Prosím kontrolu logu

[WarCake]

tady posílám smazáné registry z roguekilleru, snad jsem to udělal správně, ale to asi poznáš že?






RogueKiller V12.7.1.0 (x64) [Oct 10 2016] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/download/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 10 (10.0.14393) 64 bits version
Spuštěno : Nouzový režim s podporou sítě
Uživatel : Bé?a [Práva správce]
Started from : C:\Users\Bé?a\Desktop\RogueKillerX64 (1).exe
Mód : Smazat -- Datum : 10/12/2016 10:15:18 (Duration : 00:10:40)

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 2 ¤¤¤
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 37.44.16.254 37.44.17.254 ([Czech Republic][Czech Republic]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{ebddf6e3-9d7d-483a-bd91-bfbfa9deda18} | DhcpNameServer : 37.44.16.254 37.44.17.254 ([Czech Republic][Czech Republic]) -> Nahrazeno ()

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ WMI : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nenahrán [0xc000035f]) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: KINGSTON SV300S37A120G +++++
--- User ---
[MBR] ba6645d951fe3b929bfe5e3b9e9426c5
[BSP] 04b5ca6b9dfc2e390273b9e5a18429af : Linux|VT.Unknown MBR Code
Partition table:
0 - Microsoft reserved partition | Offset (sectors): 2048 | Size: 128 MB
1 - Basic data partition | Offset (sectors): 264192 | Size: 113893 MB
2 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 233517056 | Size: 450 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: ST1000DM003-1CH162 +++++
--- User ---
[MBR] 258c64956cf11fb131faa53c34152ac7
[BSP] 746688fde899577001c1016ab2d8d928 : Empty|VT.Unknown MBR Code
Partition table:
0 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 2048 | Size: 300 MB
1 - [MAN-MOUNT] EFI system partition | Offset (sectors): 616448 | Size: 100 MB
2 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 821248 | Size: 128 MB
3 - Basic data partition | Offset (sectors): 1083392 | Size: 953340 MB
User = LL1 ... OK
User = LL2 ... OK

[Reklama]

[WarCake]

další log ze Zoek





Zoek.exe v5.0.0.1 Updated 19-September-2016
Tool run by B‚Ôa on st 12. 10. 2016 at 12:04:34,73.
Microsoft Windows 10 Pro N 10.0.14393 x64
Running in: Safe Mode NETWORK Internet Access Detected
Launched: C:\Users\BA6F6E~1\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\JetBrains deleted successfully
C:\PROGRA~2\Origin Games deleted successfully
C:\Users\BA6F6E~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Counter-Strike 1.6 deleted successfully
C:\PROGRA~3\Comms deleted successfully
C:\PROGRA~3\SoftwareDistribution deleted successfully
C:\PROGRA~3\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} deleted successfully
C:\PROGRA~3\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98} deleted successfully
C:\Users\BA6F6E~1\AppData\Local\NetworkTiles deleted successfully
C:\Users\BA6F6E~1\AppData\Local\PeerDistRepub deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Maps deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistPub deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistRepub deleted successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\NetworkTiles deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2979737218-4224468862-3874295616-1003\SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} deleted successfully

==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\JetBrains not found
C:\PROGRA~2\Origin Games not found
C:\PROGRA~3\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} not found
C:\PROGRA~3\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98} not found
C:\PROGRA~2\Application Verifier deleted
C:\PROGRA~3\Package Cache deleted
C:\windows\SysNative\tasks\ASC9_PerformanceMonitor deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\GPT.INI deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"sp@avast.com"="C:\Program Files\AVAST Software\Avast\SafePrice\FF" [12. 07. 2016 22:06]
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"sp@avast.com"="C:\Program Files\AVAST Software\Avast\SafePrice\FF" [12. 07. 2016 22:06]

==== Chromium Look ======================

Google Chrome Version: 46.0.2490.86

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
eofcbnmajmjmplflapaojjnihcjkigck - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx[10. 04. 2015 23:16]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[10. 04. 2015 23:16]

Avast Online Security - BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Chrome Media Router - BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm

==== Chromium Fix ======================

C:\Users\BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02

==== Reset Google Chrome ======================

C:\Users\BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\BA6F6E~1\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\BA6F6E~1\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\BA6F6E~1\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=166 folders=425 420680281 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\BA6F6E~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on st 12. 10. 2016 at 12:14:24,24 ======================

[WarCake]

log z FRST Addition





Zoek.exe v5.0.0.1 Updated 19-September-2016
Tool run by B‚Ôa on st 12. 10. 2016 at 12:04:34,73.
Microsoft Windows 10 Pro N 10.0.14393 x64
Running in: Safe Mode NETWORK Internet Access Detected
Launched: C:\Users\BA6F6E~1\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\JetBrains deleted successfully
C:\PROGRA~2\Origin Games deleted successfully
C:\Users\BA6F6E~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Counter-Strike 1.6 deleted successfully
C:\PROGRA~3\Comms deleted successfully
C:\PROGRA~3\SoftwareDistribution deleted successfully
C:\PROGRA~3\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} deleted successfully
C:\PROGRA~3\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98} deleted successfully
C:\Users\BA6F6E~1\AppData\Local\NetworkTiles deleted successfully
C:\Users\BA6F6E~1\AppData\Local\PeerDistRepub deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Maps deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistPub deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistRepub deleted successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\NetworkTiles deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2979737218-4224468862-3874295616-1003\SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} deleted successfully

==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\JetBrains not found
C:\PROGRA~2\Origin Games not found
C:\PROGRA~3\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} not found
C:\PROGRA~3\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98} not found
C:\PROGRA~2\Application Verifier deleted
C:\PROGRA~3\Package Cache deleted
C:\windows\SysNative\tasks\ASC9_PerformanceMonitor deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\GPT.INI deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"sp@avast.com"="C:\Program Files\AVAST Software\Avast\SafePrice\FF" [12. 07. 2016 22:06]
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"sp@avast.com"="C:\Program Files\AVAST Software\Avast\SafePrice\FF" [12. 07. 2016 22:06]

==== Chromium Look ======================

Google Chrome Version: 46.0.2490.86

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
eofcbnmajmjmplflapaojjnihcjkigck - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx[10. 04. 2015 23:16]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[10. 04. 2015 23:16]

Avast Online Security - BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Chrome Media Router - BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm

==== Chromium Fix ======================

C:\Users\BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02

==== Reset Google Chrome ======================

C:\Users\BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\BA6F6E~1\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\BA6F6E~1\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\BA6F6E~1\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\BA6F6E~1\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=166 folders=425 420680281 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\BA6F6E~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on st 12. 10. 2016 at 12:14:24,24 ======================

[WarCake]

druhý texťák má moc znaků a nešel jsem vložit, uložil jsem ho na server a níže přidávám odkaz ke stažení texťáku, snad se nebudeš zlobit.

http://leteckaposta.cz/303278885

[jerabina]

Z programu FRST měli vypadnout 2 logy - FRST.txt a Addition.txt, na leteckoupostu jsi nahrál jen ten FRST.txt, je potřeba i ten druhý
A až to sem budeš vkládat, tak to prosím udělej tak, že to klidně rozděl do více příspěvků. Špatně se nám to čte, když je to takto.

[WarCake]

jo sorry, klidně ti na leteckou poštu přihodím oba dva abys to měl při jednom. Jinak Addition.txt log je vložen hned nad příspěvkem s leteckoupoštou. Večer jak příjdu z práce ti na leteckou poštu hodím oba dva pro lepší orientaci :)

[WarCake]

takže posílám odkaz na leteckou poštu na oba dva

http://leteckaposta.cz/810521054

[Orcus]

A až to sem budeš vkládat, tak to prosím udělej tak, že to klidně rozděl do více příspěvků. Špatně se nám to čte, když je to takto.

Vložit tedy sem a né na leteckou poštu. Díky.

[WarCake]

tak ještě jednou posílám ADDITION


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-10-2016
Ran by Béďa (12-10-2016 12:23:35)
Running from C:\Users\Béďa\Desktop
Windows 10 Pro N Version 1607 (X64) (2016-09-25 01:58:12)
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2979737218-4224468862-3874295616-500 - Administrator - Disabled)
Béďa (S-1-5-21-2979737218-4224468862-3874295616-1003 - Administrator - Enabled) => C:\Users\Béďa
DefaultAccount (S-1-5-21-2979737218-4224468862-3874295616-503 - Limited - Disabled)
Guest (S-1-5-21-2979737218-4224468862-3874295616-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1.25534 - emc, uTorrent.CZ)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.1.2272 - AVAST Software)
AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden
Bandicam (HKLM-x32\...\Bandicam) (Version: 3.0.2.1014 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.7.2.45672 - Electronic Arts)
Battlefield™ Hardline (HKLM-x32\...\{CB4AC3DA-8CC1-4516-86DA-4078B57DB229}) (Version: 1.4.0.10 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Command & Conquer™ Red Alert 2 and Yuri’s Revenge (HKLM-x32\...\{F5275D1C-D133-486D-8F07-D6C571F0A8EC}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Counter-Strike 1.6 (HKLM-x32\...\Counter-Strike 1.6) (Version: - )
Dassault Systemes Software VC11 Prerequisites x86-x64 (HKLM\...\{C857169D-3F1A-4530-99A0-CAE966CE267E}) (Version: 11.0.1 - Dassault Systemes)
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Heroes of Might and Magic III Complete (HKLM-x32\...\InstallShield_{EDFB64A7-5BFD-4137-943D-5663149A15F5}) (Version: 1.00.0000 - CD Projekt)
Heroes of Might and Magic III Complete (x32 Version: 1.00.0000 - CD Projekt) Hidden
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - )
Intel(R) Chipset Device Software (x32 Version: 10.0.24 - Intel(R) Corporation) Hidden
ISO to USB (HKLM-x32\...\{D08A30AC-A663-4EA8-8D81-B98E17F19F1C}_is1) (Version: - isotousb.com)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java SE Development Kit 8 Update 40 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180400}) (Version: 8.0.400.25 - Oracle Corporation)
JetBrains ReSharper 9 (x32 Version: 9.0.0.0 - JetBrains Inc) Hidden
LG PC Suite (HKLM-x32\...\LG PC Suite) (Version: 5.3.23.20150119 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{2D5218EB-6992-46E3-8ECE-76C79AB955CE}) (Version: 3.13.2.0 - LG Electronics)
LibreOffice 4.4.1.2 (HKLM-x32\...\{4A754DA6-6E12-40AF-BAF0-B7D60C6BE005}) (Version: 4.4.1.2 - The Document Foundation)
LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.519 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.519 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware verze 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Metrosoft QUARTIS R11 (HKLM-x32\...\{9315EA88-2B4A-412D-9923-206504A5998E}) (Version: 4.11.33484 - WENZEL Metromec AG, CH-7007 Chur, Switzerland)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Rise Of Nations (HKLM-x32\...\RiseOfNations 1.0) (Version: - Microsoft)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{307a22b8-8353-4c5e-b67b-2404c5734558}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.40820 - Microsoft Corporation)
Microsoft Visual Studio Professional 2013 (HKLM-x32\...\{0b3e9a26-155d-42c3-aac0-b7571833df38}) (Version: 12.0.30501 - Microsoft Corporation)
Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation)
Might and Magic Heroes VII verzia v1.6 (rev 34396) (HKLM-x32\...\Might and Magic Heroes VII_is1) (Version: v1.6 (rev 34396) - CzTorrent.net)
MSXML4 Parser (HKLM-x32\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)
MTP Porting Kit (HKLM-x32\...\{353B1E6D-7073-4450-8C80-699BD8FCFB49}) (Version: 12.0.0 - Microsoft Corp)
NetBeans IDE 8.0.2 (HKLM\...\nbi-nb-base-8.0.2.0.201411181905) (Version: 8.0.2 - NetBeans.org)
Node.js (HKLM\...\{862C0963-2F76-4BAA-B219-360DD390C85F}) (Version: 0.12.0 - Joyent, Inc. and other Node contributors)
NVIDIA Ovladač 3D Vision 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.70 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.0.2.33129 - Electronic Arts, Inc.)
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
Python Tools Redirection Template (x32 Version: 1.1 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7634 - Realtek Semiconductor Corp.)
SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
Scanning Probe Calibration DLL (HKLM-x32\...\{38FCC3CD-0677-4094-B6CB-71A6EEC0E12A}) (Version: 1.0.0 - Renishaw)
Secure Download Manager (HKLM-x32\...\{E040B65B-8683-4228-8C33-D44A141E40EA}) (Version: 3.1.60 - Kivuto Solutions Inc.)
SharePoint Client Components (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
SharePoint Client Components (Version: 16.0.2617.1200 - Microsoft Corporation) Hidden
Start Menu 8 (HKLM-x32\...\IObit_StartMenu8_is1) (Version: 3.0.0.1 - IObit)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stronghold Crusader Extreme HD (HKLM-x32\...\GOGPACKSTRONGHOLDCRUSADERHD_is1) (Version: 2.0.0.6 - GOG.com)
Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.66695 - TeamViewer)
TrackMania Nations Forever (HKLM-x32\...\Steam App 11020) (Version: - Nadeo)
Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
Vypínač na dobrou noc verze 2.0 (HKLM-x32\...\Vypínač na dobrou noc_is1) (Version: - )
WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
Windows 8 Portable Device Enabling Kit for MTP - Tools, Version 8 (HKLM-x32\...\{F04FB07B-0C96-48F8-95BB-FF8CAD522D2F}) (Version: 1 - Microsoft Corporation)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Béďa\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileCoAuth.exe (Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {05B762F0-F529-4B18-8E80-8DE5793FE2E5} - System32\Tasks\SmartDefrag4_Update => C:\Program Files (x86)\IObit\Smart Defrag 4\AutoUpdate.exe
Task: {07E03A9D-4DA8-422C-9A64-BDFDB59AFDB9} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {112496DF-FBF6-4CCB-BC87-16FB08439EBF} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {179D7ECE-D5DC-4953-AB44-BF67009267DF} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {1DE97F46-71B6-472D-B14F-1BDBF68E2E6E} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe
Task: {1FC46C8D-D4F8-4F0F-8AE4-D196A1B34E3B} - \ASC9_PerformanceMonitor -> No File <==== ATTENTION
Task: {27B76B41-C566-4D99-B3CA-B80A792960F5} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {2DCBE731-7EA3-488F-88BD-A25D66B64AD7} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {2ECD961F-A187-4FB3-9A75-5EBADAABF63B} - System32\Tasks\Driver Booster SkipUAC (Béďa) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {314D70C1-D6A3-4D75-8484-CF34CD5C649F} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {33F25940-E262-468D-A94F-C8318C246A5B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-10] (Google Inc.)
Task: {4D9214A3-9876-4448-ADAF-1EA42684A6F0} - System32\Tasks\Uninstaller_SkipUac_Béďa => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {4EFC6C86-9106-4D04-9915-58BB23C3480C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-10] (Google Inc.)
Task: {5727C547-72FE-443C-893E-FF39AF60C97F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {5F4B6AF7-234A-4A4A-A4AE-731F45B7FDEF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-09-14] (Microsoft Corporation)
Task: {6A59C583-FBB0-4F2B-A452-307A30BEF6BC} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe
Task: {724D14CA-8189-4F20-A07B-F5AA57EB5A95} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Béďa\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-09-25] (Microsoft Corporation)
Task: {79926F22-61AD-449C-A265-6C2F7B6B7183} - System32\Tasks\SmartDefrag4_Startup => C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe
Task: {84214DC5-8776-40C7-9E55-228F0033FC7F} - System32\Tasks\Microsoft\Windows\Setup\UpgradeTriggers\UpgradeNowTask => C:\Windows\System32\GWX\GWXUXWorker.exe
Task: {8C242566-D067-4AB5-91CF-EC3E47777085} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {915BA3EF-C726-407F-82F3-0AC98F667BA6} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {9225C342-7AD9-4993-AAD3-3E8303CCE79E} - System32\Tasks\IOBit_AutoShutdown20160117235120 => C:\Windows\system32\shutdown.exe [2016-07-16] (Microsoft Corporation)
Task: {B8E1F239-DC6C-405B-96CB-ABCA8BCD72E2} - System32\Tasks\ASC9_SkipUac_Béďa => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
Task: {C6638A8B-96E6-4BF4-8366-D798F8043E9B} - System32\Tasks\SafeZone scheduled Autoupdate 1468422511 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {CCD2C03D-4E04-4B31-B1C3-1228CE70633A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {D34539CC-9F39-47ED-B53E-C6F32A185F26} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {D446B80D-5C08-4AD7-8281-73B5424BF177} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {E5BE0886-160B-4FA9-AB54-7151878CFC0B} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {E69867F8-FDEF-4782-AC1D-D0D15012AC34} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-07-12] (AVAST Software)
Task: {F9A426FC-F836-4D55-BC75-2DE17A21E7DB} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\ASC9_SkipUac_Béďa.job => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\IOBit_AutoShutdown20160117235120.job => C:\Windows\system32\shutdown.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-07-16 13:41 - 2016-07-16 13:41 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-10-02 09:44 - 2016-09-15 19:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-10-02 09:44 - 2016-09-15 19:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-07-16 13:41 - 2016-07-16 13:41 - 00130048 _____ () C:\WINDOWS\SYSTEM32\CHARTV.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-10-02 09:44 - 2016-09-15 18:24 - 09760256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-10-02 09:44 - 2016-09-15 18:18 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-10-02 09:44 - 2016-09-15 18:17 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-10-02 09:44 - 2016-09-15 18:18 - 02424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\100sexlinks.com -> 100sexlinks.com

