provera

1

provera

offline
  • Pridružio: 15 Feb 2011
  • Poruke: 112

Treba mi pomoc.
Mislim da sam zakacio neki virus.
Malo malo pa mi se upali neki microsoft removal program,podigne buku u kucistu momentalno.
Imam neki strani iptv i slika pocne da mi koci.



Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 8.02.2019
Ran by Aca (administrator) on DESKTOP-5CJKF12 (08-02-2019 23:07:07)
Running from C:\Users\Aca\AppData\Local\Temp\scoped_dir3332_14714
Loaded Profiles: Aca (Available Profiles: Aca)
Platform: Windows 10 Pro Version 1803 17134.523 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: geekstogo.com/forum/topic/335081-frst-t.....scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\DriverStore\FileRepository\c0338124.inf_amd64_923c69fb6002c3cc\B337967\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AMD) C:\Windows\System32\DriverStore\FileRepository\c0338124.inf_amd64_923c69fb6002c3cc\B337967\atieclxx.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TunnelBear) C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1901.7-0\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.38.138.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.1000_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.38.138.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19011.11311.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Innovative Digital Technologies) C:\Users\Aca\AppData\Roaming\ACEStream\engine\ace_engine.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Innovative Digital Technologies) C:\Users\Aca\AppData\Roaming\ACEStream\engine\ace_engine.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(AMD) C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe
(AMD) C:\Program Files\AMD\Performance Profile Client\AUEPMaster.exe
(AMD) C:\Program Files\AMD\Performance Profile Client\AUEPUF.exe
(Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
() C:\Users\Aca\AppData\Roaming\ACEStream\updater\ace_update.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\System32\osk.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
(Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe
(CM&V Hackbart) C:\Program Files (x86)\DVBViewer\DVBViewer.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech -> Logitech Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2675176 2018-12-13] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [4810224 2018-12-19] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\Run: [Viber] => C:\Users\Aca\AppData\Local\Viber\Viber.exe [37117512 2018-12-21] (Viber Media S.à r.l. -> Viber Media S.à r.l.)
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3131680 2018-11-26] (Valve -> Valve Corporation)
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\Run: [AceStream] => C:\Users\Aca\AppData\Roaming\ACEStream\engine\ace_engine.exe [27960 2018-08-23] (INNOVATIVE DIGITAL TECHNOLOGIES LLC -> Innovative Digital Technologies)
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [731240 2018-10-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\MountPoints2: {08c314cd-dd27-11e8-9ce6-c46e1f018836} - "G:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\MountPoints2: {10645927-92c0-11e7-9c1d-c46e1f018836} - "I:\Setup.exe"
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\MountPoints2: {b1694dc9-f4de-11e8-9cf3-c46e1f018836} - "D:\setup.exe"
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\MountPoints2: {e87495f0-8eed-11e8-9cd0-c46e1f018836} - "G:\setup.exe"
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\MountPoints2: {ecdd3eb5-9e5c-11e8-9cd3-c46e1f018836} - "D:\Setup.exe"
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\MountPoints2: {f3e9928a-721a-11e7-9bf6-c46e1f018836} - "H:\setup.exe"
HKU\S-1-5-18\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [30872640 2018-11-28] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.96\Installer\chrmstp.exe [2019-02-06] (Google LLC -> Google Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{5b1f49b7-7890-492f-a24a-af3b8702a3f7}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{ffca23f2-0ee3-4772-a07b-4b2507c237e0}: [DhcpNameServer] 172.18.10.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10440__180526__yaie
SearchScopes: HKU\S-1-5-21-1063614729-1431274192-2396134605-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1063614729-1431274192-2396134605-1001 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://search.yahoo.com/yhs/search?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__ch_WCYID10440__180526__yaie&p={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> No File
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2018-12-22] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_171\bin\ssv.dll [2018-05-05] (Oracle America, Inc. -> Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-02-17] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2018-07-20] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-05-05] (Oracle America, Inc. -> Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-02-17] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2018-12-22] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-02-17] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2018-07-22] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-02-17] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-02-17] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-02-17] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2018-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2018-04-10] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2018-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2018-04-10] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: nqeczspd.default
FF ProfilePath: C:\Users\Aca\AppData\Roaming\Mozilla\Firefox\Profiles\nqeczspd.default [2019-02-08]
FF Homepage: Mozilla\Firefox\Profiles\nqeczspd.default -> hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10440__180526__yaff
FF NewTab: Mozilla\Firefox\Profiles\nqeczspd.default -> hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10440__180526__yaff
FF SearchPlugin: C:\Users\Aca\AppData\Roaming\Mozilla\Firefox\Profiles\nqeczspd.default\searchplugins\yahoo-lavasoft-ff59.xml [2018-05-26]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2018-10-06]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Aca\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi
FF Extension: (Ace Script) - C:\Users\Aca\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi [2018-11-26]
FF HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Aca\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Aca\AppData\Roaming\IDM\idmmzcc5 [2017-09-01] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_114.dll [2019-01-08] ()
FF Plugin: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-05-05] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-05-05] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-01-23] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_114.dll [2019-01-08] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1232202.dll [2018-03-09] (Adobe Systems, Inc.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-04-10] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2018-12-19] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-01-23] (Adobe Systems)
FF Plugin HKU\S-1-5-21-1063614729-1431274192-2396134605-1001: @acestream.net/acestreamplugin,version=3.1.32 -> C:\Users\Aca\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-13] (Innovative Digital Technologies)

Chrome:
=======
CHR HomePage: Default -> hxxps://poslovi.infostud.com/oglasi-za-posao/grad/beograd-35#last_search_time=&page=0&submit=0&q=&city%5B%5D=35&dist=50&vreme_postavljanja=2&rok_konkursa=&firma_uid=&education=&vrste_kategorija_posla=&jezik=&sort=
CHR Profile: C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default [2019-02-08]
CHR Extension: (Slides) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-10-12]
CHR Extension: (Magic Actions for YouTube™) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2019-01-21]
CHR Extension: (Docs) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-10-12]
CHR Extension: (Google Drive) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-12]
CHR Extension: (YouTube) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-10-12]
CHR Extension: (X-notifier (for Gmail™,Hotmail,Yahoo,AOL...)) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdfjbkbddpfnoplfhceolpopfoepleco [2019-02-05]
CHR Extension: (Tampermonkey) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2018-10-12]
CHR Extension: (Adobe Acrobat) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2018-10-12]
CHR Extension: (Sheets) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-10-12]
CHR Extension: (Google Docs Offline) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-10-12]
CHR Extension: (AdBlock) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-02-08]
CHR Extension: (Tools for Instagram™) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\khnadcdfjbjgojiilfdebbpiepokangj [2018-10-12]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2018-10-12]
CHR Extension: (Ace Script) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2018-12-20]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-10-12]
CHR Extension: (Tab Hibernation) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbdpajcdgknpendpmecafmopknefafha [2018-10-12]
CHR Extension: (Gmail) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-10-12]
CHR Extension: (Chrome Media Router) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-01-30]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - <no Path/update_url>
CHR HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx <not found>

