Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Žádost o preventivní kontrolu

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
G1876P
Návštěvník
Návštěvník
Příspěvky: 84
Registrován: 09 říj 2014 15:41

Žádost o preventivní kontrolu

#1 Příspěvek od G1876P »

Ahoj,

po nějaké době prosím o preventivní kontrolu notebooku. Moc děkuji za ochotu. :)

------------------------------------------------------------
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 09-08-2020
Ran by Host (ATTENTION: The user is not administrator) on LAPTOP-SOU2LT8G (HP HP 255 G7 Notebook PC) (11-08-2020 09:21:39)
Running from C:\Users\Host\Desktop
Loaded Profiles: Petr Záruba & Host
Platform: Windows 10 Home Version 1909 18363.959 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <2>
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f81da7794b7c4a41\x64\BridgeCommunication.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.1.18.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Host\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <9>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor Corp. -> Realtek) C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
Failed to access process -> afwServ.exe
Failed to access process -> AppHelperCap.exe
Failed to access process -> armsvc.exe
Failed to access process -> aswEngSrv.exe
Failed to access process -> aswidsagent.exe
Failed to access process -> atieclxx.exe
Failed to access process -> atiesrxx.exe
Failed to access process -> AvastSvc.exe
Failed to access process -> conhost.exe
Failed to access process -> csrss.exe
Failed to access process -> csrss.exe
Failed to access process -> dasHost.exe
Failed to access process -> dwm.exe
Failed to access process -> fontdrvhost.exe
Failed to access process -> fontdrvhost.exe
Failed to access process -> GoogleCrashHandler.exe
Failed to access process -> GoogleCrashHandler64.exe
Failed to access process -> HPCommRecovery.exe
Failed to access process -> lsass.exe
Failed to access process -> NetworkCap.exe
Failed to access process -> RtkAudioService64.exe
Failed to access process -> RtkBtManServ.exe
Failed to access process -> SearchFilterHost.exe
Failed to access process -> SearchIndexer.exe
Failed to access process -> SearchProtocolHost.exe
Failed to access process -> SecurityHealthService.exe
Failed to access process -> services.exe
Failed to access process -> SgrmBroker.exe
Failed to access process -> smss.exe
Failed to access process -> spoolsv.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> SynTPEnhService.exe
Failed to access process -> SysInfoCap.exe
Failed to access process -> TouchpointAnalyticsClientService.exe
Failed to access process -> TouchpointGpuInfo.exe
Failed to access process -> unsecapp.exe
Failed to access process -> wininit.exe
Failed to access process -> winlogon.exe
Failed to access process -> wlanext.exe
Failed to access process -> WmiPrvSE.exe
Failed to access process -> WmiPrvSE.exe
Failed to access process -> wsc_proxy.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2097600 2018-04-18] (Realtek Semiconductor Corp. -> Realtek)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-07-02] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [109160 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2689317223-3959950762-4002007104-1002\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HpseuHostLauncher.exe [527368 2020-07-29] (HP Inc. -> HP Inc.)
HKLM\...\Print\Monitors\HP E111 Status Monitor: C:\windows\system32\hpinkstsE111LM.dll [380424 2014-11-04] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.105\Installer\chrmstp.exe [2020-07-29] (Google LLC -> Google LLC)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{70f6a9e1-2d67-4358-b82d-7a1052a3ba68}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2689317223-3959950762-4002007104-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2689317223-3959950762-4002007104-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
URLSearchHook: [S-1-5-21-2689317223-3959950762-4002007104-1001] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKLM -> {5B7ACB8C-952C-4614-9611-9FBBFB7932C1} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {5B7ACB8C-952C-4614-9611-9FBBFB7932C1} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
BHO: IEToEdge BHO -> {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} -> C:\Program Files (x86)\Microsoft\Edge\Application\84.0.522.52\BHO\ie_to_edge_bho_64.dll [2020-08-02] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: IEToEdge BHO -> {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} -> C:\Program Files (x86)\Microsoft\Edge\Application\84.0.522.52\BHO\ie_to_edge_bho.dll [2020-08-02] (Microsoft Corporation -> Microsoft Corporation)

Edge:
======
DownloadDir: C:\Users\Host\Downloads
Edge Profile: C:\Users\Host\AppData\Local\Microsoft\Edge\User Data\Default [2020-08-05]

