system32\StructuredQuery.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000673080 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000670720 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchIndexer.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000667136 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000667136 _____ (Microsoft Corporation) C:\windows\SysWOW64\EdgeManager.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\netlogon.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000661816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000642008 _____ (Microsoft Corporation) C:\windows\system32\TextInputFramework.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000637440 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000629760 _____ (Microsoft Corporation) C:\windows\system32\ipnathlp.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000623104 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000617784 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000610816 _____ (Microsoft Corporation) C:\windows\system32\netprofmsvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000605184 _____ (Microsoft Corporation) C:\windows\system32\MusNotification.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000599552 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActivationManager.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000598528 _____ (Microsoft Corporation) C:\windows\system32\webio.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000597816 _____ (Microsoft Corporation) C:\windows\SysWOW64\wimgapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000587064 _____ (Microsoft Corporation) C:\windows\SysWOW64\NetSetupEngine.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000578560 _____ (Microsoft Corporation) C:\windows\system32\SppExtComObj.Exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000568120 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000562176 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000558592 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_Notifications.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000550400 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000545432 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.MediaControl.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000542288 _____ (Microsoft Corporation) C:\windows\SysWOW64\StructuredQuery.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000537608 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000535552 _____ (Microsoft Corporation) C:\windows\system32\usosvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000530432 _____ (Microsoft Corporation) C:\windows\system32\sppcext.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000521728 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.System.Launcher.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000518456 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000516648 _____ (Microsoft Corporation) C:\windows\system32\wimserv.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000516544 _____ (Microsoft Corporation) C:\windows\system32\mf.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000516096 _____ (Microsoft Corporation) C:\windows\system32\MusNotificationUx.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000512000 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000510768 _____ (Microsoft Corporation) C:\windows\system32\systemreset.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000500736 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2020-02-14 15:08 - 2020-02-14 15:08 - 000497152 _____ (Microsoft Corporation) C:\windows\system32\werui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000494080 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000490496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.FileExplorer.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000490496 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000486912 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000486400 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000477496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2020-02-14 15:08 - 2020-02-14 15:08 - 000476672 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000475648 _____ (Microsoft Corporation) C:\windows\system32\DscCore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000469504 _____ (Microsoft Corporation) C:\windows\SysWOW64\webio.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000467952 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000465208 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000459896 _____ (Microsoft Corporation) C:\windows\system32\MusNotifyIcon.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000453432 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000450560 _____ (Microsoft Corporation) C:\windows\system32\rdpclip.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000443904 _____ (Microsoft Corporation) C:\windows\system32\edgeIso.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000441072 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.MediaControl.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000435200 _____ (Microsoft Corporation) C:\windows\system32\wincorlib.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000430080 _____ (Microsoft Corporation) C:\windows\SysWOW64\werui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000422912 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000422008 _____ (Microsoft Corporation) C:\windows\system32\SgrmEnclave_secure.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000421376 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2020-02-14 15:08 - 2020-02-14 15:08 - 000416056 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000407040 _____ (Microsoft Corporation) C:\windows\system32\DispBroker.Desktop.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000405632 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000401408 _____ (Microsoft Corporation) C:\windows\system32\SearchProtocolHost.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000400696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\clfs.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000399360 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000392192 _____ (Microsoft Corporation) C:\windows\system32\Search.ProtocolHandler.MAPI2.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000384000 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000375504 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000370688 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieproxy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000369504 _____ (Microsoft Corporation) C:\windows\system32\BCP47Langs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000368128 _____ (Microsoft Corporation) C:\windows\system32\mssvp.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000366416 _____ (Microsoft Corporation) C:\windows\system32\mfsensorgroup.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000355840 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicSvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000353280 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000350720 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_SpeechPrivacy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000345088 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000336384 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchProtocolHost.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000335448 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000327680 _____ (Microsoft Corporation) C:\windows\SysWOW64\edgeIso.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000324616 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000324608 _____ (Microsoft Corporation) C:\windows\system32\FSClient.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32k.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000324096 _____ (Microsoft Corporation) C:\windows\system32\rdpviewerax.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000311096 _____ (Microsoft Corporation) C:\windows\system32\SecurityHealthAgent.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000309248 _____ (Microsoft Corporation) C:\windows\system32\tapisrv.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000308736 _____ (Microsoft Corporation) C:\windows\system32\msIso.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000307712 _____ (Microsoft Corporation) C:\windows\SysWOW64\wincorlib.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000300392 _____ (Microsoft Corporation) C:\windows\system32\skci.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000299520 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssvp.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000285184 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicCapsule.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000283136 _____ (Microsoft Corporation) C:\windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000281088 _____ (Microsoft Corporation) C:\windows\system32\msutb.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000274464 _____ (Microsoft Corporation) C:\windows\SysWOW64\BCP47Langs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000270848 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpviewerax.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000268800 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000266752 _____ (Microsoft Corporation) C:\windows\system32\DAFMCP.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000259984 _____ (Microsoft Corporation) C:\windows\system32\logoncli.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000252928 _____ (Microsoft Corporation) C:\windows\SysWOW64\tapisrv.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000251904 _____ (Microsoft Corporation) C:\windows\SysWOW64\msIso.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000249344 _____ (Microsoft Corporation) C:\windows\system32\srrstr.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000247856 _____ (Microsoft Corporation) C:\windows\system32\weretw.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000240640 _____ (Microsoft Corporation) C:\windows\system32\SearchFilterHost.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000228864 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000227840 _____ (Microsoft Corporation) C:\windows\system32\IndexedDbLegacy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000226816 _____ (Microsoft Corporation) C:\windows\system32\netprofm.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000225792 _____ (Microsoft Corporation) C:\windows\system32\wersvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000224768 _____ (Microsoft Corporation) C:\windows\system32\DWWIN.EXE
2020-02-14 15:08 - 2020-02-14 15:08 - 000222208 _____ (Microsoft Corporation) C:\windows\system32\Winlangdb.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000220984 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000217600 _____ (Microsoft Corporation) C:\windows\SysWOW64\msutb.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000214528 _____ (Microsoft Corporation) C:\windows\system32\rdsdwmdr.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000211968 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFilterHost.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000210744 _____ (Microsoft Corporation) C:\windows\system32\tcbloader.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000204800 _____ (Microsoft Corporation) C:\windows\system32\mssph.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000203776 _____ (Microsoft Corporation) C:\windows\system32\regapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000201728 _____ (Microsoft Corporation) C:\windows\system32\puiapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000199480 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000197632 _____ (Microsoft Corporation) C:\windows\system32\Win32CompatibilityAppraiserCSP.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000194560 _____ (Microsoft Corporation) C:\windows\system32\recdisc.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000193800 _____ (Microsoft Corporation) C:\windows\SysWOW64\weretw.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000190464 _____ (Microsoft Corporation) C:\windows\SysWOW64\regapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000190256 _____ (Microsoft Corporation) C:\windows\SysWOW64\logoncli.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000186880 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWWIN.EXE
2020-02-14 15:08 - 2020-02-14 15:08 - 000186880 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000186672 _____ (Microsoft Corporation) C:\windows\system32\BCP47mrm.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000183808 _____ (Microsoft Corporation) C:\windows\system32\ResetEngOnline.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000179720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000175616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IndexedDbLegacy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000174392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\AppvVemgr.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000165832 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000160768 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssph.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000158208 _____ (Microsoft Corporation) C:\windows\SysWOW64\Winlangdb.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000155136 _____ (Microsoft Corporation) C:\windows\system32\Chakradiag.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000153912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\AppvVfs.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000152064 _____ (Microsoft Corporation) C:\windows\system32\fdWSD.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000150536 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000149504 _____ (Microsoft Corporation) C:\windows\system32\sdrsvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000147456 _____ (Microsoft Corporation) C:\windows\system32\mssprxy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000143872 _____ (Microsoft Corporation) C:\windows\SysWOW64\SpatialAudioLicenseSrv.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000143160 _____ (Microsoft Corporation) C:\windows\system32\NetSetupApi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000139776 _____ (Microsoft Corporation) C:\windows\system32\Chakrathunk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000138752 _____ (Microsoft Corporation) C:\windows\system32\InputLocaleManager.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000138040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\AppVStrm.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000135168 _____ (Microsoft Corporation) C:\windows\system32\musdialoghandlers.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000133464 _____ (Microsoft Corporation) C:\windows\SysWOW64\BCP47mrm.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000132624 _____ (Microsoft Corporation) C:\windows\system32\offlinelsa.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000130560 _____ (Microsoft Corporation) C:\windows\system32\globinputhost.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000128512 _____ (Microsoft Corporation) C:\windows\system32\usoapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000128512 _____ (Microsoft Corporation) C:\windows\system32\mssitlb.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000127280 _____ (Microsoft Corporation) C:\windows\system32\win32u.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\fdWSD.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000125440 _____ (Microsoft Corporation) C:\windows\system32\sdshext.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000123392 _____ (Microsoft Corporation) C:\windows\system32\wercplsupport.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000119808 _____ (Microsoft Corporation) C:\windows\system32\DafPrintProvider.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000119296 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000117264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bindflt.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000117248 _____ (Microsoft Corporation) C:\windows\SysWOW64\Chakradiag.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000113152 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssitlb.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000112128 _____ (Microsoft Corporation) C:\windows\system32\NetDriverInstall.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000108544 _____ (Microsoft Corporation) C:\windows\system32\fdSSDP.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000107832 _____ (Microsoft Corporation) C:\windows\SysWOW64\NetSetupApi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000107008 _____ (Microsoft Corporation) C:\windows\system32\DevicePairingExperienceMEM.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000106808 _____ (Microsoft Corporation) C:\windows\system32\SecurityHealthProxyStub.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000105984 _____ (Microsoft Corporation) C:\windows\system32\utcutil.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000105472 _____ (Microsoft Corporation) C:\windows\SysWOW64\Chakrathunk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000105472 _____ (Microsoft Corporation) C:\windows\system32\dfrgui.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000099712 _____ (Microsoft Corporation) C:\windows\system32\FsIso.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000097280 _____ (Microsoft Corporation) C:\windows\SysWOW64\compstui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000097080 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\globinputhost.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000095232 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000093496 _____ (Microsoft Corporation) C:\windows\system32\hvloader.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000092160 _____ (Microsoft Corporation) C:\windows\system32\wsqmcons.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000090624 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000090624 _____ (Microsoft Corporation) C:\windows\system32\keyiso.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000089600 _____ (Microsoft Corporation) C:\windows\SysWOW64\dfrgui.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000089328 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32u.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000089088 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicAgent.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000088576 _____ (Microsoft Corporation) C:\windows\SysWOW64\fdSSDP.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000088576 _____ (Microsoft Corporation) C:\windows\SysWOW64\DafPrintProvider.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000087040 _____ (Microsoft Corporation) C:\windows\system32\EditBufferTestHook.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000084992 _____ (Microsoft Corporation) C:\windows\system32\SecurityHealthSystray.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000084496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hvservice.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\NetDriverInstall.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000077824 _____ (Microsoft Corporation) C:\windows\SysWOW64\usoapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000072816 _____ (Microsoft Corporation) C:\windows\SysWOW64\remoteaudioendpoint.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000071480 _____ (Microsoft Corporation) C:\windows\system32\win32appinventorycsp.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000070144 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000069120 _____ (Microsoft Corporation) C:\windows\system32\UsoClient.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000066560 _____ (Microsoft Corporation) C:\windows\SysWOW64\keyiso.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000066560 _____ (Microsoft Corporation) C:\windows\system32\findnetprinters.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000065536 _____ (Microsoft Corporation) C:\windows\system32\iemigplugin.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000064000 _____ (Microsoft Corporation) C:\windows\system32\printui.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000063488 _____ (Microsoft Corporation) C:\windows\SysWOW64\iemigplugin.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000063488 _____ (Microsoft Corporation) C:\windows\system32\rtutils.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000063288 _____ (Microsoft Corporation) C:\windows\system32\SecurityHealthHost.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssprxy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\msscntrs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000059392 _____ (Microsoft Corporation) C:\windows\system32\UserLanguageProfileCallback.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000059221 _____ C:\windows\system32\srms.dat
2020-02-14 15:08 - 2020-02-14 15:08 - 000058880 _____ C:\windows\system32\runexehelper.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000057856 _____ (Microsoft Corporation) C:\windows\system32\SrTasks.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\findnetprinters.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\rtutils.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000046592 _____ (Microsoft Corporation) C:\windows\system32\Websocket.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000046080 _____ (Microsoft Corporation) C:\windows\SysWOW64\msscntrs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000045056 _____ (Microsoft Corporation) C:\windows\system32\npmproxy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000044544 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UserLanguageProfileCallback.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000042512 _____ (Microsoft Corporation) C:\windows\system32\SysResetErr.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000041472 _____ (Microsoft Corporation) C:\windows\system32\WordBreakers.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000038912 _____ (Microsoft Corporation) C:\windows\SysWOW64\werdiagcontroller.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000038400 _____ (Microsoft Corporation) C:\windows\SysWOW64\mcicda.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000037392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wimmount.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\Websocket.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000032056 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000029696 _____ (Microsoft Corporation) C:\windows\system32\nlmproxy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000028672 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicPS.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000027648 _____ (Microsoft Corporation) C:\windows\SysWOW64\mciwave.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000026112 _____ (Microsoft Corporation) C:\windows\SysWOW64\msimsg.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000026112 _____ (Microsoft Corporation) C:\windows\system32\msimsg.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000024064 _____ (Microsoft Corporation) C:\windows\SysWOW64\mciseq.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000021520 _____ (Microsoft Corporation) C:\windows\system32\kdhvcom.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000020944 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000019768 _____ (Microsoft Corporation) C:\windows\system32\ResetEngine.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000017920 _____ (Microsoft Corporation) C:\windows\system32\icsunattend.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000017920 _____ (Microsoft Corporation) C:\windows\system32\bindflt.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000017408 _____ (Microsoft Corporation) C:\windows\system32\nlmsprep.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000015360 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000013824 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth9.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth8.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth7.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth6.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth5.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth4.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth3.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth2.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth12.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth11.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth10.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth1.bin
2020-02-14 15:07 - 2020-02-14 15:07 - 017787904 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 006231200 _____ (Microsoft Corporation) C:\windows\system32\StartTileData.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 004615376 _____ (Microsoft Corporation) C:\windows\explorer.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 003969536 _____ (Microsoft Corporation) C:\windows\system32\tellib.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 003703296 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentServer.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 003590968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 003110400 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 002714624 _____ (Microsoft Corporation) C:\windows\system32\win32kbase.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 002284544 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentExtensions.onecore.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 002125904 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 001942016 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 001748480 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentExtensions.desktop.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 001413912 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 001149928 _____ (Microsoft Corporation) C:\windows\system32\ApplyTrustOffline.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 001084216 _____ (Microsoft Corporation) C:\windows\system32\ReAgent.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 001026792 _____ (Microsoft Corporation) C:\windows\system32\ClipSVC.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000874296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms2.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000804872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vhdmp.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000803840 _____ (Microsoft Corporation) C:\windows\system32\bisrv.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000782848 _____ (Microsoft Corporation) C:\windows\system32\wifinetworkmanager.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000750080 _____ (Microsoft Corporation) C:\windows\system32\ActivationManager.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000737280 _____ (Microsoft Corporation) C:\windows\system32\Windows.System.Launcher.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000735744 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000732200 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_StorageSense.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000727040 _____ (Microsoft Corporation) C:\windows\system32\agentactivationruntime.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000716288 _____ (Microsoft Corporation) C:\windows\system32\agentactivationruntimewindows.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000646656 _____ (Microsoft Corporation) C:\windows\system32\cdpsvc.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000637968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000589592 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 000464384 _____ (Microsoft Corporation) C:\windows\system32\cloudAP.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000456192 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000441144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms1.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000437776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000415808 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000296760 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000291328 _____ (Microsoft Corporation) C:\windows\system32\DeviceDirectoryClient.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000282112 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.AppDefaults.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000277504 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_CapabilityAccess.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000265216 _____ (Microsoft Corporation) C:\windows\system32\cdd.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000256000 _____ (Microsoft Corporation) C:\windows\system32\UpdateDeploymentProvider.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000250880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\winnat.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000209920 _____ (Microsoft Corporation) C:\windows\system32\wuuhosdeployment.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000201728 _____ (Microsoft Corporation) C:\windows\system32\AppXApplicabilityBlob.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000194064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dumpsd.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000187392 _____ (Microsoft Corporation) C:\windows\system32\tssrvlic.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000184832 _____ (Microsoft Corporation) C:\windows\system32\AarSvc.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000169472 _____ (Microsoft Corporation) C:\windows\system32\SpatialAudioLicenseSrv.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 000157696 _____ (Microsoft Corporation) C:\windows\system32\dssvc.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000155648 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_AppExecutionAlias.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000151552 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_BackgroundApps.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000128528 _____ (Microsoft Corporation) C:\windows\system32\wifitask.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 000123904 _____ (Microsoft Corporation) C:\windows\system32\ApplicationControlCSP.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000089912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgr.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000088352 _____ (Microsoft Corporation) C:\windows\system32\remoteaudioendpoint.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000077824 _____ (Microsoft Corporation) C:\windows\system32\CustomInstallExec.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 000062976 _____ (Microsoft Corporation) C:\windows\system32\LSCSHostPolicy.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000057856 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000057344 _____ (Microsoft Corporation) C:\windows\system32\audioresourceregistrar.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000048640 _____ (Microsoft Corporation) C:\windows\system32\mcicda.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000047208 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 000034304 _____ (Microsoft Corporation) C:\windows\system32\mciwave.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000030208 _____ (Microsoft Corporation) C:\windows\system32\mciseq.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000027648 _____ (Microsoft Corporation) C:\windows\system32\lstelemetry.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000013312 _____ (Microsoft Corporation) C:\windows\system32\dstokenclean.exe
2020-02-14 15:03 - 2020-01-16 06:07 - 000492544 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe
2020-02-14 15:03 - 2020-01-16 05:23 - 000390656 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-04 17:31 - 2019-05-21 23:30 - 001693660 _____ C:\windows\system32\PerfStringBackup.INI
2020-03-04 17:31 - 2019-03-19 12:57 - 000716948 _____ C:\windows\system32\perfh005.dat
2020-03-04 17:31 - 2019-03-19 12:57 - 000145028 _____ C:\windows\system32\perfc005.dat
2020-03-04 17:31 - 2019-03-19 05:50 - 000000000 ____D C:\windows\INF
2020-03-04 17:27 - 2019-07-31 09:47 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\Discord
2020-03-04 17:27 - 2019-06-14 20:28 - 000000000 ____D C:\Program Files (x86)\Steam
2020-03-04 17:26 - 2019-09-30 14:27 - 000003104 _____ C:\windows\system32\Tasks\AMDLinkUpdate
2020-03-04 17:26 - 2019-06-11 09:36 - 000000180 _____ C:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2020-03-04 17:26 - 2019-05-21 23:22 - 000000006 ____H C:\windows\Tasks\SA.DAT
2020-03-04 17:26 - 2019-05-21 23:22 - 000000000 ____D C:\windows\system32\SleepStudy
2020-03-04 17:26 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-03-04 15:46 - 2019-03-19 05:52 - 000000000 ___HD C:\windows\ELAMBKUP
2020-03-04 15:30 - 2019-06-15 08:45 - 000004264 _____ C:\windows\system32\Tasks\Avast Emergency Update
2020-03-04 15:25 - 2019-03-19 05:52 - 000000000 ____D C:\windows\AppReadiness
2020-03-04 15:23 - 2019-07-02 23:24 - 000153312 _____ (Malwarebytes) C:\windows\system32\Drivers\mbae64.sys
2020-03-04 15:23 - 2019-07-02 23:24 - 000020936 _____ (Malwarebytes) C:\windows\system32\Drivers\MbamElam.sys
2020-03-04 15:23 - 2019-07-02 23:24 - 000002028 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-03-04 15:23 - 2019-06-14 17:31 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\D3DSCache
2020-03-04 15:22 - 2019-06-15 14:03 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\CrashDumps
2020-03-04 15:18 - 2019-06-14 17:29 - 000000000 ____D C:\Users\KUBÍK
2020-03-03 20:42 - 2019-06-25 06:37 - 000000000 __SHD C:\Users\KUBÍK\IntelGraphicsProfiles
2020-03-03 20:40 - 2019-05-21 23:43 - 000748816 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2020-03-03 18:30 - 2019-06-15 08:42 - 000848672 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000458584 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000316256 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000279360 _____ (AVAST Software) C:\windows\system32\Drivers\aswHdsKe.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000271120 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsdriver.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000206608 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsh.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000205576 _____ (AVAST Software) C:\windows\system32\Drivers\aswArPot.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000110560 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000084056 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000064272 _____ (AVAST Software) C:\windows\system32\Drivers\aswbuniv.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000042976 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000037864 _____ (AVAST Software) C:\windows\system32\Drivers\aswArDisk.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000016304 _____ (AVAST Software) C:\windows\system32\Drivers\aswElam.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000849256 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgSnx.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000459168 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgSP.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000316840 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgVmm.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000271704 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbidsdriver.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000207192 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbidsh.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000206160 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgArPot.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000111144 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgRdr2.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000084096 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgRvrt.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000064344 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbuniv.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000043560 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgKbd.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000037928 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgArDisk.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000016520 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgElam.sys
2020-03-02 19:18 - 2019-06-11 10:03 - 000065536 _____ C:\windows\system32\spu_storage.bin
2020-03-02 19:18 - 2019-03-19 05:37 - 000786432 _____ C:\windows\system32\config\BBI
2020-03-02 19:07 - 2019-06-14 18:33 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\.minecraft
2020-03-02 17:05 - 2019-09-06 17:08 - 000002234 _____ C:\windows\system32\Tasks\CCleanerSkipUAC
2020-03-02 17:05 - 2019-06-15 20:21 - 000002840 _____ C:\windows\system32\Tasks\Sstt2-TaskPlan
2020-03-02 17:05 - 2019-06-14 17:33 - 000002854 _____ C:\windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2362187174-35916906-3405601686-1004
2020-03-02 17:05 - 2019-06-11 10:03 - 000002392 _____ C:\windows\system32\Tasks\ModifyLinkUpdate
2020-03-02 17:05 - 2019-06-11 10:03 - 000002202 _____ C:\windows\system32\Tasks\StartCN
2020-03-02 17:05 - 2019-06-11 10:03 - 000002122 _____ C:\windows\system32\Tasks\StartDVR
2020-03-02 17:05 - 2019-06-11 09:34 - 000003402 _____ C:\windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-03-02 17:05 - 2019-06-11 09:34 - 000003178 _____ C:\windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-03-02 17:05 - 2019-06-11 08:31 - 000002848 _____ C:\windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2362187174-35916906-3405601686-500
2020-03-02 16:59 - 2019-06-15 08:45 - 000000000 ____D C:\windows\system32\Tasks\Avast Software
2020-02-29 15:57 - 2019-07-29 16:32 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\ElevatedDiagnostics
2020-02-29 15:33 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-29 14:19 - 2019-06-14 17:31 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\Packages
2020-02-29 14:16 - 2019-06-11 09:34 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-02-29 14:16 - 2019-06-11 09:34 - 000002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-02-29 14:15 - 2019-07-31 09:47 - 000002240 _____ C:\Users\KUBÍK\Desktop\Discord.lnk
2020-02-29 14:15 - 2019-07-31 09:47 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2020-02-29 14:14 - 2019-07-31 09:47 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\Discord
2020-02-20 17:54 - 2020-01-28 17:21 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\Messenger
2020-02-20 17:54 - 2020-01-28 17:21 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\Messenger
2020-02-20 15:21 - 2020-01-17 11:52 - 000000000 ____D C:\Games
2020-02-19 14:46 - 2019-06-14 17:33 - 000002368 _____ C:\Users\KUBÍK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-02-19 14:46 - 2019-06-14 17:33 - 000000000 ___RD C:\Users\KUBÍK\OneDrive
2020-02-15 22:56 - 2019-03-19 05:52 - 000000000 ____D C:\windows\LiveKernelReports
2020-02-15 08:08 - 2020-01-26 14:47 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\Crossout
2020-02-15 08:08 - 2019-06-17 15:01 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2020-02-15 08:05 - 2019-08-17 18:06 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\Wargaming.net
2020-02-15 08:05 - 2019-08-17 18:06 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wargaming.net
2020-02-15 07:57 - 2020-01-24 17:18 - 000000000 ____D C:\Users\KUBÍK\Documents\My Games
2020-02-15 07:54 - 2019-06-14 17:31 - 000000000 ___RD C:\Users\KUBÍK\3D Objects
2020-02-15 07:54 - 2019-05-21 23:26 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-02-15 07:53 - 2019-05-21 23:22 - 000258096 _____ C:\windows\system32\FNTCACHE.DAT
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ___RD C:\windows\PrintDialog
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ___RD C:\windows\ImmersiveControlPanel
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\SysWOW64\oobe
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\SysWOW64\Dism
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\SystemResources
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\system32\WinBioPlugIns
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\system32\SystemResetPlatform
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\system32\PerceptionSimulation
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\system32\oobe
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\system32\Dism
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\ShellExperiences
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\bcastdvr
2020-02-14 20:18 - 2019-03-19 05:37 - 000000000 ____D C:\windows\servicing
2020-02-14 15:13 - 2019-03-19 05:37 - 000000000 ____D C:\windows\CbsTemp
2020-02-14 15:12 - 2019-05-21 23:45 - 000000000 ____D C:\windows\system32\MRT
2020-02-14 15:10 - 2019-05-21 23:45 - 120407888 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2020-02-03 21:56 - 2019-03-19 05:56 - 000835688 _____ (Adobe) C:\windows\SysWOW64\FlashPlayerApp.exe
2020-02-03 21:56 - 2019-03-19 05:56 - 000179608 _____ (Adobe) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories ========