Opera:
=======
OPR Extension: (Magic Actions for YouTube™) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2019-01-16]
OPR Extension: (X-notifier (for Gmail™,Hotmail,Yahoo,AOL...)) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\cdfjbkbddpfnoplfhceolpopfoepleco [2018-05-01]
OPR Extension: (Install Chrome Extensions) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2018-08-20]
OPR Extension: (Google Translate) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\mchdgimobfnilobnllpdnompfjkkfdmi [2019-01-21]
OPR Extension: (Ace Script) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2018-05-02]
OPR Extension: (Adblock Plus - free ad blocker) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2019-01-23]
OPR Extension: (Downloader for Instagram™ (+ Upload photo)) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\olkpikmlhoaojbbmmpejnimiglejmboe [2019-02-07]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2917864 2018-12-13] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2709480 2018-12-13] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
R2 AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\c0338124.inf_amd64_923c69fb6002c3cc\B337967\atiesrxx.exe [507904 2019-01-17] (Advanced Micro Devices, Inc. -> AMD)
R2 AUEPLauncher; C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe [43008 2019-01-09] (AMD) [File not signed]
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3729512 2018-10-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [365040 2017-10-20] (Intel(R) pGFX -> Intel Corporation)
S2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [26112 2017-07-28] () [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2167056 2018-12-30] (Electronic Arts, Inc. -> Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2018-11-09] (Even Balance, Inc. -> )
R2 ReimageRealTimeProtector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [9037680 2018-04-25] (Reimage Limited -> Reimage®)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-07-18] (TeamViewer GmbH -> TeamViewer GmbH)
R2 TunnelBearMaintenance; C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe [138872 2018-10-29] (TunnelBear -> TunnelBear)
S3 uSHAREitSvc; C:\Program Files (x86)\SHAREit Technologies\SHAREit\SHAREit.Service.exe [33224 2017-09-11] (SHAREit Technologies Co.Ltd -> SHAREit Technologies Co.Ltd)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1901.7-0\NisSrv.exe [4096976 2019-01-25] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1901.7-0\MsMpEng.exe [113992 2019-01-25] (Microsoft Corporation -> Microsoft Corporation)
S2 CG6Service; "C:\Program Files\CyberGhost 6\CyberGhost.Service.exe" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [49448 2016-08-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0338124.inf_amd64_923c69fb6002c3cc\B337967\atikmdag.sys [52792320 2019-01-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0338124.inf_amd64_923c69fb6002c3cc\B337967\atikmpag.sys [589824 2019-01-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [107496 2018-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-07-26] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-07-26] (Disc Soft Ltd -> Disc Soft Ltd)
R3 ETDSMBus; C:\WINDOWS\System32\drivers\ETDSMBus.sys [32840 2017-07-26] (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronic Corp.)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-07-26] (Martin Malik - REALiX -> REALiX(tm))
S3 iaLPSSi_GPIO; C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128 2018-04-12] (Intel Corporation - Client Components Group -> Intel Corporation)
R0 iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [1477648 2017-07-26] (Intel(R) Rapid Storage Technology -> Intel Corporation)
R3 igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [7963632 2017-10-20] (Intel(R) pGFX -> Intel Corporation)
R3 IntcDAud; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [481768 2016-05-12] (Intel(R) OWR -> Intel(R) Corporation)
R3 MEIx64; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [206496 2017-07-27] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R1 MpKsl782509f3; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{CB6D5465-0F5E-4647-9D21-9A70E703D726}\MpKsl782509f3.sys [58120 2019-02-08] (Microsoft Corporation -> Microsoft Corporation)
R3 MTSBDA; C:\WINDOWS\System32\Drivers\MtsBda.sys [344592 2009-07-13] (TechniSat Digital S.A. -> TechniSat Provide)
R3 MtsHID; C:\WINDOWS\system32\drivers\MtsHID.sys [27664 2009-07-13] (TechniSat Digital S.A. -> TechniSat Provide)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [984040 2017-07-26] (Realtek Semiconductor Corp. -> Realtek )
R3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2018-07-31] (TunnelBear, Inc. -> The OpenVPN Project)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46488 2019-01-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [343032 2019-01-25] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [63480 2019-01-25] (Microsoft Windows -> Microsoft Corporation)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [63840 2015-06-06] (Intel(R) Software -> Intel Corporation)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-12-09] (Zemana Ltd. -> Zemana Ltd.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-02-08 23:06 - 2019-02-08 23:07 - 000000000 ____D C:\FRST
2019-02-08 23:06 - 2019-02-08 23:06 - 002434048 _____ (Farbar) C:\Users\Aca\Desktop\FRST64.exe
2019-02-08 22:56 - 2019-02-08 22:57 - 000000000 ____D C:\rei
2019-02-08 22:56 - 2019-02-08 22:56 - 000004348 _____ C:\WINDOWS\System32\Tasks\ReimageUpdater
2019-02-08 22:56 - 2019-02-08 22:56 - 000001886 _____ C:\Users\Public\Desktop\PC Scan & Repair by Reimage.lnk
2019-02-08 22:56 - 2019-02-08 22:56 - 000000000 ____D C:\ProgramData\Reimage Protector
2019-02-08 22:56 - 2019-02-08 22:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2019-02-08 22:56 - 2019-02-08 22:56 - 000000000 ____D C:\Program Files\Reimage
2019-02-08 22:55 - 2019-02-08 22:57 - 000000150 _____ C:\WINDOWS\Reimage.ini
2019-02-08 22:55 - 2019-02-08 22:55 - 000587920 _____ (Reimage) C:\Users\Aca\Desktop\ReimageRepair.exe
2019-02-08 22:55 - 2019-02-08 22:55 - 000587920 _____ (Reimage) C:\Users\Aca\Desktop\ReimageRepair (1).exe
2019-02-08 22:47 - 2019-02-08 22:47 - 000000916 _____ C:\Users\Public\Desktop\VLC media player.lnk
2019-02-08 19:28 - 2019-02-08 19:28 - 000003108 _____ C:\WINDOWS\System32\Tasks\AMDLinkUpdate
2019-02-08 19:23 - 2019-02-08 19:23 - 000003160 _____ C:\WINDOWS\System32\Tasks\StartCN
2019-02-08 19:23 - 2019-02-08 19:23 - 000003074 _____ C:\WINDOWS\System32\Tasks\StartDVR
2019-02-08 19:23 - 2019-02-08 19:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2019-02-08 19:22 - 2019-02-08 19:22 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2019-02-08 18:16 - 2019-02-08 19:30 - 000000000 ____D C:\Users\Aca\AppData\LocalLow\AMD
2019-02-08 18:07 - 2019-02-08 18:07 - 026490000 _____ (AMD Inc.) C:\Users\Aca\Downloads\radeon-software-adrenalin-2019-19.1.1-minimalsetup-190117_64bit.exe
2019-01-29 22:16 - 2019-01-29 22:16 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-01-28 09:18 - 2019-01-28 09:18 - 001032248 _____ (Akeo Consulting) C:\Users\Aca\Desktop\rufus-3.4.exe
2019-01-21 17:14 - 2019-02-08 18:13 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-01-17 20:48 - 2019-01-17 20:48 - 000018784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2019-01-17 20:48 - 2019-01-17 20:48 - 000018784 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2019-01-17 20:47 - 2019-01-17 20:47 - 001210368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2019-01-17 20:47 - 2019-01-17 20:47 - 000177152 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2019-01-17 20:47 - 2019-01-17 20:47 - 000153600 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2019-01-14 17:19 - 2019-01-18 18:48 - 000001068 _____ C:\Users\Aca\Desktop\ZLOrigin.lnk
2019-01-14 17:19 - 2019-01-18 18:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZLOrigin
2019-01-14 17:19 - 2019-01-18 18:48 - 000000000 ____D C:\Program Files (x86)\ZLOrigin
2019-01-09 20:14 - 2019-01-01 08:12 - 009084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-01-09 20:14 - 2019-01-01 08:12 - 007520104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-01-09 20:14 - 2019-01-01 08:12 - 002765344 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-01-09 20:14 - 2019-01-01 08:12 - 002465792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-01-09 20:14 - 2019-01-01 08:12 - 002421288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-01-09 20:14 - 2019-01-01 08:12 - 000128824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2019-01-09 20:14 - 2019-01-01 07:55 - 025856512 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-01-09 20:14 - 2019-01-01 07:50 - 022715392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-01-09 20:14 - 2019-01-01 07:45 - 007573504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-01-09 20:14 - 2019-01-01 07:45 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-01-09 20:14 - 2019-01-01 07:42 - 004939776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-01-09 20:14 - 2019-01-01 07:42 - 000717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2019-01-09 20:14 - 2019-01-01 07:41 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2019-01-09 20:14 - 2019-01-01 07:41 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-01-09 20:14 - 2019-01-01 07:37 - 006571584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-01-09 20:14 - 2019-01-01 07:37 - 002253696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-01-09 20:14 - 2019-01-01 07:37 - 001989040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-01-09 20:14 - 2019-01-01 07:29 - 022016512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-01-09 20:14 - 2019-01-01 07:22 - 019405312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-01-09 20:14 - 2019-01-01 07:15 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-01-09 20:14 - 2019-01-01 07:14 - 004514816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2019-01-09 20:13 - 2019-01-01 14:50 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2019-01-09 20:13 - 2019-01-01 14:47 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowslivelogin.dll
2019-01-09 20:13 - 2019-01-01 14:46 - 012710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-01-09 20:13 - 2019-01-01 14:45 - 000714752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2019-01-09 20:13 - 2019-01-01 14:45 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2019-01-09 20:13 - 2019-01-01 14:43 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-01-09 20:13 - 2019-01-01 14:20 - 011902976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-01-09 20:13 - 2019-01-01 14:20 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowslivelogin.dll
2019-01-09 20:13 - 2019-01-01 14:18 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2019-01-09 20:13 - 2019-01-01 14:17 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2019-01-09 20:13 - 2019-01-01 08:14 - 001221432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-01-09 20:13 - 2019-01-01 08:14 - 001063224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2019-01-09 20:13 - 2019-01-01 08:14 - 001029944 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-01-09 20:13 - 2019-01-01 08:14 - 000566568 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-01-09 20:13 - 2019-01-01 08:14 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-01-09 20:13 - 2019-01-01 08:14 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2019-01-09 20:13 - 2019-01-01 08:13 - 003292152 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2019-01-09 20:13 - 2019-01-01 08:13 - 001363536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2019-01-09 20:13 - 2019-01-01 08:13 - 000709728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2019-01-09 20:13 - 2019-01-01 08:13 - 000436024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-01-09 20:13 - 2019-01-01 08:13 - 000170808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2019-01-09 20:13 - 2019-01-01 08:12 - 000713272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2019-01-09 20:13 - 2019-01-01 08:12 - 000268304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2019-01-09 20:13 - 2019-01-01 08:12 - 000043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2019-01-09 20:13 - 2019-01-01 07:50 - 004383744 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-01-09 20:13 - 2019-01-01 07:48 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2019-01-09 20:13 - 2019-01-01 07:48 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2019-01-09 20:13 - 2019-01-01 07:48 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Print.Workflow.Source.dll
2019-01-09 20:13 - 2019-01-01 07:47 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-01-09 20:13 - 2019-01-01 07:47 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2019-01-09 20:13 - 2019-01-01 07:46 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2019-01-09 20:13 - 2019-01-01 07:46 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-01-09 20:13 - 2019-01-01 07:46 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2019-01-09 20:13 - 2019-01-01 07:45 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-01-09 20:13 - 2019-01-01 07:44 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2019-01-09 20:13 - 2019-01-01 07:44 - 001549824 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-01-09 20:13 - 2019-01-01 07:44 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-01-09 20:13 - 2019-01-01 07:44 - 000662528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2019-01-09 20:13 - 2019-01-01 07:44 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2019-01-09 20:13 - 2019-01-01 07:43 - 001805312 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-01-09 20:13 - 2019-01-01 07:42 - 002247680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2019-01-09 20:13 - 2019-01-01 07:42 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2019-01-09 20:13 - 2019-01-01 07:41 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2019-01-09 20:13 - 2019-01-01 07:41 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2019-01-09 20:13 - 2019-01-01 07:37 - 002478664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2019-01-09 20:13 - 2019-01-01 07:37 - 000880048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2019-01-09 20:13 - 2019-01-01 07:37 - 000581808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2019-01-09 20:13 - 2019-01-01 07:37 - 000381240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-01-09 20:13 - 2019-01-01 07:17 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll
2019-01-09 20:13 - 2019-01-01 07:16 - 005775872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-01-09 20:13 - 2019-01-01 07:16 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2019-01-09 20:13 - 2019-01-01 07:16 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2019-01-09 20:13 - 2019-01-01 07:15 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2019-01-09 20:13 - 2019-01-01 07:15 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-01-09 20:13 - 2019-01-01 07:15 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2019-01-09 20:13 - 2019-01-01 07:14 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-01-09 20:13 - 2019-01-01 07:14 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-01-09 20:13 - 2019-01-01 07:13 - 001628160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-01-09 20:13 - 2019-01-01 07:13 - 000594432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2019-01-09 20:13 - 2019-01-01 07:13 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2019-01-09 20:13 - 2019-01-01 07:12 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2019-01-09 20:13 - 2019-01-01 07:12 - 000795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2019-01-09 20:13 - 2019-01-01 07:12 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2019-01-09 20:13 - 2019-01-01 07:12 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2019-01-09 20:13 - 2019-01-01 06:23 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2019-01-09 20:13 - 2018-12-19 05:49 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-01-09 19:12 - 2019-01-09 19:12 - 000173432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdihk64.dll
2019-01-09 19:12 - 2019-01-09 19:12 - 000145104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdihk32.dll