FireFox:
========
FF DefaultProfile: p5zmmc7k.default
FF ProfilePath: C:\Users\Host\AppData\Roaming\Mozilla\Firefox\Profiles\p5zmmc7k.default [2020-02-10]
FF Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Host\AppData\Roaming\Mozilla\Firefox\Profiles\p5zmmc7k.default\Extensions\sp@avast.com.xpi [2020-01-28]
FF ProfilePath: C:\Users\Host\AppData\Roaming\Mozilla\Firefox\Profiles\xyq7id9r.default-release [2020-08-11]
FF Homepage: Mozilla\Firefox\Profiles\xyq7id9r.default-release -> hxxps://accounts.google.com/signin/v2/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&sacu=1&rip=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin
FF Extension: (No Name) - C:\Users\Host\AppData\Roaming\Mozilla\Firefox\Profiles\xyq7id9r.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-08-08]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default [2020-08-05]
CHR Extension: (Prezentace) - C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-06-22]
CHR Extension: (Dokumenty) - C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-06-22]
CHR Extension: (Disk Google) - C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-06-22]
CHR Extension: (YouTube) - C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-06-22]
CHR Extension: (Tabulky) - C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-06-22]
CHR Extension: (Dokumenty Google offline) - C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-06-22]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-06-22]
CHR Extension: (Gmail) - C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-06-22]
CHR Extension: (Chrome Media Router) - C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-07-20]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [7776160 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [353696 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [1072800 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [58048 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [905080 2020-03-18] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f81da7794b7c4a41\x64\AppHelperCap.exe [613136 2020-06-15] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f81da7794b7c4a41\x64\NetworkCap.exe [612112 2020-06-15] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f81da7794b7c4a41\x64\SysInfoCap.exe [612112 2020-06-15] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_2576de2e12637a57\x64\TouchpointAnalyticsClientService.exe [445184 2020-06-14] (HP Inc. -> HP Inc.)
R3 lmhosts; C:\windows\System32\svchost.exe [53744 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 lmhosts; C:\windows\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NlaSvc; C:\windows\System32\svchost.exe [53744 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NlaSvc; C:\windows\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 nsi; C:\windows\system32\svchost.exe [53744 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 nsi; C:\windows\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AmUStor; C:\windows\system32\drivers\AmUStorU.sys [127936 2019-03-26] (Alcorlink Corp. -> )
R1 aswArPot; C:\windows\System32\drivers\aswArPot.sys [205888 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\windows\System32\drivers\aswbidsdriver.sys [235592 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\windows\System32\drivers\aswbidsh.sys [195656 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\windows\System32\drivers\aswbuniv.sys [60488 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\windows\System32\drivers\aswElam.sys [16824 2020-07-21] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\windows\System32\drivers\aswKbd.sys [42776 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\windows\System32\drivers\aswMonFlt.sys [175200 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\windows\System32\drivers\aswNetHub.sys [515544 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\windows\System32\drivers\aswRdr2.sys [109280 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\windows\System32\drivers\aswRvrt.sys [84856 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\windows\System32\drivers\aswSnx.sys [851608 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\windows\System32\drivers\aswSP.sys [466752 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\windows\System32\drivers\aswStm.sys [217336 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\windows\System32\drivers\aswVmm.sys [323784 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\windows\System32\drivers\BthA2dp.sys [231936 2020-02-13] (Microsoft Corporation) [File not signed]
R3 HPCustomCapDriver; C:\windows\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys [25024 2019-04-18] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
S3 SynTPFilterHID; C:\windows\System32\drivers\SynTP.sys [769288 2020-03-17] (Synaptics Incorporated -> Synaptics Incorporated)
S3 WdBoot; C:\windows\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\windows\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\windows\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 WinRing0_1_2_0; C:\windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_942053d68a2ba613\x64\OpenHardwareMonitorLib.sys [14544 2020-06-01] (Noriyuki MIYAZAKI -> OpenLibSys.org)
R3 WirelessButtonDriver64; C:\windows\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-08-11 09:21 - 2020-08-11 09:22 - 000017483 _____ C:\Users\Host\Desktop\FRST.txt
2020-08-11 09:20 - 2020-08-11 09:20 - 002296320 _____ (Farbar) C:\Users\Host\Desktop\FRST64.exe
2020-08-10 09:40 - 2020-08-10 09:41 - 000000000 ____D C:\Users\Host\Desktop\CV
2020-08-08 09:41 - 2020-08-08 09:41 - 000217336 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2020-08-08 09:41 - 2020-08-08 09:41 - 000175200 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2020-08-08 09:41 - 2020-08-08 09:40 - 000335968 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2020-08-05 18:00 - 2020-08-05 18:00 - 000010462 _____ C:\Users\Host\AppData\Local\recently-used.xbel
2020-08-02 16:00 - 2020-07-28 11:49 - 000010341 _____ C:\Users\Host\Desktop\form_pristupove_udaje.svg
2020-07-30 23:14 - 2020-08-03 07:55 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-07-30 08:54 - 2020-07-30 08:54 - 000000000 ____D C:\Users\Host\AppData\Roaming\Skype
2020-07-20 17:56 - 2020-07-20 17:56 - 025902592 _____ (Microsoft Corporation) C:\windows\system32\edgehtml.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 025444352 _____ (Microsoft Corporation) C:\windows\system32\Hydrogen.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 022641664 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 019851776 _____ (Microsoft Corporation) C:\windows\SysWOW64\edgehtml.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 019812864 _____ (Microsoft Corporation) C:\windows\system32\HologramWorld.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 018031104 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 014820352 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 008015872 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 007823912 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 007269376 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 007012864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 006523856 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 006292992 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 006089512 _____ (Microsoft Corporation) C:\windows\SysWOW64\windows.storage.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 005946368 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 005765648 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 005111808 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 005099384 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 004129424 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 003974368 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 003748352 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_nt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 003743048 _____ (Microsoft Corporation) C:\windows\SysWOW64\OneCoreUAPCommonProxyStub.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 002799104 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32kfull.sys
2020-07-20 17:56 - 2020-07-20 17:56 - 002576896 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 002494744 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001991592 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.appcore.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001952880 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001737728 _____ (Microsoft Corporation) C:\windows\SysWOW64\InstallService.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001665728 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001655472 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001610240 _____ (Microsoft Corporation) C:\windows\system32\HologramCompositor.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001581568 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Perception.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001550336 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Graphics.Printing.3D.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001512960 _____ (Microsoft Corporation) C:\windows\SysWOW64\cdprt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001495040 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001484384 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001477632 _____ (Microsoft Corporation) C:\windows\SysWOW64\dcomp.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001463808 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.PointOfService.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001458688 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001420328 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32full.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001397568 _____ (Microsoft Corporation) C:\windows\system32\hvix64.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 001371136 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001357824 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Globalization.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001346048 _____ (Microsoft Corporation) C:\windows\system32\HoloSI.PCShell.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001344512 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Audio.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001312256 _____ (Microsoft Corporation) C:\windows\SysWOW64\msjet40.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001307136 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Audio.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001306944 _____ (Microsoft Corporation) C:\windows\SysWOW64\ContentDeliveryManager.Utilities.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001284608 _____ (Microsoft Corporation) C:\windows\system32\werconcpl.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001265152 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Speech.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001247232 _____ (Microsoft Corporation) C:\windows\SysWOW64\TokenBroker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001223168 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.FaceAnalysis.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001195008 _____ (Microsoft Corporation) C:\windows\system32\sdengin2.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001151816 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001125376 _____ (Microsoft Corporation) C:\windows\system32\CBDHSvc.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001077048 _____ (Microsoft Corporation) C:\windows\system32\hvax64.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 001068544 _____ (Microsoft Corporation) C:\windows\system32\SettingSyncCore.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001048992 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001014784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wpnapps.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001009152 _____ (Microsoft Corporation) C:\windows\system32\StorSvc.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000995840 _____ (Microsoft Corporation) C:\windows\system32\EdgeManager.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000967680 _____ (Microsoft Corporation) C:\windows\system32\WebcamUi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000950272 _____ (Microsoft Corporation) C:\windows\system32\rasapi32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000945176 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Sensors.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000913408 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000912896 _____ (Microsoft Corporation) C:\windows\SysWOW64\MiracastReceiver.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000898048 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Immersive.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000895600 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000892928 _____ (Microsoft Corporation) C:\windows\SysWOW64\MbaeApiPublic.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000891392 _____ (Microsoft Corporation) C:\windows\system32\HolographicExtensions.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000882176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ShareHost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000875008 _____ (Microsoft Corporation) C:\windows\SysWOW64\rasapi32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000867840 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000865280 _____ (Microsoft Corporation) C:\windows\system32\efswrt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000848384 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000844096 _____ (Microsoft Corporation) C:\windows\SysWOW64\CloudExperienceHostCommon.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000815616 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebcamUi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000814080 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSyncCore.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000793320 _____ (Microsoft Corporation) C:\windows\SysWOW64\InputHost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000783488 _____ (Microsoft Corporation) C:\windows\system32\tcblaunch.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000782848 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000779080 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Services.TargetedContent.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000778872 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppContracts.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000750080 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000717824 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.AccountsControl.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000701440 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Mirage.Internal.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000695208 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000689664 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000687104 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Ocr.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000685384 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000673448 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontdrvhost.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000669184 _____ (Microsoft Corporation) C:\windows\SysWOW64\EdgeManager.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000653824 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Internal.Management.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000628416 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000628024 _____ (Microsoft Corporation) C:\windows\SysWOW64\LicensingWinRT.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000614912 _____ (Microsoft Corporation) C:\windows\SysWOW64\efswrt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000614912 _____ (Microsoft Corporation) C:\windows\system32\netprofmsvc.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000600064 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActivationManager.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000596992 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000594992 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Perception.Stub.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000593408 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000584704 _____ (Microsoft Corporation) C:\windows\system32\PlayToManager.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000582056 _____ (Microsoft Corporation) C:\windows\SysWOW64\windows.applicationmodel.datatransfer.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000570368 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Import.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000565248 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Gaming.Input.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000542288 _____ (Microsoft Corporation) C:\windows\SysWOW64\StructuredQuery.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000540672 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.SmartCards.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000538664 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000533504 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000522240 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.System.Launcher.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000521728 _____ (Microsoft Corporation) C:\windows\system32\WinBioDataModel.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000518656 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000513024 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000512000 _____ (Microsoft Corporation) C:\windows\system32\Windows.Cortana.Desktop.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000502784 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000497664 _____ (Microsoft Corporation) C:\windows\system32\werui.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000484352 _____ (Microsoft Corporation) C:\windows\system32\MixedReality.Broker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000478296 _____ (Microsoft Corporation) C:\windows\SysWOW64\sechost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000467456 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Picker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000466432 _____ (Microsoft Corporation) C:\windows\system32\Windows.Graphics.Printing.Workflow.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000462848 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000456704 _____ (Microsoft Corporation) C:\windows\system32\upnphost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000453944 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000452096 _____ (Microsoft Corporation) C:\windows\SysWOW64\TileDataRepository.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000444416 _____ (Microsoft Corporation) C:\windows\system32\fhsettingsprovider.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000442368 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.AllJoyn.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000442096 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.MediaControl.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000432128 _____ (Microsoft Corporation) C:\windows\system32\WalletService.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000430592 _____ (Microsoft Corporation) C:\windows\SysWOW64\werui.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000419328 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Graphics.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000416768 _____ (Microsoft Corporation) C:\windows\system32\RDXTaskFactory.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000411136 _____ (Microsoft Corporation) C:\windows\SysWOW64\PlayToManager.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000410112 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.SmartCards.Phone.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000406992 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Enumeration.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000406992 _____ (Microsoft Corporation) C:\windows\system32\tsmf.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000405944 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000403968 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Payments.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000388096 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.LowLevel.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000387584 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000382976 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000380224 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000371712 _____ (Microsoft Corporation) C:\windows\SysWOW64\Geolocation.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000358912 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.WiFiDirect.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000355328 _____ (Microsoft Corporation) C:\windows\system32\ConsoleLogon.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000354816 _____ (Microsoft Corporation) C:\windows\SysWOW64\RTMediaFrame.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000353792 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrd3x40.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000352256 _____ (Microsoft Corporation) C:\windows\system32\APHostService.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000345560 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsmf.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\AboveLockAppHost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000338944 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Picker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000335360 _____ (Microsoft Corporation) C:\windows\SysWOW64\MicrosoftAccountWAMExtension.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000329728 _____ (Microsoft Corporation) C:\windows\SysWOW64\upnphost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000328192 _____ (Microsoft Corporation) C:\windows\SysWOW64\edgeIso.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000327168 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32k.sys
2020-07-20 17:56 - 2020-07-20 17:56 - 000317440 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Midi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000311440 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Devices.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000293888 _____ (Microsoft Corporation) C:\windows\system32\CXHProvisioningServer.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000293376 _____ (Microsoft Corporation) C:\windows\SysWOW64\wpnclient.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000292864 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.System.Diagnostics.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000287744 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Gaming.Preview.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000283648 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.NetworkOperators.ESim.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000280576 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Usb.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000275968 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Lights.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000272384 _____ (Microsoft Corporation) C:\windows\SysWOW64\PickerPlatform.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000268552 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Storage.ApplicationData.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000266552 _____ (Microsoft Corporation) C:\windows\SysWOW64\SystemSettings.DataModel.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000256000 _____ (Microsoft Corporation) C:\windows\SysWOW64\ConsoleLogon.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000241152 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.CredDialogController.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000240640 _____ (Microsoft Corporation) C:\windows\system32\dialclient.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000237056 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000231424 _____ (Microsoft Corporation) C:\windows\system32\HoloShellRuntime.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000228864 _____ (Microsoft Corporation) C:\windows\system32\netprofm.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000227840 _____ (Microsoft Corporation) C:\windows\SysWOW64\SyncSettings.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000224768 _____ (Microsoft Corporation) C:\windows\system32\DWWIN.EXE
2020-07-20 17:56 - 2020-07-20 17:56 - 000217600 _____ (Microsoft Corporation) C:\windows\SysWOW64\bthprops.cpl
2020-07-20 17:56 - 2020-07-20 17:56 - 000215040 _____ (Microsoft Corporation) C:\windows\system32\DiagSvc.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000211256 _____ (Microsoft Corporation) C:\windows\system32\tcbloader.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000199496 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000196096 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000193600 _____ (Microsoft Corporation) C:\windows\SysWOW64\weretw.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000190056 _____ (Microsoft Corporation) C:\windows\SysWOW64\logoncli.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000188928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000188928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000186880 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWWIN.EXE
2020-07-20 17:56 - 2020-07-20 17:56 - 000186368 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000180224 _____ (Microsoft Corporation) C:\windows\system32\dialserver.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000179712 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_Clipboard.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000179200 _____ (Microsoft Corporation) C:\windows\system32\PrintWorkflowService.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000179200 _____ (Microsoft Corporation) C:\windows\system32\easwrt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000176952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Management.Workplace.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\HoloShellRuntime.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\dialclient.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000162816 _____ (Microsoft Corporation) C:\windows\SysWOW64\ErrorDetails.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000162304 _____ (Microsoft Corporation) C:\windows\SysWOW64\UserDeviceRegistration.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000160768 _____ (Microsoft Corporation) C:\windows\SysWOW64\CapabilityAccessManagerClient.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000159744 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Core.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000157184 _____ (Microsoft Corporation) C:\windows\system32\PrintWSDAHost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000152064 _____ (Microsoft Corporation) C:\windows\SysWOW64\useractivitybroker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000151552 _____ (Microsoft Corporation) C:\windows\system32\fdWSD.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000150336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000147968 _____ (Microsoft Corporation) C:\windows\system32\Family.Client.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000143360 _____ (Microsoft Corporation) C:\windows\SysWOW64\easwrt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000141312 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintWorkflowService.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000140800 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Energy.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000133632 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000133632 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppExtension.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000130560 _____ (Microsoft Corporation) C:\windows\system32\StorageUsage.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\fdWSD.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000124928 _____ (Microsoft Corporation) C:\windows\system32\wercplsupport.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintWSDAHost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppointmentActivation.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000107520 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.SerialCommunication.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000100864 _____ (Microsoft Corporation) C:\windows\system32\Family.Authentication.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000099328 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000094720 _____ (Microsoft Corporation) C:\windows\SysWOW64\CameraCaptureUI.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000094208 _____ (Microsoft Corporation) C:\windows\SysWOW64\EaseOfAccessDialog.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000093184 _____ (Microsoft Corporation) C:\windows\system32\nlaapi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000089600 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000089328 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32u.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000086272 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Security.Credentials.UI.CredentialPicker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000081408 _____ (Microsoft Corporation) C:\windows\system32\Print.Workflow.Source.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000079360 _____ (Microsoft Corporation) C:\windows\SysWOW64\sethc.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000075776 _____ (Microsoft Corporation) C:\windows\SysWOW64\DiagnosticInvoker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000071168 _____ (Microsoft Corporation) C:\windows\system32\MiracastReceiverExt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000068096 _____ (Microsoft Corporation) C:\windows\system32\udhisapi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000066560 _____ (Microsoft Corporation) C:\windows\SysWOW64\keyiso.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000066048 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000065536 _____ (Microsoft Corporation) C:\windows\system32\iemigplugin.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000064512 _____ (Microsoft Corporation) C:\windows\SysWOW64\SystemUWPLauncher.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000063488 _____ (Microsoft Corporation) C:\windows\SysWOW64\iemigplugin.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000063488 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Print.Workflow.Source.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000058368 _____ (Microsoft Corporation) C:\windows\SysWOW64\udhisapi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000058368 _____ (Microsoft Corporation) C:\windows\SysWOW64\MiracastReceiverExt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000052152 _____ (Microsoft Corporation) C:\windows\SysWOW64\ResourcePolicyClient.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000046080 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf3216.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000045056 _____ (Microsoft Corporation) C:\windows\system32\npmproxy.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000040960 _____ (Microsoft Corporation) C:\windows\system32\upnpcont.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000038912 _____ (Microsoft Corporation) C:\windows\SysWOW64\werdiagcontroller.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\upnpcont.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000029696 _____ (Microsoft Corporation) C:\windows\system32\nlmproxy.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000026112 _____ (Microsoft Corporation) C:\windows\system32\PrintWorkflowProxy.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000021504 _____ (Microsoft Corporation) C:\windows\SysWOW64\SystemEventsBrokerClient.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000017408 _____ (Microsoft Corporation) C:\windows\system32\nlmsprep.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000016896 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintWorkflowProxy.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000016896 _____ (Microsoft Corporation) C:\windows\system32\Windows.Graphics.Printing.Workflow.Native.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000012288 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Graphics.Printing.Workflow.Native.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\msimg32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000002560 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000002560 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth9.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth8.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth7.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth6.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth5.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth4.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth3.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth2.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth12.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth11.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth10.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth1.bin
2020-07-20 17:55 - 2020-07-20 17:55 - 017792512 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 009931576 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 007917408 _____ (Microsoft Corporation) C:\windows\system32\windows.storage.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 007850288 _____ (Microsoft Corporation) C:\windows\system32\OneCoreUAPCommonProxyStub.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 007604584 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Protection.PlayReady.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 007297536 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 007268640 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 006437376 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 006233080 _____ (Microsoft Corporation) C:\windows\system32\StartTileData.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 006169088 _____ (Microsoft Corporation) C:\windows\system32\twinui.pcshell.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 004625192 _____ (Microsoft Corporation) C:\windows\explorer.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 004565264 _____ (Microsoft Corporation) C:\windows\system32\sppsvc.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 004014592 _____ (Microsoft Corporation) C:\windows\system32\Microsoft.Bluetooth.Service.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 003800576 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 003727360 _____ (Microsoft Corporation) C:\windows\system32\win32kfull.sys
2020-07-20 17:55 - 2020-07-20 17:55 - 003712000 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentServer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 003084800 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002768984 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002737664 _____ (Microsoft Corporation) C:\windows\system32\WebRuntimeManager.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002716672 _____ (Microsoft Corporation) C:\windows\system32\win32kbase.sys
2020-07-20 17:55 - 2020-07-20 17:55 - 002552120 _____ (Microsoft Corporation) C:\windows\system32\UpdateAgent.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002505496 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002467840 _____ (Microsoft Corporation) C:\windows\system32\InstallService.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002448712 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002357248 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Perception.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002285056 _____ (Microsoft Corporation) C:\windows\system32\Windows.Graphics.Printing.3D.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002264064 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Bluetooth.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002237096 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002161664 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.PointOfService.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002087168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002074112 _____ (Microsoft Corporation) C:\windows\system32\ISM.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002060288 _____ (Microsoft Corporation) C:\windows\system32\cdprt.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001946144 _____ (Microsoft Corporation) C:\windows\system32\dcomp.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001918464 _____ (Microsoft Corporation) C:\windows\system32\wevtsvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001885184 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001877504 _____ (Microsoft Corporation) C:\windows\system32\LocationFramework.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001827328 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Speech.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001821696 _____ (Microsoft Corporation) C:\windows\system32\CoreShell.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001787392 _____ (Microsoft Corporation) C:\windows\system32\Windows.Globalization.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001764336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001745728 _____ (Microsoft Corporation) C:\windows\system32\ContentDeliveryManager.Utilities.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001743680 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001723392 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001697792 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001658368 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001656904 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001654304 _____ (Microsoft Corporation) C:\windows\system32\gdi32full.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001640448 _____ (Microsoft Corporation) C:\windows\system32\TaskFlowDataEngine.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001612800 _____ (Microsoft Corporation) C:\windows\system32\wpncore.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001604608 _____ (Microsoft Corporation) C:\windows\system32\dosvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001540608 _____ (Microsoft Corporation) C:\windows\system32\WindowManagement.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001500160 _____ (Microsoft Corporation) C:\windows\system32\TokenBroker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001486848 _____ (Microsoft Corporation) C:\windows\system32\usocoreworker.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 001392128 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.FaceAnalysis.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001385696 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001374208 _____ (Microsoft Corporation) C:\windows\system32\NotificationController.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001337856 _____ (Microsoft Corporation) C:\windows\system32\wpnapps.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001335296 _____ (Microsoft Corporation) C:\windows\system32\MiracastReceiver.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001290192 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Sensors.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001284608 _____ (Microsoft Corporation) C:\windows\system32\usermgr.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001271296 _____ (Microsoft Corporation) C:\windows\system32\SEMgrSvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001183744 _____ (Microsoft Corporation) C:\windows\system32\Windows.Security.Authentication.Web.Core.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001159168 _____ (Microsoft Corporation) C:\windows\system32\MbaeApiPublic.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001151304 _____ (Microsoft Corporation) C:\windows\system32\InputHost.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001149712 _____ (Microsoft Corporation) C:\windows\system32\ApplyTrustOffline.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 001121792 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001100800 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Immersive.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001086776 _____ (Microsoft Corporation) C:\windows\system32\Windows.Services.TargetedContent.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001081344 _____ (Microsoft Corporation) C:\windows\system32\ShareHost.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001059840 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.BackgroundTransfer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001055232 _____ (Microsoft Corporation) C:\windows\system32\Windows.AccountsControl.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001028336 _____ (Microsoft Corporation) C:\windows\system32\Windows.Perception.Stub.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001008960 _____ (Microsoft Corporation) C:\windows\system32\CloudExperienceHostCommon.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001007616 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000958608 _____ (Microsoft Corporation) C:\windows\system32\AppContracts.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000949760 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Ocr.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000931840 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.Management.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000922624 _____ (Microsoft Corporation) C:\windows\system32\Windows.Management.Service.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000919880 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000917504 _____ (Microsoft Corporation) C:\windows\system32\Windows.Security.Authentication.OnlineId.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000904192 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.SmartCards.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000899584 _____ (Microsoft Corporation) C:\windows\system32\MdmDiagnostics.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000889416 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.Shell.Broker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000882184 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000827904 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Import.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000822200 _____ (Microsoft Corporation) C:\windows\system32\fontdrvhost.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000821232 _____ (Microsoft Corporation) C:\windows\system32\windows.applicationmodel.datatransfer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000809984 _____ (Microsoft Corporation) C:\windows\system32\Windows.Gaming.Input.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000797448 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000750592 _____ (Microsoft Corporation) C:\windows\system32\ActivationManager.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000742712 _____ (Microsoft Corporation) C:\windows\system32\LicensingWinRT.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000737792 _____ (Microsoft Corporation) C:\windows\system32\Windows.System.Launcher.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000733184 _____ (Microsoft Corporation) C:\windows\system32\windows.immersiveshell.serviceprovider.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000727040 _____ (Microsoft Corporation) C:\windows\system32\agentactivationruntime.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000722072 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000716288 _____ (Microsoft Corporation) C:\windows\system32\agentactivationruntimewindows.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000692224 _____ (Microsoft Corporation) C:\windows\system32\LockController.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000684864 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000678720 _____ (Microsoft Corporation) C:\windows\system32\StructuredQuery.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000656696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys
2020-07-20 17:55 - 2020-07-20 17:55 - 000651264 _____ (Microsoft Corporation) C:\windows\system32\DevicesFlowBroker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000639488 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000638464 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000630784 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.AllJoyn.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000624640 _____ (Microsoft Corporation) C:\windows\system32\TileDataRepository.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000616960 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.LowLevel.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000608256 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.SmartCards.Phone.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000605896 _____ (Microsoft Corporation) C:\windows\system32\sechost.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000602112 _____ (Microsoft Corporation) C:\windows\system32\Windows.Payments.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000550400 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2020-07-20 17:55 - 2020-07-20 17:55 - 000549048 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.MediaControl.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000544256 _____ (Microsoft Corporation) C:\windows\system32\usosvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000534016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000526848 _____ (Microsoft Corporation) C:\windows\system32\Windows.Graphics.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000524784 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Enumeration.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000518464 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000513024 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Activities.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000502784 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.WiFiDirect.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000501760 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.LockScreen.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000495616 _____ (Microsoft Corporation) C:\windows\system32\RTMediaFrame.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000490496 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000477184 _____ (Microsoft Corporation) C:\windows\system32\CloudDomainJoinDataModelServer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000476160 _____ (Microsoft Corporation) C:\windows\system32\MicrosoftAccountWAMExtension.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000475136 _____ (Microsoft Corporation) C:\windows\system32\Geolocation.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000467960 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000467456 _____ (Microsoft Corporation) C:\windows\system32\modernexecserver.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000461112 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000458240 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000444416 _____ (Microsoft Corporation) C:\windows\system32\edgeIso.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000434176 _____ (Microsoft Corporation) C:\windows\system32\MicrosoftAccountExtension.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000432128 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Midi.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000419328 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.NetworkOperators.ESim.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000416768 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Usb.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000412672 _____ (Microsoft Corporation) C:\windows\system32\AboveLockAppHost.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000411640 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Devices.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000399672 _____ (Microsoft Corporation) C:\windows\system32\SystemSettings.DataModel.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000397824 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Lights.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000395264 _____ (Microsoft Corporation) C:\windows\system32\Windows.Gaming.Preview.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000392504 _____ (Microsoft Corporation) C:\windows\system32\CloudExperienceHost.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000381152 _____ (Microsoft Corporation) C:\windows\system32\CredentialEnrollmentManager.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000375296 _____ (Microsoft Corporation) C:\windows\system32\Windows.System.Diagnostics.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000374272 _____ (Microsoft Corporation) C:\windows\system32\PickerPlatform.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000361472 _____ (Microsoft Corporation) C:\windows\system32\vaultsvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000361472 _____ (Microsoft Corporation) C:\windows\system32\QuickActionsDataModel.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000355840 _____ (Microsoft Corporation) C:\windows\system32\wpnclient.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000355840 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicSvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000340328 _____ (Microsoft Corporation) C:\windows\system32\Windows.Storage.ApplicationData.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000334336 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_Cortana.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000327168 _____ (Microsoft Corporation) C:\windows\system32\windows.internal.shellcommon.shareexperience.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000316928 _____ (Microsoft Corporation) C:\windows\system32\SyncSettings.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000311608 _____ (Microsoft Corporation) C:\windows\system32\CloudExperienceHostBroker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000306688 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.CredDialogController.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000295936 _____ (Microsoft Corporation) C:\windows\system32\TDLMigration.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000290304 _____ (Microsoft Corporation) C:\windows\system32\vaultcli.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000285184 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicCapsule.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000283136 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.AppDefaults.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000281600 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000274432 _____ (Microsoft Corporation) C:\windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000265728 _____ (Microsoft Corporation) C:\windows\system32\netman.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000261632 _____ (Microsoft Corporation) C:\windows\system32\bthprops.cpl
2020-07-20 17:55 - 2020-07-20 17:55 - 000260288 _____ (Microsoft Corporation) C:\windows\system32\logoncli.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000248832 _____ (Microsoft Corporation) C:\windows\system32\PasswordEnrollmentManager.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000247864 _____ (Microsoft Corporation) C:\windows\system32\weretw.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000243200 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerServer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000242688 _____ (Microsoft Corporation) C:\windows\system32\CapabilityAccessManagerClient.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000239928 _____ (Microsoft Corporation) C:\windows\system32\Windows.Management.Workplace.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000237056 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.CapturePicker.Desktop.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000237056 _____ (Microsoft Corporation) C:\windows\system32\psmsrv.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000228864 _____ (Microsoft Corporation) C:\windows\system32\wersvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000220992 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000220672 _____ (Microsoft Corporation) C:\windows\system32\MtcModel.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000219136 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000217600 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Core.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000215552 _____ (Microsoft Corporation) C:\windows\system32\UserDeviceRegistration.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000215040 _____ (Microsoft Corporation) C:\windows\system32\PeopleBand.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000210944 _____ (Microsoft Corporation) C:\windows\system32\ErrorDetails.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000206336 _____ (Microsoft Corporation) C:\windows\system32\useractivitybroker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000204608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spacedump.sys
2020-07-20 17:55 - 2020-07-20 17:55 - 000200704 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Internal.Input.ExpressiveInput.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000195584 _____ (Microsoft Corporation) C:\windows\system32\AarSvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000183808 _____ (Microsoft Corporation) C:\windows\system32\Windows.Energy.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000179512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2020-07-20 17:55 - 2020-07-20 17:55 - 000179200 _____ (Microsoft Corporation) C:\windows\system32\AppExtension.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000178688 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000172032 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.CapturePicker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000165840 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000165376 _____ (Microsoft Corporation) C:\windows\splwow64.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000151040 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.SerialCommunication.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000146232 _____ (Microsoft Corporation) C:\windows\system32\ResourcePolicyServer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000144384 _____ (Microsoft Corporation) C:\windows\system32\AppointmentActivation.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000132608 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Storage.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000132408 _____ (Microsoft Corporation) C:\windows\system32\offlinelsa.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000131584 _____ (Microsoft Corporation) C:\windows\system32\DevicePairingExperienceMEM.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000131072 _____ (Microsoft Corporation) C:\windows\system32\CredDialogBroker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000129536 _____ (Microsoft Corporation) C:\windows\system32\CameraCaptureUI.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000128512 _____ (Microsoft Corporation) C:\windows\system32\CaptureService.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000127064 _____ (Microsoft Corporation) C:\windows\system32\win32u.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000125952 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000118784 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000118272 _____ (Microsoft Corporation) C:\windows\system32\EaseOfAccessDialog.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000112128 _____ (Microsoft Corporation) C:\windows\system32\AxInstSv.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000110040 _____ (Microsoft Corporation) C:\windows\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000105984 _____ (Microsoft Corporation) C:\windows\system32\utcutil.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000100864 _____ (Microsoft Corporation) C:\windows\system32\sethc.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000100352 _____ (Microsoft Corporation) C:\windows\system32\DiagnosticInvoker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000092672 _____ (Microsoft Corporation) C:\windows\system32\wsqmcons.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000091648 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000090624 _____ (Microsoft Corporation) C:\windows\system32\keyiso.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000089088 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicAgent.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000083456 _____ (Microsoft Corporation) C:\windows\system32\SystemUWPLauncher.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000082432 _____ (Microsoft Corporation) C:\windows\system32\LocationFrameworkInternalPS.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000076952 _____ (Microsoft Corporation) C:\windows\system32\CredentialEnrollmentManagerForUser.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000070248 _____ (Microsoft Corporation) C:\windows\system32\ResourcePolicyClient.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000060928 _____ (Microsoft Corporation) C:\windows\system32\mf3216.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\AxInstUI.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000044544 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000040248 _____ (Microsoft Corporation) C:\windows\system32\LocationFrameworkPS.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000037376 _____ (Microsoft Corporation) C:\windows\system32\UIMgrBroker.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000029696 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerClient.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000028672 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicPS.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000024064 _____ (Microsoft Corporation) C:\windows\system32\CSystemEventsBrokerClient.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000013824 _____ (Microsoft Corporation) C:\windows\system32\UIManagerBrokerps.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000008192 _____ (Microsoft Corporation) C:\windows\system32\msimg32.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000003072 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000002560 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2020-07-20 17:44 - 2020-06-30 06:32 - 000390656 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe
2020-07-20 17:44 - 2020-06-30 06:26 - 000492544 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-08-11 09:21 - 2020-03-15 13:36 - 000000000 ____D C:\FRST
2020-08-11 09:19 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-08-10 14:47 - 2019-04-15 17:38 - 000000000 ____D C:\windows\system32\SleepStudy
2020-08-10 12:23 - 2020-03-22 11:19 - 000000000 ____D C:\Users\Host\AppData\Local\CrashDumps
2020-08-10 09:27 - 2020-01-29 00:04 - 000000000 ____D C:\Users\Host\AppData\LocalLow\Mozilla
2020-08-09 09:23 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-08-09 09:23 - 2019-03-19 06:52 - 000000000 ____D C:\windows\AppReadiness
2020-08-08 12:01 - 2019-05-20 04:42 - 000000000 ____D C:\Program Files\HPCommRecovery
2020-08-08 10:15 - 2020-01-28 23:54 - 000000000 ____D C:\ProgramData\AVAST Software
2020-08-08 10:06 - 2019-05-20 14:00 - 000692228 _____ C:\windows\system32\perfh005.dat
2020-08-08 10:06 - 2019-05-20 14:00 - 000142188 _____ C:\windows\system32\perfc005.dat
2020-08-08 10:06 - 2019-05-20 04:35 - 001682762 _____ C:\windows\system32\PerfStringBackup.INI
2020-08-08 10:06 - 2019-03-19 06:50 - 000000000 ____D C:\windows\INF
2020-08-08 10:04 - 2020-04-06 09:57 - 000000000 ____D C:\Program Files (x86)\Steam
2020-08-08 10:01 - 2020-07-02 17:04 - 000000000 ____D C:\Users\Host\Desktop\Ondrášek web
2020-08-08 10:00 - 2019-04-15 17:38 - 000000006 ____H C:\windows\Tasks\SA.DAT
2020-08-08 09:45 - 2019-03-19 06:37 - 000000000 ____D C:\windows\CbsTemp
2020-08-08 09:41 - 2020-04-12 15:00 - 000515544 _____ (AVAST Software) C:\windows\system32\Drivers\aswNetHub.sys
2020-08-08 09:41 - 2020-01-28 23:55 - 000466752 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2020-08-08 09:41 - 2020-01-28 23:55 - 000323784 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys
2020-08-08 09:41 - 2020-01-28 23:55 - 000195656 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsh.sys
2020-08-08 09:41 - 2020-01-28 23:55 - 000109280 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2020-08-08 09:41 - 2020-01-28 23:55 - 000084856 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2020-08-08 09:41 - 2020-01-28 23:55 - 000060488 _____ (AVAST Software) C:\windows\system32\Drivers\aswbuniv.sys
2020-08-08 09:41 - 2020-01-28 23:55 - 000042776 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys
2020-08-08 09:41 - 2019-03-19 06:52 - 000000000 ___HD C:\windows\ELAMBKUP
2020-08-08 09:40 - 2020-01-28 23:55 - 000851608 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2020-08-08 09:40 - 2020-01-28 23:55 - 000235592 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsdriver.sys
2020-08-08 09:40 - 2020-01-28 23:55 - 000205888 _____ (AVAST Software) C:\windows\system32\Drivers\aswArPot.sys
2020-08-05 18:01 - 2020-04-04 11:27 - 000000000 ____D C:\Users\Host\Desktop\Dokumenty k ulozeni
2020-08-05 17:59 - 2020-06-18 14:11 - 000000000 ____D C:\Users\Host\.dbus-keyrings
2020-08-04 07:50 - 2020-01-28 19:02 - 000000000 ___RD C:\Users\Host\OneDrive
2020-08-04 07:50 - 2020-01-28 18:59 - 000002369 _____ C:\Users\Host\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-08-03 07:55 - 2020-01-29 00:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-08-02 15:20 - 2020-06-05 14:40 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-08-02 15:20 - 2020-06-05 14:40 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-07-31 11:25 - 2019-08-29 19:35 - 000000000 ____D C:\windows\HP
2020-07-31 11:24 - 2020-02-24 06:58 - 000000000 ____D C:\Users\Host\AppData\Local\HP_Inc
2020-07-31 10:48 - 2020-01-29 00:04 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-07-30 12:33 - 2019-03-19 06:52 - 000000000 ____D C:\windows\LiveKernelReports
2020-07-29 08:59 - 2020-06-22 21:51 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-07-29 08:59 - 2020-06-22 21:51 - 000002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-07-21 15:22 - 2020-01-28 23:55 - 000016824 _____ (AVAST Software) C:\windows\system32\Drivers\aswElam.sys
2020-07-21 15:21 - 2020-01-28 18:59 - 000000000 ___RD C:\Users\Host\3D Objects
2020-07-21 15:21 - 2019-04-15 17:39 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-07-21 15:20 - 2019-04-15 17:38 - 000556616 _____ C:\windows\system32\FNTCACHE.DAT
2020-07-20 22:25 - 2019-03-19 06:52 - 000000000 ___SD C:\windows\system32\DiagSvcs
2020-07-20 22:25 - 2019-03-19 06:52 - 000000000 ____D C:\windows\SystemResources
2020-07-20 22:25 - 2019-03-19 06:52 - 000000000 ____D C:\windows\system32\oobe
2020-07-20 22:25 - 2019-03-19 06:52 - 000000000 ____D C:\windows\ShellExperiences
2020-07-20 22:25 - 2019-03-19 06:52 - 000000000 ____D C:\windows\bcastdvr
2020-07-20 22:25 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Common Files\System
2020-07-15 14:14 - 2020-07-04 21:46 - 000000000 ____D C:\Users\Host\AppData\Local\gtk-2.0
2020-07-15 14:14 - 2020-07-04 21:40 - 000000000 ____D C:\Users\Host\AppData\Local\babl-0.1