2019-08-26 09:27 - 2019-08-26 12:35 - 000000600 _____ () C:\Users\KUBÍK\AppData\Roaming\winscp.rnd

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-02-2020
Ran by KUBÍK (04-03-2020 17:32:41)
Running from C:\Users\KUBÍK\Desktop
Windows 10 Pro Version 1903 18362.657 (X64) (2019-06-14 16:23:54)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2362187174-35916906-3405601686-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2362187174-35916906-3405601686-503 - Limited - Disabled)
Guest (S-1-5-21-2362187174-35916906-3405601686-501 - Limited - Disabled)
KUBÍK (S-1-5-21-2362187174-35916906-3405601686-1004 - Administrator - Enabled) => C:\Users\KUBÍK
WDAGUtilityAccount (S-1-5-21-2362187174-35916906-3405601686-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG Antivirus (Disabled - Up to date) {4FC75CA5-1654-5411-7CFB-1893D506BCF4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.6.1 - Advanced Micro Devices, Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.1.2397 - AVAST Software)
AVG AntiVirus FREE (HKLM-x32\...\AVG Antivirus) (Version: 20.1.3112 - AVG Technologies)
Booking (HKLM-x32\...\{13D4CD54-EA09-4FDB-B979-8B2BC0F020CA}_is1) (Version: 2.0.701 - Booking)
Branding64 (HKLM\...\{EE2AFCE4-0238-4DE0-A140-1647021627C1}) (Version: 1.00.0001 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.61 - Piriform)
Discord (HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Discord) (Version: 0.0.306 - Discord Inc.)
Epic Games Launcher (HKLM-x32\...\{466EA30A-9B38-4AD2-A6B0-18D6E0C1A848}) (Version: 1.1.206.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Google Chrome (HKLM\...\{51BAF2DB-F22D-3A9D-947C-F78F0BF6ECFA}) (Version: 80.0.3987.122 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
GXT 168 Gaming Mouse (HKLM-x32\...\{06BE89B5-BEAB-4A60-BC72-7E57F2C6F9BC}}_is1) (Version: 1.0 - Trust International BV)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4835 - Intel Corporation)
Java 8 Update 221 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180221F0}) (Version: 8.0.2210.11 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Malwarebytes version 4.1.0.56 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.0.56 - Malwarebytes)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.72 - McAfee, LLC.)
Microsoft OneDrive (HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\OneDriveSetup.exe) (Version: 19.232.1124.0008 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27024 (HKLM-x32\...\{5fb2083a-f3cc-4b78-93ff-bd9788b5de01}) (Version: 14.16.27024.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27024 (HKLM-x32\...\{2ff11a2a-f7ac-4a6c-8cd4-c7bb974f3642}) (Version: 14.16.27024.1 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{E154B2C8-2F3E-4763-B3D5-E7D34AE39C6B}) (Version: 1.0.0.0 - Mojang)
osu! (HKLM-x32\...\{a29f7c8f-452b-45e2-9bca-514131bc8840}) (Version: latest - ppy Pty Ltd)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6086 - Realtek Semiconductor Corp.)
Reimage Protector (HKLM\...\Reimage Protector) (Version: - Reimage) <==== ATTENTION
Roblox Player for KUBÍK (HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\roblox-player) (Version: - Roblox Corporation)
Roblox Studio for KUBÍK (HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\roblox-studio) (Version: - Roblox Corporation)
Samsung M2070 Series (HKLM-x32\...\Samsung M2070 Series) (Version: 1.27.02 (14.06.2019) - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.2.5 - TeamSpeak Systems GmbH)
Wargaming.net Game Center (HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Wargaming.net Game Center) (Version: 19.9.1.8579 - Wargaming.net)
WinSCP 5.15.3 (HKLM-x32\...\winscp3_is1) (Version: 5.15.3 - Martin Prikryl)
World of Tanks EU (HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\WOT.EU.PRODUCTION) (Version: - Wargaming.net)
YMS 3017 AMBUSH Gaming mouse (HKLM-x32\...\{A53D8141-1FAB-4EA5-8630-52BFC0170AB3}}_is1) (Version: 1.0 - )

Packages:
=========
Instagram -> C:\Program Files\WindowsApps\Facebook.InstagramBeta_41.1788.50991.0_x86__8xx8rvfyw5nnt [2019-06-14] (Instagram)
Messenger -> C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_370.7.119.0_x64__8xx8rvfyw5nnt [2020-02-29] (Facebook Inc)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-06-14] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-06-14] (Microsoft Corporation) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]
Samsung Printer Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_1.3.15.0_x64__3c1yjt4zspk6g [2019-10-16] (Samsung Electronics Co. Ltd.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2019-06-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\windows\system32\igfxDTCM.dll [2017-11-16] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2019-06-14 17:49 - 2019-06-14 17:50 - 098275328 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libcef.dll
2019-06-14 17:50 - 2019-06-14 17:50 - 000092672 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libEGL.dll
2019-06-14 17:50 - 2019-06-14 17:50 - 003922432 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libGLESv2.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 000017920 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libEGL.DLL
2019-01-08 11:39 - 2019-01-08 11:39 - 003598336 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2019-06-04 19:45 - 2019-06-04 19:45 - 000257024 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\WirelessVR-windesktop64.dll
2018-03-13 03:47 - 2018-03-13 03:47 - 000912896 _____ () [File not signed] C:\Program Files\AMD\Performance Profile Client\aws-cpp-sdk-core.dll
2018-03-13 03:47 - 2018-03-13 03:47 - 003109888 _____ () [File not signed] C:\Program Files\AMD\Performance Profile Client\aws-cpp-sdk-s3.dll
2015-02-19 00:13 - 2015-02-19 00:13 - 000817152 _____ () [File not signed] C:\Program Files\AMD\Performance Profile Client\Device.dll
2015-02-19 00:13 - 2015-02-19 00:13 - 003650560 _____ () [File not signed] C:\Program Files\AMD\Performance Profile Client\Platform.dll
2019-06-04 19:42 - 2019-06-04 19:42 - 000158208 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\windows\SYSTEM32\amdihk64.dll
2019-06-14 17:49 - 2019-06-14 17:49 - 000547840 _____ (The Chromium Authors) [File not signed] C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\chrome_elf.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qgif.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000040960 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qicns.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qico.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000414208 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qjpeg.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qsvg.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qtga.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000023552 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qwbmp.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000516608 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qwebp.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 001441280 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\platforms\qwindows.dll
2019-06-04 19:57 - 2019-06-04 19:57 - 005999104 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 006413824 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 001141760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 000339968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 004143104 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 003840000 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 000332800 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 000349184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 080959488 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 000113152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 005622272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 000463360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 000190464 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 002825216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000053760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000059392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\qtgraphicaleffectsplugin.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000017408 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000330752 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000137216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000090112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000017920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2019-01-08 11:40 - 2019-01-08 11:40 - 000136192 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\styles\qwindowsvistastyle.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [478]

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 05:49 - 2019-03-19 05:49 - 000000824 _____ C:\windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\KUBÍK\Pictures\1f8e47de6cf38b32871de96eac187560.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\StartupApproved\Run: => "Chromium"
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_7E40F5550D807E9BB9B6C2AAC50BD3AF"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{0E48D799-E205-4E77-ACAE-8407C1E35B17}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [UDP Query User{9A264475-13AC-4684-A88E-F070554C3ACD}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [{132EE426-3985-47D7-8E2F-F2036F773E31}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{2C3942D1-2604-43CF-8711-A99A63B73592}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{CBC311A7-7DCE-497B-B886-612462C82ACD}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe No File
FirewallRules: [{91B6683F-67B6-4473-A0A3-EF0E3B092412}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe No File
FirewallRules: [{FA81547F-32F7-43FF-B17A-1471C43B3FE5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{01525D56-29D0-4395-AEB6-AF55E6A3CA6F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{6E1057E9-350B-4C0D-AA91-0B395C5E1E3C}] => (Allow) C:\Users\KUBÍK\AppData\Local\Chromium\Application\chrome.exe (The Chromium Authors) [File not signed]
FirewallRules: [{E40B377D-E1FB-461A-88BC-06EA1C87F4F5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{1CB4C349-F4F1-4F88-9BF3-66CA0CABDA59}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{14CBD764-A89E-451C-B2C7-DB90DB207CAD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{00110985-3DCD-484A-B5FF-A932A8E91F04}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{9D69B6B6-8206-4AC5-8E61-FCA03B3B722F}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{8A19C45B-593A-42F8-811C-34196B60499F}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{54E75D2E-D59E-4095-ACB7-9CADCBF33C33}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{F77C110A-34B7-4992-805F-0B080FBE9069}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{77C40C9A-6B1F-434B-B6BA-0C543FD95931}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe No File
FirewallRules: [{92D73C0E-66F7-429F-AF76-BB522BE26CA4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\EasyAntiCheat\EasyAntiCheat.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{FFFF10E9-3366-449E-91B9-92BB5EC576CB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\EasyAntiCheat\EasyAntiCheat.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{67321948-DEFA-48D7-BA90-E4D88AB8C9B2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Ashes of the Singularity Escalation\StardockLauncher.exe (STARDOCK SYSTEMS, INC. -> Stardock Corporation)
FirewallRules: [{6E4F514E-7E43-498B-A5AB-FDA397A9C402}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Ashes of the Singularity Escalation\StardockLauncher.exe (STARDOCK SYSTEMS, INC. -> Stardock Corporation)
FirewallRules: [TCP Query User{242FD7A0-5B11-424A-9D5C-EC6243932F0D}C:\users\kubík\appdata\local\crossout\launcher.exe] => (Allow) C:\users\kubík\appdata\local\crossout\launcher.exe No File
FirewallRules: [UDP Query User{F63A74B8-D0DE-4B88-ACEC-D6F4BAA95EE0}C:\users\kubík\appdata\local\crossout\launcher.exe] => (Allow) C:\users\kubík\appdata\local\crossout\launcher.exe No File
FirewallRules: [{C747D25C-8B95-418B-94B0-93CCF40EE764}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

14-02-2020 15:03:12 Windows Update
21-02-2020 20:29:38 Naplánovaný kontrolní bod
29-02-2020 14:34:49 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (03/04/2020 05:26:31 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVG\Antivirus\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení AVG.VC140.CRT,processorArchitecture="amd64",publicKeyToken="f92d94485545da78",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/04/2020 05:26:30 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVAST Software\Avast\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení Avast.VC140.CRT,processorArchitecture="amd64",publicKeyToken="fcc99ee6193ebbca",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/04/2020 05:26:03 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVG\Antivirus\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení AVG.VC140.CRT,processorArchitecture="amd64",publicKeyToken="f92d94485545da78",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/04/2020 05:26:03 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVAST Software\Avast\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení Avast.VC140.CRT,processorArchitecture="amd64",publicKeyToken="fcc99ee6193ebbca",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/04/2020 03:45:10 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVG\Antivirus\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení AVG.VC140.CRT,processorArchitecture="amd64",publicKeyToken="f92d94485545da78",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/04/2020 03:45:10 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVAST Software\Avast\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení Avast.VC140.CRT,processorArchitecture="amd64",publicKeyToken="fcc99ee6193ebbca",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/04/2020 03:35:22 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVG\Antivirus\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení AVG.VC140.CRT,processorArchitecture="amd64",publicKeyToken="f92d94485545da78",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/04/2020 03:35:21 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVAST Software\Avast\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení Avast.VC140.CRT,processorArchitecture="amd64",publicKeyToken="fcc99ee6193ebbca",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.


System errors:
=============
Error: (03/04/2020 05:32:42 PM) (Source: DCOM) (EventID: 10001) (User: DTP-8L5NQ52)
Description: Nelze spustit server DCOM: {9AA46009-3CE0-458A-A354-715610A075E6} jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147943140
při provádění příkazu:
C:\windows\System32\rundll32.exe C:\windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Error: (03/04/2020 05:30:30 PM) (Source: DCOM) (EventID: 10001) (User: DTP-8L5NQ52)
Description: Nelze spustit server DCOM: {9AA46009-3CE0-458A-A354-715610A075E6} jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147943140
při provádění příkazu:
C:\windows\System32\rundll32.exe C:\windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Error: (03/04/2020 05:29:05 PM) (Source: DCOM) (EventID: 10001) (User: DTP-8L5NQ52)
Description: Nelze spustit server DCOM: {9AA46009-3CE0-458A-A354-715610A075E6} jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147943140
při provádění příkazu:
C:\windows\System32\rundll32.exe C:\windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Error: (03/04/2020 05:29:05 PM) (Source: DCOM) (EventID: 10001) (User: DTP-8L5NQ52)
Description: Nelze spustit server DCOM: {9AA46009-3CE0-458A-A354-715610A075E6} jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147943140
při provádění příkazu:
C:\windows\System32\rundll32.exe C:\windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Error: (03/04/2020 05:29:01 PM) (Source: DCOM) (EventID: 10001) (User: DTP-8L5NQ52)
Description: Nelze spustit server DCOM: {9AA46009-3CE0-458A-A354-715610A075E6} jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147943140
při provádění příkazu:
C:\windows\System32\rundll32.exe C:\windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Error: (03/04/2020 05:29:00 PM) (Source: DCOM) (EventID: 10001) (User: DTP-8L5NQ52)
Description: Nelze spustit server DCOM: {9AA46009-3CE0-458A-A354-715610A075E6} jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147943140
při provádění příkazu:
C:\windows\System32\rundll32.exe C:\windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Error: (03/04/2020 05:26:15 PM) (Source: DCOM) (EventID: 10001) (User: NT AUTHORITY)
Description: Nelze spustit server DCOM: {995C996E-D918-4A8C-A302-45719A6F4EA7} jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147943140
při provádění příkazu:
C:\windows\System32\rundll32.exe C:\windows\System32\shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding

Error: (03/04/2020 05:26:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba SSPORT neuspěla při spuštění v důsledku následující chyby:
V systému Windows nelze ověřit digitální podpis tohoto souboru. Při nedávné změně hardwaru nebo softwaru mohl být nainstalován nesprávně podepsaný nebo poškozený soubor nebo soubor škodlivého softwaru z neznámého zdroje.


CodeIntegrity:
===================================

Date: 2020-03-04 17:30:08.091
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-03-04 17:30:08.073
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-03-04 17:28:32.631
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-04 17:28:29.982
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-04 17:28:28.311
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-04 17:28:27.933
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-04 17:28:26.269
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-04 17:28:25.407
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: Dell Inc. A17 10/24/2018
Motherboard: Dell Inc. 08WKV3
Processor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz
Percentage of memory in use: 56%
Total physical RAM: 8131.93 MB
Available physical RAM: 3560.06 MB
Total Virtual: 15299.93 MB
Available Virtual: 6417.3 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:220.73 GB) (Free:43.63 GB) NTFS
Drive d: (English Plus) (CDROM) (Total:0.25 GB) (Free:0 GB) CDFS

\\?\Volume{4eeaf5f6-b854-4664-acba-1c8a94f3adaa}\ (Recovery) (Fixed) (Total:2.23 GB) (Free:1.85 GB) NTFS
\\?\Volume{47098891-417e-4f09-bf91-d0caed8bf2bc}\ (BOOT) (Fixed) (Total:0.48 GB) (Free:0.46 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 223.6 GB) (Disk ID: 57AE8B67)

Partition: GPT.