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-02-08 23:08 - 2017-12-09 21:15 - 000217982 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2019-02-08 23:00 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-02-08 22:59 - 2018-12-02 08:47 - 000000000 ____D C:\Program Files (x86)\DVBViewer
2019-02-08 22:54 - 2018-02-17 23:32 - 000000000 ____D C:\Users\Aca\AppData\Roaming\vlc
2019-02-08 19:48 - 2018-11-08 18:49 - 000226168 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2019-02-08 19:44 - 2018-11-07 19:46 - 000000000 ____D C:\Users\Aca\Desktop\Zlo
2019-02-08 19:44 - 2018-11-07 19:35 - 000000000 ____D C:\ProgramData\Origin
2019-02-08 19:28 - 2018-05-17 17:25 - 000422072 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-02-08 19:28 - 2017-07-27 18:13 - 000000000 ____D C:\Users\Aca\AppData\Roaming\.ACEStream
2019-02-08 19:28 - 2017-07-26 08:45 - 000000000 __SHD C:\Users\Aca\IntelGraphicsProfiles
2019-02-08 19:27 - 2018-12-30 10:17 - 000000000 ____D C:\Program Files (x86)\TunnelBear
2019-02-08 19:27 - 2018-05-17 17:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-02-08 19:25 - 2018-04-11 22:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-02-08 19:25 - 2017-07-26 11:44 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2019-02-08 19:24 - 2018-12-29 18:15 - 000003304 _____ C:\WINDOWS\System32\Tasks\StartCNBM
2019-02-08 19:24 - 2018-05-17 17:28 - 000000000 ____D C:\Users\Aca
2019-02-08 19:24 - 2017-11-30 23:06 - 000000000 ____D C:\Program Files\AMD
2019-02-08 19:23 - 2018-12-10 17:16 - 000000000 ____D C:\Program Files (x86)\AMD
2019-02-08 19:22 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2019-02-08 19:21 - 2017-11-30 23:07 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2019-02-08 19:20 - 2017-08-28 15:19 - 000000060 _____ C:\ProgramData\SoftwareUpdateTemp.xml
2019-02-08 18:13 - 2018-05-17 17:25 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-02-08 18:13 - 2017-07-26 13:48 - 000000000 ____D C:\Program Files\CCleaner
2019-02-08 18:07 - 2017-07-26 08:38 - 000000000 ____D C:\AMD
2019-02-08 17:27 - 2018-07-10 21:23 - 000000000 ____D C:\ProgramData\Packages
2019-02-08 17:27 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2019-02-08 17:25 - 2018-05-17 17:43 - 000004164 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B5E66D46-CC5B-420F-8C72-6181807EDC07}
2019-02-07 17:24 - 2018-11-08 18:49 - 000226168 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2019-02-06 22:21 - 2018-10-12 17:02 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-02-06 22:21 - 2018-10-12 17:02 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-02-06 18:27 - 2017-09-08 21:24 - 000000000 ____D C:\Program Files\Opera
2019-02-05 18:07 - 2017-07-28 06:32 - 000000000 ____D C:\Users\Aca\AppData\LocalLow\Mozilla
2019-02-03 08:42 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-02-02 20:23 - 2017-07-26 18:49 - 000000000 ____D C:\Users\Aca\AppData\Roaming\uTorrent
2019-02-01 14:31 - 2018-05-17 17:43 - 000003958 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1504902358
2019-02-01 14:31 - 2017-09-08 21:25 - 000001107 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk
2019-02-01 14:22 - 2018-05-15 21:00 - 000000000 ___DC C:\WINDOWS\Panther
2019-01-30 22:13 - 2017-07-27 07:26 - 000000000 ____D C:\Users\Aca\AppData\Local\JDownloader 2.0
2019-01-29 18:45 - 2018-12-21 01:09 - 000000000 ___HD C:\_acestream_cache_
2019-01-25 18:34 - 2018-02-24 12:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-01-24 18:07 - 2018-05-17 17:43 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2019-01-24 18:06 - 2018-02-21 21:57 - 000002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2019-01-24 18:06 - 2018-02-21 21:57 - 000002114 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2019-01-20 14:30 - 2017-07-28 06:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-01-18 21:15 - 2018-05-17 17:39 - 000838560 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-01-18 21:11 - 2017-07-27 11:11 - 000000000 ____D C:\Program Files\Microsoft Silverlight
2019-01-18 21:11 - 2017-07-27 11:11 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2019-01-18 19:17 - 2018-11-16 18:23 - 000000000 ____D C:\Program Files\rempl
2019-01-18 18:53 - 2018-12-30 10:22 - 000000000 ____D C:\Program Files (x86)\Origin
2019-01-18 18:53 - 2018-11-07 19:49 - 000000000 ____D C:\Users\Aca\AppData\Roaming\Origin
2019-01-17 20:48 - 2018-12-13 00:39 - 001587224 _____ (AMD) C:\WINDOWS\system32\coinst_18.50.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000570376 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000492040 _____ C:\WINDOWS\system32\dgtrayicon.exe
2019-01-17 20:48 - 2018-04-26 23:36 - 000481288 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000479752 _____ C:\WINDOWS\system32\GameManager64.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000381960 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000340488 _____ C:\WINDOWS\system32\clinfo.exe
2019-01-17 20:48 - 2018-04-26 23:36 - 000183296 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000162304 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000151552 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000137216 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000045568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000042496 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 003735040 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 003363328 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 001652224 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 001210368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000921904 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000757256 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2019-01-17 20:47 - 2018-04-26 23:36 - 000751920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000552240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000473392 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000467456 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000439296 _____ C:\WINDOWS\system32\atieah64.exe
2019-01-17 20:47 - 2018-04-26 23:36 - 000382256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000381744 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000352792 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2019-01-17 20:47 - 2018-04-26 23:36 - 000239616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000210944 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000168656 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000158208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000147496 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000135168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000124416 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000122880 _____ C:\WINDOWS\system32\atidxx64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000119296 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000105472 _____ C:\WINDOWS\SysWOW64\atidxx32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000104448 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000069120 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000546048 _____ C:\WINDOWS\system32\amdmiracast.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000189264 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000166376 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000133128 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000126920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000126920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000118040 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000106024 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000106024 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2019-01-17 16:11 - 2018-04-26 23:36 - 003471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap
2019-01-17 16:11 - 2018-04-26 23:36 - 003437632 _____ C:\WINDOWS\system32\atiumd6a.cap
2019-01-17 16:11 - 2018-04-26 23:36 - 000906488 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb
2019-01-17 16:11 - 2018-04-26 23:36 - 000906488 _____ C:\WINDOWS\system32\atiapfxx.blb
2019-01-16 19:47 - 2017-07-27 11:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2019-01-12 10:40 - 2017-07-28 06:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-01-12 09:21 - 2018-12-30 10:18 - 000000000 ____D C:\Users\Aca\AppData\Roaming\TunnelBear
2019-01-11 16:11 - 2017-07-28 06:31 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-01-09 23:40 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput
2019-01-09 23:40 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-01-09 20:28 - 2017-11-14 21:14 - 000000000 ____D C:\WINDOWS\system32\MpEngineStore
2019-01-09 20:28 - 2017-08-08 20:32 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-01-09 20:26 - 2017-06-23 07:27 - 132790320 ____C (Microsoft Corporation) C:\WINDOWS\system32\mrt.exe
2019-01-09 20:12 - 2018-11-07 19:49 - 000000000 ____D C:\Program Files (x86)\Origin Games
2019-01-09 20:11 - 2016-07-16 12:47 - 000000167 _____ C:\WINDOWS\win.ini