==================== Files in the root of some directories ========

2020-04-01 10:35 - 2020-04-01 10:35 - 000000092 _____ () C:\Users\Host\AppData\Local\fusioncache.dat
2020-08-05 18:00 - 2020-08-05 18:00 - 000010462 _____ () C:\Users\Host\AppData\Local\recently-used.xbel
2020-04-18 13:23 - 2020-04-18 13:23 - 000000017 _____ () C:\Users\Host\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)



ATTENTION: ==> Could not access BCD. The user is not administrator -> The boot configuration data store could not be opened.
P��stup byl odep�en.

==================== End of FRST.txt ========================

G1876P
Návštěvník
Návštěvník
Příspěvky: 84
Registrován: 09 říj 2014 15:41

Re: Žádost o preventivní kontrolu

#2 Příspěvek od G1876P »

Pro lepší přehled odděluji a přikládám addition.txt. :)

--------------------------------------------------------
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-08-2020
Ran by Host (11-08-2020 09:24:37)
Running from C:\Users\Host\Desktop
Windows 10 Home Version 1909 18363.959 (X64) (2019-08-29 18:13:30)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

42072 (S-1-5-21-2689317223-3959950762-4002007104-1003 - Limited - Disabled)
Administrator (S-1-5-21-2689317223-3959950762-4002007104-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2689317223-3959950762-4002007104-1006 - Limited - Enabled)
DefaultAccount (S-1-5-21-2689317223-3959950762-4002007104-503 - Limited - Disabled)
Guest (S-1-5-21-2689317223-3959950762-4002007104-501 - Limited - Disabled)
Host (S-1-5-21-2689317223-3959950762-4002007104-1002 - Limited - Enabled) => C:\Users\Host
Petr Záruba (S-1-5-21-2689317223-3959950762-4002007104-1001 - Administrator - Enabled) => C:\Users\Petr Záruba
WDAGUtilityAccount (S-1-5-21-2689317223-3959950762-4002007104-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 20.009.20074 - Adobe Systems Incorporated)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.10.30.09 - Advanced Micro Devices, Inc.)
Avast Premium Security (HKLM-x32\...\Avast Antivirus) (Version: 20.6.2420 - Avast Software)
Branding64 (HKLM\...\{7659552A-136F-4615-A9FA-3E3EF2CCA77C}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
GIMP 2.10.20 (HKU\S-1-5-21-2689317223-3959950762-4002007104-1002\...\GIMP-2_is1) (Version: 2.10.20 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 84.0.4147.105 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
HP Audio Switch (HKLM-x32\...\{20A40E7C-E470-4E9F-9B5C-DDB2C205E856}) (Version: 1.0.154.0 - HP Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.17.0 - HP Inc.)
HP DeskJet 2130 series Nápověda (HKLM-x32\...\{C8CCFDF2-9CB2-4714-BCE5-17178CB71646}) (Version: 35.0.0 - Hewlett Packard)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.0 - HP Inc.)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Inkscape (HKLM-x32\...\Inkscape) (Version: 1.0.0- - Inkscape)
Medieval II Total War (HKLM-x32\...\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}) (Version: 1.03.000 - SEGA)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 84.0.522.52 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.133.5 - )
Microsoft OneDrive (HKU\S-1-5-21-2689317223-3959950762-4002007104-1002\...\OneDriveSetup.exe) (Version: 20.124.0621.0006 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.14.26429 (HKLM-x32\...\{80586c77-db42-44bb-bfc8-7aebbb220c00}) (Version: 14.14.26429.4 - Microsoft Corporation)
Microsoft Visual J# .NET Redistributable Package 1.1 (HKLM-x32\...\{1A655D51-1423-48A3-B748-8F5A0BE294C8}) (Version: 1.1.4322 - Microsoft)
Mozilla Firefox 79.0 (x64 cs) (HKLM\...\Mozilla Firefox 79.0 (x64 cs)) (Version: 79.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 72.0.2 - Mozilla)
OEM Application Profile (HKLM-x32\...\{12C2AEB0-ED60-4CCF-DD83-C65BC7CCFB50}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
OpenOffice 4.1.5 (HKLM-x32\...\{2FEA9841-64DE-4FA5-A36F-1CD23E2790EB}) (Version: 4.15.9789 - Apache Software Foundation)
PSPad editor (HKLM-x32\...\PSPad editor_is1) (Version: 5.0.3.377 - Jan Fiala)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8940.1 - Realtek Semiconductor Corp.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Studie vylepšování produktu HP DeskJet 2130 series (HKLM\...\{A6640A96-7F5D-4480-8D50-F3A0BB58C096}) (Version: 35.0.61.54677 - Hewlett-Packard Co.)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.51 - Ghisler Software GmbH)
Základní software zařízení HP DeskJet 2130 series (HKLM\...\{E1B7356D-B08B-4B2C-A8C3-EAB12EB743DE}) (Version: 35.0.61.54677 - Hewlett-Packard Co.)