==================== End of Addition.txt =======================

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

# -------------------------------
# Malwarebytes AdwCleaner 8.0.3.0
# -------------------------------
# Build: 03-03-2020
# Database: 2020-03-02.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 03-04-2020
# Duration: 00:00:01
# OS: Windows 10 Pro
# Cleaned: 8
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files\Reimage
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Protector
Deleted C:\ProgramData\Reimage Protector

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\PRODUCTSETUP
Deleted HKCU\Software\csastats
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Reimage
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Reimage Protector
Deleted HKLM\Software\Reimage

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1962 octets] - [04/03/2020 19:19:12]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

OK. Dejte nové logy FRST+Addition.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-02-2020
Ran by KUBÍK (administrator) on DTP-8L5NQ52 (Dell Inc. OptiPlex 7020) (04-03-2020 20:01:16)
Running from C:\Users\KUBÍK\Desktop
Loaded Profiles: KUBÍK (Available Profiles: KUBÍK)
Platform: Windows 10 Pro Version 1903 18362.657 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\wsc_proxy.exe
(Discord Inc. -> Discord Inc.) C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\Win64\UnrealCEFSubProcess.exe
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\KUBÍK\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\NisSrv.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8530176 2018-03-30] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407232 2018-03-30] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [277664 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [325704 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [644552 2019-07-04] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [31613840 2020-03-02] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3365840 2020-02-11] (Valve -> Valve Corporation)
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Run: [Chromium] => "c:\users\kubÍk\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Run: [Discord] => C:\Users\KUBÍK\AppData\Local\Discord\app-0.0.306\Discord.exe [90950968 2020-02-24] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-16] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Run: [Wargaming.net Game Center] => C:\ProgramData\Wargaming.net\GameCenter\wgc.exe [2414456 2020-02-05] (Wargaming.net Limited -> Wargaming.net)
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\MountPoints2: {ea09a92c-8c1a-11e9-9358-806e6f6e6963} - "D:\start.exe"
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Bubbles.scr [807936 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.122\Installer\chrmstp.exe [2020-02-29] (Google LLC -> Google LLC)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {047F53BC-CBAC-4263-A30F-78F12D889B0D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2B0299EF-1865-4B48-B2E7-F4595F38C404} - System32\Tasks\G6-GmTaskPlan => C:\Program Files\Trust\GXT 168\GXT168GamingMouse.exe [3411456 2018-12-01] (Trust International BV) [File not signed]
Task: {2CACEEDF-885F-48C6-AA9F-0E6CA1822A48} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [66952 2019-06-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {2CDE1F88-4065-401E-80A5-087DE76DDA04} - System32\Tasks\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [3942704 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
Task: {4B22F06E-AAA2-457F-AD47-B41DE524496E} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3894664 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
Task: {51E7A6F4-16F8-4629-9285-02C69F3481C0} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [58760 2019-06-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {5F1238C7-B2C5-4C0E-B003-B7E5FBBA3CB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-06-11] (Google Inc -> Google Inc.)
Task: {668D35AB-0EC3-448F-85F8-8443FA5E7785} - System32\Tasks\AMDInstallUEP => C:\Program Files\AMD\InstallUEP\AMDInstallUEP.exe [2355712 2019-02-12] () [File not signed]
Task: {6D90B27F-7FE2-4757-AF87-2985499672C3} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1692296 2020-02-29] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {79DF3038-CE89-4688-8C15-72CAE9538C0E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-06-11] (Google Inc -> Google Inc.)
Task: {A94DC723-C189-42C0-814A-BFC54B457209} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1660520 2020-02-29] (Avast Software s.r.o. -> Avast Software)
Task: {AB1F803A-665D-45A2-A37C-91203439E337} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B1205049-E58E-4A35-B6B1-178B4156AAFA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B6656C72-ACD8-41FA-9D34-4DD425812551} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [468992 2019-06-05] (Advanced Micro Devices, Inc.) [File not signed]
Task: {CCF0A45C-9976-46CA-94C7-A516ADBF62FD} - System32\Tasks\Sstt2-TaskPlan => C:\Program Files\Gaming\YMS 3017\YMS 3017.EXE [3366912 2019-01-06] (YENKEE) [File not signed]
Task: {EA6D6036-24F3-4B06-A919-FA894CEA784E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F2473A19-2A13-46B7-88F9-B5671869E876} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992 2019-06-05] (Advanced Micro Devices, Inc.) [File not signed]
Task: {F3741C78-5FE1-4E54-83BC-5CC2D68A5F23} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-16] (Piriform Software Ltd -> Piriform Ltd)
Task: {F47DF28A-DFBF-441C-8C8F-1E27D3BED538} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-16] (Piriform Software Ltd -> Piriform Software Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{f98b8b71-1a67-4921-9970-181eff5bed8d}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-02-29] (McAfee, LLC -> McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_221\bin\ssv.dll [2019-07-29] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-02-29] (McAfee, LLC -> McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_221\bin\jp2ssv.dll [2019-07-29] (Oracle America, Inc. -> Oracle Corporation)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-02-29]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Plugin-x32: @java.com/DTPlugin,version=11.221.2 -> C:\Program Files (x86)\Java\jre1.8.0_221\bin\dtplugin\npDeployJava1.dll [2019-07-29] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.221.2 -> C:\Program Files (x86)\Java\jre1.8.0_221\bin\plugin2\npjp2.dll [2019-07-29] (Oracle America, Inc. -> Oracle Corporation)