==================== Files in the root of some directories =======

2018-09-28 18:23 - 2018-09-28 18:23 - 000000000 _____ () C:\Users\Aca\AppData\Local\oobelibMkey.log

Some files in TEMP:
====================
2019-02-08 22:46 - 2019-02-08 22:46 - 041846888 _____ () C:\Users\Aca\AppData\Local\Temp\vlc-3.0.6-win64.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\dllhost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-05-17 17:25

==================== End of FRST.txt ============================

mycity.rs/must-login.png

offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Meni logovi izgledaju čisto. PVidi stanje kad se isntalira nek idrugi antivirusni program.

offline
  • Pridružio: 15 Feb 2011
  • Poruke: 112

Ajde da ponovim ovo sve,posto sam podigao sistem par sati posle otvaranja teme.
Pokusavao sam da instaliram battlefield 4 sam onim zlo patchom za online igranje i iskako mi je neki prozor od windows difendera uporno.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15.02.2019
Ran by kosmet srbima (administrator) on DESKTOP-THBVBPR (16-02-2019 11:16:48)
Running from C:\Users\kosmet srbima\Desktop
Loaded Profiles: kosmet srbima (Available Profiles: kosmet srbima)
Platform: Windows 10 Pro Version 1809 17763.316 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: geekstogo.com/forum/topic/335081-frst-t.....scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AMD) C:\Windows\System32\DriverStore\FileRepository\u0337968.inf_amd64_e9075e8c655a0e88\B337967\atiesrxx.exe
(AMD) C:\Windows\System32\DriverStore\FileRepository\u0337968.inf_amd64_e9075e8c655a0e88\B337967\atieclxx.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1812.3-0\MsMpEng.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.39.180.0_x64__kzf8qxf38zg5c\SkypeApp.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.39.180.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
() C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20388.0_x64__8wekyb3d8bbwe\YourPhone.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Express\express.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1812.3-0\NisSrv.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(The CefSharp Authors) C:\Program Files (x86)\Garmin\Express\CefSharp.BrowserSubprocess.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11811.1001.18.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\SystemApps\InputApp_cw5n1h2txyewy\WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1812.3-0\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-14] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18388936 2018-04-25] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe [27648 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2161285649-454037250-3043812474-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [735336 2019-02-10] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-2161285649-454037250-3043812474-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [30905920 2019-02-12] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-2161285649-454037250-3043812474-1001\...\MountPoints2: {9eff000b-2fa9-11e9-8e89-c46e1f018836} - "G:\autorun.exe"
HKU\S-1-5-21-2161285649-454037250-3043812474-1001\...\MountPoints2: {cd13e55a-2d0c-11e9-8e87-c46e1f018836} - "F:\setup.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.109\Installer\chrmstp.exe [2019-02-14] (Google LLC -> Google Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{a7f11256-82bb-4d0c-8ef9-13de69fc6f4f}: [DhcpNameServer] 8.8.8.8 8.8.4.4

Internet Explorer:
==================
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-02-13] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF Extension: (Firefox ESR configurer for OLDJAWS screen reader ) - C:\Program Files\Mozilla Firefox\browser\features\jaws-esr@mozilla.org.xpi [2018-10-17] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_114.dll [2019-01-08] ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-02-13] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_114.dll [2019-01-08] ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-02-13] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2019-02-09] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2019-02-09] (Google Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\autoconfig.js [2018-11-08] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\cck2.cfg [2018-11-08] <==== ATTENTION

Chrome:
=======
CHR HomePage: Default -> hxxps://poslovi.infostud.com/oglasi-za-posao/grad/beograd-35#last_search_time=&page=0&submit=0&q=&city%5B%5D=35&dist=50&vreme_postavljanja=2&rok_konkursa=&firma_uid=&education=&vrste_kategorija_posla=&jezik=&sort=
CHR Profile: C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default [2019-02-16]
CHR Extension: (Slides) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-02-09]
CHR Extension: (Magic Actions for YouTube™) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2019-02-11]
CHR Extension: (Docs) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-02-09]
CHR Extension: (Google Drive) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-02-09]
CHR Extension: (YouTube) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-02-09]
CHR Extension: (X-notifier (for Gmail™,Hotmail,Yahoo,AOL...)) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdfjbkbddpfnoplfhceolpopfoepleco [2019-02-09]
CHR Extension: (Tampermonkey) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2019-02-09]
CHR Extension: (Sheets) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-02-09]
CHR Extension: (Google Docs Offline) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-02-09]
CHR Extension: (AdBlock) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-02-16]
CHR Extension: (Tools for Instagram™) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\khnadcdfjbjgojiilfdebbpiepokangj [2019-02-09]
CHR Extension: (Chrome Web Store Payments) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-02-09]
CHR Extension: (Gmail) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-02-09]
CHR Extension: (Chrome Media Router) - C:\Users\kosmet srbima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-02-09]