Packages:
=========
Amazon -> C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t [0000-00-00] (Amazon.com)
Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.10.5.0_x86__kgqvnymyfvs32 [0000-00-00] (king.com)
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.39.4.0_x86__kgqvnymyfvs32 [0000-00-00] (king.com)
Dropbox promotion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64__xbfy0k16fey96 [0000-00-00] (Dropbox Inc.)
HP JumpStarts -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStarts_1.7.1464.0_x64__v10z8vjag6ke6 [0000-00-00] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_1.6.6.0_x64__v10z8vjag6ke6 [0000-00-00] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.0.38.0_x64__v10z8vjag6ke6 [0000-00-00] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_115.1.152.0_x64__v10z8vjag6ke6 [0000-00-00] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.6.703.0_x64__v10z8vjag6ke6 [0000-00-00] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.1.18.0_x64__v10z8vjag6ke6 [0000-00-00] (HP Inc.)
LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_2.1.7098.0_neutral__w1wdnht996qgy [0000-00-00] (LinkedIn)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.8042.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation) [MS Ad]
sMedio True DVD for HP -> C:\Program Files\WindowsApps\0E3921EB.sMedioTrueDVDforHP_1.1.128.0_x64__agwrg61xdd7p4 [0000-00-00] (sMedio Inc.)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0 [0000-00-00] (Spotify AB) [Startup Task]
Synaptics TouchPad -> C:\Program Files\WindowsApps\SynapticsIncorporated.SynHPConsumerDApp_19005.35054.0.0_x64__807d65c4rvak2 [0000-00-00] (Synaptics Incorporated)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-08-08] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-08-08] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-08-08] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2019-10-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-08-08] (Avast Software s.r.o. -> AVAST Software)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2019-05-10 03:40 - 2019-05-10 03:40 - 000017920 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libEGL.DLL
2019-05-10 03:40 - 2019-05-10 03:40 - 003598336 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2020-08-08 14:26 - 2020-08-08 14:26 - 000138240 _____ () [File not signed] C:\windows\assembly\NativeImages_v4.0.30319_32\Interop.IWs06dcaa36#\6d2f969d607313c3d5ee16a06189b15c\Interop.IWshRuntimeLibrary.ni.dll
2019-10-18 02:29 - 2019-10-18 02:29 - 000158208 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\windows\SYSTEM32\amdihk64.dll
2020-08-08 14:25 - 2020-08-08 14:25 - 000134656 _____ (hardcodet.net) [File not signed] C:\windows\assembly\NativeImages_v4.0.30319_32\Hardcodet.W6cab32f3#\ecad88bab461483fe8a59bfc3ed4baed\Hardcodet.Wpf.TaskbarNotification.ni.dll
2020-06-20 01:35 - 2020-06-20 01:35 - 000014336 _____ (HP Inc.) [File not signed] C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.1.18.0_x64__v10z8vjag6ke6\SystemEventUtility\NativeRpcClient.DLL
2020-08-08 14:26 - 2020-08-08 14:26 - 001591808 _____ (Mark Heath) [File not signed] C:\windows\assembly\NativeImages_v4.0.30319_32\NAudio\d8db7de3ed525239a5f0a2c764bbe93e\NAudio.ni.dll
2020-08-08 14:26 - 2020-08-08 14:26 - 003127808 _____ (Newtonsoft) [File not signed] C:\windows\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\f68b6ff84702e3c38a0db0571e621ea0\Newtonsoft.Json.ni.dll
2020-08-08 14:25 - 2020-08-08 14:25 - 000793088 _____ (The Apache Software Foundation) [File not signed] C:\windows\assembly\NativeImages_v4.0.30319_32\log4net\19bea58cbe49b7ce5ba6ebe8127ec7ae\log4net.ni.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qgif.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000040960 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qicns.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qico.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000414208 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qjpeg.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qsvg.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qtga.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000023552 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qwbmp.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000516608 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qwebp.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 001441280 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\platforms\qwindows.dll
2019-10-18 02:43 - 2019-10-18 02:43 - 005999104 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 006413824 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 001141760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 000339968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 004143104 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 003840000 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 000332800 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 000349184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 080959488 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 000113152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 005622272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000463360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000190464 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 002825216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000053760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000059392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\qtgraphicaleffectsplugin.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000017408 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000330752 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000137216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000090112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000017920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000136192 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\styles\qwindowsvistastyle.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2689317223-3959950762-4002007104-1002\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{A133C0B6-AC66-4639-8021-49D8FEC84CF9}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe => No File
FirewallRules: [{A0961D88-21CC-4511-A14F-59287D0C19AE}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe => No File
FirewallRules: [{78D58255-9AC4-4D7A-8121-3784C23DF759}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{164E1F79-17CC-4A9F-83D3-B824FD27DA11}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E58A6FB3-53AA-4DA0-8567-6D16995AFDCB}] => (Allow) C:\Program Files\HP\HP DeskJet 2130 series\Bin\USBSetup.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{3C09D623-62A0-418F-9776-BBEBE35C0EAE}] => (Allow) C:\Program Files\HP\HP DeskJet 2130 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{181B35E7-73F4-4E2A-90D2-A51819726E7B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{C23E3B78-5F91-4AFE-A0C5-A82D9ED89DA7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{363B15CE-96A2-4310-BBC1-57B9F50AD69D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{F1C4A426-2C3D-4D39-812D-42C4D3F5EDCD}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{3A0FA5C1-D0BF-41F7-871C-9407A9F0BB92}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe (Sega Europe Limited -> The Creative Assembly Ltd)
FirewallRules: [{260E4534-8719-4585-AF91-C186EF5DCDAC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe (Sega Europe Limited -> The Creative Assembly Ltd)
FirewallRules: [{F4757A2A-3511-4A22-B152-01A7DBDFA1D7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{7943A5EE-381D-43B6-8230-412DB0B4FE92}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{97B79C6D-C289-42F4-AF36-1F115BE2F80C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Crusader Kings II\CK2game.exe (Paradox Interactive AB (publ) -> Paradox Interactive)
FirewallRules: [{FDAE7756-E90C-41EF-9C2E-D98054D9AB19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Crusader Kings II\CK2game.exe (Paradox Interactive AB (publ) -> Paradox Interactive)
FirewallRules: [{C8FEE2BD-9B80-47F1-AC46-7AEA3EFD50BF}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{6DFECBA6-30B3-4A7D-8523-A24739D73D33}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4FE1BDBE-3796-42EC-9731-884C92739BAF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{663A1A93-157C-4BCB-AB07-79F0C939D35A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1E2F1F45-4EDA-4881-A84C-6F6020D52D6E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1F50888F-3C4B-4D24-984A-5540778D9355}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2E1FA66E-B390-46EC-89DB-4D47C14D8CE1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2D210655-988C-444C-A4A7-4B5E26EC2E2D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B5D110A7-64ED-4377-8635-FBD830C0FC9E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.138.558.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{69B4C23B-E93B-4B79-953F-0329822763C1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4BACEB9A-ED1D-4FD7-8C18-5111F187ED44}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{46774179-C405-4748-94AC-7A964808DE30}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2AE6161E-5BB5-4EB1-88A9-CE394A95EC57}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:118.49 GB) (Free:40.04 GB) (34%)
Check "VSS" service


==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (08/10/2020 01:51:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program HP.JumpStarts.exe verze 1.7.1464.0 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 3c54

Čas spuštění: 01d66f0c8a68d60b

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Program Files\WindowsApps\AD2F1837.HPJumpStarts_1.7.1464.0_x64__v10z8vjag6ke6\HP.JumpStarts.exe

ID hlášení: 512f8a5e-06e0-4dcf-8419-21c516c9df3a

Úplný název balíčku s chybou: AD2F1837.HPJumpStarts_1.7.1464.0_x64__v10z8vjag6ke6

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Quiesce

Error: (08/10/2020 12:23:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: BridgeCommunication.exe, verze: 1.23.1950.0, časové razítko: 0x5ee7f935
Název chybujícího modulu: ntmarta.dll, verze: 10.0.18362.1, časové razítko: 0xd95e6299
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000001fe26
ID chybujícího procesu: 0x2948
Čas spuštění chybující aplikace: 0x01d66f004abd2647
Cesta k chybující aplikaci: C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f81da7794b7c4a41\x64\BridgeCommunication.exe
Cesta k chybujícímu modulu: C:\windows\SYSTEM32\ntmarta.dll
ID zprávy: 4f19c192-c345-4b3d-b7bf-41a2b209cc10
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (08/10/2020 10:01:30 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: firefox.exe, verze: 79.0.0.7506, časové razítko: 0x5f1601d7
Název chybujícího modulu: ntdll.dll, verze: 10.0.18362.815, časové razítko: 0xb29ecf52
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000000f9229
ID chybujícího procesu: 0x192c
Čas spuštění chybující aplikace: 0x01d66ee7aae522df
Cesta k chybující aplikaci: C:\Program Files\Mozilla Firefox\firefox.exe
Cesta k chybujícímu modulu: C:\windows\SYSTEM32\ntdll.dll
ID zprávy: 6d74a329-7619-4c10-90ce-ad4d9acf14d0
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (08/08/2020 03:44:00 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Program Files\AVAST Software\Avast\AvastSvc.exe, identifikátor PID: 3536, identifikátor PID ProfSvc: 1580.

Error: (08/08/2020 09:42:42 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (08/08/2020 09:42:42 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (08/03/2020 05:05:29 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Program Files\AVAST Software\Avast\AvastSvc.exe, identifikátor PID: 3616, identifikátor PID ProfSvc: 1192.

Error: (08/03/2020 07:58:21 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: BridgeCommunication.exe, verze: 1.23.1950.0, časové razítko: 0x5ee7f935
Název chybujícího modulu: ntmarta.dll, verze: 10.0.18362.1, časové razítko: 0xd95e6299
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000001fe26
ID chybujícího procesu: 0x2628
Čas spuštění chybující aplikace: 0x01d6695b17aa90be
Cesta k chybující aplikaci: C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f81da7794b7c4a41\x64\BridgeCommunication.exe
Cesta k chybujícímu modulu: C:\windows\SYSTEM32\ntmarta.dll
ID zprávy: f63f99c4-b2ef-48fa-a4bf-2c33bf36d7d4
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (08/11/2020 09:10:07 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/10/2020 12:21:34 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/10/2020 09:26:56 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/09/2020 11:51:39 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/09/2020 09:23:09 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/08/2020 11:54:10 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/08/2020 11:48:29 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9WZDNCRFJ364-MICROSOFT.SKYPEAPP.

Error: (08/08/2020 12:00:05 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.


CodeIntegrity:
===================================

Date: 2020-08-11 09:05:27.768
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-08-11 09:05:27.758
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-08-11 09:05:27.736
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-08-11 09:05:27.727
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-08-11 09:05:27.682
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-08-10 09:27:04.089
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-08-10 09:27:04.074
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-08-10 09:27:04.037
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

==================== Memory info ===========================

BIOS: Insyde F.20 05/15/2019
Motherboard: HP 84AE
Processor: AMD Ryzen 3 2200U with Radeon Vega Mobile Gfx
Percentage of memory in use: 87%
Total physical RAM: 3491.27 MB
Available physical RAM: 427.08 MB
Total Virtual: 12417.89 MB
Available Virtual: 5740.92 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:118.49 GB) (Free:40.04 GB) NTFS

\\?\Volume{b95b51f4-c080-4cc4-8279-c89cdc3f4e72}\ (Windows RE tools) (Fixed) (Total:0.48 GB) (Free:0.06 GB) NTFS
\\?\Volume{814a0e6a-e6d2-49b4-bffb-f02d541f07df}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.19 GB) FAT32

==================== MBR & Partition Table ====================

==================== End of Addition.txt =======================

Conder
VIP
VIP
Příspěvky: 4400
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Žádost o preventivní kontrolu

#3 Příspěvek od Conder »

Ahoj :)

:arrow: Tieto FRST logy boli vytvorene s pouzitim uctu bez admin prav (ucet s nazvom "Host"). FRST logy aj dalsie programy ale bude potrebne spustit ako spravca, teda je nutny pristup k administratorskemu uctu (podla logu je to ucet s nazovm "Petr Záruba"), inak skeny a logy nebudu uplne a precistenie nebude mozne uskutocnit.

:arrow: Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/
  • Uloz na plochu a ukonci vsetky programy
  • Spusti AdwCleaner ako spravca
  • Odsuhlas licencne podmienky
  • Klikni na Spustit skenovani a pockaj na dokoncenie
  • V pripade nalezov nechaj vsetky nalezy oznacene a klikni na Karantena (ak nie su ziadne nalezy, tak na Spustit zakladni opravu)
  • V pripade, ze sa detekuje aj "predinstalovany software", tieto programy mozes, ale nemusis zmazat (toto nie su skodlive programy, ale iba zbytocnosti)
  • Potvrd vyzvu, pockaj na dokoncenie a potvrd restartovanie PC
  • Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
  • Otvori sa log, jeho obsah skopiruj a vloz do dalsej odpovede
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

G1876P
Návštěvník
Návštěvník
Příspěvky: 84
Registrován: 09 říj 2014 15:41

Re: Žádost o preventivní kontrolu

#4 Příspěvek od G1876P »

Omlouvám se, toto jsem si neuvědomil. :roll: Níže posílám výsledky z admin. účtu. Děkuji za pomoc.

------------------------------------------

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-08-2020
Ran by Petr Záruba (administrator) on LAPTOP-SOU2LT8G (HP HP 255 G7 Notebook PC) (13-08-2020 16:58:56)
Running from C:\Users\Petr Záruba\Desktop
Loaded Profiles: Petr Záruba
Platform: Windows 10 Home Version 1909 18363.959 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0346816.inf_amd64_1397925fe2cc9bc2\B347831\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0346816.inf_amd64_1397925fe2cc9bc2\B347831\atiesrxx.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <2>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_2576de2e12637a57\x64\TouchpointAnalyticsClientService.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_2576de2e12637a57\x64\TouchpointGpuInfo.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f81da7794b7c4a41\x64\AppHelperCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f81da7794b7c4a41\x64\NetworkCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f81da7794b7c4a41\x64\SysInfoCap.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.1.18.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Petr Záruba\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.2005.1675.0_x64__8wekyb3d8bbwe\Time.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <7>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor Corp. -> Realtek) C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2097600 2018-04-18] (Realtek Semiconductor Corp. -> Realtek)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-07-02] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [109160 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2689317223-3959950762-4002007104-1001\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HpseuHostLauncher.exe [527368 2020-07-29] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-2689317223-3959950762-4002007104-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3377440 2020-07-31] (Valve -> Valve Corporation)
HKU\S-1-5-21-2689317223-3959950762-4002007104-1001\...\RunOnce: [Delete Cached Update Binary] => C:\windows\system32\cmd.exe /q /c del /q "C:\Users\Petr Záruba\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
HKU\S-1-5-21-2689317223-3959950762-4002007104-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\windows\system32\cmd.exe /q /c del /q "C:\Users\Petr Záruba\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
HKU\S-1-5-21-2689317223-3959950762-4002007104-1001\...\RunOnce: [Uninstall 19.232.1124.0008\amd64] => C:\windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Petr Záruba\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\amd64"
HKU\S-1-5-21-2689317223-3959950762-4002007104-1001\...\RunOnce: [Uninstall 19.232.1124.0008] => C:\windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Petr Záruba\AppData\Local\Microsoft\OneDrive\19.232.1124.0008"
HKLM\...\Print\Monitors\HP E111 Status Monitor: C:\windows\system32\hpinkstsE111LM.dll [380424 2014-11-04] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.125\Installer\chrmstp.exe [2020-08-13] (Google LLC -> Google LLC)
Startup: C:\Users\Petr Záruba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sledovat výstrahy inkoustu - HP DeskJet 2130 series.lnk [2020-08-13]
ShortcutAndArgument: Sledovat výstrahy inkoustu - HP DeskJet 2130 series.lnk -> C:\windows\system32\RunDll32.exe => "C:\Program Files\HP\HP DeskJet 2130 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN58S395XV065V;CONNECTION=USB;MONITOR=1;
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {13A30D96-4D63-46E5-947F-157CE22626DE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-06-22] (Google LLC -> Google LLC)
Task: {1574D755-73FB-4566-8CB4-DD7BE60F3471} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60088 2019-10-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {173CC537-6532-40AD-977E-57CDF168BEF3} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [123600 2020-07-30] (Mozilla Corporation -> Mozilla Foundation)
Task: {2849DC92-DBEB-44BF-BF7F-007ED194EFA3} - System32\Tasks\HPCustParticipation HP DeskJet 2130 series => C:\Program Files\HP\HP DeskJet 2130 series\Bin\HPCustPartic.exe [6016008 2015-04-09] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
Task: {548E79B8-5787-4C16-8B8F-5F758EE2F584} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [68280 2019-10-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {733266E3-63A8-431D-99FC-D9379BB8FBD9} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1644984 2018-07-18] (HP Inc. -> HP Inc.)
Task: {97C5563B-4CBE-4EC2-8CEC-B2FDEFFC049C} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992 2020-05-08] (Advanced Micro Devices, Inc.) [File not signed]
Task: {9A26D224-97E6-4033-AE79-7EFCC57F5AE6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [147320 2020-02-20] (HP Inc. -> HP Inc.)
Task: {A8180848-2C3D-4CB0-BE79-CAF0F1678AD8} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1660520 2020-03-02] (Avast Software s.r.o. -> Avast Software)
Task: {A88CA1C3-0304-4DF7-ABCD-3757249A689E} - System32\Tasks\HP\Consent Manager Launcher => sc start hptouchpointanalyticsservice
Task: {AA19D20A-2F32-4D0A-81F0-CB194E9F9DC0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1336400 2020-07-08] (Adobe Inc. -> Adobe Inc.)
Task: {BCAD7485-C944-4B96-8C5E-50FAE5005FED} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [468992 2020-05-08] (Advanced Micro Devices, Inc.) [File not signed]
Task: {CD690B8F-3C7C-42B5-93CF-6C4C713BF854} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3810408 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
Task: {EFA179DC-D8D0-4221-9A2A-1CDC061740F2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-06-22] (Google LLC -> Google LLC)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{70f6a9e1-2d67-4358-b82d-7a1052a3ba68}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2689317223-3959950762-4002007104-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2689317223-3959950762-4002007104-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {5B7ACB8C-952C-4614-9611-9FBBFB7932C1} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {5B7ACB8C-952C-4614-9611-9FBBFB7932C1} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-2689317223-3959950762-4002007104-1001 -> {5B7ACB8C-952C-4614-9611-9FBBFB7932C1} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2020-02-20] (HP Inc. -> HP Inc.)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2020-02-20] (HP Inc. -> HP Inc.)