Chrome:
=======
CHR DefaultProfile: ",
CHR Profile: C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default [2020-03-04]
CHR Notifications: Default -> hxxps://check-now.online; hxxps://info.qplay.cz; hxxps://joviatranson.info; hxxps://maranhesduve.club; hxxps://news-jupiter.com; hxxps://solicencers.info; hxxps://uploadhaven.com; hxxps://www.facebook.com; hxxps://www.pvpro.com
CHR Extension: (Prezentace) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-06-14]
CHR Extension: (Dokumenty) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-06-14]
CHR Extension: (Disk Google) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-06-14]
CHR Extension: (YouTube) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-06-14]
CHR Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-03-04]
CHR Extension: (Tabulky) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-06-14]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2020-02-16]
CHR Extension: (HTTPS Everywhere) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2019-12-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-07]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-03-01]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-06]
CHR Extension: (Gmail) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-14]
CHR Extension: (Chrome Media Router) - C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-02-29]
CHR Profile: C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\Guest Profile [2020-01-24]
CHR Profile: C:\Users\KUBÍK\AppData\Local\Google\Chrome\User Data\System Profile [2020-01-24]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD External Events Utility; C:\windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe [508000 2019-09-18] (Advanced Micro Devices, Inc. -> AMD)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6046624 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
S2 AUEPLauncher; C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe [43008 2019-06-04] (AMD) [File not signed]
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [413472 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57536 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
S2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [413544 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [6094272 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 AvgWscReporter; C:\Program Files\AVG\Antivirus\wsc_proxy.exe [110608 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8413472 2020-02-17] (BattlEye Innovations e.K. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2019-05-22] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 igfxCUIService2.0.0.0; C:\windows\system32\igfxCUIService.exe [373728 2017-11-16] (Intel(R) pGFX -> Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6933272 2020-03-04] (Malwarebytes Inc -> Malwarebytes)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [920656 2020-02-29] (McAfee, LLC -> McAfee, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2019-09-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\NisSrv.exe [2433136 2019-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MsMpEng.exe [109896 2019-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdkmdag; C:\windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atikmdag.sys [55249504 2019-09-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 AMDKMDAP; C:\windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atikmpag.sys [595040 2019-09-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\windows\System32\drivers\amdkmpfd.sys [103664 2019-06-07] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 aswArDisk; C:\windows\System32\drivers\aswArDisk.sys [37864 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\windows\System32\drivers\aswArPot.sys [205576 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\windows\System32\drivers\aswbidsdriver.sys [271120 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\windows\System32\drivers\aswbidsh.sys [206608 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\windows\System32\drivers\aswbuniv.sys [64272 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\windows\System32\drivers\aswElam.sys [16304 2020-03-03] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswHdsKe; C:\windows\System32\drivers\aswHdsKe.sys [279360 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\windows\System32\drivers\aswKbd.sys [42976 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\windows\System32\drivers\aswMonFlt.sys [175400 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\windows\System32\drivers\aswRdr2.sys [110560 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\windows\System32\drivers\aswRvrt.sys [84056 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\windows\System32\drivers\aswSnx.sys [848672 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\windows\System32\drivers\aswSP.sys [458584 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\windows\System32\drivers\aswStm.sys [235184 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\windows\System32\drivers\aswVmm.sys [316256 2020-03-03] (Avast Software s.r.o. -> AVAST Software)
R3 AtiHDAudioService; C:\windows\system32\drivers\AtihdWT6.sys [108152 2019-05-09] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R0 avgArDisk; C:\windows\System32\drivers\avgArDisk.sys [37928 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgArPot; C:\windows\System32\drivers\avgArPot.sys [206160 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgbidsdriver; C:\windows\System32\drivers\avgbidsdriver.sys [271704 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgbidsh; C:\windows\System32\drivers\avgbidsh.sys [207192 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgbuniv; C:\windows\System32\drivers\avgbuniv.sys [64344 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgElam; C:\windows\System32\drivers\avgElam.sys [16520 2020-03-03] (Microsoft Windows Early Launch Anti-malware Publisher -> AVG Technologies CZ, s.r.o.)
S3 avgKbd; C:\windows\System32\drivers\avgKbd.sys [43560 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\windows\System32\drivers\avgMonFlt.sys [175472 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
U5 avgNetSec; C:\Windows\System32\Drivers\avgNetSec.sys [553104 2019-10-02] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.)
S3 avgRdr; C:\windows\System32\drivers\avgRdr2.sys [111144 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\windows\System32\drivers\avgRvrt.sys [84096 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgSnx; C:\windows\System32\drivers\avgSnx.sys [849256 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\windows\System32\drivers\avgSP.sys [459168 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgStm; C:\windows\System32\drivers\avgStm.sys [235280 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgVmm; C:\windows\System32\drivers\avgVmm.sys [316840 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R3 IntcAzAudAddService; C:\windows\system32\drivers\RTDVHD64.sys [2594048 2018-03-30] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
R2 MBAMChameleon; C:\windows\System32\Drivers\MbamChameleon.sys [214496 2020-03-04] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\windows\System32\DRIVERS\MbamElam.sys [20936 2020-03-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\windows\System32\Drivers\mbamswissarmy.sys [248968 2020-03-04] (Malwarebytes Inc -> Malwarebytes)
S2 SSPORT; C:\windows\system32\Drivers\SSPORT.sys [19016 2019-05-31] (HP Inc. -> )
S0 WdBoot; C:\windows\System32\drivers\wd\WdBoot.sys [47496 2019-06-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\windows\System32\drivers\wd\WdFilter.sys [337632 2019-06-14] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\windows\System32\drivers\wd\WdNisDrv.sys [53984 2019-06-14] (Microsoft Windows -> Microsoft Corporation)
U3 avgbdisk; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-04 19:58 - 2020-03-03 18:30 - 000368056 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2020-03-04 19:20 - 2020-03-04 20:00 - 000248968 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamswissarmy.sys
2020-03-04 19:18 - 2020-03-04 19:19 - 000000000 ____D C:\AdwCleaner
2020-03-04 19:16 - 2020-03-04 19:16 - 008199856 _____ (Malwarebytes) C:\Users\KUBÍK\Desktop\adwcleaner_8.0.3.exe
2020-03-04 19:16 - 2020-03-04 19:16 - 001928352 _____ (Malwarebytes) C:\Users\KUBÍK\Downloads\MBSetup.exe
2020-03-04 18:30 - 2020-03-03 13:12 - 000368088 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\avgBoot.exe
2020-03-04 17:32 - 2020-03-04 19:58 - 000001181 _____ C:\Users\KUBÍK\Desktop\Addition.txt
2020-03-04 17:30 - 2020-03-04 20:01 - 000025804 _____ C:\Users\KUBÍK\Desktop\FRST.txt
2020-03-04 17:30 - 2020-03-04 20:01 - 000000000 ____D C:\FRST
2020-03-04 17:27 - 2020-03-04 17:27 - 002279424 _____ (Farbar) C:\Users\KUBÍK\Desktop\FRST64.exe
2020-03-04 15:41 - 2020-03-04 15:41 - 006122168 _____ (TeamViewer) C:\Users\KUBÍK\Downloads\TeamViewerQS_cs-idc5dq4nsx.exe
2020-03-04 15:41 - 2020-03-04 15:41 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\TeamViewer
2020-03-04 15:36 - 2020-03-04 15:36 - 009341712 _____ (AVAST Software) C:\Users\Public\Desktop\avast_free_antivirus_setup_online_x64.exe
2020-03-04 15:23 - 2020-03-04 15:23 - 000214496 _____ (Malwarebytes) C:\windows\system32\Drivers\MbamChameleon.sys
2020-03-04 15:23 - 2020-03-04 15:23 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\cache
2020-03-04 15:21 - 2020-03-04 15:21 - 000230080 _____ (AVAST Software) C:\Users\KUBÍK\Downloads\avast_free_antivirus_setup_online (1).exe
2020-03-03 18:30 - 2020-03-03 18:30 - 000235184 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2020-03-03 18:30 - 2020-03-03 18:30 - 000175400 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2020-03-03 13:13 - 2020-03-03 13:12 - 000235280 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgStm.sys
2020-03-03 13:13 - 2020-03-03 13:12 - 000175472 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgMonFlt.sys
2020-03-02 19:18 - 2020-03-02 19:18 - 000000000 ____D C:\ftb
2020-03-02 19:16 - 2020-03-02 19:16 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\ftblauncher
2020-03-02 19:16 - 2020-03-02 19:16 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\ftblauncher
2020-02-29 16:49 - 2020-02-29 17:56 - 1231027316 _____ C:\Users\KUBÍK\Downloads\Stranger.Things.S01E01.720p.x264_CZ tit.mkv
2020-02-20 17:56 - 2020-02-20 21:00 - 1334364160 _____ C:\Users\KUBÍK\Downloads\16-Doctor Strange-CZ dabing by kalco.avi
2020-02-15 08:05 - 2020-02-15 08:05 - 000001899 _____ C:\Users\KUBÍK\Desktop\Game Center.lnk
2020-02-14 20:18 - 2020-02-14 20:18 - 000000000 ____D C:\ProgramData\ssh
2020-02-14 15:08 - 2020-02-14 15:08 - 025900032 _____ (Microsoft Corporation) C:\windows\system32\edgehtml.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 025444352 _____ (Microsoft Corporation) C:\windows\system32\Hydrogen.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 022635008 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 019850240 _____ (Microsoft Corporation) C:\windows\SysWOW64\edgehtml.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 019813376 _____ (Microsoft Corporation) C:\windows\system32\HologramWorld.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 018026496 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 009929016 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 008013824 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 007905208 _____ (Microsoft Corporation) C:\windows\system32\windows.storage.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 007754752 _____ (Microsoft Corporation) C:\windows\system32\Chakra.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 007600448 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Protection.PlayReady.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 007263992 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 007259648 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 007017472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 006519752 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 006435840 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 006284800 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 006167552 _____ (Microsoft Corporation) C:\windows\system32\twinui.pcshell.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 006083832 _____ (Microsoft Corporation) C:\windows\SysWOW64\windows.storage.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 005912064 _____ (Microsoft Corporation) C:\windows\SysWOW64\Chakra.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 005764664 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 005502464 _____ (Microsoft Corporation) C:\windows\system32\cdp.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 005112320 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 005041664 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004856832 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004575232 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004562896 _____ (Microsoft Corporation) C:\windows\system32\sppsvc.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 004538880 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004470784 _____ (Microsoft Corporation) C:\windows\system32\InputService.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004348616 _____ (Microsoft Corporation) C:\windows\system32\Windows.Mirage.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004308480 _____ (Microsoft Corporation) C:\windows\SysWOW64\cdp.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004129416 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 004005888 _____ (Microsoft Corporation) C:\windows\system32\EdgeContent.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003967888 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 003820032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003792384 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003728896 _____ (Microsoft Corporation) C:\windows\system32\win32kfull.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 003550208 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003525592 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003484672 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003372440 _____ (Microsoft Corporation) C:\windows\system32\combase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003263488 _____ (Microsoft Corporation) C:\windows\system32\tquery.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 003243080 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Mirage.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002988552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 002870272 _____ (Microsoft Corporation) C:\windows\system32\mssrch.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002861568 _____ (Microsoft Corporation) C:\windows\system32\xpsservices.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002800128 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32kfull.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 002773776 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002766088 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002755584 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2020-02-14 15:08 - 2020-02-14 15:08 - 002755584 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2020-02-14 15:08 - 2020-02-14 15:08 - 002703872 _____ (Microsoft Corporation) C:\windows\system32\WebRuntimeManager.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002584008 _____ (Microsoft Corporation) C:\windows\SysWOW64\combase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002561536 _____ (Microsoft Corporation) C:\windows\SysWOW64\tquery.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002493720 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002314952 _____ (Microsoft Corporation) C:\windows\SysWOW64\msmpeg2vdec.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002305536 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssrch.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002260176 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002230232 _____ (Microsoft Corporation) C:\windows\system32\mfasfsrcsnk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002225160 _____ (Microsoft Corporation) C:\windows\system32\ResetEngine.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002084576 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002071552 _____ (Microsoft Corporation) C:\windows\system32\ISM.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 002032128 _____ C:\windows\system32\rdpnano.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001999960 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001916744 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001858560 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001841152 _____ C:\windows\system32\TextInputMethodFormatter.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001835128 _____ (Microsoft Corporation) C:\windows\system32\mfsrcsnk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001830200 _____ (Microsoft Corporation) C:\windows\system32\rdpserverbase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001757096 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2020-02-14 15:08 - 2020-02-14 15:08 - 001743680 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001726480 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001693184 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001687040 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001664696 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001664680 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001657856 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001655880 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001610240 _____ (Microsoft Corporation) C:\windows\system32\HologramCompositor.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001602560 _____ (Microsoft Corporation) C:\windows\system32\dosvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001562424 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpserverbase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001541632 _____ (Microsoft Corporation) C:\windows\system32\wbengine.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001540096 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001512320 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001505592 _____ (Microsoft Corporation) C:\windows\system32\rdpbase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001489064 _____ (Microsoft Corporation) C:\windows\system32\mfsvr.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001482040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 001481216 _____ (Microsoft Corporation) C:\windows\system32\rdpsharercom.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001480192 _____ (Microsoft Corporation) C:\windows\system32\usocoreworker.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001417760 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsrcsnk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001412096 _____ (Microsoft Corporation) C:\windows\system32\SystemSettings.Handlers.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001398584 _____ (Microsoft Corporation) C:\windows\system32\hvix64.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001394168 _____ (Microsoft Corporation) C:\windows\system32\WinTypes.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001372160 _____ (Microsoft Corporation) C:\windows\system32\NotificationController.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001366128 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2020-02-14 15:08 - 2020-02-14 15:08 - 001319936 _____ (Microsoft Corporation) C:\windows\system32\webplatstorageserver.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001300280 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 001284096 _____ (Microsoft Corporation) C:\windows\system32\werconcpl.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001283592 _____ (Microsoft Corporation) C:\windows\system32\SecConfig.efi
2020-02-14 15:08 - 2020-02-14 15:08 - 001273856 _____ (Microsoft Corporation) C:\windows\system32\rdpcore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001272360 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfasfsrcsnk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001260544 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpsharercom.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001218120 _____ (Microsoft Corporation) C:\windows\system32\ClipUp.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001216000 _____ (Microsoft Corporation) C:\windows\system32\sdclt.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001214976 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001213752 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpbase.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001195008 _____ (Microsoft Corporation) C:\windows\system32\sdengin2.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001182232 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001170960 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001154448 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001151816 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001105776 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001098720 _____ (Microsoft Corporation) C:\windows\system32\DolbyDecMFT.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001097216 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Immersive.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001083904 _____ (Microsoft Corporation) C:\windows\system32\MusUpdateHandlers.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001083392 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001080832 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpcore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001077264 _____ (Microsoft Corporation) C:\windows\system32\hvax64.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 001060352 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001051448 _____ (Microsoft Corporation) C:\windows\system32\pidgenx.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001009664 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 001000960 _____ (Microsoft Corporation) C:\windows\system32\Windows.Mirage.Internal.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000996352 _____ (Microsoft Corporation) C:\windows\system32\sysmain.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000974336 _____ (Microsoft Corporation) C:\windows\system32\uDWM.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000952416 _____ (Microsoft Corporation) C:\windows\SysWOW64\DolbyDecMFT.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000949248 _____ (Microsoft Corporation) C:\windows\system32\SecurityHealthSSO.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000928120 _____ (Microsoft Corporation) C:\windows\system32\SecurityHealthService.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000923136 _____ (Microsoft Corporation) C:\windows\system32\EdgeManager.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000916480 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Core.TextInput.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000913408 _____ (Microsoft Corporation) C:\windows\system32\rasmans.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000904504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ReAgent.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000895488 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Immersive.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000892488 _____ (Microsoft Corporation) C:\windows\SysWOW64\WinTypes.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000891736 _____ (Microsoft Corporation) C:\windows\system32\ci.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000890368 _____ (Microsoft Corporation) C:\windows\system32\HolographicExtensions.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000882688 _____ (Microsoft Corporation) C:\windows\system32\CPFilters.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000875448 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000864256 _____ (Microsoft Corporation) C:\windows\system32\netlogon.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000857088 _____ C:\windows\system32\MBR2GPT.EXE