Opera:
=======
OPR Extension: (Google Translate) - C:\Users\kosmet srbima\AppData\Roaming\Opera Software\Opera Stable\Extensions\mchdgimobfnilobnllpdnompfjkkfdmi [2019-02-10]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD External Events Utility; C:\Windows\System32\DriverStore\FileRepository\u0337968.inf_amd64_e9075e8c655a0e88\B337967\atiesrxx.exe [508320 2019-01-10] (Advanced Micro Devices, Inc. -> AMD)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9619824 2018-12-26] (Microsoft Corporation -> Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4132456 2019-02-10] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [353768 2018-11-15] (Intel Corporation -> Intel Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2298688 2019-02-15] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3171144 2019-02-15] (Electronic Arts, Inc. -> Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2019-02-16] (Even Balance, Inc. -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5381128 2019-01-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\NisSrv.exe [3880120 2019-02-09] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\MsMpEng.exe [114208 2019-02-09] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdkmdag; C:\Windows\System32\DriverStore\FileRepository\u0337968.inf_amd64_e9075e8c655a0e88\B337967\atikmdag.sys [52792736 2019-01-10] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\Windows\System32\DriverStore\FileRepository\u0337968.inf_amd64_e9075e8c655a0e88\B337967\atikmpag.sys [590240 2019-01-10] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [107496 2019-02-09] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [42256 2019-02-10] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [59360 2019-02-10] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R0 iaStorE; C:\Windows\System32\drivers\iaStorE.sys [1068968 2018-09-03] (Intel(R) Rapid Storage Technology enterprise -> Intel Corporation)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [1139848 2019-02-09] (Realtek Semiconductor Corp. -> Realtek )
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46680 2019-02-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [330936 2019-02-09] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62136 2019-02-09] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-02-16 11:16 - 2019-02-16 11:17 - 000015762 _____ C:\Users\kosmet srbima\Desktop\FRST.txt
2019-02-16 11:16 - 2019-02-16 11:16 - 000000000 ____D C:\FRST
2019-02-16 11:15 - 2019-02-16 11:16 - 002433536 _____ (Farbar) C:\Users\kosmet srbima\Desktop\FRST64.exe
2019-02-16 10:03 - 2019-02-16 10:03 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\mbamtray
2019-02-16 10:03 - 2019-02-16 10:03 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\mbam
2019-02-16 10:02 - 2019-02-16 10:02 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2019-02-16 10:02 - 2019-02-16 10:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-02-16 10:02 - 2019-02-16 10:02 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-02-16 10:02 - 2019-02-16 10:02 - 000000000 ____D C:\Program Files\Malwarebytes
2019-02-16 10:02 - 2019-02-01 11:20 - 000020936 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2019-02-16 10:02 - 2019-01-08 15:32 - 000153328 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2019-02-15 17:18 - 2019-02-15 17:18 - 000000000 ____D C:\ProgramData\X360CE
2019-02-15 17:17 - 2019-02-15 17:17 - 000000000 ____D C:\Users\kosmet srbima\Desktop\x360ce_x64
2019-02-15 17:05 - 2019-02-15 18:03 - 000000000 ____D C:\Users\kosmet srbima\Documents\The Witcher 3
2019-02-15 17:01 - 2019-02-15 17:01 - 000000000 ____D C:\Windows\LastGood.Tmp
2019-02-15 16:43 - 2019-02-15 16:43 - 001700272 _____ C:\Users\kosmet srbima\Desktop\x360ce_x64.zip
2019-02-15 16:27 - 2019-02-15 16:27 - 000000000 ____D C:\Users\kosmet srbima\Documents\Garmin
2019-02-15 16:26 - 2019-02-15 17:01 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\Garmin
2019-02-15 16:26 - 2019-02-15 16:27 - 000000000 ____D C:\ProgramData\Garmin
2019-02-15 16:26 - 2019-02-15 16:26 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\Garmin_Ltd._or_its_subsid
2019-02-15 16:25 - 2019-02-15 16:25 - 000003624 _____ C:\Windows\System32\Tasks\GarminUpdaterTask
2019-02-15 16:25 - 2019-02-15 16:25 - 000001963 _____ C:\Users\Public\Desktop\Garmin Express.lnk
2019-02-15 16:25 - 2019-02-15 16:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2019-02-15 16:25 - 2019-02-15 16:25 - 000000000 ____D C:\Program Files\DIFX
2019-02-15 16:25 - 2019-02-15 16:25 - 000000000 ____D C:\Program Files (x86)\Garmin
2019-02-15 16:23 - 2019-02-15 16:23 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2019-02-15 12:44 - 2019-02-15 12:44 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\com.sportplanet.sportzone
2019-02-15 12:43 - 2019-02-15 12:43 - 000000962 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SportZone.lnk
2019-02-15 12:43 - 2019-02-15 12:43 - 000000950 _____ C:\Users\Public\Desktop\SportZone.lnk
2019-02-15 12:43 - 2019-02-15 12:43 - 000000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2019-02-15 12:43 - 2019-02-15 12:43 - 000000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2019-02-15 12:43 - 2019-02-15 12:43 - 000000000 ____D C:\ProgramData\Adobe
2019-02-15 12:43 - 2019-02-15 12:43 - 000000000 ____D C:\Program Files (x86)\SportZone
2019-02-15 12:43 - 2019-02-15 12:43 - 000000000 ____D C:\Program Files (x86)\Adobe
2019-02-15 12:42 - 2019-02-15 12:42 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\Adobe
2019-02-15 11:52 - 2019-02-15 11:52 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\WinClient
2019-02-15 11:51 - 2019-02-15 11:51 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\FlashZone
2019-02-15 11:51 - 2019-02-15 11:51 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\CEF
2019-02-15 11:51 - 2019-02-15 11:51 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\Apps\WinClient
2019-02-15 11:49 - 2019-02-16 09:06 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\1xCorp N.V
2019-02-15 09:24 - 2019-02-15 15:19 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\JDownloader 2.0
2019-02-15 09:24 - 2019-02-15 09:24 - 000002260 _____ C:\Users\kosmet srbima\Desktop\JDownloader 2.lnk
2019-02-15 09:24 - 2019-02-15 09:24 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2019-02-14 18:27 - 2019-02-15 15:52 - 000000000 ____D C:\Program Files (x86)\Origin
2019-02-14 18:27 - 2019-02-14 18:27 - 000001062 _____ C:\Users\Public\Desktop\Origin.lnk
2019-02-14 18:27 - 2019-02-14 18:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2019-02-14 18:26 - 2019-02-14 18:26 - 000000000 ____D C:\Users\kosmet srbima\.Origin
2019-02-13 19:12 - 2019-02-13 19:15 - 000000000 ____D C:\Windows\SysWOW64\directx
2019-02-13 19:11 - 2019-02-13 19:11 - 000001427 _____ C:\Users\kosmet srbima\Desktop\The Witcher 3 Wild Hunt.lnk
2019-02-13 19:11 - 2019-02-13 19:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\by.xatab
2019-02-13 18:17 - 2019-02-13 19:11 - 000000000 ____D C:\Program Files (x86)\The Witcher 3 Wild Hunt
2019-02-13 18:13 - 2019-02-16 10:11 - 000000000 ____D C:\Windows\AAct_Tools
2019-02-13 18:11 - 2019-02-13 18:11 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2019-02-13 18:11 - 2019-02-13 18:11 - 000002413 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2019-02-13 18:11 - 2019-02-13 18:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2019-02-13 18:09 - 2019-02-13 18:09 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2019-02-13 18:07 - 2019-02-13 18:10 - 000000000 ____D C:\Program Files\Microsoft Office
2019-02-13 18:07 - 2019-02-13 18:07 - 000000000 ____D C:\Program Files\Microsoft Office 15
2019-02-13 17:19 - 2019-02-13 17:19 - 026807296 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 023439360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 020812288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 019023872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 009683984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-02-13 17:19 - 2019-02-13 17:19 - 007883776 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 007645600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 006540424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 006070272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 005086208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 004885504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 004688896 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 004627456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 003922944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 003743744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 003662336 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 002927120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 002721280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 002626592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 002469648 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 002437552 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 002323696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 002021584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 001969680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 001700864 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 001671864 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 001484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 001467560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 001387520 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 001309696 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 001255736 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-02-13 17:19 - 2019-02-13 17:19 - 001050936 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-02-13 17:19 - 2019-02-13 17:19 - 001050624 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000982576 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000982032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 000972288 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000912384 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000833536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000769536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 000765960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000577536 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000543744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 000475152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2019-02-13 17:19 - 2019-02-13 17:19 - 000463672 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000461824 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000421904 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000419128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 000402944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 000387384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000340480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 000100352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdfs.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 000090424 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000047136 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe
2019-02-13 17:19 - 2019-02-13 17:19 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\hidparse.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2019-02-13 17:19 - 2019-02-13 17:19 - 000044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000039936 _____ (Microsoft Corporation) C:\Windows\system32\npmproxy.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000039304 _____ (Microsoft Corporation) C:\Windows\system32\NtlmShared.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000033056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NtlmShared.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll
2019-02-13 17:19 - 2019-02-13 17:19 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-02-13 17:19 - 2019-02-13 17:19 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-02-13 17:19 - 2019-02-13 17:19 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-02-13 17:19 - 2019-02-13 17:19 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-02-13 17:19 - 2019-02-13 17:19 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-02-13 17:19 - 2019-02-13 17:19 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-02-13 17:19 - 2019-02-13 17:19 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-02-13 17:19 - 2019-02-13 17:19 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2019-02-13 17:19 - 2019-02-13 17:19 - 000000072 _____ C:\Windows\system32\edgehtmlpluginpolicy.bin
2019-02-11 19:51 - 2019-02-16 09:04 - 000291496 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2019-02-11 19:51 - 2019-02-16 09:04 - 000291496 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2019-02-11 19:51 - 2019-02-16 09:04 - 000076152 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2019-02-11 19:51 - 2019-02-15 14:22 - 000912744 _____ C:\Windows\SysWOW64\pbsvc.exe
2019-02-11 19:42 - 2019-02-11 19:42 - 000000000 ____D C:\Users\kosmet srbima\.QtWebEngineProcess
2019-02-11 19:34 - 2019-02-16 09:04 - 000000000 ____D C:\ProgramData\Origin
2019-02-11 19:34 - 2019-02-16 07:30 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\Origin
2019-02-11 19:34 - 2019-02-14 18:35 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\Origin
2019-02-11 19:30 - 2019-02-11 19:30 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\OneDrive
2019-02-10 15:11 - 2019-02-10 15:11 - 000000000 ____D C:\Users\kosmet srbima\Documents\CPY_SAVES
2019-02-10 15:11 - 2019-02-10 15:11 - 000000000 ____D C:\ProgramData\KONAMI
2019-02-10 15:08 - 2019-02-10 15:08 - 000000000 ____D C:\Users\kosmet srbima\Documents\KONAMI
2019-02-10 14:44 - 2019-02-10 14:44 - 000001304 _____ C:\Users\Public\Desktop\Pro Evolution Soccer 2019.lnk
2019-02-10 14:44 - 2019-02-10 14:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pro Evolution Soccer 2019
2019-02-10 14:35 - 2019-02-10 15:06 - 000000000 ____D C:\Program Files (x86)\Pro Evolution Soccer 2019
2019-02-10 14:33 - 2019-02-10 14:33 - 000059360 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtliteusbbus.sys
2019-02-10 14:33 - 2019-02-10 14:33 - 000042256 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2019-02-10 14:33 - 2019-02-10 14:33 - 000000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2019-02-10 14:33 - 2019-02-10 14:33 - 000000000 ____D C:\Users\Public\Documents\Catch!
2019-02-10 14:33 - 2019-02-10 14:33 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\DAEMON Tools Lite
2019-02-10 14:33 - 2019-02-10 14:33 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\Disc_Soft_Ltd
2019-02-10 14:33 - 2019-02-10 14:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\DAEMON Tools Lite
2019-02-10 14:32 - 2019-02-10 14:33 - 000000000 ____D C:\Program Files\DAEMON Tools Lite
2019-02-10 14:32 - 2019-02-10 14:32 - 000000000 ____D C:\ProgramData\DAEMON Tools Lite
2019-02-10 12:17 - 2019-02-10 17:09 - 000000000 ____D C:\Users\kosmet srbima\Downloads\Pro.Evolution.Soccer.2019-CPY
2019-02-10 12:16 - 2019-02-10 12:16 - 000002714 _____ C:\Users\kosmet srbima\Desktop\µTorrent.lnk
2019-02-10 12:16 - 2019-02-10 12:16 - 000002714 _____ C:\Users\kosmet srbima\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2019-02-10 12:15 - 2019-02-16 09:58 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\uTorrent
2019-02-10 09:21 - 2019-02-12 20:44 - 000000000 ____D C:\Windows\Minidump
2019-02-10 04:28 - 2019-02-10 04:28 - 000000000 _SHDL C:\Documents and Settings
2019-02-10 04:25 - 2019-02-10 04:25 - 000000000 ____D C:\ProgramData\USOShared
2019-02-10 04:23 - 2019-02-16 09:10 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-02-10 04:23 - 2019-02-16 07:28 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-02-10 04:23 - 2019-02-14 01:11 - 000291072 _____ C:\Windows\system32\FNTCACHE.DAT
2019-02-10 04:23 - 2019-02-10 04:23 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2019-02-10 04:23 - 2019-02-10 04:23 - 000000000 ____D C:\Windows\ServiceProfiles
2019-02-10 04:23 - 2019-02-09 20:15 - 000000000 ____D C:\Windows\system32\Drivers\wd
2019-02-10 04:22 - 2019-02-13 19:37 - 000000000 ____D C:\Windows\Panther
2019-02-09 23:04 - 2019-02-09 23:04 - 000000095 _____ C:\AiOLog.txt
2019-02-09 22:43 - 2019-02-16 10:11 - 000000000 ____D C:\Program Files (x86)\DVBViewer
2019-02-09 22:43 - 2019-02-09 22:43 - 000001190 _____ C:\Users\Public\Desktop\DVBViewer.lnk
2019-02-09 22:43 - 2019-02-09 22:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVBViewer
2019-02-09 22:43 - 2019-02-09 22:43 - 000000000 ____D C:\ProgramData\CMUV
2019-02-09 22:35 - 2019-02-09 22:35 - 001898557 _____ C:\Users\kosmet srbima\Desktop\tv_channels_s1002727_plus.m3u
2019-02-09 22:08 - 2019-02-09 22:08 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\DRPNPS
2019-02-09 22:01 - 2019-02-09 22:01 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\Macromedia
2019-02-09 22:01 - 2014-09-10 17:14 - 000163480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 001070232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscomctl.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000660120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscomct2.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000617896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000444328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MShflxgd.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000416408 _____ (Microsoft Corporation ) C:\Windows\SysWOW64\comct332.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000279192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdatgrd.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000259736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msflxgrd.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000253080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdatlst.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000222360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tabctl32.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000219288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\richtx32.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000218776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dblist32.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000212112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mci32.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000179352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmask32.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000170920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comct232.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000131728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000130712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll
2019-02-09 22:01 - 2013-11-25 14:27 - 000127640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswinsck.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000119960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscomm32.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000108696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSSTKPRP.DLL
2019-02-09 22:01 - 2013-11-25 14:27 - 000104088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\picclp32.ocx
2019-02-09 22:01 - 2013-11-25 14:27 - 000084624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysinfo.ocx
2019-02-09 22:01 - 2011-01-12 20:36 - 001054208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71u.dll
2019-02-09 22:01 - 2011-01-12 20:25 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71DEU.DLL
2019-02-09 22:01 - 2011-01-12 20:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71ITA.DLL
2019-02-09 22:01 - 2011-01-12 20:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71FRA.DLL
2019-02-09 22:01 - 2011-01-12 20:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71ESP.DLL
2019-02-09 22:01 - 2011-01-12 20:25 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71ENU.DLL
2019-02-09 22:01 - 2011-01-12 20:25 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71KOR.DLL
2019-02-09 22:01 - 2011-01-12 20:25 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71JPN.DLL
2019-02-09 22:01 - 2011-01-12 20:25 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71CHT.DLL
2019-02-09 22:01 - 2011-01-12 20:25 - 000040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71CHS.DLL
2019-02-09 22:01 - 2011-01-12 20:19 - 001060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71.dll
2019-02-09 22:01 - 2011-01-12 19:53 - 000090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl71.dll
2019-02-09 22:01 - 2008-04-15 13:00 - 001355776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvbvm50.dll
2019-02-09 22:01 - 2007-02-01 17:13 - 000503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2019-02-09 22:01 - 2007-02-01 14:11 - 000344064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2019-02-09 22:01 - 2007-01-30 17:04 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr70.dll
2019-02-09 22:01 - 2006-08-25 21:28 - 001017344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70u.dll
2019-02-09 22:01 - 2006-08-25 21:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70ita.dll
2019-02-09 22:01 - 2006-08-25 21:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70fra.dll
2019-02-09 22:01 - 2006-08-25 21:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70esp.dll
2019-02-09 22:01 - 2006-08-25 21:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70deu.dll
2019-02-09 22:01 - 2006-08-25 21:15 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70enu.dll
2019-02-09 22:01 - 2006-08-25 21:15 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70kor.dll
2019-02-09 22:01 - 2006-08-25 21:15 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70jpn.dll
2019-02-09 22:01 - 2006-08-25 21:15 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70cht.dll
2019-02-09 22:01 - 2006-08-25 21:15 - 000040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70chs.dll
2019-02-09 22:01 - 2006-08-25 21:07 - 001024000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70.dll
2019-02-09 22:01 - 2006-08-25 20:17 - 000086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl70.dll
2019-02-09 22:01 - 2005-01-20 16:25 - 000054784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvci70.dll
2019-02-09 22:01 - 2002-01-05 02:40 - 000487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVCP70.DLL
2019-02-09 22:01 - 1996-01-12 01:00 - 000935632 _____ (Microsoft Corporation) C:\Windows\system\Vb40016.dll
2019-02-09 22:01 - 1996-01-12 01:00 - 000722192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Vb40032.dll
2019-02-09 22:01 - 1994-11-17 22:00 - 000210944 _____ C:\Windows\SysWOW64\msvcrt10.dll
2019-02-09 22:01 - 1993-05-11 18:00 - 000398416 _____ (Microsoft Corporation) C:\Windows\system\Vbrun300.dll
2019-02-09 22:01 - 1992-10-20 23:00 - 000356992 _____ (Microsoft Corporation) C:\Windows\system\vbrun200.dll
2019-02-09 22:01 - 1991-05-10 00:00 - 000271264 _____ C:\Windows\system\vbrun100.dll
2019-02-09 22:00 - 2019-02-09 22:00 - 000000000 ____D C:\Windows\system32\AMD
2019-02-09 21:58 - 2019-02-15 17:01 - 000018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2019-02-09 21:58 - 2019-02-09 21:58 - 000000000 ____D C:\Windows\SysWOW64\RTCOM
2019-02-09 21:58 - 2019-02-09 21:58 - 000000000 ____D C:\Program Files\Realtek
2019-02-09 21:57 - 2019-02-09 21:57 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-02-09 21:57 - 2019-02-09 21:57 - 000000993 _____ C:\Users\Public\Desktop\Firefox.lnk
2019-02-09 21:57 - 2019-02-09 21:57 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-02-09 21:57 - 2019-02-09 21:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-02-09 21:56 - 2019-02-14 17:46 - 000004274 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1549745796