There are 4788 more sites.


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-10-12 12:05 - 2016-10-12 12:05 - 00000753 ____A C:\WINDOWS\system32\Drivers\etc\hosts


127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\Béďa\AppData\Roaming\Microsoft\Windows Photo Viewer\Tapeta programu Windows Prohlížeč fotografií.jpg
DNS Servers: 37.44.16.254 - 37.44.17.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\startupreg: OneDrive => "c:\users\béďa\appdata\local\microsoft\onedrive\onedrive.exe" /background

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{87C3CCED-6994-45DD-8617-C26AC54C4324}] => (Block) D:\games\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe
FirewallRules: [{486F01A4-EE41-402D-8167-7F85FAC58287}] => (Block) D:\games\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe
FirewallRules: [UDP Query User{252BFC0B-1FB6-4ED9-B566-2C7BCBE8BC36}D:\games\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) D:\games\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe
FirewallRules: [TCP Query User{83C0C4EA-E8C2-4D1F-A918-427D4DDD3C29}D:\games\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) D:\games\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe
FirewallRules: [{F5A063A4-6683-44AE-B4FA-0C53083EA5CD}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{FEB43692-C595-4E55-8583-FD478615C54A}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{194EB7D9-928B-45FE-9CF2-B606112A667D}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{C8F85B49-C7F2-4DC1-9C34-4565F610D3AF}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{19C814D1-AB71-4B25-AE1F-817B56C3BF43}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{41AF3820-D1A1-4597-BB43-D1B24F2F5991}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{29378642-D3C4-4A05-B5B8-8D77ADD606CC}] => (Allow) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
FirewallRules: [{74CA286F-F1CC-4498-8DA3-AA3FE5A7AB7C}] => (Allow) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
FirewallRules: [{7D2A101B-5B31-44A3-B923-AA5D21C6CE55}] => (Allow) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
FirewallRules: [{0BA4F32C-C1AD-4483-80E2-E48E48CE162E}] => (Allow) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
FirewallRules: [TCP Query User{A279887A-5101-4509-B76F-632415E561C6}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe
FirewallRules: [UDP Query User{692CE989-7FD9-479E-A935-6BF62387DBE1}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe
FirewallRules: [TCP Query User{E228223F-3290-4ED5-ADEE-32EBE35CFDF5}D:\program files (x86)\utorrent\utorrent.exe] => (Allow) D:\program files (x86)\utorrent\utorrent.exe
FirewallRules: [UDP Query User{3AA80591-3F11-4CAB-AD53-8EC4C2AC63D8}D:\program files (x86)\utorrent\utorrent.exe] => (Allow) D:\program files (x86)\utorrent\utorrent.exe
FirewallRules: [{D1F254DB-890A-4EEA-BDDA-531E9EA658E1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{9A6399DD-6360-4CF3-9E99-A09210AE6978}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{535AF2DE-0B70-4C88-99D2-CCB2D86A8872}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D25FD076-2FE3-4099-A5D4-2C9E6D8E6CA8}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{E5C63508-E135-402C-AF36-AC88D7D43C91}] => (Allow) D:\Games\Battlefield 3\bf3.exe
FirewallRules: [{D7349F3C-E2A0-485F-8FA2-78B264F48BBD}] => (Allow) D:\Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{8DEEA16F-7463-4C12-9E5A-F2A7FCB11CDA}D:\program files (x86)\utorrent\utorrent.exe] => (Allow) D:\program files (x86)\utorrent\utorrent.exe
FirewallRules: [UDP Query User{718207D9-638B-45ED-9992-BAF9B8F5C2FF}D:\program files (x86)\utorrent\utorrent.exe] => (Allow) D:\program files (x86)\utorrent\utorrent.exe
FirewallRules: [{831F0866-C4BB-4279-8861-2E540C752A8F}] => (Allow) D:\Program Files (x86)\uTorrent\utorrent.exe
FirewallRules: [{2D4B6A52-4A76-4E84-A16F-298BE7761303}] => (Allow) D:\Program Files (x86)\uTorrent\utorrent.exe
FirewallRules: [TCP Query User{66359AED-9E8E-4A26-9A96-B1F351AF4914}D:\games\battlefield 3\bf3.exe] => (Allow) D:\games\battlefield 3\bf3.exe
FirewallRules: [UDP Query User{619EEC12-9A61-4656-BD1D-DA8C69FDD802}D:\games\battlefield 3\bf3.exe] => (Allow) D:\games\battlefield 3\bf3.exe
FirewallRules: [{A50CAD04-2E6F-4954-89BF-F94D25C153D8}] => (Allow) D:\Games\Battlefield Hardline\BFH\bfh.exe
FirewallRules: [{2C27D9A0-D011-4795-AA2F-BF2B904F5385}] => (Allow) D:\Games\Battlefield Hardline\BFH\bfh.exe
FirewallRules: [{FAE5D550-97F4-42A9-866B-4ED616527636}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{BF75AD4C-2DAE-4D5B-8DAB-8DBF75566FA6}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{154D1130-239D-49D5-8DB5-DDF43BE57B20}D:\games\battlefield hardline\battlefield 4\bf4.exe] => (Allow) D:\games\battlefield hardline\battlefield 4\bf4.exe
FirewallRules: [UDP Query User{C0E4CDF3-F9C2-4AF4-8B9D-87B80AACE68C}D:\games\battlefield hardline\battlefield 4\bf4.exe] => (Allow) D:\games\battlefield hardline\battlefield 4\bf4.exe
FirewallRules: [{45FDF349-6E0F-47A7-807A-CF61DA5B54F1}] => (Allow) D:\Games\Battlefield Hardline\Command and Conquer Red Alert II\RA2Launcher.exe
FirewallRules: [{EE79C649-94CE-4EFA-83B2-5EF80824A2BC}] => (Allow) D:\Games\Battlefield Hardline\Command and Conquer Red Alert II\RA2Launcher.exe
FirewallRules: [{61B5DD8A-8FF1-4CCA-B44D-7254D1B796BA}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C703594C-C7BD-44AE-BB80-8FA57D8AD70E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A0336FAC-767B-419B-9716-8882D8C69B32}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{869EB964-18CC-45F5-9AA0-C393B4F684FB}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{895457D4-33C4-4DC0-B86D-D6DABD7154AA}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\TrackMania Nations Forever\TmForever.exe
FirewallRules: [{ACF8E710-7D87-4316-9586-7941DA09034F}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\TrackMania Nations Forever\TmForever.exe
FirewallRules: [{4BC428A8-1F90-4475-8F4C-83867B77ACDE}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\TrackMania Nations Forever\TmForeverLauncher.exe
FirewallRules: [{BC92BF7B-924C-4AA8-A76D-215808CA88C4}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\TrackMania Nations Forever\TmForeverLauncher.exe
FirewallRules: [{CC20BFC7-DE91-4D1B-A1C7-539F6C834951}] => (Allow) D:\Games\Battlefield Hardline\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{9E9FD254-2C9C-47E6-8FBD-A99FA485E2D4}] => (Allow) D:\Games\Battlefield Hardline\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{011E252B-F559-4440-9AE0-81FC2210E84A}] => (Allow) D:\Games\Battlefield Hardline\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{A4ACF7AD-0A04-412F-9D9A-1A10085BC4F9}] => (Allow) D:\Games\Battlefield Hardline\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{5F2271D0-689C-4AE1-8895-0BF1312A07BB}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{341AE51C-7862-4EEA-A225-A8505F2C7AA8}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{83A55C29-06EC-4A98-9DED-2732EAEACD3D}] => (Allow) D:\Games\Battlefield Hardline\BFH\BFHWebHelper.exe
FirewallRules: [{05ED39C0-4136-4CF9-8FBA-D7C99E23653B}] => (Allow) D:\Games\Battlefield Hardline\BFH\BFHWebHelper.exe
FirewallRules: [TCP Query User{37099B2D-47F4-40E5-B714-F36825D95106}D:\games\dying light enchanced edition cz\dying light\install\devtools\dyinglightplayer.exe] => (Allow) D:\games\dying light enchanced edition cz\dying light\install\devtools\dyinglightplayer.exe
FirewallRules: [UDP Query User{7225EB32-4CEE-4C38-BF37-A67E77B9CD42}D:\games\dying light enchanced edition cz\dying light\install\devtools\dyinglightplayer.exe] => (Allow) D:\games\dying light enchanced edition cz\dying light\install\devtools\dyinglightplayer.exe
FirewallRules: [{5ECD6AB3-5163-41B0-B845-B9A0984BC776}] => (Block) D:\games\dying light enchanced edition cz\dying light\install\devtools\dyinglightplayer.exe
FirewallRules: [{E2596A68-CD36-4AA3-9FC7-8BB7F6A33FDD}] => (Block) D:\games\dying light enchanced edition cz\dying light\install\devtools\dyinglightplayer.exe
FirewallRules: [TCP Query User{959B23C7-7CF1-45FA-8BDC-3EC010137D3F}D:\games\dying light enchanced edition cz\dying light\install\dyinglightgame.exe] => (Allow) D:\games\dying light enchanced edition cz\dying light\install\dyinglightgame.exe
FirewallRules: [UDP Query User{F34402B8-DBBC-48DA-AEB1-8EA664D866EB}D:\games\dying light enchanced edition cz\dying light\install\dyinglightgame.exe] => (Allow) D:\games\dying light enchanced edition cz\dying light\install\dyinglightgame.exe
FirewallRules: [{74925F5C-D252-408C-A3EB-2D9D61322E0C}] => (Block) D:\games\dying light enchanced edition cz\dying light\install\dyinglightgame.exe
FirewallRules: [{804EC4FB-7BBE-4997-B9DC-3F4D70F3DBD5}] => (Block) D:\games\dying light enchanced edition cz\dying light\install\dyinglightgame.exe
FirewallRules: [TCP Query User{87A10026-AF18-48B8-81B0-FF07908819D9}D:\games\stronghold crusader extreme\stronghold_crusader_extreme.exe] => (Allow) D:\games\stronghold crusader extreme\stronghold_crusader_extreme.exe
FirewallRules: [UDP Query User{A0275400-EE75-4114-96E6-F76C70162E3D}D:\games\stronghold crusader extreme\stronghold_crusader_extreme.exe] => (Allow) D:\games\stronghold crusader extreme\stronghold_crusader_extreme.exe
FirewallRules: [TCP Query User{636F0A88-7303-484D-8867-22DF56236E5B}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{364887E0-52AE-4CD1-904C-1D086FE4E6B7}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [{24D097BF-DAC7-4B6A-B992-7D7C79771B46}] => (Block) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [{21FAD7D2-EFB2-4681-92F3-2E598B51F67C}] => (Block) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [{76F46DD2-13A2-41DE-A161-7A7CF0AD60B7}] => (Block) D:\games\stronghold crusader extreme\stronghold_crusader_extreme.exe
FirewallRules: [{FE6C679F-49A0-4257-B660-86A01007AB8C}] => (Block) D:\games\stronghold crusader extreme\stronghold_crusader_extreme.exe
FirewallRules: [TCP Query User{5C133984-7B76-48A3-A470-AEAEDEAA4625}D:\games\counter-strike\hl.exe] => (Allow) D:\games\counter-strike\hl.exe
FirewallRules: [UDP Query User{3A8FA5BC-869C-49C4-BC41-817804AC1762}D:\games\counter-strike\hl.exe] => (Allow) D:\games\counter-strike\hl.exe
FirewallRules: [{7C64B1C5-ACCD-4198-8FEC-6072EED11658}] => (Block) D:\games\counter-strike\hl.exe
FirewallRules: [{A5C2CAE2-6A45-4E09-BCBB-525911C13B21}] => (Block) D:\games\counter-strike\hl.exe
FirewallRules: [{1732DECD-368D-4AA4-A882-35DF6F9A8A51}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{9F69C8C6-29CA-4285-BC49-ACBC5F704D76}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{47FAABED-CE07-43E7-B2E2-067FD638745A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{4ED74302-CC83-4E13-BA4D-408885BC7BA9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C0E62274-BDAD-487F-9A2F-1B036A3B2EA3}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