Edge:
======
Edge Profile: C:\Users\Petr Záruba\AppData\Local\Microsoft\Edge\User Data\Default [2020-08-13]

FireFox:
========
FF DefaultProfile: xfw9pz2v.default
FF ProfilePath: C:\Users\Petr Záruba\AppData\Roaming\Mozilla\Firefox\Profiles\xfw9pz2v.default [2020-03-15]
FF Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Petr Záruba\AppData\Roaming\Mozilla\Firefox\Profiles\xfw9pz2v.default\Extensions\sp@avast.com.xpi [2020-01-28]
FF ProfilePath: C:\Users\Petr Záruba\AppData\Roaming\Mozilla\Firefox\Profiles\99v1lud0.default-release [2020-08-13]
FF Extension: (No Name) - C:\Users\Petr Záruba\AppData\Roaming\Mozilla\Firefox\Profiles\99v1lud0.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-02-12]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-07-31] (Adobe Inc. -> Adobe Systems Inc.)

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [7776160 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [353696 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [1072800 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [58048 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [905080 2020-03-18] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f81da7794b7c4a41\x64\AppHelperCap.exe [613136 2020-06-15] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f81da7794b7c4a41\x64\NetworkCap.exe [612112 2020-06-15] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f81da7794b7c4a41\x64\SysInfoCap.exe [612112 2020-06-15] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_2576de2e12637a57\x64\TouchpointAnalyticsClientService.exe [445184 2020-06-14] (HP Inc. -> HP Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AmUStor; C:\windows\system32\drivers\AmUStorU.sys [127936 2019-03-26] (Alcorlink Corp. -> )
R1 aswArPot; C:\windows\System32\drivers\aswArPot.sys [205888 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\windows\System32\drivers\aswbidsdriver.sys [235592 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\windows\System32\drivers\aswbidsh.sys [195656 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\windows\System32\drivers\aswbuniv.sys [60488 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\windows\System32\drivers\aswElam.sys [16824 2020-07-21] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\windows\System32\drivers\aswKbd.sys [42776 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\windows\System32\drivers\aswMonFlt.sys [175200 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\windows\System32\drivers\aswNetHub.sys [515544 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\windows\System32\drivers\aswRdr2.sys [109280 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\windows\System32\drivers\aswRvrt.sys [84856 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\windows\System32\drivers\aswSnx.sys [851608 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\windows\System32\drivers\aswSP.sys [466752 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\windows\System32\drivers\aswStm.sys [217336 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\windows\System32\drivers\aswVmm.sys [323784 2020-08-08] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\windows\System32\drivers\BthA2dp.sys [231936 2020-02-13] (Microsoft Corporation) [File not signed]
R3 HPCustomCapDriver; C:\windows\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys [25024 2019-04-18] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
S3 SynTPFilterHID; C:\windows\System32\drivers\SynTP.sys [769288 2020-03-17] (Synaptics Incorporated -> Synaptics Incorporated)
S3 WdBoot; C:\windows\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\windows\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\windows\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 WinRing0_1_2_0; C:\windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_942053d68a2ba613\x64\OpenHardwareMonitorLib.sys [14544 2020-06-01] (Noriyuki MIYAZAKI -> OpenLibSys.org)
R3 WirelessButtonDriver64; C:\windows\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-08-13 16:57 - 2020-08-13 16:58 - 000033248 _____ C:\Users\Petr Záruba\Desktop\Addition.txt
2020-08-13 16:55 - 2020-08-13 16:59 - 000019183 _____ C:\Users\Petr Záruba\Desktop\FRST.txt
2020-08-13 16:54 - 2020-08-13 16:54 - 002296320 _____ (Farbar) C:\Users\Petr Záruba\Desktop\FRST64.exe
2020-08-13 16:49 - 2020-08-13 16:49 - 000000000 ____D C:\Users\Petr Záruba\AppData\Local\Steam
2020-08-13 16:48 - 2020-08-13 16:48 - 000000000 ____D C:\Users\Petr Záruba\AppData\LocalLow\AMD
2020-08-13 16:48 - 2020-08-13 16:48 - 000000000 ____D C:\Users\Petr Záruba\AppData\Local\Google
2020-08-12 11:28 - 2020-08-12 11:28 - 000003950 _____ C:\Users\Host\AppData\Local\recently-used.xbel
2020-08-10 09:40 - 2020-08-10 09:41 - 000000000 ____D C:\Users\Host\Desktop\CV
2020-08-08 09:41 - 2020-08-08 09:41 - 000217336 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2020-08-08 09:41 - 2020-08-08 09:41 - 000175200 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2020-08-08 09:41 - 2020-08-08 09:40 - 000335968 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2020-08-02 16:00 - 2020-07-28 11:49 - 000010341 _____ C:\Users\Host\Desktop\form_pristupove_udaje.svg
2020-07-31 10:48 - 2020-07-31 10:48 - 000000000 ____D C:\windows\system32\Tasks\Mozilla
2020-07-30 23:14 - 2020-08-03 07:55 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-07-30 08:54 - 2020-07-30 08:54 - 000000000 ____D C:\Users\Host\AppData\Roaming\Skype
2020-07-20 17:56 - 2020-07-20 17:56 - 025902592 _____ (Microsoft Corporation) C:\windows\system32\edgehtml.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 025444352 _____ (Microsoft Corporation) C:\windows\system32\Hydrogen.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 022641664 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 019851776 _____ (Microsoft Corporation) C:\windows\SysWOW64\edgehtml.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 019812864 _____ (Microsoft Corporation) C:\windows\system32\HologramWorld.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 018031104 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 014820352 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 008015872 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 007823912 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 007269376 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 007012864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 006523856 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 006292992 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 006089512 _____ (Microsoft Corporation) C:\windows\SysWOW64\windows.storage.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 005946368 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 005765648 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 005111808 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 005099384 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 004129424 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 003974368 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 003748352 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_nt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 003743048 _____ (Microsoft Corporation) C:\windows\SysWOW64\OneCoreUAPCommonProxyStub.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 002799104 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32kfull.sys
2020-07-20 17:56 - 2020-07-20 17:56 - 002576896 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 002494744 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001991592 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.appcore.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001952880 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001737728 _____ (Microsoft Corporation) C:\windows\SysWOW64\InstallService.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001665728 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001655472 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001610240 _____ (Microsoft Corporation) C:\windows\system32\HologramCompositor.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001581568 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Perception.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001550336 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Graphics.Printing.3D.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001512960 _____ (Microsoft Corporation) C:\windows\SysWOW64\cdprt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001495040 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001484384 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001477632 _____ (Microsoft Corporation) C:\windows\SysWOW64\dcomp.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001463808 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.PointOfService.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001458688 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001420328 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32full.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001397568 _____ (Microsoft Corporation) C:\windows\system32\hvix64.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 001371136 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001357824 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Globalization.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001346048 _____ (Microsoft Corporation) C:\windows\system32\HoloSI.PCShell.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001344512 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Audio.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001312256 _____ (Microsoft Corporation) C:\windows\SysWOW64\msjet40.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001307136 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Audio.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001306944 _____ (Microsoft Corporation) C:\windows\SysWOW64\ContentDeliveryManager.Utilities.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001284608 _____ (Microsoft Corporation) C:\windows\system32\werconcpl.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001265152 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Speech.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001247232 _____ (Microsoft Corporation) C:\windows\SysWOW64\TokenBroker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001223168 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.FaceAnalysis.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001195008 _____ (Microsoft Corporation) C:\windows\system32\sdengin2.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001151816 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001125376 _____ (Microsoft Corporation) C:\windows\system32\CBDHSvc.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001077048 _____ (Microsoft Corporation) C:\windows\system32\hvax64.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 001068544 _____ (Microsoft Corporation) C:\windows\system32\SettingSyncCore.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001048992 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001014784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wpnapps.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 001009152 _____ (Microsoft Corporation) C:\windows\system32\StorSvc.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000995840 _____ (Microsoft Corporation) C:\windows\system32\EdgeManager.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000967680 _____ (Microsoft Corporation) C:\windows\system32\WebcamUi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000950272 _____ (Microsoft Corporation) C:\windows\system32\rasapi32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000945176 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Sensors.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000913408 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000912896 _____ (Microsoft Corporation) C:\windows\SysWOW64\MiracastReceiver.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000898048 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Immersive.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000895600 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000892928 _____ (Microsoft Corporation) C:\windows\SysWOW64\MbaeApiPublic.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000891392 _____ (Microsoft Corporation) C:\windows\system32\HolographicExtensions.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000882176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ShareHost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000875008 _____ (Microsoft Corporation) C:\windows\SysWOW64\rasapi32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000867840 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000865280 _____ (Microsoft Corporation) C:\windows\system32\efswrt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000848384 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000844096 _____ (Microsoft Corporation) C:\windows\SysWOW64\CloudExperienceHostCommon.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000815616 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebcamUi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000814080 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSyncCore.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000793320 _____ (Microsoft Corporation) C:\windows\SysWOW64\InputHost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000783488 _____ (Microsoft Corporation) C:\windows\system32\tcblaunch.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000782848 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000779080 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Services.TargetedContent.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000778872 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppContracts.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000750080 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000717824 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.AccountsControl.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000701440 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Mirage.Internal.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000695208 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000689664 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000687104 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Ocr.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000685384 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000673448 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontdrvhost.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000669184 _____ (Microsoft Corporation) C:\windows\SysWOW64\EdgeManager.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000653824 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Internal.Management.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000628416 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000628024 _____ (Microsoft Corporation) C:\windows\SysWOW64\LicensingWinRT.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000614912 _____ (Microsoft Corporation) C:\windows\SysWOW64\efswrt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000614912 _____ (Microsoft Corporation) C:\windows\system32\netprofmsvc.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000600064 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActivationManager.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000596992 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000594992 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Perception.Stub.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000593408 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000584704 _____ (Microsoft Corporation) C:\windows\system32\PlayToManager.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000582056 _____ (Microsoft Corporation) C:\windows\SysWOW64\windows.applicationmodel.datatransfer.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000570368 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Import.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000565248 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Gaming.Input.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000542288 _____ (Microsoft Corporation) C:\windows\SysWOW64\StructuredQuery.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000540672 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.SmartCards.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000538664 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000533504 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000522240 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.System.Launcher.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000521728 _____ (Microsoft Corporation) C:\windows\system32\WinBioDataModel.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000518656 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000513024 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000512000 _____ (Microsoft Corporation) C:\windows\system32\Windows.Cortana.Desktop.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000502784 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000497664 _____ (Microsoft Corporation) C:\windows\system32\werui.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000484352 _____ (Microsoft Corporation) C:\windows\system32\MixedReality.Broker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000478296 _____ (Microsoft Corporation) C:\windows\SysWOW64\sechost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000467456 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Picker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000466432 _____ (Microsoft Corporation) C:\windows\system32\Windows.Graphics.Printing.Workflow.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000462848 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000456704 _____ (Microsoft Corporation) C:\windows\system32\upnphost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000453944 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000452096 _____ (Microsoft Corporation) C:\windows\SysWOW64\TileDataRepository.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000444416 _____ (Microsoft Corporation) C:\windows\system32\fhsettingsprovider.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000442368 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.AllJoyn.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000442096 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.MediaControl.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000432128 _____ (Microsoft Corporation) C:\windows\system32\WalletService.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000430592 _____ (Microsoft Corporation) C:\windows\SysWOW64\werui.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000419328 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Graphics.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000416768 _____ (Microsoft Corporation) C:\windows\system32\RDXTaskFactory.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000411136 _____ (Microsoft Corporation) C:\windows\SysWOW64\PlayToManager.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000410112 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.SmartCards.Phone.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000406992 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Enumeration.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000406992 _____ (Microsoft Corporation) C:\windows\system32\tsmf.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000405944 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000403968 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Payments.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000388096 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.LowLevel.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000387584 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000382976 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000380224 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000371712 _____ (Microsoft Corporation) C:\windows\SysWOW64\Geolocation.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000358912 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.WiFiDirect.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000355328 _____ (Microsoft Corporation) C:\windows\system32\ConsoleLogon.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000354816 _____ (Microsoft Corporation) C:\windows\SysWOW64\RTMediaFrame.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000353792 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrd3x40.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000352256 _____ (Microsoft Corporation) C:\windows\system32\APHostService.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000345560 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsmf.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\AboveLockAppHost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000338944 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Picker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000335360 _____ (Microsoft Corporation) C:\windows\SysWOW64\MicrosoftAccountWAMExtension.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000329728 _____ (Microsoft Corporation) C:\windows\SysWOW64\upnphost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000328192 _____ (Microsoft Corporation) C:\windows\SysWOW64\edgeIso.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000327168 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32k.sys
2020-07-20 17:56 - 2020-07-20 17:56 - 000317440 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Midi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000311440 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Devices.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000293888 _____ (Microsoft Corporation) C:\windows\system32\CXHProvisioningServer.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000293376 _____ (Microsoft Corporation) C:\windows\SysWOW64\wpnclient.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000292864 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.System.Diagnostics.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000287744 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Gaming.Preview.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000283648 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.NetworkOperators.ESim.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000280576 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Usb.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000275968 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Lights.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000272384 _____ (Microsoft Corporation) C:\windows\SysWOW64\PickerPlatform.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000268552 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Storage.ApplicationData.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000266552 _____ (Microsoft Corporation) C:\windows\SysWOW64\SystemSettings.DataModel.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000256000 _____ (Microsoft Corporation) C:\windows\SysWOW64\ConsoleLogon.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000241152 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.CredDialogController.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000240640 _____ (Microsoft Corporation) C:\windows\system32\dialclient.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000237056 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000231424 _____ (Microsoft Corporation) C:\windows\system32\HoloShellRuntime.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000228864 _____ (Microsoft Corporation) C:\windows\system32\netprofm.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000227840 _____ (Microsoft Corporation) C:\windows\SysWOW64\SyncSettings.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000224768 _____ (Microsoft Corporation) C:\windows\system32\DWWIN.EXE
2020-07-20 17:56 - 2020-07-20 17:56 - 000217600 _____ (Microsoft Corporation) C:\windows\SysWOW64\bthprops.cpl
2020-07-20 17:56 - 2020-07-20 17:56 - 000215040 _____ (Microsoft Corporation) C:\windows\system32\DiagSvc.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000211256 _____ (Microsoft Corporation) C:\windows\system32\tcbloader.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000199496 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000196096 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000193600 _____ (Microsoft Corporation) C:\windows\SysWOW64\weretw.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000190056 _____ (Microsoft Corporation) C:\windows\SysWOW64\logoncli.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000188928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000188928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000186880 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWWIN.EXE
2020-07-20 17:56 - 2020-07-20 17:56 - 000186368 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000180224 _____ (Microsoft Corporation) C:\windows\system32\dialserver.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000179712 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_Clipboard.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000179200 _____ (Microsoft Corporation) C:\windows\system32\PrintWorkflowService.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000179200 _____ (Microsoft Corporation) C:\windows\system32\easwrt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000176952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Management.Workplace.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\HoloShellRuntime.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\dialclient.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000162816 _____ (Microsoft Corporation) C:\windows\SysWOW64\ErrorDetails.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000162304 _____ (Microsoft Corporation) C:\windows\SysWOW64\UserDeviceRegistration.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000160768 _____ (Microsoft Corporation) C:\windows\SysWOW64\CapabilityAccessManagerClient.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000159744 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Core.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000157184 _____ (Microsoft Corporation) C:\windows\system32\PrintWSDAHost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000152064 _____ (Microsoft Corporation) C:\windows\SysWOW64\useractivitybroker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000151552 _____ (Microsoft Corporation) C:\windows\system32\fdWSD.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000150336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000147968 _____ (Microsoft Corporation) C:\windows\system32\Family.Client.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000143360 _____ (Microsoft Corporation) C:\windows\SysWOW64\easwrt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000141312 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintWorkflowService.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000140800 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Energy.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000133632 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000133632 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppExtension.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000130560 _____ (Microsoft Corporation) C:\windows\system32\StorageUsage.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\fdWSD.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000124928 _____ (Microsoft Corporation) C:\windows\system32\wercplsupport.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintWSDAHost.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppointmentActivation.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000107520 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.SerialCommunication.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000100864 _____ (Microsoft Corporation) C:\windows\system32\Family.Authentication.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000099328 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000094720 _____ (Microsoft Corporation) C:\windows\SysWOW64\CameraCaptureUI.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000094208 _____ (Microsoft Corporation) C:\windows\SysWOW64\EaseOfAccessDialog.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000093184 _____ (Microsoft Corporation) C:\windows\system32\nlaapi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000089600 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000089328 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32u.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000086272 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Security.Credentials.UI.CredentialPicker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000081408 _____ (Microsoft Corporation) C:\windows\system32\Print.Workflow.Source.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000079360 _____ (Microsoft Corporation) C:\windows\SysWOW64\sethc.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000075776 _____ (Microsoft Corporation) C:\windows\SysWOW64\DiagnosticInvoker.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000071168 _____ (Microsoft Corporation) C:\windows\system32\MiracastReceiverExt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000068096 _____ (Microsoft Corporation) C:\windows\system32\udhisapi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000066560 _____ (Microsoft Corporation) C:\windows\SysWOW64\keyiso.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000066048 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000065536 _____ (Microsoft Corporation) C:\windows\system32\iemigplugin.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000064512 _____ (Microsoft Corporation) C:\windows\SysWOW64\SystemUWPLauncher.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000063488 _____ (Microsoft Corporation) C:\windows\SysWOW64\iemigplugin.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000063488 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Print.Workflow.Source.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000058368 _____ (Microsoft Corporation) C:\windows\SysWOW64\udhisapi.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000058368 _____ (Microsoft Corporation) C:\windows\SysWOW64\MiracastReceiverExt.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000052152 _____ (Microsoft Corporation) C:\windows\SysWOW64\ResourcePolicyClient.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000046080 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf3216.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000045056 _____ (Microsoft Corporation) C:\windows\system32\npmproxy.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000040960 _____ (Microsoft Corporation) C:\windows\system32\upnpcont.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000038912 _____ (Microsoft Corporation) C:\windows\SysWOW64\werdiagcontroller.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\upnpcont.exe
2020-07-20 17:56 - 2020-07-20 17:56 - 000029696 _____ (Microsoft Corporation) C:\windows\system32\nlmproxy.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000026112 _____ (Microsoft Corporation) C:\windows\system32\PrintWorkflowProxy.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000021504 _____ (Microsoft Corporation) C:\windows\SysWOW64\SystemEventsBrokerClient.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000017408 _____ (Microsoft Corporation) C:\windows\system32\nlmsprep.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000016896 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintWorkflowProxy.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000016896 _____ (Microsoft Corporation) C:\windows\system32\Windows.Graphics.Printing.Workflow.Native.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000012288 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Graphics.Printing.Workflow.Native.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\msimg32.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000002560 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000002560 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth9.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth8.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth7.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth6.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth5.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth4.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth3.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth2.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth12.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth11.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth10.bin
2020-07-20 17:56 - 2020-07-20 17:56 - 000000315 _____ C:\windows\system32\DrtmAuth1.bin