2019-02-09 21:56 - 2019-02-14 17:46 - 000001497 _____ C:\Users\kosmet srbima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk
2019-02-09 21:56 - 2019-02-10 12:08 - 000001404 _____ C:\Users\kosmet srbima\Desktop\Opera Browser.lnk
2019-02-09 21:56 - 2019-02-09 21:56 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\Opera Software
2019-02-09 21:56 - 2019-02-09 21:56 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\Opera Software
2019-02-09 21:56 - 2019-02-09 21:56 - 000000000 ____D C:\Users\kosmet srbima\.cache
2019-02-09 21:52 - 2019-02-16 10:11 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\DRPSu
2019-02-09 21:52 - 2019-02-09 21:52 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\PeerDistRepub
2019-02-09 21:51 - 2019-02-09 21:51 - 000000000 ____D C:\Users\kosmet srbima\Desktop\DriverPack_Online_17.9.1_Portable
2019-02-09 21:39 - 2019-02-09 21:39 - 000466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2019-02-09 21:39 - 2019-02-09 21:39 - 000444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2019-02-09 21:39 - 2019-02-09 21:39 - 000122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2019-02-09 21:39 - 2019-02-09 21:39 - 000109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2019-02-09 21:39 - 2019-02-09 21:39 - 000000000 ____D C:\Program Files (x86)\OpenAL
2019-02-09 21:38 - 2019-02-09 21:38 - 000023600 _____ C:\Users\kosmet srbima\Desktop\Opera Passwords.csv
2019-02-09 21:37 - 2019-02-09 21:37 - 000000000 ____D C:\Program Files (x86)\Microsoft XNA
2019-02-09 21:36 - 2019-02-09 21:36 - 001139848 _____ (Realtek ) C:\Windows\system32\Drivers\rt640x64.sys
2019-02-09 21:34 - 2019-02-15 23:22 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\D3DSCache
2019-02-09 21:34 - 2019-02-09 21:34 - 000480176 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2019-02-09 21:33 - 2019-02-09 21:33 - 000574528 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys
2019-02-09 21:29 - 2019-02-09 21:29 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\2-click run
2019-02-09 21:29 - 2019-02-09 21:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Driver Booster PRO
2019-02-09 21:29 - 2019-02-09 21:29 - 000000000 ____D C:\2-click run
2019-02-09 21:27 - 2019-02-09 21:41 - 000000000 ____D C:\Program Files\CCleaner
2019-02-09 21:27 - 2019-02-09 21:27 - 000003936 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-02-09 21:27 - 2019-02-09 21:27 - 000002904 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2019-02-09 21:27 - 2019-02-09 21:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-02-09 21:22 - 2019-02-09 21:28 - 000000000 ____D C:\ProgramData\ProductData
2019-02-09 21:21 - 2019-02-09 21:45 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\IObit
2019-02-09 21:21 - 2019-02-09 21:45 - 000000000 ____D C:\Users\kosmet srbima\AppData\LocalLow\IObit
2019-02-09 21:21 - 2019-02-09 21:45 - 000000000 ____D C:\ProgramData\IObit
2019-02-09 21:12 - 2019-02-09 21:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters
2019-02-09 21:12 - 2019-02-09 21:12 - 000000000 ____D C:\Program Files (x86)\LAV Filters
2019-02-09 20:55 - 2019-02-09 20:55 - 000003160 _____ C:\Windows\System32\Tasks\StartCN
2019-02-09 20:55 - 2019-02-09 20:55 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\DBG
2019-02-09 20:55 - 2019-02-09 20:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2019-02-09 20:49 - 2019-02-09 20:49 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\ATI
2019-02-09 20:49 - 2019-02-09 20:49 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\ATI
2019-02-09 20:49 - 2019-02-09 20:49 - 000000000 ____D C:\ProgramData\ATI
2019-02-09 20:37 - 2019-02-09 20:37 - 000003672 _____ C:\Windows\System32\Tasks\CreateExplorerShellUnelevatedTask
2019-02-09 20:37 - 2019-02-09 20:37 - 000003444 _____ C:\Windows\System32\Tasks\StartIsBack health check
2019-02-09 20:37 - 2019-02-09 20:37 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\StartIsBack
2019-02-09 20:37 - 2019-02-09 20:37 - 000000000 ____D C:\Program Files (x86)\StartIsBack
2019-02-09 20:36 - 2019-02-09 20:36 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\WinRAR
2019-02-09 20:36 - 2019-02-09 20:36 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-02-09 20:36 - 2019-02-09 20:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-02-09 20:36 - 2019-02-09 20:36 - 000000000 ____D C:\Program Files\WinRAR
2019-02-09 20:30 - 2019-02-14 22:34 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-02-09 20:30 - 2019-02-09 20:30 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\Google
2019-02-09 20:30 - 2019-02-09 20:30 - 000000000 ____D C:\Users\kosmet srbima\AppData\LocalLow\AMD
2019-02-09 20:29 - 2019-02-09 20:43 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\Google
2019-02-09 20:29 - 2019-02-09 20:30 - 000000000 ____D C:\Program Files (x86)\Google
2019-02-09 20:29 - 2019-02-09 20:29 - 000003418 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2019-02-09 20:29 - 2019-02-09 20:29 - 000003294 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2019-02-09 20:20 - 2019-02-09 20:20 - 022111856 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 019284480 _____ (Microsoft Corporation) C:\Windows\system32\HologramWorld.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 017520640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 015224832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 008875520 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 007897088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 007724992 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 005584864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 005565952 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 005561856 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 005527552 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 005440008 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 005205464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 005112792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 004991096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 004702704 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 004588544 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 004526080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 004298752 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 004019200 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 003982848 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 003656192 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 003601920 _____ (Microsoft Corporation) C:\Windows\system32\tellib.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 003556352 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 003550384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 003386368 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002992640 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002942464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002776920 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002766136 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002702528 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002689024 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002618880 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002488320 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 002466304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002392576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcGenral.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002298880 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002278448 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002275888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002187264 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002149368 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002085376 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 002072728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001994768 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001975296 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001899160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001783296 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001720936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001715712 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001700880 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001696936 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-02-09 20:20 - 2019-02-09 20:20 - 001674480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001641400 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001604096 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001533440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001467384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 001462272 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001446400 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001415680 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001341584 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-02-09 20:20 - 2019-02-09 20:20 - 001331744 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001314304 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001309184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001289192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001282640 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001271608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContentDeliveryManager.Utilities.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001259024 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2019-02-09 20:20 - 2019-02-09 20:20 - 001258512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 001254912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001224704 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001221120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 001209360 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001200920 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001178344 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 001168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001098136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001064448 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001054200 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 001047552 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001032704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 001010176 _____ (Microsoft Corporation) C:\Windows\system32\refsutil.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000970256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000956416 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000954368 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000927232 _____ (Microsoft Corporation) C:\Windows\system32\assignedaccessmanagersvc.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000925184 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000913920 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000901632 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000887808 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000875008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000865784 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000864056 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000850968 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000829440 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000822448 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000820736 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000806560 _____ C:\Windows\SysWOW64\locale.nls
2019-02-09 20:20 - 2019-02-09 20:20 - 000806560 _____ C:\Windows\system32\locale.nls