10-10-2016 09:35:56 Driver Booster : Cypress SMBUS Trackpad

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/12/2016 12:05:06 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Vytvoření bodu obnovení se nezdařilo (Proces = C:\WINDOWS\system32\wbem\wmiprvse.exe; Popis = zoek.exe restore point; Chyba = 0x8007043c).

Error: (10/12/2016 10:25:55 AM) (Source: .NET Runtime) (EventID: 1025) (User: )
Description: Application: wmiprvse.exe
Framework Version: v4.0.30319
Description: The application requested process termination through System.Environment.FailFast(string message).
Message: Unexpected exception thrown from the provider:
System.Exception: Tuto službu nelze spustit v nouzovém režimu.

Tuto službu nelze spustit v nouzovém režimu.

at Windows.Management.Deployment.PackageManager.FindPackagesForUser(String userSecurityId, String packageFamilyName)
at Microsoft.Uev.ManagedAgentWmi.WinRT.BaseHelpers.IsInstalled(String packageFamilyName)
at Microsoft.Uev.ManagedAgentWmi.WinRT.Windows8AppListWinRt.GetConfiguredList(Boolean isUserList)
at Microsoft.Uev.ManagedAgentWmi.MachineConfiguredWindows8App.EnumerateAppPackages()
Stack:
at System.Environment.FailFast(System.String)
at WmiNative.WbemProvider.WmiNative.IWbemServices.CreateInstanceEnumAsync(System.String, Int32, WmiNative.IWbemContext, WmiNative.IWbemObjectSink)

Error: (10/12/2016 10:25:54 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000

Error: (10/12/2016 10:25:54 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000

Error: (10/12/2016 10:25:49 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000

Error: (10/12/2016 10:25:49 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000

Error: (10/12/2016 10:25:47 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: wmiprvse.exe, verze: 10.0.14393.0, časové razítko: 0x57899ab2
Název chybujícího modulu: NetEventPacketCapture.dll, verze: 10.0.14393.206, časové razítko: 0x57dacea5
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000160cc
ID chybujícího procesu: 0x944
Čas spuštění chybující aplikace: 0x01d22460d3278933
Cesta k chybující aplikaci: C:\WINDOWS\system32\wbem\wmiprvse.exe
Cesta k chybujícímu modulu: C:\WINDOWS\system32\wbem\NetEventPacketCapture.dll
ID zprávy: d88220b0-8525-41b6-8780-fb3838a0df94
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (10/11/2016 10:59:24 PM) (Source: .NET Runtime) (EventID: 1025) (User: )
Description: Application: wmiprvse.exe
Framework Version: v4.0.30319
Description: The application requested process termination through System.Environment.FailFast(string message).
Message: Unexpected exception thrown from the provider:
System.Exception: Tuto službu nelze spustit v nouzovém režimu.

Tuto službu nelze spustit v nouzovém režimu.

at Windows.Management.Deployment.PackageManager.FindPackagesForUser(String userSecurityId, String packageFamilyName)
at Microsoft.Uev.ManagedAgentWmi.WinRT.BaseHelpers.IsInstalled(String packageFamilyName)
at Microsoft.Uev.ManagedAgentWmi.WinRT.Windows8AppListWinRt.GetConfiguredList(Boolean isUserList)
at Microsoft.Uev.ManagedAgentWmi.MachineConfiguredWindows8App.EnumerateAppPackages()
Stack:
at System.Environment.FailFast(System.String)
at WmiNative.WbemProvider.WmiNative.IWbemServices.CreateInstanceEnumAsync(System.String, Int32, WmiNative.IWbemContext, WmiNative.IWbemObjectSink)

Error: (10/11/2016 10:59:24 PM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000

Error: (10/11/2016 10:59:24 PM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000


System errors:
=============
Error: (10/12/2016 12:23:36 PM) (Source: DCOM) (EventID: 10005) (User: home-pc)
Description: Služba DCOM zjistila chybu 1084 při pokusu o spuštění služby WSearch s argumenty Unavailable za účelem spuštění serveru:
{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (10/12/2016 12:23:36 PM) (Source: DCOM) (EventID: 10005) (User: home-pc)
Description: Služba DCOM zjistila chybu 1084 při pokusu o spuštění služby WSearch s argumenty Unavailable za účelem spuštění serveru:
{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (10/12/2016 12:23:36 PM) (Source: DCOM) (EventID: 10005) (User: home-pc)
Description: Služba DCOM zjistila chybu 1084 při pokusu o spuštění služby WSearch s argumenty Unavailable za účelem spuštění serveru:
{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (10/12/2016 12:23:36 PM) (Source: DCOM) (EventID: 10005) (User: home-pc)
Description: Služba DCOM zjistila chybu 1084 při pokusu o spuštění služby WSearch s argumenty Unavailable za účelem spuštění serveru:
{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (10/12/2016 12:23:34 PM) (Source: DCOM) (EventID: 10005) (User: home-pc)
Description: Služba DCOM zjistila chybu 1084 při pokusu o spuštění služby WSearch s argumenty Unavailable za účelem spuštění serveru:
{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (10/12/2016 12:23:34 PM) (Source: DCOM) (EventID: 10005) (User: home-pc)
Description: Služba DCOM zjistila chybu 1084 při pokusu o spuštění služby WSearch s argumenty Unavailable za účelem spuštění serveru:
{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (10/12/2016 12:23:34 PM) (Source: DCOM) (EventID: 10005) (User: home-pc)
Description: Služba DCOM zjistila chybu 1084 při pokusu o spuštění služby ShellHWDetection s argumenty Unavailable za účelem spuštění serveru:
{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (10/12/2016 12:23:10 PM) (Source: DCOM) (EventID: 10005) (User: home-pc)
Description: Služba DCOM zjistila chybu 1084 při pokusu o spuštění služby WSearch s argumenty Unavailable za účelem spuštění serveru:
{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (10/12/2016 12:23:10 PM) (Source: DCOM) (EventID: 10005) (User: home-pc)
Description: Služba DCOM zjistila chybu 1084 při pokusu o spuštění služby WSearch s argumenty Unavailable za účelem spuštění serveru:
{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (10/12/2016 12:23:10 PM) (Source: DCOM) (EventID: 10005) (User: home-pc)
Description: Služba DCOM zjistila chybu 1084 při pokusu o spuštění služby ShellHWDetection s argumenty Unavailable za účelem spuštění serveru:
{DD522ACC-F821-461A-A407-50B198B896DC}


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-3350P CPU @ 3.10GHz
Percentage of memory in use: 10%
Total physical RAM: 8150.34 MB
Available physical RAM: 7288.29 MB
Total Virtual: 9430.34 MB
Available Virtual: 8678.52 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.22 GB) (Free:37.73 GB) NTFS
Drive d: () (Fixed) (Total:931 GB) (Free:2.1 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 111.8 GB) (Disk ID: 3CFE4A1F)

Partition: GPT.

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 6958EF44)

Partition: GPT.