2020-07-20 17:55 - 2020-07-20 17:55 - 017792512 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 009931576 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 007917408 _____ (Microsoft Corporation) C:\windows\system32\windows.storage.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 007850288 _____ (Microsoft Corporation) C:\windows\system32\OneCoreUAPCommonProxyStub.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 007604584 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Protection.PlayReady.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 007297536 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 007268640 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 006437376 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 006233080 _____ (Microsoft Corporation) C:\windows\system32\StartTileData.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 006169088 _____ (Microsoft Corporation) C:\windows\system32\twinui.pcshell.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 004625192 _____ (Microsoft Corporation) C:\windows\explorer.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 004565264 _____ (Microsoft Corporation) C:\windows\system32\sppsvc.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 004014592 _____ (Microsoft Corporation) C:\windows\system32\Microsoft.Bluetooth.Service.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 003800576 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 003727360 _____ (Microsoft Corporation) C:\windows\system32\win32kfull.sys
2020-07-20 17:55 - 2020-07-20 17:55 - 003712000 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentServer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 003084800 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002768984 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002737664 _____ (Microsoft Corporation) C:\windows\system32\WebRuntimeManager.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002716672 _____ (Microsoft Corporation) C:\windows\system32\win32kbase.sys
2020-07-20 17:55 - 2020-07-20 17:55 - 002552120 _____ (Microsoft Corporation) C:\windows\system32\UpdateAgent.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002505496 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002467840 _____ (Microsoft Corporation) C:\windows\system32\InstallService.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002448712 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002357248 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Perception.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002285056 _____ (Microsoft Corporation) C:\windows\system32\Windows.Graphics.Printing.3D.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002264064 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Bluetooth.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002237096 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002161664 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.PointOfService.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002087168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002074112 _____ (Microsoft Corporation) C:\windows\system32\ISM.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 002060288 _____ (Microsoft Corporation) C:\windows\system32\cdprt.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001946144 _____ (Microsoft Corporation) C:\windows\system32\dcomp.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001918464 _____ (Microsoft Corporation) C:\windows\system32\wevtsvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001885184 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001877504 _____ (Microsoft Corporation) C:\windows\system32\LocationFramework.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001827328 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Speech.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001821696 _____ (Microsoft Corporation) C:\windows\system32\CoreShell.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001787392 _____ (Microsoft Corporation) C:\windows\system32\Windows.Globalization.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001764336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001745728 _____ (Microsoft Corporation) C:\windows\system32\ContentDeliveryManager.Utilities.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001743680 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001723392 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001697792 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001658368 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001656904 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001654304 _____ (Microsoft Corporation) C:\windows\system32\gdi32full.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001640448 _____ (Microsoft Corporation) C:\windows\system32\TaskFlowDataEngine.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001612800 _____ (Microsoft Corporation) C:\windows\system32\wpncore.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001604608 _____ (Microsoft Corporation) C:\windows\system32\dosvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001540608 _____ (Microsoft Corporation) C:\windows\system32\WindowManagement.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001500160 _____ (Microsoft Corporation) C:\windows\system32\TokenBroker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001486848 _____ (Microsoft Corporation) C:\windows\system32\usocoreworker.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 001392128 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.FaceAnalysis.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001385696 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001374208 _____ (Microsoft Corporation) C:\windows\system32\NotificationController.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001337856 _____ (Microsoft Corporation) C:\windows\system32\wpnapps.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001335296 _____ (Microsoft Corporation) C:\windows\system32\MiracastReceiver.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001290192 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Sensors.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001284608 _____ (Microsoft Corporation) C:\windows\system32\usermgr.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001271296 _____ (Microsoft Corporation) C:\windows\system32\SEMgrSvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001183744 _____ (Microsoft Corporation) C:\windows\system32\Windows.Security.Authentication.Web.Core.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001159168 _____ (Microsoft Corporation) C:\windows\system32\MbaeApiPublic.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001151304 _____ (Microsoft Corporation) C:\windows\system32\InputHost.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001149712 _____ (Microsoft Corporation) C:\windows\system32\ApplyTrustOffline.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 001121792 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001100800 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Immersive.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001086776 _____ (Microsoft Corporation) C:\windows\system32\Windows.Services.TargetedContent.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001081344 _____ (Microsoft Corporation) C:\windows\system32\ShareHost.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001059840 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.BackgroundTransfer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001055232 _____ (Microsoft Corporation) C:\windows\system32\Windows.AccountsControl.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001028336 _____ (Microsoft Corporation) C:\windows\system32\Windows.Perception.Stub.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001008960 _____ (Microsoft Corporation) C:\windows\system32\CloudExperienceHostCommon.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 001007616 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000958608 _____ (Microsoft Corporation) C:\windows\system32\AppContracts.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000949760 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Ocr.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000931840 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.Management.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000922624 _____ (Microsoft Corporation) C:\windows\system32\Windows.Management.Service.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000919880 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000917504 _____ (Microsoft Corporation) C:\windows\system32\Windows.Security.Authentication.OnlineId.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000904192 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.SmartCards.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000899584 _____ (Microsoft Corporation) C:\windows\system32\MdmDiagnostics.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000889416 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.Shell.Broker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000882184 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000827904 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Import.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000822200 _____ (Microsoft Corporation) C:\windows\system32\fontdrvhost.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000821232 _____ (Microsoft Corporation) C:\windows\system32\windows.applicationmodel.datatransfer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000809984 _____ (Microsoft Corporation) C:\windows\system32\Windows.Gaming.Input.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000797448 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000750592 _____ (Microsoft Corporation) C:\windows\system32\ActivationManager.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000742712 _____ (Microsoft Corporation) C:\windows\system32\LicensingWinRT.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000737792 _____ (Microsoft Corporation) C:\windows\system32\Windows.System.Launcher.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000733184 _____ (Microsoft Corporation) C:\windows\system32\windows.immersiveshell.serviceprovider.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000727040 _____ (Microsoft Corporation) C:\windows\system32\agentactivationruntime.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000722072 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000716288 _____ (Microsoft Corporation) C:\windows\system32\agentactivationruntimewindows.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000692224 _____ (Microsoft Corporation) C:\windows\system32\LockController.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000684864 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000678720 _____ (Microsoft Corporation) C:\windows\system32\StructuredQuery.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000656696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys
2020-07-20 17:55 - 2020-07-20 17:55 - 000651264 _____ (Microsoft Corporation) C:\windows\system32\DevicesFlowBroker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000639488 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000638464 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000630784 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.AllJoyn.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000624640 _____ (Microsoft Corporation) C:\windows\system32\TileDataRepository.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000616960 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.LowLevel.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000608256 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.SmartCards.Phone.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000605896 _____ (Microsoft Corporation) C:\windows\system32\sechost.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000602112 _____ (Microsoft Corporation) C:\windows\system32\Windows.Payments.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000550400 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2020-07-20 17:55 - 2020-07-20 17:55 - 000549048 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.MediaControl.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000544256 _____ (Microsoft Corporation) C:\windows\system32\usosvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000534016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000526848 _____ (Microsoft Corporation) C:\windows\system32\Windows.Graphics.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000524784 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Enumeration.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000518464 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000513024 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Activities.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000502784 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.WiFiDirect.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000501760 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.LockScreen.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000495616 _____ (Microsoft Corporation) C:\windows\system32\RTMediaFrame.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000490496 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000477184 _____ (Microsoft Corporation) C:\windows\system32\CloudDomainJoinDataModelServer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000476160 _____ (Microsoft Corporation) C:\windows\system32\MicrosoftAccountWAMExtension.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000475136 _____ (Microsoft Corporation) C:\windows\system32\Geolocation.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000467960 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000467456 _____ (Microsoft Corporation) C:\windows\system32\modernexecserver.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000461112 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000458240 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000444416 _____ (Microsoft Corporation) C:\windows\system32\edgeIso.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000434176 _____ (Microsoft Corporation) C:\windows\system32\MicrosoftAccountExtension.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000432128 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Midi.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000419328 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.NetworkOperators.ESim.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000416768 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Usb.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000412672 _____ (Microsoft Corporation) C:\windows\system32\AboveLockAppHost.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000411640 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Devices.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000399672 _____ (Microsoft Corporation) C:\windows\system32\SystemSettings.DataModel.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000397824 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Lights.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000395264 _____ (Microsoft Corporation) C:\windows\system32\Windows.Gaming.Preview.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000392504 _____ (Microsoft Corporation) C:\windows\system32\CloudExperienceHost.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000381152 _____ (Microsoft Corporation) C:\windows\system32\CredentialEnrollmentManager.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000375296 _____ (Microsoft Corporation) C:\windows\system32\Windows.System.Diagnostics.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000374272 _____ (Microsoft Corporation) C:\windows\system32\PickerPlatform.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000361472 _____ (Microsoft Corporation) C:\windows\system32\vaultsvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000361472 _____ (Microsoft Corporation) C:\windows\system32\QuickActionsDataModel.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000355840 _____ (Microsoft Corporation) C:\windows\system32\wpnclient.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000355840 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicSvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000340328 _____ (Microsoft Corporation) C:\windows\system32\Windows.Storage.ApplicationData.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000334336 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers_Cortana.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000327168 _____ (Microsoft Corporation) C:\windows\system32\windows.internal.shellcommon.shareexperience.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000316928 _____ (Microsoft Corporation) C:\windows\system32\SyncSettings.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000311608 _____ (Microsoft Corporation) C:\windows\system32\CloudExperienceHostBroker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000306688 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.CredDialogController.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000295936 _____ (Microsoft Corporation) C:\windows\system32\TDLMigration.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000290304 _____ (Microsoft Corporation) C:\windows\system32\vaultcli.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000285184 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicCapsule.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000283136 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.AppDefaults.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000281600 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000274432 _____ (Microsoft Corporation) C:\windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000265728 _____ (Microsoft Corporation) C:\windows\system32\netman.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000261632 _____ (Microsoft Corporation) C:\windows\system32\bthprops.cpl
2020-07-20 17:55 - 2020-07-20 17:55 - 000260288 _____ (Microsoft Corporation) C:\windows\system32\logoncli.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000248832 _____ (Microsoft Corporation) C:\windows\system32\PasswordEnrollmentManager.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000247864 _____ (Microsoft Corporation) C:\windows\system32\weretw.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000243200 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerServer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000242688 _____ (Microsoft Corporation) C:\windows\system32\CapabilityAccessManagerClient.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000239928 _____ (Microsoft Corporation) C:\windows\system32\Windows.Management.Workplace.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000237056 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.CapturePicker.Desktop.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000237056 _____ (Microsoft Corporation) C:\windows\system32\psmsrv.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000228864 _____ (Microsoft Corporation) C:\windows\system32\wersvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000220992 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000220672 _____ (Microsoft Corporation) C:\windows\system32\MtcModel.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000219136 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000217600 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Core.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000215552 _____ (Microsoft Corporation) C:\windows\system32\UserDeviceRegistration.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000215040 _____ (Microsoft Corporation) C:\windows\system32\PeopleBand.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000210944 _____ (Microsoft Corporation) C:\windows\system32\ErrorDetails.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000206336 _____ (Microsoft Corporation) C:\windows\system32\useractivitybroker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000204608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spacedump.sys
2020-07-20 17:55 - 2020-07-20 17:55 - 000200704 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Internal.Input.ExpressiveInput.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000195584 _____ (Microsoft Corporation) C:\windows\system32\AarSvc.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000183808 _____ (Microsoft Corporation) C:\windows\system32\Windows.Energy.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000179512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2020-07-20 17:55 - 2020-07-20 17:55 - 000179200 _____ (Microsoft Corporation) C:\windows\system32\AppExtension.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000178688 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000172032 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.CapturePicker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000165840 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000165376 _____ (Microsoft Corporation) C:\windows\splwow64.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000151040 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.SerialCommunication.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000146232 _____ (Microsoft Corporation) C:\windows\system32\ResourcePolicyServer.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000144384 _____ (Microsoft Corporation) C:\windows\system32\AppointmentActivation.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000132608 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Storage.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000132408 _____ (Microsoft Corporation) C:\windows\system32\offlinelsa.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000131584 _____ (Microsoft Corporation) C:\windows\system32\DevicePairingExperienceMEM.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000131072 _____ (Microsoft Corporation) C:\windows\system32\CredDialogBroker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000129536 _____ (Microsoft Corporation) C:\windows\system32\CameraCaptureUI.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000128512 _____ (Microsoft Corporation) C:\windows\system32\CaptureService.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000127064 _____ (Microsoft Corporation) C:\windows\system32\win32u.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000125952 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000118784 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000118272 _____ (Microsoft Corporation) C:\windows\system32\EaseOfAccessDialog.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000112128 _____ (Microsoft Corporation) C:\windows\system32\AxInstSv.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000110040 _____ (Microsoft Corporation) C:\windows\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000105984 _____ (Microsoft Corporation) C:\windows\system32\utcutil.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000100864 _____ (Microsoft Corporation) C:\windows\system32\sethc.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000100352 _____ (Microsoft Corporation) C:\windows\system32\DiagnosticInvoker.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000092672 _____ (Microsoft Corporation) C:\windows\system32\wsqmcons.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000091648 _____ (Microsoft Corporation) C:\windows\system32\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000090624 _____ (Microsoft Corporation) C:\windows\system32\keyiso.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000089088 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicAgent.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000083456 _____ (Microsoft Corporation) C:\windows\system32\SystemUWPLauncher.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000082432 _____ (Microsoft Corporation) C:\windows\system32\LocationFrameworkInternalPS.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000076952 _____ (Microsoft Corporation) C:\windows\system32\CredentialEnrollmentManagerForUser.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000070248 _____ (Microsoft Corporation) C:\windows\system32\ResourcePolicyClient.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000060928 _____ (Microsoft Corporation) C:\windows\system32\mf3216.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\AxInstUI.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000044544 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000040248 _____ (Microsoft Corporation) C:\windows\system32\LocationFrameworkPS.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000037376 _____ (Microsoft Corporation) C:\windows\system32\UIMgrBroker.exe
2020-07-20 17:55 - 2020-07-20 17:55 - 000029696 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerClient.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000028672 _____ (Microsoft Corporation) C:\windows\system32\WaaSMedicPS.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000024064 _____ (Microsoft Corporation) C:\windows\system32\CSystemEventsBrokerClient.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000013824 _____ (Microsoft Corporation) C:\windows\system32\UIManagerBrokerps.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000008192 _____ (Microsoft Corporation) C:\windows\system32\msimg32.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000003072 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2020-07-20 17:55 - 2020-07-20 17:55 - 000002560 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2020-07-20 17:44 - 2020-06-30 06:32 - 000390656 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe
2020-07-20 17:44 - 2020-06-30 06:26 - 000492544 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-08-13 16:59 - 2020-03-15 13:36 - 000000000 ____D C:\FRST
2020-08-13 16:54 - 2019-08-29 20:17 - 000000000 ____D C:\Users\Petr Záruba\AppData\Local\AMD
2020-08-13 16:52 - 2020-02-12 18:03 - 000004562 _____ C:\windows\system32\Tasks\Adobe Acrobat Update Task
2020-08-13 16:51 - 2020-02-12 18:03 - 000002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-08-13 16:51 - 2020-02-12 17:40 - 000000000 ____D C:\Users\Petr Záruba\AppData\Local\HP
2020-08-13 16:51 - 2019-08-29 20:17 - 000000000 ____D C:\Users\Petr Záruba\AppData\Local\Packages
2020-08-13 16:51 - 2019-03-19 06:52 - 000000000 ____D C:\windows\AppReadiness
2020-08-13 16:50 - 2020-02-12 18:00 - 000000000 ____D C:\Users\Petr Záruba\AppData\Local\Adobe
2020-08-13 16:50 - 2020-02-12 17:52 - 000000000 ____D C:\Users\Petr Záruba\AppData\LocalLow\Mozilla
2020-08-13 16:49 - 2020-04-06 09:57 - 000000000 ____D C:\Program Files (x86)\Steam
2020-08-13 16:49 - 2019-08-29 20:20 - 000003392 _____ C:\windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2689317223-3959950762-4002007104-1001
2020-08-13 16:49 - 2019-08-29 20:20 - 000000000 ___RD C:\Users\Petr Záruba\OneDrive
2020-08-13 16:49 - 2019-08-29 20:14 - 000002390 _____ C:\Users\Petr Záruba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-08-13 16:49 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-08-13 16:48 - 2019-08-29 20:17 - 000000000 ___RD C:\Users\Petr Záruba\3D Objects
2020-08-13 16:48 - 2019-08-29 19:29 - 000003124 _____ C:\windows\system32\Tasks\AMDLinkUpdate
2020-08-13 16:48 - 2019-04-15 17:39 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-08-13 16:46 - 2020-01-29 00:04 - 000000000 ____D C:\Users\Host\AppData\LocalLow\Mozilla
2020-08-13 14:52 - 2019-04-15 17:38 - 000000000 ____D C:\windows\system32\SleepStudy
2020-08-13 12:39 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-08-13 12:23 - 2020-06-05 14:40 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-08-13 12:23 - 2020-06-05 14:40 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-08-13 12:22 - 2020-06-22 21:51 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-08-13 12:22 - 2020-06-22 21:51 - 000002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-08-13 12:22 - 2020-06-22 12:50 - 000004210 _____ C:\windows\system32\Tasks\User_Feed_Synchronization-{52637E6B-D7DB-498F-BEB7-3C7639694C49}
2020-08-12 11:24 - 2020-06-18 14:11 - 000000000 ____D C:\Users\Host\.dbus-keyrings
2020-08-10 12:23 - 2020-03-22 11:19 - 000000000 ____D C:\Users\Host\AppData\Local\CrashDumps
2020-08-08 13:44 - 2020-06-22 21:50 - 000003402 _____ C:\windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-08-08 13:44 - 2020-06-22 21:50 - 000003178 _____ C:\windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-08-08 13:44 - 2020-06-05 14:39 - 000003510 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-08-08 13:44 - 2020-06-05 14:39 - 000003286 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-08-08 13:44 - 2020-05-08 14:27 - 000002202 _____ C:\windows\system32\Tasks\StartCN
2020-08-08 13:44 - 2020-05-08 14:27 - 000002122 _____ C:\windows\system32\Tasks\StartDVR
2020-08-08 13:44 - 2020-02-12 17:44 - 000002694 _____ C:\windows\system32\Tasks\HPCustParticipation HP DeskJet 2130 series
2020-08-08 13:44 - 2020-01-28 23:56 - 000000000 ____D C:\windows\system32\Tasks\Avast Software
2020-08-08 13:44 - 2020-01-28 19:02 - 000002862 _____ C:\windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2689317223-3959950762-4002007104-1002
2020-08-08 13:44 - 2019-08-29 20:04 - 000002856 _____ C:\windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2689317223-3959950762-4002007104-500
2020-08-08 13:44 - 2019-08-29 19:29 - 000002392 _____ C:\windows\system32\Tasks\ModifyLinkUpdate
2020-08-08 13:44 - 2019-05-20 04:41 - 000002766 _____ C:\windows\system32\Tasks\HPAudioSwitch
2020-08-08 12:01 - 2019-05-20 04:42 - 000000000 ____D C:\Program Files\HPCommRecovery
2020-08-08 10:15 - 2020-01-28 23:54 - 000000000 ____D C:\ProgramData\AVAST Software
2020-08-08 10:06 - 2019-05-20 14:00 - 000692228 _____ C:\windows\system32\perfh005.dat
2020-08-08 10:06 - 2019-05-20 14:00 - 000142188 _____ C:\windows\system32\perfc005.dat
2020-08-08 10:06 - 2019-05-20 04:35 - 001682762 _____ C:\windows\system32\PerfStringBackup.INI
2020-08-08 10:06 - 2019-03-19 06:50 - 000000000 ____D C:\windows\INF
2020-08-08 10:01 - 2020-07-02 17:04 - 000000000 ____D C:\Users\Host\Desktop\Ondrášek web
2020-08-08 10:00 - 2019-04-15 17:38 - 000000006 ____H C:\windows\Tasks\SA.DAT
2020-08-08 09:59 - 2019-03-19 06:37 - 001048576 _____ C:\windows\system32\config\BBI
2020-08-08 09:45 - 2019-03-19 06:37 - 000000000 ____D C:\windows\CbsTemp
2020-08-08 09:41 - 2020-04-12 15:00 - 000515544 _____ (AVAST Software) C:\windows\system32\Drivers\aswNetHub.sys
2020-08-08 09:41 - 2020-01-28 23:56 - 000003990 _____ C:\windows\system32\Tasks\Avast Emergency Update
2020-08-08 09:41 - 2020-01-28 23:55 - 000466752 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2020-08-08 09:41 - 2020-01-28 23:55 - 000323784 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys
2020-08-08 09:41 - 2020-01-28 23:55 - 000195656 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsh.sys
2020-08-08 09:41 - 2020-01-28 23:55 - 000109280 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2020-08-08 09:41 - 2020-01-28 23:55 - 000084856 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2020-08-08 09:41 - 2020-01-28 23:55 - 000060488 _____ (AVAST Software) C:\windows\system32\Drivers\aswbuniv.sys
2020-08-08 09:41 - 2020-01-28 23:55 - 000042776 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys
2020-08-08 09:41 - 2019-03-19 06:52 - 000000000 ___HD C:\windows\ELAMBKUP
2020-08-08 09:40 - 2020-01-28 23:55 - 000851608 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2020-08-08 09:40 - 2020-01-28 23:55 - 000235592 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsdriver.sys
2020-08-08 09:40 - 2020-01-28 23:55 - 000205888 _____ (AVAST Software) C:\windows\system32\Drivers\aswArPot.sys
2020-08-05 18:01 - 2020-04-04 11:27 - 000000000 ____D C:\Users\Host\Desktop\Dokumenty k ulozeni
2020-08-04 07:50 - 2020-01-28 19:02 - 000000000 ___RD C:\Users\Host\OneDrive
2020-08-04 07:50 - 2020-01-28 18:59 - 000002369 _____ C:\Users\Host\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-08-03 07:55 - 2020-01-29 00:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-07-31 11:25 - 2019-08-29 19:35 - 000000000 ____D C:\windows\HP
2020-07-31 11:24 - 2020-02-24 06:58 - 000000000 ____D C:\Users\Host\AppData\Local\HP_Inc
2020-07-31 10:48 - 2020-01-29 00:04 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-07-30 12:33 - 2019-03-19 06:52 - 000000000 ____D C:\windows\LiveKernelReports
2020-07-21 15:22 - 2020-01-28 23:55 - 000016824 _____ (AVAST Software) C:\windows\system32\Drivers\aswElam.sys
2020-07-21 15:21 - 2020-01-28 18:59 - 000000000 ___RD C:\Users\Host\3D Objects
2020-07-21 15:20 - 2019-04-15 17:38 - 000556616 _____ C:\windows\system32\FNTCACHE.DAT
2020-07-20 22:25 - 2019-03-19 06:52 - 000000000 ___SD C:\windows\system32\DiagSvcs
2020-07-20 22:25 - 2019-03-19 06:52 - 000000000 ____D C:\windows\SystemResources
2020-07-20 22:25 - 2019-03-19 06:52 - 000000000 ____D C:\windows\system32\oobe
2020-07-20 22:25 - 2019-03-19 06:52 - 000000000 ____D C:\windows\ShellExperiences
2020-07-20 22:25 - 2019-03-19 06:52 - 000000000 ____D C:\windows\bcastdvr
2020-07-20 22:25 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Common Files\System
2020-07-15 14:14 - 2020-07-04 21:46 - 000000000 ____D C:\Users\Host\AppData\Local\gtk-2.0
2020-07-15 14:14 - 2020-07-04 21:40 - 000000000 ____D C:\Users\Host\AppData\Local\babl-0.1