2020-02-14 15:08 - 2020-02-14 15:08 - 000852480 _____ (Microsoft Corporation) C:\windows\system32\ieproxy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000851968 _____ (Microsoft Corporation) C:\windows\system32\SearchIndexer.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000843776 _____ (Microsoft Corporation) C:\windows\SysWOW64\webplatstorageserver.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000839680 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000828216 _____ (Microsoft Corporation) C:\windows\system32\AppVClient.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000824848 _____ (Microsoft Corporation) C:\windows\system32\NetSetupEngine.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000805888 _____ (Microsoft Corporation) C:\windows\system32\cscui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000805376 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000788992 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000784384 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000783480 _____ (Microsoft Corporation) C:\windows\system32\tcblaunch.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000774664 _____ (Microsoft Corporation) C:\windows\system32\securekernel.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000768488 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000758800 _____ (Microsoft Corporation) C:\windows\system32\wimgapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000749568 _____ (Microsoft Corporation) C:\windows\system32\FrameServer.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000747320 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000705536 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000704512 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.FileExplorer.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000701440 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Mirage.Internal.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\CPFilters.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000685056 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000679368 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000678928 _____ (Microsoft Corporation) C:\windows\system32\StructuredQuery.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000673080 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000670720 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchIndexer.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000667136 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000667136 _____ (Microsoft Corporation) C:\windows\SysWOW64\EdgeManager.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\netlogon.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000661816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000642008 _____ (Microsoft Corporation) C:\windows\system32\TextInputFramework.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000637440 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000629760 _____ (Microsoft Corporation) C:\windows\system32\ipnathlp.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000623104 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000617784 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000610816 _____ (Microsoft Corporation) C:\windows\system32\netprofmsvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000605184 _____ (Microsoft Corporation) C:\windows\system32\MusNotification.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000599552 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActivationManager.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000598528 _____ (Microsoft Corporation) C:\windows\system32\webio.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000597816 _____ (Microsoft Corporation) C:\windows\SysWOW64\wimgapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000587064 _____ (Microsoft Corporation) C:\windows\SysWOW64\NetSetupEngine.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000578560 _____ (Microsoft Corporation) C:\windows\system32\SppExtComObj.Exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000568120 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000562176 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000558592 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_Notifications.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000550400 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000545432 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.MediaControl.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000542288 _____ (Microsoft Corporation) C:\windows\SysWOW64\StructuredQuery.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000537608 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000535552 _____ (Microsoft Corporation) C:\windows\system32\usosvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000530432 _____ (Microsoft Corporation) C:\windows\system32\sppcext.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000521728 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.System.Launcher.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000518456 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000516648 _____ (Microsoft Corporation) C:\windows\system32\wimserv.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000516544 _____ (Microsoft Corporation) C:\windows\system32\mf.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000516096 _____ (Microsoft Corporation) C:\windows\system32\MusNotificationUx.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000512000 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000510768 _____ (Microsoft Corporation) C:\windows\system32\systemreset.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000500736 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2020-02-14 15:08 - 2020-02-14 15:08 - 000497152 _____ (Microsoft Corporation) C:\windows\system32\werui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000494080 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000490496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.FileExplorer.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000490496 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000486912 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000486400 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000477496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2020-02-14 15:08 - 2020-02-14 15:08 - 000476672 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000475648 _____ (Microsoft Corporation) C:\windows\system32\DscCore.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000469504 _____ (Microsoft Corporation) C:\windows\SysWOW64\webio.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000467952 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000465208 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000459896 _____ (Microsoft Corporation) C:\windows\system32\MusNotifyIcon.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000453432 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000450560 _____ (Microsoft Corporation) C:\windows\system32\rdpclip.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000443904 _____ (Microsoft Corporation) C:\windows\system32\edgeIso.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000441072 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.MediaControl.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000435200 _____ (Microsoft Corporation) C:\windows\system32\wincorlib.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000430080 _____ (Microsoft Corporation) C:\windows\SysWOW64\werui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000422912 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000422008 _____ (Microsoft Corporation) C:\windows\system32\SgrmEnclave_secure.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000421376 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2020-02-14 15:08 - 2020-02-14 15:08 - 000416056 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000407040 _____ (Microsoft Corporation) C:\windows\system32\DispBroker.Desktop.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000405632 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000401408 _____ (Microsoft Corporation) C:\windows\system32\SearchProtocolHost.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000400696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\clfs.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000399360 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000392192 _____ (Microsoft Corporation) C:\windows\system32\Search.ProtocolHandler.MAPI2.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000384000 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000375504 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000370688 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieproxy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000369504 _____ (Microsoft Corporation) C:\windows\system32\BCP47Langs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000368128 _____ (Microsoft Corporation) C:\windows\system32\mssvp.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000366416 _____ (Microsoft Corporation) C:\windows\system32\mfsensorgroup.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000355840 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicSvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000353280 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000350720 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_SpeechPrivacy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000345088 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000336384 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchProtocolHost.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000335448 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000327680 _____ (Microsoft Corporation) C:\windows\SysWOW64\edgeIso.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000324616 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000324608 _____ (Microsoft Corporation) C:\windows\system32\FSClient.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32k.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000324096 _____ (Microsoft Corporation) C:\windows\system32\rdpviewerax.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000311096 _____ (Microsoft Corporation) C:\windows\system32\SecurityHealthAgent.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000309248 _____ (Microsoft Corporation) C:\windows\system32\tapisrv.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000308736 _____ (Microsoft Corporation) C:\windows\system32\msIso.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000307712 _____ (Microsoft Corporation) C:\windows\SysWOW64\wincorlib.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000300392 _____ (Microsoft Corporation) C:\windows\system32\skci.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000299520 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssvp.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000285184 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicCapsule.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000283136 _____ (Microsoft Corporation) C:\windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000281088 _____ (Microsoft Corporation) C:\windows\system32\msutb.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000274464 _____ (Microsoft Corporation) C:\windows\SysWOW64\BCP47Langs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000270848 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpviewerax.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000268800 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000266752 _____ (Microsoft Corporation) C:\windows\system32\DAFMCP.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000259984 _____ (Microsoft Corporation) C:\windows\system32\logoncli.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000252928 _____ (Microsoft Corporation) C:\windows\SysWOW64\tapisrv.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000251904 _____ (Microsoft Corporation) C:\windows\SysWOW64\msIso.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000249344 _____ (Microsoft Corporation) C:\windows\system32\srrstr.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000247856 _____ (Microsoft Corporation) C:\windows\system32\weretw.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000240640 _____ (Microsoft Corporation) C:\windows\system32\SearchFilterHost.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000228864 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000227840 _____ (Microsoft Corporation) C:\windows\system32\IndexedDbLegacy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000226816 _____ (Microsoft Corporation) C:\windows\system32\netprofm.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000225792 _____ (Microsoft Corporation) C:\windows\system32\wersvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000224768 _____ (Microsoft Corporation) C:\windows\system32\DWWIN.EXE
2020-02-14 15:08 - 2020-02-14 15:08 - 000222208 _____ (Microsoft Corporation) C:\windows\system32\Winlangdb.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000220984 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000217600 _____ (Microsoft Corporation) C:\windows\SysWOW64\msutb.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000214528 _____ (Microsoft Corporation) C:\windows\system32\rdsdwmdr.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000211968 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFilterHost.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000210744 _____ (Microsoft Corporation) C:\windows\system32\tcbloader.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000204800 _____ (Microsoft Corporation) C:\windows\system32\mssph.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000203776 _____ (Microsoft Corporation) C:\windows\system32\regapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000201728 _____ (Microsoft Corporation) C:\windows\system32\puiapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000199480 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000197632 _____ (Microsoft Corporation) C:\windows\system32\Win32CompatibilityAppraiserCSP.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000194560 _____ (Microsoft Corporation) C:\windows\system32\recdisc.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000193800 _____ (Microsoft Corporation) C:\windows\SysWOW64\weretw.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000190464 _____ (Microsoft Corporation) C:\windows\SysWOW64\regapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000190256 _____ (Microsoft Corporation) C:\windows\SysWOW64\logoncli.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000186880 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWWIN.EXE
2020-02-14 15:08 - 2020-02-14 15:08 - 000186880 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000186672 _____ (Microsoft Corporation) C:\windows\system32\BCP47mrm.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000183808 _____ (Microsoft Corporation) C:\windows\system32\ResetEngOnline.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000179720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000175616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IndexedDbLegacy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000174392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\AppvVemgr.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000165832 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000160768 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssph.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000158208 _____ (Microsoft Corporation) C:\windows\SysWOW64\Winlangdb.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000155136 _____ (Microsoft Corporation) C:\windows\system32\Chakradiag.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000153912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\AppvVfs.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000152064 _____ (Microsoft Corporation) C:\windows\system32\fdWSD.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000150536 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000149504 _____ (Microsoft Corporation) C:\windows\system32\sdrsvc.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000147456 _____ (Microsoft Corporation) C:\windows\system32\mssprxy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000143872 _____ (Microsoft Corporation) C:\windows\SysWOW64\SpatialAudioLicenseSrv.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000143160 _____ (Microsoft Corporation) C:\windows\system32\NetSetupApi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000139776 _____ (Microsoft Corporation) C:\windows\system32\Chakrathunk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000138752 _____ (Microsoft Corporation) C:\windows\system32\InputLocaleManager.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000138040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\AppVStrm.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000135168 _____ (Microsoft Corporation) C:\windows\system32\musdialoghandlers.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000133464 _____ (Microsoft Corporation) C:\windows\SysWOW64\BCP47mrm.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000132624 _____ (Microsoft Corporation) C:\windows\system32\offlinelsa.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000130560 _____ (Microsoft Corporation) C:\windows\system32\globinputhost.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000128512 _____ (Microsoft Corporation) C:\windows\system32\usoapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000128512 _____ (Microsoft Corporation) C:\windows\system32\mssitlb.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000127280 _____ (Microsoft Corporation) C:\windows\system32\win32u.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\fdWSD.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000125440 _____ (Microsoft Corporation) C:\windows\system32\sdshext.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000123392 _____ (Microsoft Corporation) C:\windows\system32\wercplsupport.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000119808 _____ (Microsoft Corporation) C:\windows\system32\DafPrintProvider.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000119296 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000117264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bindflt.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000117248 _____ (Microsoft Corporation) C:\windows\SysWOW64\Chakradiag.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000113152 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssitlb.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000112128 _____ (Microsoft Corporation) C:\windows\system32\NetDriverInstall.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000108544 _____ (Microsoft Corporation) C:\windows\system32\fdSSDP.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000107832 _____ (Microsoft Corporation) C:\windows\SysWOW64\NetSetupApi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000107008 _____ (Microsoft Corporation) C:\windows\system32\DevicePairingExperienceMEM.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000106808 _____ (Microsoft Corporation) C:\windows\system32\SecurityHealthProxyStub.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000105984 _____ (Microsoft Corporation) C:\windows\system32\utcutil.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000105472 _____ (Microsoft Corporation) C:\windows\SysWOW64\Chakrathunk.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000105472 _____ (Microsoft Corporation) C:\windows\system32\dfrgui.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000099712 _____ (Microsoft Corporation) C:\windows\system32\FsIso.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000097280 _____ (Microsoft Corporation) C:\windows\SysWOW64\compstui.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000097080 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\globinputhost.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000095232 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000093496 _____ (Microsoft Corporation) C:\windows\system32\hvloader.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000092160 _____ (Microsoft Corporation) C:\windows\system32\wsqmcons.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000090624 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000090624 _____ (Microsoft Corporation) C:\windows\system32\keyiso.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000089600 _____ (Microsoft Corporation) C:\windows\SysWOW64\dfrgui.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000089328 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32u.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000089088 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicAgent.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000088576 _____ (Microsoft Corporation) C:\windows\SysWOW64\fdSSDP.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000088576 _____ (Microsoft Corporation) C:\windows\SysWOW64\DafPrintProvider.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000087040 _____ (Microsoft Corporation) C:\windows\system32\EditBufferTestHook.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000084992 _____ (Microsoft Corporation) C:\windows\system32\SecurityHealthSystray.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000084496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hvservice.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\NetDriverInstall.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000077824 _____ (Microsoft Corporation) C:\windows\SysWOW64\usoapi.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000072816 _____ (Microsoft Corporation) C:\windows\SysWOW64\remoteaudioendpoint.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000071480 _____ (Microsoft Corporation) C:\windows\system32\win32appinventorycsp.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000070144 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000069120 _____ (Microsoft Corporation) C:\windows\system32\UsoClient.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000066560 _____ (Microsoft Corporation) C:\windows\SysWOW64\keyiso.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000066560 _____ (Microsoft Corporation) C:\windows\system32\findnetprinters.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000065536 _____ (Microsoft Corporation) C:\windows\system32\iemigplugin.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000064000 _____ (Microsoft Corporation) C:\windows\system32\printui.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000063488 _____ (Microsoft Corporation) C:\windows\SysWOW64\iemigplugin.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000063488 _____ (Microsoft Corporation) C:\windows\system32\rtutils.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000063288 _____ (Microsoft Corporation) C:\windows\system32\SecurityHealthHost.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssprxy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\msscntrs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000059392 _____ (Microsoft Corporation) C:\windows\system32\UserLanguageProfileCallback.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000059221 _____ C:\windows\system32\srms.dat