==================== End of Addition.txt ============================

[WarCake]

a FRST log 1/3


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-10-2016
Ran by Béďa (administrator) on HOME-PC (12-10-2016 12:23:09)
Running from C:\Users\Béďa\Desktop
Loaded Profiles: Béďa (Available Profiles: Béďa)
Platform: Windows 10 Pro N Version 1607 (X64) Language: Angličtina (Spojené státy)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe


==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16407296 2016-01-03] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [8900328 2016-08-08] (AVAST Software)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565960 2016-09-13] (LogMeIn Inc.)
HKLM-x32\...\RunOnce: [DeleteOnReboot] => C:\Users\BA6F6E~1\AppData\Local\Temp\DeleteOnReboot.bat <===== ATTENTION
HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\Run: [uTorrent] => D:\Program Files (x86)\uTorrent\utorrent.exe [416168 2015-02-22] (BitTorrent, Inc.)
HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\RunOnce: [NetworkResetPostReboot] => netsh.exe trace postreset
HKU\S-1-5-21-2979737218-4224468862-3874295616-1003\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-07-12] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 37.44.16.254 37.44.17.254
Tcpip\..\Interfaces\{ebddf6e3-9d7d-483a-bd91-bfbfa9deda18}: [DhcpNameServer] 37.44.16.254 37.44.17.254

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-2979737218-4224468862-3874295616-1003 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-17] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-17] (Oracle Corporation)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-07-12]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-07-12]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-17] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-17] (Oracle Corporation)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Béďa\AppData\Local\Google\Chrome\User Data\Default [2016-10-12]
CHR Extension: (Prezentace Google) - C:\Users\Béďa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-12]
CHR Extension: (Dokumenty Google) - C:\Users\Béďa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-12]
CHR Extension: (Disk Google) - C:\Users\Béďa\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-12]
CHR Extension: (YouTube) - C:\Users\Béďa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-12]
CHR Extension: (Avast SafePrice) - C:\Users\Béďa\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-10-12]
CHR Extension: (Tabulky Google) - C:\Users\Béďa\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-12]
CHR Extension: (Dokumenty Google offline) - C:\Users\Béďa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-12]
CHR Extension: (Avast Online Security) - C:\Users\Béďa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-10-12]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Béďa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-12]
CHR Extension: (Gmail) - C:\Users\Béďa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-12]
CHR Extension: (Chrome Media Router) - C:\Users\Béďa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-12]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-10]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-10]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-07-12] (AVAST Software)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2016-09-25] (Microsoft Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
S2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [2621448 2016-09-13] (LogMeIn Inc.)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2960160 2016-04-22] (IObit)
S2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-08-31] (LogMeIn, Inc.)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2141192 2016-10-03] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2206224 2016-10-03] (Electronic Arts)
S2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2015-09-12] ()
S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-09-26] ()
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
S2 SMService; C:\program files (x86)\iobit\Classic Start\SMService.exe [1063200 2015-12-29] (IObit)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
S3 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer GmbH)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87736 2014-04-30] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-07-12] (AVAST Software)
S1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-07-12] (AVAST Software)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108304 2016-07-12] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-07-12] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-07-12] (AVAST Software)
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-07-12] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [473592 2016-07-13] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [162904 2016-07-12] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-08-05] (AVAST Software)
R3 CySmb; C:\Windows\System32\drivers\cysmb.sys [10752 2016-07-03] (Cypress Semiconductor, Inc.)
R3 Hamachi; C:\Windows\System32\drivers\Hamdrv.sys [45680 2016-05-04] (LogMeIn Inc.)
S1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-11-25] (REALiX(tm))
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d3851cb7c8216f9e\nvlddmkm.sys [14216760 2016-08-27] (NVIDIA Corporation)
S3 SensorsSimulatorDriver; C:\Windows\System32\drivers\WUDFRd.sys [216064 2016-07-16] (Microsoft Corporation)
S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2016-10-12] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-10-12 12:23 - 2016-10-12 12:23 - 00011932 _____ C:\Users\Béďa\Desktop\FRST.txt
2016-10-12 12:22 - 2016-10-12 12:23 - 00000000 ____D C:\FRST
2016-10-12 12:21 - 2016-10-12 12:22 - 02407424 _____ (Farbar) C:\Users\Béďa\Desktop\FRST64.exe
2016-10-12 12:20 - 2016-10-12 12:20 - 02407424 _____ (Farbar) C:\Users\Béďa\Downloads\FRST64.exe
2016-10-12 12:14 - 2016-10-12 12:14 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2016-10-12 12:12 - 2016-10-12 12:04 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2016-10-12 12:04 - 2016-10-12 12:12 - 00000000 ____D C:\zoek_backup
2016-10-12 12:04 - 2016-10-12 12:04 - 01309184 _____ C:\Users\Béďa\Desktop\zoek.exe
2016-10-12 12:03 - 2016-10-12 12:03 - 01309184 _____ C:\Users\Béďa\Downloads\zoek.exe
2016-10-12 10:14 - 2016-10-12 10:14 - 00028272 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2016-10-12 10:07 - 2016-10-12 12:01 - 00004336 _____ C:\Users\Béďa\Desktop\smazany regystry roguekiller.txt
2016-10-11 22:44 - 2016-10-11 22:44 - 25240136 _____ C:\Users\Béďa\Desktop\RogueKillerX64 (1).exe
2016-10-11 22:44 - 2016-10-11 22:44 - 00000000 ____D C:\ProgramData\RogueKiller
2016-10-11 22:43 - 2016-10-11 22:43 - 25240136 _____ C:\Users\Béďa\Downloads\RogueKillerX64 (1).exe
2016-10-11 22:43 - 2016-10-11 22:43 - 00000000 _____ C:\Users\Béďa\Downloads\RogueKillerX64.exe
2016-10-11 22:39 - 2016-10-11 22:39 - 00000000 _____ C:\Users\Béďa\Downloads\RogueKiller.exe
2016-10-11 22:33 - 2016-10-11 22:33 - 00001164 _____ C:\Users\Béďa\Desktop\JRT.txt
2016-10-11 22:28 - 2016-10-11 22:27 - 01631928 _____ (Malwarebytes) C:\Users\Béďa\Desktop\JRT.exe
2016-10-11 22:27 - 2016-10-11 22:27 - 01631928 _____ (Malwarebytes) C:\Users\Béďa\Downloads\JRT.exe
2016-10-10 23:25 - 2016-10-10 23:25 - 00001148 _____ C:\Users\Béďa\Desktop\Anti_malware log.txt
2016-10-10 23:18 - 2016-10-10 23:19 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-10-10 23:17 - 2016-10-10 23:17 - 00001191 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-10-10 23:17 - 2016-10-10 23:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-10-10 23:17 - 2016-10-10 23:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-10-10 23:17 - 2016-10-10 23:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-10-10 23:17 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-10-10 23:17 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-10-10 23:17 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-10-10 23:16 - 2016-10-10 23:16 - 22851472 _____ (Malwarebytes ) C:\Users\Béďa\Downloads\mbam-setup-2.2.1.1043.exe
2016-10-10 23:15 - 2016-10-10 23:15 - 00001710 _____ C:\Users\Béďa\Desktop\AdwCleaner[S0].txt
2016-10-10 23:12 - 2016-10-10 23:11 - 03874368 _____ C:\Users\Béďa\Desktop\AdwCleaner.exe
2016-10-10 23:11 - 2016-10-11 22:25 - 00000000 ____D C:\AdwCleaner
2016-10-10 23:11 - 2016-10-10 23:11 - 03874368 _____ C:\Users\Béďa\Downloads\AdwCleaner.exe
2016-10-10 23:09 - 2016-10-10 23:09 - 00000000 ____D C:\Users\Béďa\Desktop\Nová složka
2016-10-10 23:07 - 2016-10-10 23:07 - 00448512 _____ (OldTimer Tools) C:\Users\Béďa\Downloads\TFC.exe
2016-10-10 23:05 - 2016-10-10 23:05 - 00050688 _____ (Atribune.org) C:\Users\Béďa\Downloads\ATF-Cleaner.exe
2016-10-10 10:38 - 2016-10-11 22:39 - 00000000 ____D C:\Users\Béďa\AppData\Local\ElevatedDiagnostics
2016-10-10 09:51 - 2016-10-10 23:10 - 00000000 ____D C:\Users\BĂ©ÄŹa\AppData\Local\ConnectedDevicesPlatform
2016-10-10 09:29 - 2016-10-10 09:29 - 00003006 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (Béďa)
2016-10-10 09:04 - 2016-10-10 10:50 - 00000000 ____D C:\Program Files (x86)\Mafia III
2016-10-09 19:20 - 2016-10-09 21:34 - 00000000 ____D C:\Users\Béďa\Downloads\Mafia 3 (2016)(CZ)(Repack by TD)
2016-10-09 19:18 - 2016-10-09 19:25 - 00000000 ____D C:\Users\Béďa\Downloads\Mafia.III.Update.1.Incl.CODEX.Crack
2016-10-09 19:18 - 2016-10-09 19:18 - 00078551 _____ C:\Users\Béďa\Downloads\[CzT]Mafia_III_Patch_v1_01_2016_.torrent
2016-10-09 19:17 - 2016-10-09 19:17 - 00154967 _____ C:\Users\Béďa\Downloads\[CzT]Mafia_III_2016_CZ_.torrent
2016-10-04 21:40 - 2016-10-04 21:40 - 00000000 ____D C:\Users\Béďa\Documents\VLC
2016-10-04 20:09 - 2016-10-04 20:09 - 00030241 _____ C:\Users\Béďa\Downloads\[CzT]Navrat_blbyho_a_blbejsiho_Dumb_and_Dumber_To_2014_CZ_EN_720pHD_.torrent
2016-10-02 19:31 - 2016-10-02 19:31 - 00023036 _____ C:\Users\Béďa\Downloads\[CzT]Mike_i_Dave_shanej_holku_Mike_and_Dave_Need_Wedding_Dates_2016_720pHD_.torrent
2016-10-02 19:30 - 2016-10-02 19:30 - 00017459 _____ C:\Users\Béďa\Downloads\[CzT]Blby_a_jeste_blbejsi_Jak_Harry_potkal_Lloyda_Dumb_and_Dumberer_When_Harry_Met_Lloyd_2003_CZ_720pHD_.torrent
2016-10-02 09:44 - 2016-09-24 07:55 - 00406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-10-02 09:44 - 2016-09-24 07:46 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-10-02 09:44 - 2016-09-24 07:44 - 02264064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-10-02 09:44 - 2016-09-15 20:14 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-10-02 09:44 - 2016-09-15 19:40 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2016-10-02 09:44 - 2016-09-15 19:37 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-10-02 09:44 - 2016-09-15 19:37 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2016-10-02 09:44 - 2016-09-15 19:37 - 00402352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2016-10-02 09:44 - 2016-09-15 19:35 - 01705976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-10-02 09:44 - 2016-09-15 19:35 - 01570680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-10-02 09:44 - 2016-09-15 19:34 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-10-02 09:44 - 2016-09-15 19:33 - 00083120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2016-10-02 09:44 - 2016-09-15 19:32 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-10-02 09:44 - 2016-09-15 19:30 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-10-02 09:44 - 2016-09-15 19:30 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-10-02 09:44 - 2016-09-15 19:30 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2016-10-02 09:44 - 2016-09-15 19:30 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-10-02 09:44 - 2016-09-15 19:29 - 01377016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2016-10-02 09:44 - 2016-09-15 19:29 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2016-10-02 09:44 - 2016-09-15 19:29 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-10-02 09:44 - 2016-09-15 19:29 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2016-10-02 09:44 - 2016-09-15 19:29 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2016-10-02 09:44 - 2016-09-15 19:29 - 00023392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys
2016-10-02 09:44 - 2016-09-15 19:28 - 07812960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-10-02 09:44 - 2016-09-15 19:28 - 02213248 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-10-02 09:44 - 2016-09-15 19:28 - 01353768 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-10-02 09:44 - 2016-09-15 19:28 - 01172472 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-10-02 09:44 - 2016-09-15 19:27 - 05622088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2016-10-02 09:44 - 2016-09-15 19:27 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-10-02 09:44 - 2016-09-15 19:27 - 00553312 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-10-02 09:44 - 2016-09-15 19:27 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2016-10-02 09:44 - 2016-09-15 19:27 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-10-02 09:44 - 2016-09-15 19:26 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2016-10-02 09:44 - 2016-09-15 19:25 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-10-02 09:44 - 2016-09-15 19:25 - 00340320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-10-02 09:44 - 2016-09-15 19:25 - 00262960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2016-10-02 09:44 - 2016-09-15 19:24 - 00764936 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-10-02 09:44 - 2016-09-15 19:23 - 01503032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-10-02 09:44 - 2016-09-15 19:23 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-10-02 09:44 - 2016-09-15 19:23 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-10-02 09:44 - 2016-09-15 19:22 - 05722320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-10-02 09:44 - 2016-09-15 19:22 - 02256080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-10-02 09:44 - 2016-09-15 19:22 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2016-10-02 09:44 - 2016-09-15 19:22 - 00860512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-10-02 09:44 - 2016-09-15 19:22 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2016-10-02 09:44 - 2016-09-15 19:21 - 01980776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-10-02 09:44 - 2016-09-15 19:21 - 01218912 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-10-02 09:44 - 2016-09-15 19:21 - 01000288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-10-02 09:44 - 2016-09-15 19:20 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-10-02 09:44 - 2016-09-15 19:20 - 00634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2016-10-02 09:44 - 2016-09-15 19:19 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2016-10-02 09:44 - 2016-09-15 19:18 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-10-02 09:44 - 2016-09-15 19:18 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-10-02 09:44 - 2016-09-15 19:17 - 20965248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-10-02 09:44 - 2016-09-15 19:17 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-10-02 09:44 - 2016-09-15 19:17 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-10-02 09:44 - 2016-09-15 19:16 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-10-02 09:44 - 2016-09-15 19:16 - 02750384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-10-02 09:44 - 2016-09-15 19:16 - 02190176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-10-02 09:44 - 2016-09-15 19:16 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-10-02 09:44 - 2016-09-15 19:16 - 01738040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-10-02 09:44 - 2016-09-15 19:16 - 01292640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-10-02 09:44 - 2016-09-15 19:16 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2016-10-02 09:44 - 2016-09-15 19:16 - 00657760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-10-02 09:44 - 2016-09-15 19:16 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-10-02 09:44 - 2016-09-15 19:16 - 00401760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-10-02 09:44 - 2016-09-15 19:16 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-10-02 09:44 - 2016-09-15 19:16 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2016-10-02 09:44 - 2016-09-15 19:15 - 02446704 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-10-02 09:44 - 2016-09-15 19:15 - 00649568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-10-02 09:44 - 2016-09-15 19:15 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2016-10-02 09:44 - 2016-09-15 19:15 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-10-02 09:44 - 2016-09-15 19:15 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2016-10-02 09:44 - 2016-09-15 19:15 - 00130912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2016-10-02 09:44 - 2016-09-15 19:14 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-10-02 09:44 - 2016-09-15 19:14 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2016-10-02 09:44 - 2016-09-15 19:14 - 00988512 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2016-10-02 09:44 - 2016-09-15 19:14 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2016-10-02 09:44 - 2016-09-15 19:14 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2016-10-02 09:44 - 2016-09-15 19:14 - 00435040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-10-02 09:44 - 2016-09-15 19:14 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2016-10-02 09:44 - 2016-09-15 19:13 - 01264912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-10-02 09:44 - 2016-09-15 19:13 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2016-10-02 09:44 - 2016-09-15 19:12 - 08158672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-10-02 09:44 - 2016-09-15 19:12 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-10-02 09:44 - 2016-09-15 19:11 - 04673296 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-10-02 09:44 - 2016-09-15 19:11 - 00773168 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-10-02 09:44 - 2016-09-15 19:11 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2016-10-02 09:44 - 2016-09-15 19:11 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2016-10-02 09:44 - 2016-09-15 19:10 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-10-02 09:44 - 2016-09-15 19:10 - 00918848 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-10-02 09:44 - 2016-09-15 19:06 - 01469120 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-10-02 09:44 - 2016-09-15 19:06 - 01046880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-10-02 09:44 - 2016-09-15 19:06 - 00587968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-10-02 09:44 - 2016-09-15 19:06 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2016-10-02 09:44 - 2016-09-15 19:06 - 00050880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-10-02 09:44 - 2016-09-15 19:03 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-10-02 09:44 - 2016-09-15 19:03 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll
2016-10-02 09:44 - 2016-09-15 19:03 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2016-10-02 09:44 - 2016-09-15 19:02 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll
2016-10-02 09:44 - 2016-09-15 19:01 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2016-10-02 09:44 - 2016-09-15 19:00 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2016-10-02 09:44 - 2016-09-15 19:00 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2016-10-02 09:44 - 2016-09-15 19:00 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll
2016-10-02 09:44 - 2016-09-15 19:00 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2016-10-02 09:44 - 2016-09-15 19:00 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-10-02 09:44 - 2016-09-15 19:00 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-10-02 09:44 - 2016-09-15 18:59 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll
2016-10-02 09:44 - 2016-09-15 18:58 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-10-02 09:44 - 2016-09-15 18:58 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2016-10-02 09:44 - 2016-09-15 18:58 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll
2016-10-02 09:44 - 2016-09-15 18:58 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-10-02 09:44 - 2016-09-15 18:58 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2016-10-02 09:44 - 2016-09-15 18:58 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll
2016-10-02 09:44 - 2016-09-15 18:57 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2016-10-02 09:44 - 2016-09-15 18:57 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2016-10-02 09:44 - 2016-09-15 18:57 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-10-02 09:44 - 2016-09-15 18:57 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2016-10-02 09:44 - 2016-09-15 18:57 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-10-02 09:44 - 2016-09-15 18:57 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-10-02 09:44 - 2016-09-15 18:56 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-10-02 09:44 - 2016-09-15 18:56 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2016-10-02 09:44 - 2016-09-15 18:56 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-10-02 09:44 - 2016-09-15 18:56 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2016-10-02 09:44 - 2016-09-15 18:56 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2016-10-02 09:44 - 2016-09-15 18:56 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2016-10-02 09:44 - 2016-09-15 18:56 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll
2016-10-02 09:44 - 2016-09-15 18:56 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2016-10-02 09:44 - 2016-09-15 18:56 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll
2016-10-02 09:44 - 2016-09-15 18:55 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2016-10-02 09:44 - 2016-09-15 18:55 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2016-10-02 09:44 - 2016-09-15 18:55 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2016-10-02 09:44 - 2016-09-15 18:55 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll
2016-10-02 09:44 - 2016-09-15 18:55 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2016-10-02 09:44 - 2016-09-15 18:55 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-10-02 09:44 - 2016-09-15 18:55 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-10-02 09:44 - 2016-09-15 18:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-10-02 09:44 - 2016-09-15 18:55 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2016-10-02 09:44 - 2016-09-15 18:55 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-10-02 09:44 - 2016-09-15 18:55 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2016-10-02 09:44 - 2016-09-15 18:55 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2016-10-02 09:44 - 2016-09-15 18:54 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2016-10-02 09:44 - 2016-09-15 18:54 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2016-10-02 09:44 - 2016-09-15 18:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2016-10-02 09:44 - 2016-09-15 18:54 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
2016-10-02 09:44 - 2016-09-15 18:53 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2016-10-02 09:44 - 2016-09-15 18:53 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2016-10-02 09:44 - 2016-09-15 18:53 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2016-10-02 09:44 - 2016-09-15 18:53 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2016-10-02 09:44 - 2016-09-15 18:52 - 01358336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-10-02 09:44 - 2016-09-15 18:52 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2016-10-02 09:44 - 2016-09-15 18:52 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll
2016-10-02 09:44 - 2016-09-15 18:52 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-10-02 09:44 - 2016-09-15 18:52 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2016-10-02 09:44 - 2016-09-15 18:52 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-10-02 09:44 - 2016-09-15 18:52 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2016-10-02 09:44 - 2016-09-15 18:51 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2016-10-02 09:44 - 2016-09-15 18:51 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2016-10-02 09:44 - 2016-09-15 18:51 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
2016-10-02 09:44 - 2016-09-15 18:50 - 07625728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-10-02 09:44 - 2016-09-15 18:50 - 07219200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-10-02 09:44 - 2016-09-15 18:50 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2016-10-02 09:44 - 2016-09-15 18:50 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll
2016-10-02 09:44 - 2016-09-15 18:50 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2016-10-02 09:44 - 2016-09-15 18:49 - 19416576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-10-02 09:44 - 2016-09-15 18:49 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2016-10-02 09:44 - 2016-09-15 18:49 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-10-02 09:44 - 2016-09-15 18:49 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2016-10-02 09:44 - 2016-09-15 18:49 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-10-02 09:44 - 2016-09-15 18:49 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-10-02 09:44 - 2016-09-15 18:49 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2016-10-02 09:44 - 2016-09-15 18:48 - 01321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2016-10-02 09:44 - 2016-09-15 18:48 - 01112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2016-10-02 09:44 - 2016-09-15 18:47 - 19416576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-10-02 09:44 - 2016-09-15 18:47 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-10-02 09:44 - 2016-09-15 18:47 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2016-10-02 09:44 - 2016-09-15 18:47 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2016-10-02 09:44 - 2016-09-15 18:46 - 22566912 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-10-02 09:44 - 2016-09-15 18:46 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2016-10-02 09:44 - 2016-09-15 18:46 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2016-10-02 09:44 - 2016-09-15 18:46 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll
2016-10-02 09:44 - 2016-09-15 18:45 - 12174848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-10-02 09:44 - 2016-09-15 18:45 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2016-10-02 09:44 - 2016-09-15 18:44 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-10-02 09:44 - 2016-09-15 18:43 - 07467520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-10-02 09:44 - 2016-09-15 18:43 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsDesktopEngine.exe
2016-10-02 09:44 - 2016-09-15 18:43 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2016-10-02 09:44 - 2016-09-15 18:43 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll
2016-10-02 09:44 - 2016-09-15 18:43 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2016-10-02 09:44 - 2016-09-15 18:43 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2016-10-02 09:44 - 2016-09-15 18:43 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2016-10-02 09:44 - 2016-09-15 18:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2016-10-02 09:44 - 2016-09-15 18:42 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll
2016-10-02 09:44 - 2016-09-15 18:42 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-10-02 09:44 - 2016-09-15 18:42 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2016-10-02 09:44 - 2016-09-15 18:42 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2016-10-02 09:44 - 2016-09-15 18:42 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2016-10-02 09:44 - 2016-09-15 18:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
2016-10-02 09:44 - 2016-09-15 18:41 - 06043136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-10-02 09:44 - 2016-09-15 18:41 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2016-10-02 09:44 - 2016-09-15 18:41 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-10-02 09:44 - 2016-09-15 18:41 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
2016-10-02 09:44 - 2016-09-15 18:41 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-10-02 09:44 - 2016-09-15 18:41 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2016-10-02 09:44 - 2016-09-15 18:41 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2016-10-02 09:44 - 2016-09-15 18:41 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
2016-10-02 09:44 - 2016-09-15 18:41 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-10-02 09:44 - 2016-09-15 18:41 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 00327680 _____ C:\WINDOWS\system32\wc_storage.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2016-10-02 09:44 - 2016-09-15 18:40 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 02254848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 01595904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 00711168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-10-02 09:44 - 2016-09-15 18:39 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2016-10-02 09:44 - 2016-09-15 18:39 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 02999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-10-02 09:44 - 2016-09-15 18:38 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2016-10-02 09:44 - 2016-09-15 18:38 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-10-02 09:44 - 2016-09-15 18:38 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2016-10-02 09:44 - 2016-09-15 18:38 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll
2016-10-02 09:44 - 2016-09-15 18:38 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2016-10-02 09:44 - 2016-09-15 18:37 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-10-02 09:44 - 2016-09-15 18:37 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-10-02 09:44 - 2016-09-15 18:37 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2016-10-02 09:44 - 2016-09-15 18:37 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-10-02 09:44 - 2016-09-15 18:37 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-10-02 09:44 - 2016-09-15 18:37 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll
2016-10-02 09:44 - 2016-09-15 18:37 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll
2016-10-02 09:44 - 2016-09-15 18:37 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-10-02 09:44 - 2016-09-15 18:37 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-10-02 09:44 - 2016-09-15 18:37 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2016-10-02 09:44 - 2016-09-15 18:37 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-10-02 09:44 - 2016-09-15 18:37 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 03105792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2016-10-02 09:44 - 2016-09-15 18:36 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2016-10-02 09:44 - 2016-09-15 18:36 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2016-10-02 09:44 - 2016-09-15 18:36 - 00648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2016-10-02 09:44 - 2016-09-15 18:36 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2016-10-02 09:44 - 2016-09-15 18:36 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2016-10-02 09:44 - 2016-09-15 18:35 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-10-02 09:44 - 2016-09-15 18:35 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2016-10-02 09:44 - 2016-09-15 18:34 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2016-10-02 09:44 - 2016-09-15 18:34 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2016-10-02 09:44 - 2016-09-15 18:34 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
2016-10-02 09:44 - 2016-09-15 18:34 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2016-10-02 09:44 - 2016-09-15 18:34 - 00424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2016-10-02 09:44 - 2016-09-15 18:34 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2016-10-02 09:44 - 2016-09-15 18:33 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2016-10-02 09:44 - 2016-09-15 18:33 - 01004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-10-02 09:44 - 2016-09-15 18:33 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-10-02 09:44 - 2016-09-15 18:33 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll
2016-10-02 09:44 - 2016-09-15 18:32 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2016-10-02 09:44 - 2016-09-15 18:32 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2016-10-02 09:44 - 2016-09-15 18:32 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2016-10-02 09:44 - 2016-09-15 18:32 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2016-10-02 09:44 - 2016-09-15 18:31 - 09129984 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-10-02 09:44 - 2016-09-15 18:31 - 01912320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2016-10-02 09:44 - 2016-09-15 18:31 - 01553408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2016-10-02 09:44 - 2016-09-15 18:31 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2016-10-02 09:44 - 2016-09-15 18:31 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2016-10-02 09:44 - 2016-09-15 18:30 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-10-02 09:44 - 2016-09-15 18:30 - 01589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2016-10-02 09:44 - 2016-09-15 18:30 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll

[WarCake]

FRST log 2/3

2016-10-02 09:44 - 2016-09-15 18:30 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2016-10-02 09:44 - 2016-09-15 18:30 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-10-02 09:44 - 2016-09-15 18:30 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\baaupdate.exe
2016-10-02 09:44 - 2016-09-15 18:30 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
2016-10-02 09:44 - 2016-09-15 18:29 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2016-10-02 09:44 - 2016-09-15 18:29 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-10-02 09:44 - 2016-09-15 18:29 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-10-02 09:44 - 2016-09-15 18:29 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2016-10-02 09:44 - 2016-09-15 18:29 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe
2016-10-02 09:44 - 2016-09-15 18:28 - 23680512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-10-02 09:44 - 2016-09-15 18:28 - 03288064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2016-10-02 09:44 - 2016-09-15 18:28 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-10-02 09:44 - 2016-09-15 18:28 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2016-10-02 09:44 - 2016-09-15 18:28 - 00798720 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwcreator.exe
2016-10-02 09:44 - 2016-09-15 18:28 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-02 09:44 - 2016-09-15 18:28 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2016-10-02 09:44 - 2016-09-15 18:28 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveprompt.exe
2016-10-02 09:44 - 2016-09-15 18:27 - 05111296 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-10-02 09:44 - 2016-09-15 18:27 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2016-10-02 09:44 - 2016-09-15 18:27 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-10-02 09:44 - 2016-09-15 18:27 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-10-02 09:44 - 2016-09-15 18:27 - 00702976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2016-10-02 09:44 - 2016-09-15 18:27 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2016-10-02 09:44 - 2016-09-15 18:27 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2016-10-02 09:44 - 2016-09-15 18:27 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2016-10-02 09:44 - 2016-09-15 18:27 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2016-10-02 09:44 - 2016-09-15 18:27 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe
2016-10-02 09:44 - 2016-09-15 18:27 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe
2016-10-02 09:44 - 2016-09-15 18:27 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll
2016-10-02 09:44 - 2016-09-15 18:26 - 13081088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-10-02 09:44 - 2016-09-15 18:26 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2016-10-02 09:44 - 2016-09-15 18:26 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2016-10-02 09:44 - 2016-09-15 18:26 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-10-02 09:44 - 2016-09-15 18:26 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll
2016-10-02 09:44 - 2016-09-15 18:25 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-10-02 09:44 - 2016-09-15 18:25 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll
2016-10-02 09:44 - 2016-09-15 18:25 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-10-02 09:44 - 2016-09-15 18:25 - 00804864 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2016-10-02 09:44 - 2016-09-15 18:25 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-10-02 09:44 - 2016-09-15 18:25 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-10-02 09:44 - 2016-09-15 18:25 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2016-10-02 09:44 - 2016-09-15 18:25 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2016-10-02 09:44 - 2016-09-15 18:25 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll
2016-10-02 09:44 - 2016-09-15 18:24 - 05850624 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsDesktopEngine.exe
2016-10-02 09:44 - 2016-09-15 18:24 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2016-10-02 09:44 - 2016-09-15 18:24 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-10-02 09:44 - 2016-09-15 18:23 - 08122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-10-02 09:44 - 2016-09-15 18:23 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2016-10-02 09:44 - 2016-09-15 18:23 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2016-10-02 09:44 - 2016-09-15 18:23 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-10-02 09:44 - 2016-09-15 18:23 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-10-02 09:44 - 2016-09-15 18:23 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-10-02 09:44 - 2016-09-15 18:23 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2016-10-02 09:44 - 2016-09-15 18:23 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2016-10-02 09:44 - 2016-09-15 18:23 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2016-10-02 09:44 - 2016-09-15 18:22 - 08075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-10-02 09:44 - 2016-09-15 18:22 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-10-02 09:44 - 2016-09-15 18:22 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2016-10-02 09:44 - 2016-09-15 18:22 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-10-02 09:44 - 2016-09-15 18:22 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2016-10-02 09:44 - 2016-09-15 18:22 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-10-02 09:44 - 2016-09-15 18:22 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-10-02 09:44 - 2016-09-15 18:22 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2016-10-02 09:44 - 2016-09-15 18:22 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-10-02 09:44 - 2016-09-15 18:22 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2016-10-02 09:44 - 2016-09-15 18:21 - 04136960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2016-10-02 09:44 - 2016-09-15 18:21 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2016-10-02 09:44 - 2016-09-15 18:21 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2016-10-02 09:44 - 2016-09-15 18:21 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-10-02 09:44 - 2016-09-15 18:21 - 01491968 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-10-02 09:44 - 2016-09-15 18:21 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-10-02 09:44 - 2016-09-15 18:21 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-10-02 09:44 - 2016-09-15 18:21 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-10-02 09:44 - 2016-09-15 18:20 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-10-02 09:44 - 2016-09-15 18:20 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 02668544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-10-02 09:44 - 2016-09-15 18:20 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 01710080 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 00908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2016-10-02 09:44 - 2016-09-15 18:20 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2016-10-02 09:44 - 2016-09-15 18:19 - 03202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-10-02 09:44 - 2016-09-15 18:19 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2016-10-02 09:44 - 2016-09-15 18:19 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2016-10-02 09:44 - 2016-09-15 18:19 - 01130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-10-02 09:44 - 2016-09-15 18:19 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2016-10-02 09:44 - 2016-09-15 18:19 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-10-02 09:44 - 2016-09-15 18:19 - 00788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-10-02 09:44 - 2016-09-15 18:19 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-10-02 09:44 - 2016-09-15 18:19 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-10-02 09:44 - 2016-09-15 18:19 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2016-10-02 09:44 - 2016-09-15 18:18 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-10-02 09:44 - 2016-09-15 18:18 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-10-02 09:44 - 2016-09-15 18:17 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2016-10-02 09:44 - 2016-09-15 18:17 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-10-02 09:44 - 2016-09-15 18:17 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2016-10-02 09:44 - 2016-09-15 18:16 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2016-10-02 09:44 - 2016-09-15 18:16 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-10-02 09:44 - 2016-09-15 18:16 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2016-10-02 09:44 - 2016-09-15 18:16 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\tspubwmi.dll
2016-10-02 09:44 - 2016-09-15 18:16 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe
2016-10-02 09:44 - 2016-08-06 05:34 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
2016-10-02 09:44 - 2016-08-05 10:29 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-10-02 09:44 - 2016-08-05 10:29 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-10-02 09:43 - 2016-09-15 19:29 - 00823136 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2016-10-02 09:43 - 2016-09-15 19:29 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2016-10-02 09:43 - 2016-09-15 19:29 - 00424640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2016-10-02 09:43 - 2016-09-15 19:29 - 00169056 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2016-10-02 09:43 - 2016-09-15 19:29 - 00127328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppVStrm.sys
2016-10-02 09:43 - 2016-09-15 19:29 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2016-10-02 09:43 - 2016-09-15 19:25 - 00280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
2016-10-02 09:43 - 2016-09-15 19:24 - 01182048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2016-10-02 09:43 - 2016-09-15 19:22 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-10-02 09:43 - 2016-09-15 19:21 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2016-10-02 09:43 - 2016-09-15 19:18 - 06654616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-10-02 09:43 - 2016-09-15 19:15 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2016-10-02 09:43 - 2016-09-15 19:15 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-10-02 09:43 - 2016-09-15 19:14 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2016-10-02 09:43 - 2016-09-15 19:11 - 22219328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-10-02 09:43 - 2016-09-15 19:08 - 05683712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-10-02 09:43 - 2016-09-15 19:07 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2016-10-02 09:43 - 2016-09-15 19:07 - 01418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-10-02 09:43 - 2016-09-15 19:07 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2016-10-02 09:43 - 2016-09-15 19:06 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-10-02 09:43 - 2016-09-15 19:01 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2016-10-02 09:43 - 2016-09-15 19:00 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2016-10-02 09:43 - 2016-09-15 18:59 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2016-10-02 09:43 - 2016-09-15 18:59 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll
2016-10-02 09:43 - 2016-09-15 18:59 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2016-10-02 09:43 - 2016-09-15 18:59 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-02 09:43 - 2016-09-15 18:58 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2016-10-02 09:43 - 2016-09-15 18:58 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2016-10-02 09:43 - 2016-09-15 18:58 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-10-02 09:43 - 2016-09-15 18:58 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2016-10-02 09:43 - 2016-09-15 18:58 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2016-10-02 09:43 - 2016-09-15 18:57 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2016-10-02 09:43 - 2016-09-15 18:57 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2016-10-02 09:43 - 2016-09-15 18:57 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2016-10-02 09:43 - 2016-09-15 18:57 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
2016-10-02 09:43 - 2016-09-15 18:56 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2016-10-02 09:43 - 2016-09-15 18:56 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2016-10-02 09:43 - 2016-09-15 18:56 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2016-10-02 09:43 - 2016-09-15 18:55 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2016-10-02 09:43 - 2016-09-15 18:55 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2016-10-02 09:43 - 2016-09-15 18:55 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2016-10-02 09:43 - 2016-09-15 18:55 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2016-10-02 09:43 - 2016-09-15 18:55 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2016-10-02 09:43 - 2016-09-15 18:55 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2016-10-02 09:43 - 2016-09-15 18:55 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2016-10-02 09:43 - 2016-09-15 18:55 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2016-10-02 09:43 - 2016-09-15 18:55 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2016-10-02 09:43 - 2016-09-15 18:54 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-10-02 09:43 - 2016-09-15 18:54 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2016-10-02 09:43 - 2016-09-15 18:53 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2016-10-02 09:43 - 2016-09-15 18:53 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-10-02 09:43 - 2016-09-15 18:52 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2016-10-02 09:43 - 2016-09-15 18:52 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll
2016-10-02 09:43 - 2016-09-15 18:52 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2016-10-02 09:43 - 2016-09-15 18:50 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-10-02 09:43 - 2016-09-15 18:48 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2016-10-02 09:43 - 2016-09-15 18:46 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2016-10-02 09:43 - 2016-09-15 18:46 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2016-10-02 09:43 - 2016-09-15 18:46 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-10-02 09:43 - 2016-09-15 18:45 - 02749440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2016-10-02 09:43 - 2016-09-15 18:45 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-02 09:43 - 2016-09-15 18:45 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2016-10-02 09:43 - 2016-09-15 18:44 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2016-10-02 09:43 - 2016-09-15 18:44 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2016-10-02 09:43 - 2016-09-15 18:44 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-10-02 09:43 - 2016-09-15 18:43 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2016-10-02 09:43 - 2016-09-15 18:43 - 03196416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-10-02 09:43 - 2016-09-15 18:43 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2016-10-02 09:43 - 2016-09-15 18:43 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-10-02 09:43 - 2016-09-15 18:43 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2016-10-02 09:43 - 2016-09-15 18:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll
2016-10-02 09:43 - 2016-09-15 18:41 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-10-02 09:43 - 2016-09-15 18:41 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2016-10-02 09:43 - 2016-09-15 18:41 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2016-10-02 09:43 - 2016-09-15 18:40 - 03369984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2016-10-02 09:43 - 2016-09-15 18:40 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-10-02 09:43 - 2016-09-15 18:40 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-10-02 09:43 - 2016-09-15 18:40 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2016-10-02 09:43 - 2016-09-15 18:40 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2016-10-02 09:43 - 2016-09-15 18:40 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2016-10-02 09:43 - 2016-09-15 18:40 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2016-10-02 09:43 - 2016-09-15 18:40 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-10-02 09:43 - 2016-09-15 18:40 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-02 09:43 - 2016-09-15 18:40 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-10-02 09:43 - 2016-09-15 18:39 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2016-10-02 09:43 - 2016-09-15 18:39 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2016-10-02 09:43 - 2016-09-15 18:39 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2016-10-02 09:43 - 2016-09-15 18:38 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-10-02 09:43 - 2016-09-15 18:38 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2016-10-02 09:43 - 2016-09-15 18:38 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
2016-10-02 09:43 - 2016-09-15 18:38 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-10-02 09:43 - 2016-09-15 18:37 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2016-10-02 09:43 - 2016-09-15 18:37 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-10-02 09:43 - 2016-09-15 18:37 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-10-02 09:43 - 2016-09-15 18:37 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
2016-10-02 09:43 - 2016-09-15 18:37 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2016-10-02 09:43 - 2016-09-15 18:36 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-10-02 09:43 - 2016-09-15 18:36 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2016-10-02 09:43 - 2016-09-15 18:36 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-10-02 09:43 - 2016-09-15 18:35 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-10-02 09:43 - 2016-09-15 18:35 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-10-02 09:43 - 2016-09-15 18:35 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2016-10-02 09:43 - 2016-09-15 18:35 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2016-10-02 09:43 - 2016-09-15 18:35 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2016-10-02 09:43 - 2016-09-15 18:34 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-10-02 09:43 - 2016-09-15 18:33 - 01145344 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-10-02 09:43 - 2016-09-15 18:33 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
2016-10-02 09:43 - 2016-09-15 18:33 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2016-10-02 09:43 - 2016-09-15 18:33 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2016-10-02 09:43 - 2016-09-15 18:31 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll
2016-10-02 09:43 - 2016-09-15 18:30 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-10-02 09:43 - 2016-09-15 18:30 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2016-10-02 09:43 - 2016-09-15 18:29 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2016-10-02 09:43 - 2016-09-15 18:28 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2016-10-02 09:43 - 2016-09-15 18:28 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2016-10-02 09:43 - 2016-09-15 18:27 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2016-10-02 09:43 - 2016-09-15 18:26 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdechangepin.exe
2016-10-02 09:43 - 2016-09-15 18:24 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2016-10-02 09:43 - 2016-09-15 18:24 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-10-02 09:43 - 2016-09-15 18:24 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-10-02 09:43 - 2016-09-15 18:24 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2016-10-02 09:43 - 2016-09-15 18:24 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-10-02 09:43 - 2016-09-15 18:23 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
2016-10-02 09:43 - 2016-09-15 18:23 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-10-02 09:43 - 2016-09-15 18:22 - 00911872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2016-10-02 09:43 - 2016-09-15 18:20 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-10-02 09:43 - 2016-09-15 18:20 - 01984512 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-10-02 09:43 - 2016-09-15 18:20 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-10-02 09:43 - 2016-09-15 18:20 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-10-02 09:43 - 2016-09-15 18:19 - 03617792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-10-02 09:43 - 2016-09-15 18:19 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2016-10-02 09:43 - 2016-09-15 18:19 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-10-02 09:43 - 2016-09-15 18:19 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2016-10-02 09:43 - 2016-09-15 18:18 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-10-02 09:43 - 2016-09-15 18:17 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-10-02 09:43 - 2016-09-15 18:16 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2016-10-02 09:43 - 2016-09-15 18:16 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2016-10-02 09:43 - 2016-09-15 18:16 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2016-10-02 09:43 - 2016-09-15 16:00 - 00445765 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-10-02 09:43 - 2016-08-06 05:33 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
2016-09-28 01:02 - 2016-09-28 01:02 - 00001044 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-09-28 01:02 - 2016-09-28 01:02 - 00001032 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-09-25 13:46 - 2016-10-03 17:19 - 00000000 ___DC C:\WINDOWS\Panther
2016-09-25 13:45 - 2016-10-06 19:12 - 00000000 ____D C:\Windows.old
2016-09-25 13:44 - 2016-09-25 13:44 - 17187840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 13867520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 07792640 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 07654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 06574592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 05384192 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 05376000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 04747776 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 04557824 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 03435008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 03299328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 03116544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02947072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02913104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-09-25 13:44 - 2016-09-25 13:44 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-09-25 13:44 - 2016-09-25 13:44 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02485760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d12SDKLayers.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02423296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02360832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02315264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02256224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 02166232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02107392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 02083840 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01993216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01935360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d12SDKLayers.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01891328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01349120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01029632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 01006080 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00959104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00779776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00773200 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00755200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00681304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00650240 _____ (Microsoft) C:\WINDOWS\system32\DbgModel.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00601200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe

[WarCake]

FRST log 3/3

2016-09-25 13:44 - 2016-09-25 13:44 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00461312 _____ (Microsoft) C:\WINDOWS\SysWOW64\DbgModel.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00450392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00423776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00409944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2016-09-25 13:44 - 2016-09-25 13:44 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00379744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00321792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00303968 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL
2016-09-25 13:44 - 2016-09-25 13:44 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL
2016-09-25 13:44 - 2016-09-25 13:44 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS
2016-09-25 13:44 - 2016-09-25 13:44 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00151224 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00133472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorTcgDrv.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00079536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AddressParser.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AddressParser.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactActivation.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactActivation.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2016-09-25 13:44 - 2016-09-25 13:44 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL
2016-09-25 13:44 - 2016-09-25 13:44 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL
2016-09-25 13:44 - 2016-09-25 13:44 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL
2016-09-25 13:44 - 2016-09-25 13:44 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL
2016-09-25 13:44 - 2016-09-25 13:44 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2016-09-25 13:44 - 2016-09-25 13:44 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccessRes.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccessRes.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneutilRes.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneutilRes.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2016-09-25 13:44 - 2016-09-25 13:44 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2016-09-25 13:42 - 2016-10-12 12:18 - 00621522 _____ C:\WINDOWS\system32\perfh005.dat
2016-09-25 13:42 - 2016-10-12 12:18 - 00140782 _____ C:\WINDOWS\system32\perfc005.dat
2016-09-25 13:42 - 2016-09-25 13:42 - 00000000 ____D C:\WINDOWS\SysWOW64\cs
2016-09-25 13:42 - 2016-09-25 13:42 - 00000000 ____D C:\WINDOWS\system32\cs
2016-09-25 13:42 - 2016-09-25 13:41 - 00296654 _____ C:\WINDOWS\system32\perfi005.dat
2016-09-25 13:42 - 2016-09-25 13:41 - 00038682 _____ C:\WINDOWS\system32\perfd005.dat
2016-09-25 13:42 - 2016-07-16 05:58 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DxToolsReportGenerator.dll
2016-09-25 13:42 - 2016-07-16 05:29 - 06472704 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0005.dll
2016-09-25 13:42 - 2016-07-16 05:28 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsProxyStub.dll
2016-09-25 13:42 - 2016-07-16 05:28 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSD3DWARP12Debug.dll
2016-09-25 13:42 - 2016-07-16 05:26 - 00376320 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DXCpl.exe
2016-09-25 13:42 - 2016-07-16 05:26 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSD3DWARPDebug.dll
2016-09-25 13:42 - 2016-07-16 05:25 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXGIDebug.dll
2016-09-25 13:42 - 2016-07-16 05:23 - 14388224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXCaptureReplay.dll
2016-09-25 13:42 - 2016-07-16 05:22 - 00429056 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1debug3.dll
2016-09-25 13:42 - 2016-07-16 05:22 - 00355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\perf_gputiming.dll
2016-09-25 13:42 - 2016-07-16 05:19 - 01323520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11_3SDKLayers.dll
2016-09-25 13:42 - 2016-07-16 05:16 - 04969472 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsRemoteEngine.exe
2016-09-25 13:42 - 2016-07-16 05:15 - 06582784 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d12warp.dll
2016-09-25 13:42 - 2016-07-16 05:13 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsOfflineAnalysis.dll
2016-09-25 13:42 - 2016-07-16 05:13 - 01198592 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXCap.exe
2016-09-25 13:42 - 2016-07-16 05:13 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsCapture.dll
2016-09-25 13:42 - 2016-07-16 05:12 - 00297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsExperiment.dll
2016-09-25 13:42 - 2016-07-16 05:12 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsMonitor.dll
2016-09-25 13:42 - 2016-07-16 05:11 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsReporting.dll
2016-09-25 13:42 - 2016-07-16 04:58 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DxToolsReportGenerator.dll
2016-09-25 13:42 - 2016-07-16 04:44 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsProxyStub.dll
2016-09-25 13:42 - 2016-07-16 04:43 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VSD3DWARP12Debug.dll
2016-09-25 13:42 - 2016-07-16 04:42 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VSD3DWARPDebug.dll
2016-09-25 13:42 - 2016-07-16 04:41 - 00355840 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DXCpl.exe
2016-09-25 13:42 - 2016-07-16 04:41 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXGIDebug.dll
2016-09-25 13:42 - 2016-07-16 04:39 - 11670528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXCaptureReplay.dll
2016-09-25 13:42 - 2016-07-16 04:38 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1debug3.dll
2016-09-25 13:42 - 2016-07-16 04:37 - 01074176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11_3SDKLayers.dll
2016-09-25 13:42 - 2016-07-16 04:35 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perf_gputiming.dll
2016-09-25 13:42 - 2016-07-16 04:32 - 03701248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsRemoteEngine.exe
2016-09-25 13:42 - 2016-07-16 04:31 - 04977664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d12warp.dll
2016-09-25 13:42 - 2016-07-16 04:29 - 00953344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXCap.exe
2016-09-25 13:42 - 2016-07-16 04:29 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsExperiment.dll
2016-09-25 13:42 - 2016-07-16 04:29 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsCapture.dll
2016-09-25 13:42 - 2016-07-16 04:28 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsOfflineAnalysis.dll
2016-09-25 13:42 - 2016-07-16 04:28 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsMonitor.dll
2016-09-25 13:42 - 2016-07-16 04:28 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsReporting.dll
2016-09-25 13:39 - 2016-09-25 13:39 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-09-25 13:38 - 2016-09-25 13:38 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2016-09-25 13:38 - 2016-09-25 13:38 - 00000000 ____D C:\Program Files\Windows Identity Foundation
2016-09-25 13:38 - 2016-09-25 13:38 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-09-25 11:06 - 2016-09-07 18:32 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-09-25 11:06 - 2016-09-07 18:32 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-25 04:01 - 2016-09-25 04:01 - 00003322 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
2016-09-25 04:01 - 2016-09-25 04:01 - 00002388 _____ C:\Users\Béďa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-09-25 04:00 - 2016-09-25 04:00 - 00000000 ____D C:\Users\Béďa\AppData\Roaming\Skype
2016-09-25 03:59 - 2016-09-25 03:59 - 00000000 ____D C:\ProgramData\USOShared
2016-09-25 03:59 - 2016-09-25 03:59 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-09-25 03:58 - 2016-09-25 03:58 - 00000400 __RSH C:\ProgramData\ntuser.pol
2016-09-25 03:58 - 2016-09-25 03:58 - 00000020 ___SH C:\Users\Béďa\ntuser.ini
2016-09-25 03:57 - 2016-09-25 03:57 - 00000000 _SHDL C:\Users\Default\My Documents
2016-09-25 03:57 - 2016-09-25 03:57 - 00000000 _SHDL C:\Users\Default\Documents\My Videos
2016-09-25 03:57 - 2016-09-25 03:57 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures
2016-09-25 03:57 - 2016-09-25 03:57 - 00000000 _SHDL C:\Users\Default\Documents\My Music
2016-09-25 03:57 - 2016-09-25 03:57 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos
2016-09-25 03:57 - 2016-09-25 03:57 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures
2016-09-25 03:57 - 2016-09-25 03:57 - 00000000 _SHDL C:\Users\Default User\Documents\My Music
2016-09-25 03:56 - 2016-10-10 08:56 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-09-25 03:56 - 2016-09-25 03:57 - 00007623 _____ C:\WINDOWS\diagwrn.xml
2016-09-25 03:56 - 2016-09-25 03:57 - 00007623 _____ C:\WINDOWS\diagerr.xml
2016-09-25 03:56 - 2016-09-25 03:56 - 00003488 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-09-25 03:56 - 2016-09-25 03:56 - 00003352 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1468422511
2016-09-25 03:56 - 2016-09-25 03:56 - 00003336 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{BEA7FC65-D577-4CD7-B19B-20D4B922167A}
2016-09-25 03:56 - 2016-09-25 03:56 - 00003264 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-09-25 03:56 - 2016-09-25 03:56 - 00003070 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{775362F0-40D6-49FF-B6EC-0A5C0AE88E9E}
2016-09-25 03:56 - 2016-09-25 03:56 - 00002952 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-09-25 03:56 - 2016-09-25 03:56 - 00002812 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2979737218-4224468862-3874295616-1003
2016-09-25 03:56 - 2016-09-25 03:56 - 00002812 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2979737218-4224468862-3874295616-1001
2016-09-25 03:56 - 2016-09-25 03:56 - 00002752 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2979737218-4224468862-3874295616-1002
2016-09-25 03:56 - 2016-09-25 03:56 - 00002562 _____ C:\WINDOWS\System32\Tasks\IOBit_AutoShutdown20160117235120
2016-09-25 03:56 - 2016-09-25 03:56 - 00002556 _____ C:\WINDOWS\System32\Tasks\Driver Booster Scheduler
2016-09-25 03:56 - 2016-09-25 03:56 - 00002290 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Startup
2016-09-25 03:56 - 2016-09-25 03:56 - 00002288 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Update
2016-09-25 03:56 - 2016-09-25 03:56 - 00002224 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Béďa
2016-09-25 03:56 - 2016-09-25 03:56 - 00002170 _____ C:\WINDOWS\System32\Tasks\ASC9_SkipUac_Béďa
2016-09-25 03:56 - 2016-09-25 03:56 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2016-09-25 03:53 - 2016-09-25 03:53 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2016-09-25 03:53 - 2016-09-25 03:53 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi
2016-09-25 03:51 - 2016-09-25 03:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hry
2016-09-25 03:49 - 2016-10-10 10:51 - 00000000 ____D C:\Users\Béďa
2016-09-25 03:49 - 2016-09-25 03:54 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2016-09-25 03:49 - 2016-09-25 03:49 - 00000000 _SHDL C:\Users\Béďa\My Documents
2016-09-25 03:49 - 2016-09-25 03:49 - 00000000 _SHDL C:\Users\Béďa\Documents\My Videos
2016-09-25 03:49 - 2016-09-25 03:49 - 00000000 _SHDL C:\Users\Béďa\Documents\My Pictures
2016-09-25 03:49 - 2016-09-25 03:49 - 00000000 _SHDL C:\Users\Béďa\Documents\My Music
2016-09-25 03:49 - 2016-07-16 13:40 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-09-25 03:48 - 2016-10-10 10:50 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2016-09-25 03:48 - 2016-10-10 10:50 - 00000000 ____D C:\WINDOWS\system32\DAX2
2016-09-25 03:48 - 2016-10-10 10:50 - 00000000 ____D C:\Program Files\Realtek
2016-09-25 03:48 - 2016-10-10 08:56 - 00000000 ____D C:\ProgramData\NVIDIA
2016-09-25 03:48 - 2016-09-25 03:51 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-09-25 03:48 - 2016-09-25 03:51 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-09-25 03:48 - 2016-09-25 03:51 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-09-25 03:48 - 2016-09-25 03:48 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-09-25 03:48 - 2016-08-25 23:12 - 06384064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2016-09-25 03:48 - 2016-08-25 23:12 - 02475064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2016-09-25 03:48 - 2016-08-25 23:12 - 01764408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2016-09-25 03:48 - 2016-08-25 23:12 - 01362368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2016-09-25 03:48 - 2016-08-25 23:12 - 00548408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2016-09-25 03:48 - 2016-08-25 23:12 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2016-09-25 03:48 - 2016-08-25 23:12 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2016-09-25 03:48 - 2016-08-25 23:12 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2016-09-25 03:48 - 2016-08-22 17:17 - 07320235 _____ C:\WINDOWS\system32\nvcoproc.bin