==================== Files in the root of some directories ========

2020-06-18 14:05 - 2020-06-18 14:05 - 000001297 _____ () C:\Users\Petr Záruba\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

G1876P
Návštěvník
Návštěvník
Příspěvky: 84
Registrován: 09 říj 2014 15:41

Re: Žádost o preventivní kontrolu

#5 Příspěvek od G1876P »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-08-2020
Ran by Petr Záruba (13-08-2020 17:00:44)
Running from C:\Users\Petr Záruba\Desktop
Windows 10 Home Version 1909 18363.959 (X64) (2019-08-29 18:13:30)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

42072 (S-1-5-21-2689317223-3959950762-4002007104-1003 - Limited - Disabled)
Administrator (S-1-5-21-2689317223-3959950762-4002007104-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2689317223-3959950762-4002007104-1006 - Limited - Enabled)
DefaultAccount (S-1-5-21-2689317223-3959950762-4002007104-503 - Limited - Disabled)
Guest (S-1-5-21-2689317223-3959950762-4002007104-501 - Limited - Disabled)
Host (S-1-5-21-2689317223-3959950762-4002007104-1002 - Limited - Enabled) => C:\Users\Host
Petr Záruba (S-1-5-21-2689317223-3959950762-4002007104-1001 - Administrator - Enabled) => C:\Users\Petr Záruba
WDAGUtilityAccount (S-1-5-21-2689317223-3959950762-4002007104-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 20.012.20041 - Adobe Systems Incorporated)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.10.30.09 - Advanced Micro Devices, Inc.)
Avast Premium Security (HKLM-x32\...\Avast Antivirus) (Version: 20.6.2420 - Avast Software)
Branding64 (HKLM\...\{7659552A-136F-4615-A9FA-3E3EF2CCA77C}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 84.0.4147.125 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
HP Audio Switch (HKLM-x32\...\{20A40E7C-E470-4E9F-9B5C-DDB2C205E856}) (Version: 1.0.154.0 - HP Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.17.0 - HP Inc.)
HP DeskJet 2130 series Nápověda (HKLM-x32\...\{C8CCFDF2-9CB2-4714-BCE5-17178CB71646}) (Version: 35.0.0 - Hewlett Packard)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.0 - HP Inc.)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Inkscape (HKLM-x32\...\Inkscape) (Version: 1.0.0- - Inkscape)
Medieval II Total War (HKLM-x32\...\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}) (Version: 1.03.000 - SEGA)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 84.0.522.59 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.133.5 - )
Microsoft OneDrive (HKU\S-1-5-21-2689317223-3959950762-4002007104-1001\...\OneDriveSetup.exe) (Version: 20.124.0621.0006 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.14.26429 (HKLM-x32\...\{80586c77-db42-44bb-bfc8-7aebbb220c00}) (Version: 14.14.26429.4 - Microsoft Corporation)
Microsoft Visual J# .NET Redistributable Package 1.1 (HKLM-x32\...\{1A655D51-1423-48A3-B748-8F5A0BE294C8}) (Version: 1.1.4322 - Microsoft)
Mozilla Firefox 79.0 (x64 cs) (HKLM\...\Mozilla Firefox 79.0 (x64 cs)) (Version: 79.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 72.0.2 - Mozilla)
OEM Application Profile (HKLM-x32\...\{12C2AEB0-ED60-4CCF-DD83-C65BC7CCFB50}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
OpenOffice 4.1.5 (HKLM-x32\...\{2FEA9841-64DE-4FA5-A36F-1CD23E2790EB}) (Version: 4.15.9789 - Apache Software Foundation)
PSPad editor (HKLM-x32\...\PSPad editor_is1) (Version: 5.0.3.377 - Jan Fiala)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8940.1 - Realtek Semiconductor Corp.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Studie vylepšování produktu HP DeskJet 2130 series (HKLM\...\{A6640A96-7F5D-4480-8D50-F3A0BB58C096}) (Version: 35.0.61.54677 - Hewlett-Packard Co.)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.51 - Ghisler Software GmbH)
Základní software zařízení HP DeskJet 2130 series (HKLM\...\{E1B7356D-B08B-4B2C-A8C3-EAB12EB743DE}) (Version: 35.0.61.54677 - Hewlett-Packard Co.)