2020-02-14 15:08 - 2020-02-14 15:08 - 000058880 _____ C:\windows\system32\runexehelper.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000057856 _____ (Microsoft Corporation) C:\windows\system32\SrTasks.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\findnetprinters.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\rtutils.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000046592 _____ (Microsoft Corporation) C:\windows\system32\Websocket.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000046080 _____ (Microsoft Corporation) C:\windows\SysWOW64\msscntrs.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000045056 _____ (Microsoft Corporation) C:\windows\system32\npmproxy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000044544 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UserLanguageProfileCallback.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000042512 _____ (Microsoft Corporation) C:\windows\system32\SysResetErr.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000041472 _____ (Microsoft Corporation) C:\windows\system32\WordBreakers.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000038912 _____ (Microsoft Corporation) C:\windows\SysWOW64\werdiagcontroller.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000038400 _____ (Microsoft Corporation) C:\windows\SysWOW64\mcicda.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000037392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wimmount.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\Websocket.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000032056 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2020-02-14 15:08 - 2020-02-14 15:08 - 000029696 _____ (Microsoft Corporation) C:\windows\system32\nlmproxy.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000028672 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicPS.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000027648 _____ (Microsoft Corporation) C:\windows\SysWOW64\mciwave.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000026112 _____ (Microsoft Corporation) C:\windows\SysWOW64\msimsg.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000026112 _____ (Microsoft Corporation) C:\windows\system32\msimsg.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000024064 _____ (Microsoft Corporation) C:\windows\SysWOW64\mciseq.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000021520 _____ (Microsoft Corporation) C:\windows\system32\kdhvcom.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000020944 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000019768 _____ (Microsoft Corporation) C:\windows\system32\ResetEngine.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000017920 _____ (Microsoft Corporation) C:\windows\system32\icsunattend.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000017920 _____ (Microsoft Corporation) C:\windows\system32\bindflt.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000017408 _____ (Microsoft Corporation) C:\windows\system32\nlmsprep.dll
2020-02-14 15:08 - 2020-02-14 15:08 - 000015360 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000013824 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth9.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth8.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth7.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth6.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth5.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth4.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth3.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth2.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth12.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth11.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth10.bin
2020-02-14 15:08 - 2020-02-14 15:08 - 000000315 _____ C:\windows\system32\DrtmAuth1.bin
2020-02-14 15:07 - 2020-02-14 15:07 - 017787904 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 006231200 _____ (Microsoft Corporation) C:\windows\system32\StartTileData.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 004615376 _____ (Microsoft Corporation) C:\windows\explorer.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 003969536 _____ (Microsoft Corporation) C:\windows\system32\tellib.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 003703296 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentServer.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 003590968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 003110400 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 002714624 _____ (Microsoft Corporation) C:\windows\system32\win32kbase.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 002284544 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentExtensions.onecore.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 002125904 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 001942016 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 001748480 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentExtensions.desktop.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 001413912 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 001149928 _____ (Microsoft Corporation) C:\windows\system32\ApplyTrustOffline.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 001084216 _____ (Microsoft Corporation) C:\windows\system32\ReAgent.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 001026792 _____ (Microsoft Corporation) C:\windows\system32\ClipSVC.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000874296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms2.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000804872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vhdmp.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000803840 _____ (Microsoft Corporation) C:\windows\system32\bisrv.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000782848 _____ (Microsoft Corporation) C:\windows\system32\wifinetworkmanager.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000750080 _____ (Microsoft Corporation) C:\windows\system32\ActivationManager.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000737280 _____ (Microsoft Corporation) C:\windows\system32\Windows.System.Launcher.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000735744 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000732200 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_StorageSense.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000727040 _____ (Microsoft Corporation) C:\windows\system32\agentactivationruntime.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000716288 _____ (Microsoft Corporation) C:\windows\system32\agentactivationruntimewindows.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000646656 _____ (Microsoft Corporation) C:\windows\system32\cdpsvc.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000637968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000589592 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 000464384 _____ (Microsoft Corporation) C:\windows\system32\cloudAP.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000456192 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000441144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms1.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000437776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000415808 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000296760 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000291328 _____ (Microsoft Corporation) C:\windows\system32\DeviceDirectoryClient.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000282112 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.AppDefaults.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000277504 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_CapabilityAccess.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000265216 _____ (Microsoft Corporation) C:\windows\system32\cdd.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000256000 _____ (Microsoft Corporation) C:\windows\system32\UpdateDeploymentProvider.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000250880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\winnat.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000209920 _____ (Microsoft Corporation) C:\windows\system32\wuuhosdeployment.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000201728 _____ (Microsoft Corporation) C:\windows\system32\AppXApplicabilityBlob.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000194064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dumpsd.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000187392 _____ (Microsoft Corporation) C:\windows\system32\tssrvlic.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000184832 _____ (Microsoft Corporation) C:\windows\system32\AarSvc.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000169472 _____ (Microsoft Corporation) C:\windows\system32\SpatialAudioLicenseSrv.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 000157696 _____ (Microsoft Corporation) C:\windows\system32\dssvc.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000155648 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_AppExecutionAlias.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000151552 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_BackgroundApps.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000128528 _____ (Microsoft Corporation) C:\windows\system32\wifitask.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 000123904 _____ (Microsoft Corporation) C:\windows\system32\ApplicationControlCSP.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000089912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgr.sys
2020-02-14 15:07 - 2020-02-14 15:07 - 000088352 _____ (Microsoft Corporation) C:\windows\system32\remoteaudioendpoint.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000077824 _____ (Microsoft Corporation) C:\windows\system32\CustomInstallExec.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 000062976 _____ (Microsoft Corporation) C:\windows\system32\LSCSHostPolicy.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000057856 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000057344 _____ (Microsoft Corporation) C:\windows\system32\audioresourceregistrar.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000048640 _____ (Microsoft Corporation) C:\windows\system32\mcicda.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000047208 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2020-02-14 15:07 - 2020-02-14 15:07 - 000034304 _____ (Microsoft Corporation) C:\windows\system32\mciwave.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000030208 _____ (Microsoft Corporation) C:\windows\system32\mciseq.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000027648 _____ (Microsoft Corporation) C:\windows\system32\lstelemetry.dll
2020-02-14 15:07 - 2020-02-14 15:07 - 000013312 _____ (Microsoft Corporation) C:\windows\system32\dstokenclean.exe
2020-02-14 15:03 - 2020-01-16 06:07 - 000492544 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe
2020-02-14 15:03 - 2020-01-16 05:23 - 000390656 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-04 20:01 - 2019-07-31 09:47 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\Discord
2020-03-04 20:00 - 2019-09-30 14:27 - 000003104 _____ C:\windows\system32\Tasks\AMDLinkUpdate
2020-03-04 20:00 - 2019-06-14 20:28 - 000000000 ____D C:\Program Files (x86)\Steam
2020-03-04 20:00 - 2019-06-14 17:29 - 000000000 ____D C:\Users\KUBÍK
2020-03-04 20:00 - 2019-06-11 09:36 - 000000180 _____ C:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2020-03-04 20:00 - 2019-05-21 23:22 - 000000006 ____H C:\windows\Tasks\SA.DAT
2020-03-04 20:00 - 2019-05-21 23:22 - 000000000 ____D C:\windows\system32\SleepStudy
2020-03-04 20:00 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-03-04 19:58 - 2019-03-19 05:52 - 000000000 ___HD C:\windows\ELAMBKUP
2020-03-04 19:24 - 2019-05-21 23:30 - 001693660 _____ C:\windows\system32\PerfStringBackup.INI
2020-03-04 19:24 - 2019-03-19 12:57 - 000716948 _____ C:\windows\system32\perfh005.dat
2020-03-04 19:24 - 2019-03-19 12:57 - 000145028 _____ C:\windows\system32\perfc005.dat
2020-03-04 19:24 - 2019-03-19 05:50 - 000000000 ____D C:\windows\INF
2020-03-04 19:19 - 2019-06-11 10:03 - 000065536 _____ C:\windows\system32\spu_storage.bin
2020-03-04 19:19 - 2019-03-19 05:37 - 000786432 _____ C:\windows\system32\config\BBI
2020-03-04 19:17 - 2019-07-02 23:24 - 000153312 _____ (Malwarebytes) C:\windows\system32\Drivers\mbae64.sys
2020-03-04 19:17 - 2019-07-02 23:24 - 000020936 _____ (Malwarebytes) C:\windows\system32\Drivers\MbamElam.sys
2020-03-04 19:17 - 2019-07-02 23:24 - 000002028 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-03-04 19:17 - 2019-06-14 17:31 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\D3DSCache
2020-03-04 17:39 - 2019-06-14 18:33 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\.minecraft
2020-03-04 15:30 - 2019-06-15 08:45 - 000004264 _____ C:\windows\system32\Tasks\Avast Emergency Update
2020-03-04 15:25 - 2019-03-19 05:52 - 000000000 ____D C:\windows\AppReadiness
2020-03-04 15:22 - 2019-06-15 14:03 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\CrashDumps
2020-03-03 20:42 - 2019-06-25 06:37 - 000000000 __SHD C:\Users\KUBÍK\IntelGraphicsProfiles
2020-03-03 20:40 - 2019-05-21 23:43 - 000748816 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2020-03-03 18:30 - 2019-06-15 08:42 - 000848672 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000458584 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000316256 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000279360 _____ (AVAST Software) C:\windows\system32\Drivers\aswHdsKe.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000271120 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsdriver.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000206608 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsh.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000205576 _____ (AVAST Software) C:\windows\system32\Drivers\aswArPot.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000110560 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000084056 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000064272 _____ (AVAST Software) C:\windows\system32\Drivers\aswbuniv.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000042976 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000037864 _____ (AVAST Software) C:\windows\system32\Drivers\aswArDisk.sys
2020-03-03 18:30 - 2019-06-15 08:42 - 000016304 _____ (AVAST Software) C:\windows\system32\Drivers\aswElam.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000849256 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgSnx.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000459168 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgSP.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000316840 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgVmm.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000271704 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbidsdriver.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000207192 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbidsh.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000206160 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgArPot.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000111144 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgRdr2.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000084096 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgRvrt.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000064344 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbuniv.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000043560 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgKbd.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000037928 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgArDisk.sys
2020-03-03 13:12 - 2019-09-14 17:31 - 000016520 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgElam.sys
2020-03-02 17:05 - 2019-09-06 17:08 - 000002234 _____ C:\windows\system32\Tasks\CCleanerSkipUAC
2020-03-02 17:05 - 2019-06-15 20:21 - 000002840 _____ C:\windows\system32\Tasks\Sstt2-TaskPlan
2020-03-02 17:05 - 2019-06-14 17:33 - 000002854 _____ C:\windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2362187174-35916906-3405601686-1004
2020-03-02 17:05 - 2019-06-11 10:03 - 000002392 _____ C:\windows\system32\Tasks\ModifyLinkUpdate
2020-03-02 17:05 - 2019-06-11 10:03 - 000002202 _____ C:\windows\system32\Tasks\StartCN
2020-03-02 17:05 - 2019-06-11 10:03 - 000002122 _____ C:\windows\system32\Tasks\StartDVR
2020-03-02 17:05 - 2019-06-11 09:34 - 000003402 _____ C:\windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-03-02 17:05 - 2019-06-11 09:34 - 000003178 _____ C:\windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-03-02 17:05 - 2019-06-11 08:31 - 000002848 _____ C:\windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2362187174-35916906-3405601686-500
2020-03-02 16:59 - 2019-06-15 08:45 - 000000000 ____D C:\windows\system32\Tasks\Avast Software
2020-02-29 15:57 - 2019-07-29 16:32 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\ElevatedDiagnostics
2020-02-29 15:33 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-29 14:19 - 2019-06-14 17:31 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\Packages
2020-02-29 14:16 - 2019-06-11 09:34 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-02-29 14:16 - 2019-06-11 09:34 - 000002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-02-29 14:15 - 2019-07-31 09:47 - 000002240 _____ C:\Users\KUBÍK\Desktop\Discord.lnk
2020-02-29 14:15 - 2019-07-31 09:47 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2020-02-29 14:14 - 2019-07-31 09:47 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\Discord
2020-02-20 17:54 - 2020-01-28 17:21 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\Messenger
2020-02-20 17:54 - 2020-01-28 17:21 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\Messenger
2020-02-20 15:21 - 2020-01-17 11:52 - 000000000 ____D C:\Games
2020-02-19 14:46 - 2019-06-14 17:33 - 000002368 _____ C:\Users\KUBÍK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-02-19 14:46 - 2019-06-14 17:33 - 000000000 ___RD C:\Users\KUBÍK\OneDrive
2020-02-15 22:56 - 2019-03-19 05:52 - 000000000 ____D C:\windows\LiveKernelReports
2020-02-15 08:08 - 2020-01-26 14:47 - 000000000 ____D C:\Users\KUBÍK\AppData\Local\Crossout
2020-02-15 08:08 - 2019-06-17 15:01 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2020-02-15 08:05 - 2019-08-17 18:06 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\Wargaming.net
2020-02-15 08:05 - 2019-08-17 18:06 - 000000000 ____D C:\Users\KUBÍK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wargaming.net
2020-02-15 07:57 - 2020-01-24 17:18 - 000000000 ____D C:\Users\KUBÍK\Documents\My Games
2020-02-15 07:54 - 2019-06-14 17:31 - 000000000 ___RD C:\Users\KUBÍK\3D Objects
2020-02-15 07:54 - 2019-05-21 23:26 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-02-15 07:53 - 2019-05-21 23:22 - 000258096 _____ C:\windows\system32\FNTCACHE.DAT
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ___RD C:\windows\PrintDialog
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ___RD C:\windows\ImmersiveControlPanel
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\SysWOW64\oobe
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\SysWOW64\Dism
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\SystemResources
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\system32\WinBioPlugIns
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\system32\SystemResetPlatform
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\system32\PerceptionSimulation
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\system32\oobe
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\system32\Dism
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\ShellExperiences
2020-02-14 20:18 - 2019-03-19 05:52 - 000000000 ____D C:\windows\bcastdvr
2020-02-14 20:18 - 2019-03-19 05:37 - 000000000 ____D C:\windows\servicing
2020-02-14 15:13 - 2019-03-19 05:37 - 000000000 ____D C:\windows\CbsTemp
2020-02-14 15:12 - 2019-05-21 23:45 - 000000000 ____D C:\windows\system32\MRT
2020-02-14 15:10 - 2019-05-21 23:45 - 120407888 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2020-02-03 21:56 - 2019-03-19 05:56 - 000835688 _____ (Adobe) C:\windows\SysWOW64\FlashPlayerApp.exe
2020-02-03 21:56 - 2019-03-19 05:56 - 000179608 _____ (Adobe) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories ========