2016-09-25 03:47 - 2016-10-12 11:52 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-09-25 03:47 - 2016-09-26 10:19 - 00263608 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-09-25 03:47 - 2016-09-25 03:47 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-09-24 21:26 - 2016-09-24 21:26 - 00043292 _____ C:\Users\Béďa\Downloads\[CzT]DJ_Bobo_diskografie_1993_2007_.torrent
2016-09-24 12:12 - 2016-09-24 12:12 - 00015463 _____ C:\Users\Béďa\Downloads\[CzT]Tahle_zeme_neni_pro_stary_No_Country_for_Old_Men.torrent
2016-09-20 19:22 - 2016-09-20 19:22 - 00001094 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-09-17 16:40 - 2016-09-17 16:40 - 00000000 ____D C:\Users\Béďa\AppData\Roaming\uplay
2016-09-17 16:37 - 2016-09-25 03:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Might and Magic Heroes VII
2016-09-17 16:37 - 2016-09-17 16:37 - 00001061 _____ C:\Users\Public\Desktop\Might and Magic Heroes VII.lnk
2016-09-17 14:39 - 2016-09-17 14:42 - 00000000 ____D C:\Users\Béďa\Downloads\Mad Max [FitGirl Repack]
2016-09-17 14:39 - 2016-09-17 14:39 - 00013704 _____ C:\Users\Béďa\Downloads\[CzT]Mad_Max_2015_.torrent
2016-09-17 14:37 - 2016-09-17 14:37 - 00046990 _____ C:\Users\Béďa\Downloads\[CzT]Might_and_Magic_Heroes_VII_Deluxe_edice_v1_6_2015_CZ_.torrent
2016-09-16 20:38 - 2016-09-16 20:38 - 00000000 ____D C:\Users\Béďa\.QtWebEngineProcess
2016-09-16 20:38 - 2016-09-16 20:38 - 00000000 ____D C:\Users\Béďa\.Origin
2016-09-15 22:35 - 2016-09-15 22:35 - 00030696 _____ C:\Users\Béďa\Downloads\[CzT]Best_Big_Boobs.torrent
2016-09-15 03:42 - 2016-09-25 03:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2016-09-15 03:42 - 2016-09-15 03:42 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2016-09-14 10:56 - 2016-09-14 10:56 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2016-09-14 10:56 - 2016-09-14 10:56 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-10-12 12:18 - 2016-05-22 10:16 - 01823128 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-10-12 12:11 - 2013-08-22 17:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-10-11 22:32 - 2015-04-10 19:14 - 00000000 ____D C:\Users\Béďa\AppData\Roaming\IObit
2016-10-11 22:32 - 2015-04-10 19:14 - 00000000 ____D C:\ProgramData\IObit
2016-10-10 23:10 - 2015-04-10 19:14 - 00000000 ____D C:\Program Files (x86)\IObit
2016-10-10 11:07 - 2016-07-16 08:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2016-10-10 10:50 - 2016-07-16 13:45 - 00000000 ___HD C:\Program Files\WindowsApps
2016-10-10 10:50 - 2016-07-16 13:44 - 00000000 ____D C:\WINDOWS\INF
2016-10-10 10:50 - 2015-04-10 19:14 - 00000000 ____D C:\Users\Béďa\AppData\LocalLow\IObit
2016-10-10 10:49 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\registration
2016-10-10 09:33 - 2015-12-26 20:58 - 00000000 ____D C:\Users\Béďa\AppData\Local\LogMeIn Hamachi
2016-10-09 22:31 - 2015-04-16 18:56 - 00000000 ____D C:\Users\Béďa\AppData\Roaming\vlc
2016-10-08 16:09 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-10-08 00:19 - 2015-03-10 19:21 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-10-06 19:25 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\rescache
2016-10-03 21:40 - 2015-06-08 00:52 - 00000000 ____D C:\Users\Béďa\AppData\Roaming\Origin
2016-10-03 17:41 - 2015-06-08 00:51 - 00000000 ____D C:\ProgramData\Origin
2016-10-03 17:40 - 2015-06-08 00:52 - 00000000 ____D C:\Users\Béďa\AppData\Local\Origin
2016-10-03 17:40 - 2015-04-10 21:02 - 00000000 ____D C:\Program Files (x86)\Origin
2016-10-02 20:15 - 2016-02-13 15:40 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-10-02 20:12 - 2016-07-16 21:04 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2016-10-02 20:12 - 2016-07-16 20:56 - 00000000 ____D C:\WINDOWS\OCR
2016-10-02 20:12 - 2016-07-16 13:45 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2016-10-02 20:12 - 2016-07-16 13:45 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-10-02 20:12 - 2016-07-16 13:45 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-10-02 20:12 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2016-10-02 20:12 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-10-02 20:12 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\setup
2016-10-02 20:12 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-10-02 20:12 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-10-02 20:12 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-10-02 20:12 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\Provisioning
2016-10-02 20:12 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-10-02 20:12 - 2016-07-16 13:45 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-10-02 20:12 - 2016-07-16 13:45 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-10-02 20:12 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-10-02 20:12 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-10-02 20:12 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-10-02 09:51 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-09-28 19:45 - 2016-06-23 23:35 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-09-26 10:28 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\appcompat
2016-09-25 18:54 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-09-25 13:46 - 2016-07-16 13:46 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-09-25 13:44 - 2016-07-16 13:45 - 00000000 ___SD C:\WINDOWS\system32\dsc
2016-09-25 13:44 - 2016-07-16 13:45 - 00000000 ___RD C:\Program Files\Windows Defender
2016-09-25 13:44 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\es-MX
2016-09-25 13:44 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-09-25 13:44 - 2016-07-16 13:45 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-09-25 13:42 - 2016-07-16 20:55 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2016-09-25 13:42 - 2016-07-16 20:55 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2016-09-25 13:42 - 2016-07-16 20:55 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2016-09-25 13:42 - 2016-07-16 20:55 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2016-09-25 13:42 - 2016-07-16 20:55 - 00000000 ____D C:\WINDOWS\system32\winrm
2016-09-25 13:42 - 2016-07-16 20:55 - 00000000 ____D C:\WINDOWS\system32\WCN
2016-09-25 13:42 - 2016-07-16 20:55 - 00000000 ____D C:\WINDOWS\system32\slmgr
2016-09-25 13:42 - 2016-07-16 20:55 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2016-09-25 13:42 - 2016-07-16 13:45 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2016-09-25 13:42 - 2016-07-16 13:45 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-09-25 13:42 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2016-09-25 13:42 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
2016-09-25 13:42 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-09-25 13:42 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\migwiz
2016-09-25 13:42 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\Com
2016-09-25 13:42 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\IME
2016-09-25 13:42 - 2016-07-16 13:45 - 00000000 ____D C:\Program Files\Common Files\System
2016-09-25 13:42 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\servicing
2016-09-25 13:38 - 2016-07-16 13:41 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2016-09-25 13:38 - 2016-07-16 13:41 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2016-09-25 13:38 - 2016-07-16 13:41 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2016-09-25 13:38 - 2016-07-16 13:41 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2016-09-25 13:38 - 2016-07-16 13:41 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2016-09-25 04:30 - 2015-04-10 18:53 - 00000000 ____D C:\Users\Béďa\AppData\Local\Packages
2016-09-25 04:01 - 2016-05-22 10:35 - 00000000 ___RD C:\Users\Béďa\OneDrive
2016-09-25 03:59 - 2016-07-16 13:45 - 00000000 ____D C:\ProgramData\USOPrivate
2016-09-25 03:57 - 2016-07-16 13:45 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-09-25 03:55 - 2016-07-16 13:45 - 00000000 __RHD C:\Users\Public\Libraries
2016-09-25 03:55 - 2016-05-22 10:11 - 00022840 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-09-25 03:55 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2016-09-25 03:53 - 2015-10-30 08:28 - 00000000 ____D C:\Users\Default.migrated
2016-09-25 03:51 - 2016-08-30 23:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-09-25 03:51 - 2016-07-27 00:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft
2016-09-25 03:51 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2016-09-25 03:51 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2016-09-25 03:51 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2016-09-25 03:51 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2016-09-25 03:51 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\spool
2016-09-25 03:51 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2016-09-25 03:51 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2016-09-25 03:51 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2016-09-25 03:51 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\et-EE
2016-09-25 03:51 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-09-25 03:51 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-09-25 03:51 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\InputMethod
2016-09-25 03:51 - 2016-07-16 13:45 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-09-25 03:51 - 2016-01-29 17:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
2016-09-25 03:51 - 2016-01-03 11:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Start Menu 8
2016-09-25 03:51 - 2015-12-27 21:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games
2016-09-25 03:51 - 2015-12-27 00:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
2016-09-25 03:51 - 2015-10-24 19:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metrosoft
2016-09-25 03:51 - 2015-08-27 21:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-09-25 03:51 - 2015-08-11 16:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stronghold Crusader Extreme HD [GOG.com]
2016-09-25 03:51 - 2015-04-11 14:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-09-25 03:51 - 2015-04-10 23:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-09-25 03:51 - 2015-03-20 09:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.4
2016-09-25 03:51 - 2015-03-18 20:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 5 SDK
2016-09-25 03:51 - 2015-03-18 20:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-09-25 03:51 - 2015-03-18 20:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2016-09-25 03:51 - 2015-03-18 20:30 - 00000000 ____D C:\Program Files\IIS
2016-09-25 03:51 - 2015-03-18 20:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression
2016-09-25 03:51 - 2015-03-18 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\1033
2016-09-25 03:51 - 2015-03-18 20:24 - 00000000 ____D C:\WINDOWS\system32\1033
2016-09-25 03:51 - 2015-03-11 20:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG PC Suite
2016-09-25 03:51 - 2015-03-10 23:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vypínač na dobrou noc
2016-09-25 03:51 - 2015-03-10 21:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2016-09-25 03:51 - 2015-03-10 21:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-09-25 03:51 - 2015-03-10 19:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ISO to USB
2016-09-25 03:51 - 2015-03-10 19:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-09-25 03:51 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2016-09-25 03:51 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2016-09-25 03:49 - 2015-09-07 23:05 - 00000000 ____D C:\Users\Béďa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2016-09-25 03:49 - 2015-04-11 14:22 - 00000000 ____D C:\Users\Béďa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-09-25 03:49 - 2015-04-10 23:15 - 00000000 ____D C:\Users\Béďa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2016-09-25 03:48 - 2016-07-16 13:45 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-09-25 03:48 - 2016-07-16 13:45 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-09-25 03:48 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\Help
2016-09-25 03:30 - 2016-07-10 13:36 - 00000252 _____ C:\WINDOWS\Tasks\ASC9_SkipUac_Béďa.job
2016-09-25 03:18 - 2016-07-29 00:13 - 00000976 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-25 00:18 - 2016-07-29 00:13 - 00000972 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-19 01:30 - 2016-01-18 00:51 - 00000240 _____ C:\WINDOWS\Tasks\IOBit_AutoShutdown20160117235120.job
2016-09-17 16:39 - 2015-12-27 21:06 - 00000000 ____D C:\Users\Béďa\Documents\My Games
2016-09-14 12:30 - 2015-03-13 07:21 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-09-14 12:27 - 2015-03-13 07:21 - 144199024 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Files in the root of some directories =======

2015-11-30 22:44 - 2015-11-30 22:44 - 0007601 _____ () C:\Users\Béďa\AppData\Local\Resmon.ResmonCfg
2016-09-25 03:48 - 2016-09-25 03:48 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-10-09 22:36

==================== End of FRST.txt ============================