Packages:
=========
HP JumpStarts -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStarts_1.7.1464.0_x64__v10z8vjag6ke6 [2020-07-23] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_1.6.6.0_x64__v10z8vjag6ke6 [2020-08-08] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.0.38.0_x64__v10z8vjag6ke6 [2020-02-12] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_115.1.152.0_x64__v10z8vjag6ke6 [2020-06-05] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.6.703.0_x64__v10z8vjag6ke6 [2020-07-29] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.1.18.0_x64__v10z8vjag6ke6 [2020-07-29] (HP Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-02-12] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-02-12] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.8042.0_x64__8wekyb3d8bbwe [2020-08-08] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
sMedio True DVD for HP -> C:\Program Files\WindowsApps\0E3921EB.sMedioTrueDVDforHP_1.1.128.0_x64__agwrg61xdd7p4 [2020-07-29] (sMedio Inc.)
Synaptics TouchPad -> C:\Program Files\WindowsApps\SynapticsIncorporated.SynHPConsumerDApp_19005.35054.0.0_x64__807d65c4rvak2 [2020-03-15] (Synaptics Incorporated)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2689317223-3959950762-4002007104-1001_Classes\CLSID\{ED90173A-3B4C-4E7E-B9CF-79714425D4B5}\InprocServer32 -> C:\Program Files (x86)\PSPad editor\pspshellx64.dll () [File not signed]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-08-08] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-08-08] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-08-08] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2019-10-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-08-08] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1_S-1-5-21-2689317223-3959950762-4002007104-1001: [EditWithPSPad] -> {ED90173A-3B4C-4E7E-B9CF-79714425D4B5} => C:\Program Files (x86)\PSPad editor\pspshellx64.dll [2014-11-02] () [File not signed]

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2019-05-10 03:40 - 2019-05-10 03:40 - 000017920 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libEGL.DLL
2019-05-10 03:40 - 2019-05-10 03:40 - 003598336 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2020-08-08 14:26 - 2020-08-08 14:26 - 000138240 _____ () [File not signed] C:\windows\assembly\NativeImages_v4.0.30319_32\Interop.IWs06dcaa36#\6d2f969d607313c3d5ee16a06189b15c\Interop.IWshRuntimeLibrary.ni.dll
2019-10-18 02:29 - 2019-10-18 02:29 - 000158208 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\windows\SYSTEM32\amdihk64.dll
2020-08-08 14:25 - 2020-08-08 14:25 - 000134656 _____ (hardcodet.net) [File not signed] C:\windows\assembly\NativeImages_v4.0.30319_32\Hardcodet.W6cab32f3#\ecad88bab461483fe8a59bfc3ed4baed\Hardcodet.Wpf.TaskbarNotification.ni.dll
2020-06-20 01:35 - 2020-06-20 01:35 - 000014336 _____ (HP Inc.) [File not signed] C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.1.18.0_x64__v10z8vjag6ke6\SystemEventUtility\NativeRpcClient.DLL
2020-08-08 14:26 - 2020-08-08 14:26 - 001591808 _____ (Mark Heath) [File not signed] C:\windows\assembly\NativeImages_v4.0.30319_32\NAudio\d8db7de3ed525239a5f0a2c764bbe93e\NAudio.ni.dll
2020-08-08 14:26 - 2020-08-08 14:26 - 003127808 _____ (Newtonsoft) [File not signed] C:\windows\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\f68b6ff84702e3c38a0db0571e621ea0\Newtonsoft.Json.ni.dll
2020-08-08 14:25 - 2020-08-08 14:25 - 000793088 _____ (The Apache Software Foundation) [File not signed] C:\windows\assembly\NativeImages_v4.0.30319_32\log4net\19bea58cbe49b7ce5ba6ebe8127ec7ae\log4net.ni.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qgif.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000040960 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qicns.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qico.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000414208 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qjpeg.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qsvg.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qtga.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000023552 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qwbmp.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000516608 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qwebp.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 001441280 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\platforms\qwindows.dll
2019-10-18 02:43 - 2019-10-18 02:43 - 005999104 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 006413824 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 001141760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 000339968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 004143104 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 003840000 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 000332800 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 000349184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 080959488 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll
2019-05-10 03:39 - 2019-05-10 03:39 - 000113152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 005622272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000463360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000190464 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 002825216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000053760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000059392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\qtgraphicaleffectsplugin.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000017408 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000330752 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000137216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000090112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000017920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2019-05-10 03:40 - 2019-05-10 03:40 - 000136192 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\styles\qwindowsvistastyle.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2689317223-3959950762-4002007104-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{A133C0B6-AC66-4639-8021-49D8FEC84CF9}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe => No File
FirewallRules: [{A0961D88-21CC-4511-A14F-59287D0C19AE}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe => No File
FirewallRules: [{78D58255-9AC4-4D7A-8121-3784C23DF759}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{164E1F79-17CC-4A9F-83D3-B824FD27DA11}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E58A6FB3-53AA-4DA0-8567-6D16995AFDCB}] => (Allow) C:\Program Files\HP\HP DeskJet 2130 series\Bin\USBSetup.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{3C09D623-62A0-418F-9776-BBEBE35C0EAE}] => (Allow) C:\Program Files\HP\HP DeskJet 2130 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{181B35E7-73F4-4E2A-90D2-A51819726E7B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{C23E3B78-5F91-4AFE-A0C5-A82D9ED89DA7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{363B15CE-96A2-4310-BBC1-57B9F50AD69D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{F1C4A426-2C3D-4D39-812D-42C4D3F5EDCD}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{3A0FA5C1-D0BF-41F7-871C-9407A9F0BB92}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe (Sega Europe Limited -> The Creative Assembly Ltd)
FirewallRules: [{260E4534-8719-4585-AF91-C186EF5DCDAC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe (Sega Europe Limited -> The Creative Assembly Ltd)
FirewallRules: [{F4757A2A-3511-4A22-B152-01A7DBDFA1D7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{7943A5EE-381D-43B6-8230-412DB0B4FE92}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{97B79C6D-C289-42F4-AF36-1F115BE2F80C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Crusader Kings II\CK2game.exe (Paradox Interactive AB (publ) -> Paradox Interactive)
FirewallRules: [{FDAE7756-E90C-41EF-9C2E-D98054D9AB19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Crusader Kings II\CK2game.exe (Paradox Interactive AB (publ) -> Paradox Interactive)
FirewallRules: [{69B4C23B-E93B-4B79-953F-0329822763C1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4BACEB9A-ED1D-4FD7-8C18-5111F187ED44}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{46774179-C405-4748-94AC-7A964808DE30}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2AE6161E-5BB5-4EB1-88A9-CE394A95EC57}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A0832632-B38E-4E4A-BB8A-C0569629B275}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.139.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8A109CDF-8BB5-466C-85BF-D2FE41D66722}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.139.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2863A175-7115-45BE-8389-5FCA72033A08}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.139.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{9B594635-4751-437E-951F-3DC2F04B258B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.139.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5E1C5975-03FA-4DAF-BCFD-3A15AACEA798}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.139.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{62F103A3-5344-41B2-870D-06A3D5999067}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.139.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7CF8BA18-3C72-40D0-9BE4-4483DF937987}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.139.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D29224A7-912B-4C1C-8DD5-415FA8F1D04C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.139.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3EE2B74B-3FFA-4EE6-BB09-ABC33F69AAC2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:118.49 GB) (Free:39.86 GB) (34%)

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (08/11/2020 01:18:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program HP.JumpStarts.exe verze 1.7.1464.0 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 2fc8

Čas spuštění: 01d66fd126c854bc

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Program Files\WindowsApps\AD2F1837.HPJumpStarts_1.7.1464.0_x64__v10z8vjag6ke6\HP.JumpStarts.exe

ID hlášení: 2d5893c3-d55e-42cd-9ec9-1a40f48be060

Úplný název balíčku s chybou: AD2F1837.HPJumpStarts_1.7.1464.0_x64__v10z8vjag6ke6

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Quiesce

Error: (08/10/2020 01:51:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program HP.JumpStarts.exe verze 1.7.1464.0 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 3c54

Čas spuštění: 01d66f0c8a68d60b

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Program Files\WindowsApps\AD2F1837.HPJumpStarts_1.7.1464.0_x64__v10z8vjag6ke6\HP.JumpStarts.exe

ID hlášení: 512f8a5e-06e0-4dcf-8419-21c516c9df3a

Úplný název balíčku s chybou: AD2F1837.HPJumpStarts_1.7.1464.0_x64__v10z8vjag6ke6

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Quiesce

Error: (08/10/2020 12:23:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: BridgeCommunication.exe, verze: 1.23.1950.0, časové razítko: 0x5ee7f935
Název chybujícího modulu: ntmarta.dll, verze: 10.0.18362.1, časové razítko: 0xd95e6299
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000001fe26
ID chybujícího procesu: 0x2948
Čas spuštění chybující aplikace: 0x01d66f004abd2647
Cesta k chybující aplikaci: C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f81da7794b7c4a41\x64\BridgeCommunication.exe
Cesta k chybujícímu modulu: C:\windows\SYSTEM32\ntmarta.dll
ID zprávy: 4f19c192-c345-4b3d-b7bf-41a2b209cc10
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (08/10/2020 10:01:30 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: firefox.exe, verze: 79.0.0.7506, časové razítko: 0x5f1601d7
Název chybujícího modulu: ntdll.dll, verze: 10.0.18362.815, časové razítko: 0xb29ecf52
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000000f9229
ID chybujícího procesu: 0x192c
Čas spuštění chybující aplikace: 0x01d66ee7aae522df
Cesta k chybující aplikaci: C:\Program Files\Mozilla Firefox\firefox.exe
Cesta k chybujícímu modulu: C:\windows\SYSTEM32\ntdll.dll
ID zprávy: 6d74a329-7619-4c10-90ce-ad4d9acf14d0
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (08/08/2020 03:44:00 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Program Files\AVAST Software\Avast\AvastSvc.exe, identifikátor PID: 3536, identifikátor PID ProfSvc: 1580.

Error: (08/08/2020 09:42:42 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (08/08/2020 09:42:42 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (08/03/2020 05:05:29 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Program Files\AVAST Software\Avast\AvastSvc.exe, identifikátor PID: 3616, identifikátor PID ProfSvc: 1192.


System errors:
=============
Error: (08/13/2020 02:52:50 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby NcdAutoSetup bylo dosaženo časového limitu (30000 ms).

Error: (08/13/2020 12:19:32 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/12/2020 01:11:02 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/12/2020 11:17:35 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/11/2020 01:21:37 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/11/2020 09:10:07 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/10/2020 12:21:34 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/10/2020 09:26:56 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-SOU2LT8G)
Description: Server Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.


CodeIntegrity:
===================================

Date: 2020-08-13 16:48:21.209
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-08-13 16:48:20.931
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-08-13 16:48:20.925
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-08-13 16:48:20.893
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-08-13 16:48:20.889
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-08-13 16:48:20.881
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-08-13 16:48:20.852
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-08-13 16:48:20.822
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: Insyde F.20 05/15/2019
Motherboard: HP 84AE
Processor: AMD Ryzen 3 2200U with Radeon Vega Mobile Gfx
Percentage of memory in use: 86%
Total physical RAM: 3491.27 MB
Available physical RAM: 481.3 MB
Total Virtual: 12417.08 MB
Available Virtual: 6450.19 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:118.49 GB) (Free:39.86 GB) NTFS

\\?\Volume{b95b51f4-c080-4cc4-8279-c89cdc3f4e72}\ (Windows RE tools) (Fixed) (Total:0.48 GB) (Free:0.06 GB) NTFS
\\?\Volume{814a0e6a-e6d2-49b4-bffb-f02d541f07df}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.19 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 3625E36B)

Partition: GPT.

==================== End of Addition.txt =======================

Conder
VIP
VIP
Příspěvky: 4400
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Žádost o preventivní kontrolu

#6 Příspěvek od Conder »

Pardon za zdrzanie.

:arrow: Otvor poznamkovy blok (Win+R -> notepad -> enter)
  • Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

    Kód: Vybrat vše

    Start
    CloseProcesses:
    CreateRestorePoint:
    
    PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
    ExportKey: HKLM\SOFTWARE\Policies\Mozilla\Firefox
    ExportKey: HKLM\SOFTWARE\Policies\Google: Restriction
    File: C:\Users\Petr Záruba\AppData\Roaming\Mozilla\Firefox\Profiles\99v1lud0.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
    
    HKLM-x32\...\Run: [] => [X]
    SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
    FirewallRules: [{A133C0B6-AC66-4639-8021-49D8FEC84CF9}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe => No File
    FirewallRules: [{A0961D88-21CC-4511-A14F-59287D0C19AE}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe => No File
    FirewallRules: [{363B15CE-96A2-4310-BBC1-57B9F50AD69D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
    FirewallRules: [{F1C4A426-2C3D-4D39-812D-42C4D3F5EDCD}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
    
    Hosts:
    EmptyTemp:
    End
  • Uloz na plochu s nazvom fixlist.txt
  • Spusti znovu FRST a klikni na Fix
  • Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
  • Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

G1876P
Návštěvník
Návštěvník
Příspěvky: 84
Registrován: 09 říj 2014 15:41

Re: Žádost o preventivní kontrolu

#7 Příspěvek od G1876P »

HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules => Access Denied
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules => Access Denied
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules => Access Denied
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules => Access Denied
Could not move "C:\Windows\System32\Drivers\etc\hosts" => Scheduled to move on reboot.

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 136697394 B
Java, Flash, Steam htmlcache => 324202304 B
Windows/system/drivers => 0 B
Edge => 8192 B
Chrome => 14716015 B
Firefox => 1111762607 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
LocalService => 0 B
NetworkService => 0 B
Petr Záruba => 0 B
Host => 19165840 B

RecycleBin => 0 B
EmptyTemp: => 1.5 GB temporary data Removed.

================================

Conder
VIP
VIP
Příspěvky: 4400
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Žádost o preventivní kontrolu

#8 Příspěvek od Conder »

Fixlog nie je uplny. Skontroluj, ci je fixlog skopirovany naozaj cely, a ak ano, tak posli aj posledny fixlog, ktory sa nachadza v C:\FRST\Logs.

Bol FRST spusteny z administratorskeho uctu? Ak nie, tak opakuj predchadzajuci postup s tym, ze FRST spustis ako spravca.
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

G1876P
Návštěvník
Návštěvník
Příspěvky: 84
Registrován: 09 říj 2014 15:41

Re: Žádost o preventivní kontrolu

#9 Příspěvek od G1876P »

Omlouvám se za prodlevu a chybu. Níže vkládám fixlog vytvořený přes admin účet. Fixlog se vytvořil až na třetí pokus, trochu zlobil, potvora, ale nakonec si dal říct i když se mi po tom restartoval celý počítač. :D

Fix result of Farbar Recovery Scan Tool (x64) Version: 26-08-2020
Ran by Petr Záruba (27-08-2020 17:22:05) Run:2
Running from C:\Users\Petr Záruba\Desktop
Loaded Profiles: Petr Záruba
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
ExportKey: HKLM\SOFTWARE\Policies\Mozilla\Firefox
ExportKey: HKLM\SOFTWARE\Policies\Google: Restriction
File: C:\Users\Petr Záruba\AppData\Roaming\Mozilla\Firefox\Profiles\99v1lud0.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

HKLM-x32\...\Run: [] => [X]
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
FirewallRules: [{A133C0B6-AC66-4639-8021-49D8FEC84CF9}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe => No File
FirewallRules: [{A0961D88-21CC-4511-A14F-59287D0C19AE}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe => No File
FirewallRules: [{363B15CE-96A2-4310-BBC1-57B9F50AD69D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{F1C4A426-2C3D-4D39-812D-42C4D3F5EDCD}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Error: (0) Failed to create a restore point.

========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========



Count : 5
Average :
Sum : 2303003
Maximum :
Minimum :
Property : Length




========= End of Powershell: =========

================== ExportKey: ===================

[HKLM\SOFTWARE\Policies\Mozilla\Firefox]
[HKLM\SOFTWARE\Policies\Mozilla\Firefox\Certificates]
"ImportEnterpriseRoots"="1"

=== End of ExportKey ===
================== ExportKey: ===================

"HKLM\SOFTWARE\Policies\Google: Restriction" => not found

=== End of ExportKey ===

========================= File: C:\Users\Petr Záruba\AppData\Roaming\Mozilla\Firefox\Profiles\99v1lud0.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi ========================

C:\Users\Petr Záruba\AppData\Roaming\Mozilla\Firefox\Profiles\99v1lud0.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
File not signed
MD5: 367F0F868F78E8B7CD464F0AA80B9B83
Creation and modification date: 2020-02-12 18:20 - 2020-08-27 17:18
Size: 002276235
Attributes: ----A
Company Name:
Internal Name:
Original Name:
Product:
Description:
File Version:
Product Version:
Copyright:
VirusTotal: 0

====== End of File: ======

"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => value restored successfully
HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => not found
HKLM\System\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => not found
HKLM\System\CurrentControlSet\Control\SafeBoot\Network\MCODS => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A133C0B6-AC66-4639-8021-49D8FEC84CF9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A0961D88-21CC-4511-A14F-59287D0C19AE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{363B15CE-96A2-4310-BBC1-57B9F50AD69D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F1C4A426-2C3D-4D39-812D-42C4D3F5EDCD}" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 10248192 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 15868137 B
Java, Flash, Steam htmlcache => 132097 B
Windows/system/drivers => 215726964 B
Edge => 27674 B
Chrome => 0 B
Firefox => 186094266 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 6656 B
Users => 6656 B
ProgramData => 6656 B
Public => 6656 B
systemprofile => 1110659 B
systemprofile32 => 1110659 B
LocalService => 1312819 B
NetworkService => 1316939 B
Petr Záruba => 208196415 B
Host => 272970038 B

RecycleBin => 0 B
EmptyTemp: => 871.8 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 17:23:32 ====

Conder
VIP
VIP
Příspěvky: 4400
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Žádost o preventivní kontrolu

#10 Příspěvek od Conder »

Restart PC sa praveze aj mal uskutocnit :) Ale vyzera logy vyzeraju OK. Su s PC nejake problemy?
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

G1876P
Návštěvník
Návštěvník
Příspěvky: 84
Registrován: 09 říj 2014 15:41

Re: Žádost o preventivní kontrolu

#11 Příspěvek od G1876P »

Vše funguje bez obtíží. Pokud je to vše, děkuji za pomoc! :thumbsup:

Conder
VIP
VIP
Příspěvky: 4400
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Žádost o preventivní kontrolu

#12 Příspěvek od Conder »

:arrow: Tak este upraceme po pouzitych nastrojoch:
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Odpovědět