2019-08-26 09:27 - 2019-08-26 12:35 - 000000600 _____ () C:\Users\KUBÍK\AppData\Roaming\winscp.rnd

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-02-2020
Ran by KUBÍK (04-03-2020 20:03:24)
Running from C:\Users\KUBÍK\Desktop
Windows 10 Pro Version 1903 18362.657 (X64) (2019-06-14 16:23:54)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2362187174-35916906-3405601686-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2362187174-35916906-3405601686-503 - Limited - Disabled)
Guest (S-1-5-21-2362187174-35916906-3405601686-501 - Limited - Disabled)
KUBÍK (S-1-5-21-2362187174-35916906-3405601686-1004 - Administrator - Enabled) => C:\Users\KUBÍK
WDAGUtilityAccount (S-1-5-21-2362187174-35916906-3405601686-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG Antivirus (Disabled - Up to date) {4FC75CA5-1654-5411-7CFB-1893D506BCF4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.6.1 - Advanced Micro Devices, Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.1.2397 - AVAST Software)
AVG AntiVirus FREE (HKLM-x32\...\AVG Antivirus) (Version: 20.1.3112 - AVG Technologies)
Booking (HKLM-x32\...\{13D4CD54-EA09-4FDB-B979-8B2BC0F020CA}_is1) (Version: 2.0.701 - Booking)
Branding64 (HKLM\...\{EE2AFCE4-0238-4DE0-A140-1647021627C1}) (Version: 1.00.0001 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.61 - Piriform)
Discord (HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Discord) (Version: 0.0.306 - Discord Inc.)
Epic Games Launcher (HKLM-x32\...\{466EA30A-9B38-4AD2-A6B0-18D6E0C1A848}) (Version: 1.1.206.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Google Chrome (HKLM\...\{51BAF2DB-F22D-3A9D-947C-F78F0BF6ECFA}) (Version: 80.0.3987.122 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
GXT 168 Gaming Mouse (HKLM-x32\...\{06BE89B5-BEAB-4A60-BC72-7E57F2C6F9BC}}_is1) (Version: 1.0 - Trust International BV)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4835 - Intel Corporation)
Java 8 Update 221 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180221F0}) (Version: 8.0.2210.11 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Malwarebytes version 4.1.0.56 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.0.56 - Malwarebytes)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.72 - McAfee, LLC.)
Microsoft OneDrive (HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\OneDriveSetup.exe) (Version: 19.232.1124.0008 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27024 (HKLM-x32\...\{5fb2083a-f3cc-4b78-93ff-bd9788b5de01}) (Version: 14.16.27024.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27024 (HKLM-x32\...\{2ff11a2a-f7ac-4a6c-8cd4-c7bb974f3642}) (Version: 14.16.27024.1 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{E154B2C8-2F3E-4763-B3D5-E7D34AE39C6B}) (Version: 1.0.0.0 - Mojang)
osu! (HKLM-x32\...\{a29f7c8f-452b-45e2-9bca-514131bc8840}) (Version: latest - ppy Pty Ltd)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6086 - Realtek Semiconductor Corp.)
Roblox Player for KUBÍK (HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\roblox-player) (Version: - Roblox Corporation)
Roblox Studio for KUBÍK (HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\roblox-studio) (Version: - Roblox Corporation)
Samsung M2070 Series (HKLM-x32\...\Samsung M2070 Series) (Version: 1.27.02 (14.06.2019) - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.2.5 - TeamSpeak Systems GmbH)
Wargaming.net Game Center (HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\Wargaming.net Game Center) (Version: 19.9.1.8579 - Wargaming.net)
WinSCP 5.15.3 (HKLM-x32\...\winscp3_is1) (Version: 5.15.3 - Martin Prikryl)
World of Tanks EU (HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\WOT.EU.PRODUCTION) (Version: - Wargaming.net)
YMS 3017 AMBUSH Gaming mouse (HKLM-x32\...\{A53D8141-1FAB-4EA5-8630-52BFC0170AB3}}_is1) (Version: 1.0 - )

Packages:
=========
Instagram -> C:\Program Files\WindowsApps\Facebook.InstagramBeta_41.1788.50991.0_x86__8xx8rvfyw5nnt [2019-06-14] (Instagram)
Messenger -> C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_370.7.119.0_x64__8xx8rvfyw5nnt [2020-02-29] (Facebook Inc)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-06-14] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-06-14] (Microsoft Corporation) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]
Samsung Printer Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_1.3.15.0_x64__3c1yjt4zspk6g [2019-10-16] (Samsung Electronics Co. Ltd.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2019-06-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\windows\system32\igfxDTCM.dll [2017-11-16] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2019-06-14 17:49 - 2019-06-14 17:50 - 098275328 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libcef.dll
2019-06-14 17:50 - 2019-06-14 17:50 - 000092672 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libEGL.dll
2019-06-14 17:50 - 2019-06-14 17:50 - 003922432 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libGLESv2.dll
2019-06-04 19:45 - 2019-06-04 19:45 - 000257024 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\WirelessVR-windesktop64.dll
2018-03-13 03:47 - 2018-03-13 03:47 - 000912896 _____ () [File not signed] C:\Program Files\AMD\Performance Profile Client\aws-cpp-sdk-core.dll
2018-03-13 03:47 - 2018-03-13 03:47 - 003109888 _____ () [File not signed] C:\Program Files\AMD\Performance Profile Client\aws-cpp-sdk-s3.dll
2015-02-19 00:13 - 2015-02-19 00:13 - 000817152 _____ () [File not signed] C:\Program Files\AMD\Performance Profile Client\Device.dll
2015-02-19 00:13 - 2015-02-19 00:13 - 003650560 _____ () [File not signed] C:\Program Files\AMD\Performance Profile Client\Platform.dll
2019-06-04 19:42 - 2019-06-04 19:42 - 000158208 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\windows\SYSTEM32\amdihk64.dll
2019-06-14 17:49 - 2019-06-14 17:49 - 000547840 _____ (The Chromium Authors) [File not signed] C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\chrome_elf.dll
2019-06-04 19:57 - 2019-06-04 19:57 - 005999104 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 006413824 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 001141760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 000339968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 004143104 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 003840000 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 000349184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 080959488 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 000113152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 005622272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 000463360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 000190464 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll
2019-01-08 11:39 - 2019-01-08 11:39 - 002825216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [478]

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 05:49 - 2019-03-19 05:49 - 000000824 _____ C:\windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\KUBÍK\Pictures\1f8e47de6cf38b32871de96eac187560.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\StartupApproved\Run: => "Chromium"
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_7E40F5550D807E9BB9B6C2AAC50BD3AF"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{0E48D799-E205-4E77-ACAE-8407C1E35B17}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [UDP Query User{9A264475-13AC-4684-A88E-F070554C3ACD}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [{132EE426-3985-47D7-8E2F-F2036F773E31}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{2C3942D1-2604-43CF-8711-A99A63B73592}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{CBC311A7-7DCE-497B-B886-612462C82ACD}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe No File
FirewallRules: [{91B6683F-67B6-4473-A0A3-EF0E3B092412}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe No File
FirewallRules: [{FA81547F-32F7-43FF-B17A-1471C43B3FE5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{01525D56-29D0-4395-AEB6-AF55E6A3CA6F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{6E1057E9-350B-4C0D-AA91-0B395C5E1E3C}] => (Allow) C:\Users\KUBÍK\AppData\Local\Chromium\Application\chrome.exe (The Chromium Authors) [File not signed]
FirewallRules: [{E40B377D-E1FB-461A-88BC-06EA1C87F4F5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{1CB4C349-F4F1-4F88-9BF3-66CA0CABDA59}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{14CBD764-A89E-451C-B2C7-DB90DB207CAD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{00110985-3DCD-484A-B5FF-A932A8E91F04}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{9D69B6B6-8206-4AC5-8E61-FCA03B3B722F}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{8A19C45B-593A-42F8-811C-34196B60499F}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{54E75D2E-D59E-4095-ACB7-9CADCBF33C33}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{F77C110A-34B7-4992-805F-0B080FBE9069}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{77C40C9A-6B1F-434B-B6BA-0C543FD95931}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe No File
FirewallRules: [{92D73C0E-66F7-429F-AF76-BB522BE26CA4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\EasyAntiCheat\EasyAntiCheat.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{FFFF10E9-3366-449E-91B9-92BB5EC576CB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\EasyAntiCheat\EasyAntiCheat.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{67321948-DEFA-48D7-BA90-E4D88AB8C9B2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Ashes of the Singularity Escalation\StardockLauncher.exe (STARDOCK SYSTEMS, INC. -> Stardock Corporation)
FirewallRules: [{6E4F514E-7E43-498B-A5AB-FDA397A9C402}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Ashes of the Singularity Escalation\StardockLauncher.exe (STARDOCK SYSTEMS, INC. -> Stardock Corporation)
FirewallRules: [TCP Query User{242FD7A0-5B11-424A-9D5C-EC6243932F0D}C:\users\kubík\appdata\local\crossout\launcher.exe] => (Allow) C:\users\kubík\appdata\local\crossout\launcher.exe No File
FirewallRules: [UDP Query User{F63A74B8-D0DE-4B88-ACEC-D6F4BAA95EE0}C:\users\kubík\appdata\local\crossout\launcher.exe] => (Allow) C:\users\kubík\appdata\local\crossout\launcher.exe No File
FirewallRules: [{C747D25C-8B95-418B-94B0-93CCF40EE764}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

14-02-2020 15:03:12 Windows Update
21-02-2020 20:29:38 Naplánovaný kontrolní bod
29-02-2020 14:34:49 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (03/04/2020 08:00:45 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVG\Antivirus\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení AVG.VC140.CRT,processorArchitecture="amd64",publicKeyToken="f92d94485545da78",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/04/2020 08:00:44 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVAST Software\Avast\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení Avast.VC140.CRT,processorArchitecture="amd64",publicKeyToken="fcc99ee6193ebbca",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/04/2020 08:00:14 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVG\Antivirus\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení AVG.VC140.CRT,processorArchitecture="amd64",publicKeyToken="f92d94485545da78",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/04/2020 08:00:14 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVAST Software\Avast\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení Avast.VC140.CRT,processorArchitecture="amd64",publicKeyToken="fcc99ee6193ebbca",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/04/2020 07:57:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AUEPMaster.exe, verze: 1910.15.9.604, časové razítko: 0x5cf7119c
Název chybujícího modulu: AUEPMaster.exe, verze: 1910.15.9.604, časové razítko: 0x5cf7119c
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000029f89
ID chybujícího procesu: 0x3894
Čas spuštění chybující aplikace: 0x01d5f251d543b204
Cesta k chybující aplikaci: C:\Program Files\AMD\Performance Profile Client\AUEPMaster.exe
Cesta k chybujícímu modulu: C:\Program Files\AMD\Performance Profile Client\AUEPMaster.exe
ID zprávy: cd6f63cf-1b28-485a-a1df-d6a99d5db91b
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (03/04/2020 07:20:59 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVG\Antivirus\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení AVG.VC140.CRT,processorArchitecture="amd64",publicKeyToken="f92d94485545da78",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/04/2020 07:20:58 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVAST Software\Avast\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení Avast.VC140.CRT,processorArchitecture="amd64",publicKeyToken="fcc99ee6193ebbca",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (03/04/2020 07:20:12 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVAST Software\Avast\libcrypto-1_1-x64.dll se nezdařilo.
Závislé sestavení Avast.VC140.CRT,processorArchitecture="amd64",publicKeyToken="fcc99ee6193ebbca",type="win32",version="14.0.28127.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.


System errors:
=============
Error: (03/04/2020 08:00:30 PM) (Source: DCOM) (EventID: 10001) (User: NT AUTHORITY)
Description: Nelze spustit server DCOM: {995C996E-D918-4A8C-A302-45719A6F4EA7} jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147943140
při provádění příkazu:
C:\windows\System32\rundll32.exe C:\windows\System32\shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding

Error: (03/04/2020 08:00:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba SSPORT neuspěla při spuštění v důsledku následující chyby:
V systému Windows nelze ověřit digitální podpis tohoto souboru. Při nedávné změně hardwaru nebo softwaru mohl být nainstalován nesprávně podepsaný nebo poškozený soubor nebo soubor škodlivého softwaru z neznámého zdroje.

Error: (03/04/2020 08:00:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba avast! Antivirus neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (03/04/2020 08:00:14 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby avast! Antivirus bylo dosaženo časového limitu (45000 ms).

Error: (03/04/2020 08:00:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AVG Antivirus neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (03/04/2020 08:00:14 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby AVG Antivirus bylo dosaženo časového limitu (45000 ms).

Error: (03/04/2020 08:00:09 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (19:20:12, ‎04.‎03.‎2020) bylo neočekávané.

Error: (03/04/2020 07:57:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba AMD User Experience Program Launcher byla neočekávaně ukončena. Tento stav nastal již 1krát.


CodeIntegrity:
===================================

Date: 2020-03-04 20:01:00.913
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-03-04 20:00:31.950
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.

Date: 2020-03-04 20:00:21.552
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\SSPORT.SYS because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-03-04 19:55:21.270
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-04 19:55:16.620
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-04 19:55:00.201
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-04 19:26:41.681
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-04 19:25:11.612
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: Dell Inc. A17 10/24/2018
Motherboard: Dell Inc. 08WKV3
Processor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz
Percentage of memory in use: 46%
Total physical RAM: 8131.93 MB
Available physical RAM: 4342.88 MB
Total Virtual: 15299.93 MB
Available Virtual: 8089.99 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:220.73 GB) (Free:44.57 GB) NTFS
Drive d: (English Plus) (CDROM) (Total:0.25 GB) (Free:0 GB) CDFS

\\?\Volume{4eeaf5f6-b854-4664-acba-1c8a94f3adaa}\ (Recovery) (Fixed) (Total:2.23 GB) (Free:1.85 GB) NTFS
\\?\Volume{47098891-417e-4f09-bf91-d0caed8bf2bc}\ (BOOT) (Fixed) (Total:0.48 GB) (Free:0.46 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 223.6 GB) (Disk ID: 57AE8B67)

Partition: GPT.

==================== End of Addition.txt =======================

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\MountPoints2: {ea09a92c-8c1a-11e9-9358-806e6f6e6963} - "D:\start.exe"
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {5F1238C7-B2C5-4C0E-B003-B7E5FBBA3CB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-06-11] (Google Inc -> Google Inc.)
Task: {79DF3038-CE89-4688-8C15-72CAE9538C0E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-06-11] (Google Inc -> Google Inc.)
U3 avgbdisk; no ImagePath
C:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\windows\system32\Tasks\GoogleUpdateTaskMachineUA
C:\windows\system32\Tasks\GoogleUpdateTaskMachineCore
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [478]
FirewallRules: [{CBC311A7-7DCE-497B-B886-612462C82ACD}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe No File
FirewallRules: [{91B6683F-67B6-4473-A0A3-EF0E3B092412}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe No File
FirewallRules: [{FA81547F-32F7-43FF-B17A-1471C43B3FE5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{01525D56-29D0-4395-AEB6-AF55E6A3CA6F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{9D69B6B6-8206-4AC5-8E61-FCA03B3B722F}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{8A19C45B-593A-42F8-811C-34196B60499F}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{54E75D2E-D59E-4095-ACB7-9CADCBF33C33}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{F77C110A-34B7-4992-805F-0B080FBE9069}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{77C40C9A-6B1F-434B-B6BA-0C543FD95931}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe No File
FirewallRules: [TCP Query User{242FD7A0-5B11-424A-9D5C-EC6243932F0D}C:\users\kubík\appdata\local\crossout\launcher.exe] => (Allow) C:\users\kubík\appdata\local\crossout\launcher.exe No File
FirewallRules: [UDP Query User{F63A74B8-D0DE-4B88-ACEC-D6F4BAA95EE0}C:\users\kubík\appdata\local\crossout\launcher.exe] => (Allow) C:\users\kubík\appdata\local\crossout\launcher.exe No File

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 26-02-2020
Ran by KUBÍK (04-03-2020 21:18:47) Run:1
Running from C:\Users\KUBÍK\Desktop
Loaded Profiles: KUBÍK (Available Profiles: KUBÍK)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\...\MountPoints2: {ea09a92c-8c1a-11e9-9358-806e6f6e6963} - "D:\start.exe"
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {5F1238C7-B2C5-4C0E-B003-B7E5FBBA3CB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-06-11] (Google Inc -> Google Inc.)
Task: {79DF3038-CE89-4688-8C15-72CAE9538C0E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-06-11] (Google Inc -> Google Inc.)
U3 avgbdisk; no ImagePath
C:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\windows\system32\Tasks\GoogleUpdateTaskMachineUA
C:\windows\system32\Tasks\GoogleUpdateTaskMachineCore
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [478]
FirewallRules: [{CBC311A7-7DCE-497B-B886-612462C82ACD}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe No File
FirewallRules: [{91B6683F-67B6-4473-A0A3-EF0E3B092412}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe No File
FirewallRules: [{FA81547F-32F7-43FF-B17A-1471C43B3FE5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{01525D56-29D0-4395-AEB6-AF55E6A3CA6F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{9D69B6B6-8206-4AC5-8E61-FCA03B3B722F}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{8A19C45B-593A-42F8-811C-34196B60499F}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{54E75D2E-D59E-4095-ACB7-9CADCBF33C33}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{F77C110A-34B7-4992-805F-0B080FBE9069}] => (Allow) C:\Program Files\Epic Games\TheCycleAlpha\Prospect\Binaries\Win64\Prospect-Win64-Shipping.exe No File
FirewallRules: [{77C40C9A-6B1F-434B-B6BA-0C543FD95931}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe No File
FirewallRules: [TCP Query User{242FD7A0-5B11-424A-9D5C-EC6243932F0D}C:\users\kubík\appdata\local\crossout\launcher.exe] => (Allow) C:\users\kubík\appdata\local\crossout\launcher.exe No File
FirewallRules: [UDP Query User{F63A74B8-D0DE-4B88-ACEC-D6F4BAA95EE0}C:\users\kubík\appdata\local\crossout\launcher.exe] => (Allow) C:\users\kubík\appdata\local\crossout\launcher.exe No File

EmptyTemp:
End
*****************

Processes closed successfully.
HKU\S-1-5-21-2362187174-35916906-3405601686-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ea09a92c-8c1a-11e9-9358-806e6f6e6963} => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5F1238C7-B2C5-4C0E-B003-B7E5FBBA3CB9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5F1238C7-B2C5-4C0E-B003-B7E5FBBA3CB9}" => removed successfully
C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{79DF3038-CE89-4688-8C15-72CAE9538C0E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{79DF3038-CE89-4688-8C15-72CAE9538C0E}" => removed successfully
C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
HKLM\System\CurrentControlSet\Services\avgbdisk => could not remove, key could be protected
C:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat => moved successfully
"C:\windows\system32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\windows\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
C:\Users\Public\Shared Files => ":VersionCache" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CBC311A7-7DCE-497B-B886-612462C82ACD}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{91B6683F-67B6-4473-A0A3-EF0E3B092412}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FA81547F-32F7-43FF-B17A-1471C43B3FE5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{01525D56-29D0-4395-AEB6-AF55E6A3CA6F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9D69B6B6-8206-4AC5-8E61-FCA03B3B722F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8A19C45B-593A-42F8-811C-34196B60499F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{54E75D2E-D59E-4095-ACB7-9CADCBF33C33}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F77C110A-34B7-4992-805F-0B080FBE9069}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{77C40C9A-6B1F-434B-B6BA-0C543FD95931}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{242FD7A0-5B11-424A-9D5C-EC6243932F0D}C:\users\kubík\appdata\local\crossout\launcher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F63A74B8-D0DE-4B88-ACEC-D6F4BAA95EE0}C:\users\kubík\appdata\local\crossout\launcher.exe" => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 11034624 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 12799813 B
Java, Flash, Steam htmlcache => 99238930 B
Windows/system/drivers => 192474839 B
Edge => 83985 B
Chrome => 106153407 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 10060 B
KUBÍK => 43398030 B

RecycleBin => 0 B
EmptyTemp: => 443.6 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 04-03-2020 21:20:39)


Result of scheduled keys to remove after reboot:

HKLM\System\CurrentControlSet\Services\avgbdisk => could not remove, key could be protected

==== End of Fixlog 21:20:39 ====

Smazáno. Nastala nějaká změna?

Moc děkujeme! Dneska jsme nestihl vyzkoušet, zitra poreferuju!

Zatím nemáte zač!