2019-02-09 20:20 - 2019-02-09 20:20 - 000800256 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000799568 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000794112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000787456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000762368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000762272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000752136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000744960 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000742912 _____ (Microsoft Corporation) C:\Windows\system32\SpaceControl.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000741888 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000726208 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000700416 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Language.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000684544 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000652320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000651792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000651304 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000649272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000648192 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000629576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000622592 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000617984 _____ (Microsoft Corporation) C:\Windows\system32\AssignedAccessManager.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000615936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000612368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000604552 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000588304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000580024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000556544 _____ (Microsoft Corporation) C:\Windows\system32\BTAGService.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000553984 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000547840 _____ (Microsoft Corporation) C:\Windows\system32\TileDataRepository.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000535048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000527872 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000522312 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000516608 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000506408 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000496872 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000494080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000494080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Activities.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TileDataRepository.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000433152 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000430904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000429056 _____ (Microsoft Corporation) C:\Windows\system32\MixedReality.Broker.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000427520 _____ (Microsoft Corporation) C:\Windows\system32\MSFlacDecoder.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000420864 _____ (Microsoft Corporation) C:\Windows\system32\SettingsEnvironment.Desktop.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000408800 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000407552 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000407040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000394752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcLayers.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000388096 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000375544 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSFlacDecoder.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000365056 _____ (Microsoft Corporation) C:\Windows\system32\NotificationControllerPS.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000353488 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000349184 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000349184 _____ (Microsoft Corporation) C:\Windows\system32\AcGenral.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000346624 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000326144 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.OneCore.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000324408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000314368 _____ (Microsoft Corporation) C:\Windows\system32\AcLayers.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000305664 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000298296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000289792 _____ (Microsoft Corporation) C:\Windows\system32\discan.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000284160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasppp.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000277536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000276488 _____ (Microsoft Corporation) C:\Windows\system32\MTF.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000263360 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000262672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000251904 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngOnline.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000217600 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000203280 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000202552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MTF.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000201216 _____ (Microsoft Corporation) C:\Windows\system32\wincredui.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000198144 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000195896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spacedump.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000195072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryUpgrade.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000193032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000184320 _____ (Microsoft Corporation) C:\Windows\system32\rasman.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000176640 _____ (Microsoft Corporation) C:\Windows\system32\spacebridge.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000171520 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spacebridge.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000165376 _____ (Microsoft Corporation) C:\Windows\system32\CompPkgSrv.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryUpgrade.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000160256 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000159744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredui.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000157192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasman.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\container.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000148480 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000146888 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000143872 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000137216 _____ (Microsoft Corporation) C:\Windows\system32\SpaceAgent.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000132104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spopk.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000122368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000121872 _____ (Microsoft Corporation) C:\Windows\system32\kdnet.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000120320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000114856 _____ (Microsoft Corporation) C:\Windows\system32\CompPkgSup.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000104960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000104960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000097592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000093696 _____ (Microsoft Corporation) C:\Windows\system32\nlahc.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000092672 _____ (Microsoft Corporation) C:\Windows\system32\PktMon.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000091424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CompPkgSup.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000080400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpci.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nslookup.exe
2019-02-09 20:20 - 2019-02-09 20:20 - 000074424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WindowsTrustedRT.sys
2019-02-09 20:20 - 2019-02-09 20:20 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\umpo-overrides.dll
2019-02-09 20:20 - 2019-02-09 20:20 - 000041984 _____ (Microsoft Corporation) C:\Windows\system32\lpkinstall.exe
2019-02-09 20:15 - 2019-02-13 17:16 - 000000000 ____D C:\Windows\system32\MRT
2019-02-09 20:15 - 2019-02-13 17:14 - 129330784 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-02-09 19:54 - 2019-02-09 20:47 - 000000000 ____D C:\ProgramData\Packages
2019-02-09 19:54 - 2019-02-09 19:54 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\Comms
2019-02-09 19:51 - 2019-02-16 09:10 - 000000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2019-02-09 19:51 - 2019-02-16 09:10 - 000000000 __SHD C:\Users\kosmet srbima\IntelGraphicsProfiles
2019-02-09 19:51 - 2019-02-09 22:00 - 000000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2019-02-09 19:51 - 2019-02-09 22:00 - 000000000 ____D C:\Program Files\Intel
2019-02-09 19:51 - 2019-02-09 19:51 - 000000000 ____D C:\Program Files (x86)\Intel
2019-02-09 19:51 - 2019-02-09 19:51 - 000000000 ____D C:\Intel
2019-02-09 19:51 - 2019-02-09 19:51 - 000000000 _____ C:\Windows\system32\GfxValDisplayLog.bin
2019-02-09 19:50 - 2019-02-15 16:25 - 000000000 ____D C:\ProgramData\Package Cache
2019-02-09 19:50 - 2019-02-09 19:50 - 000000000 ____D C:\Program Files (x86)\AMD
2019-02-09 19:49 - 2019-02-16 09:09 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2019-02-09 19:49 - 2019-02-09 22:01 - 000000000 ____D C:\Program Files\AMD
2019-02-09 19:49 - 2019-02-09 21:13 - 000000000 ____D C:\AMD
2019-02-09 19:49 - 2019-02-09 20:08 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\AMD
2019-02-09 19:49 - 2019-02-09 19:49 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
2019-02-09 19:40 - 2019-02-09 19:39 - 000592616 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2019-02-09 19:39 - 2019-02-10 09:29 - 000003392 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2161285649-454037250-3043812474-1001
2019-02-09 19:39 - 2019-02-10 09:29 - 000000000 ___RD C:\Users\kosmet srbima\OneDrive
2019-02-09 19:39 - 2019-02-09 21:52 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\PlaceholderTileLogoFolder
2019-02-09 19:38 - 2019-02-09 19:38 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-02-09 19:37 - 2019-02-09 19:37 - 000000000 ___HD C:\Users\kosmet srbima\MicrosoftEdgeBackups
2019-02-09 19:36 - 2019-02-15 12:43 - 000000000 ____D C:\Users\kosmet srbima\AppData\Roaming\Adobe
2019-02-09 19:36 - 2019-02-09 20:41 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\Packages
2019-02-09 19:36 - 2019-02-09 20:24 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-02-09 19:36 - 2019-02-09 20:24 - 000000000 ___RD C:\Users\kosmet srbima\3D Objects
2019-02-09 19:36 - 2019-02-09 20:03 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\Publishers
2019-02-09 19:36 - 2019-02-09 19:36 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\VirtualStore
2019-02-09 19:36 - 2019-02-09 19:36 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\MicrosoftEdge
2019-02-09 19:36 - 2019-02-09 19:36 - 000000000 ____D C:\Users\kosmet srbima\AppData\Local\ConnectedDevicesPlatform
2019-02-09 19:35 - 2019-02-16 08:53 - 000000000 ____D C:\Users\kosmet srbima
2019-02-09 19:35 - 2019-02-10 09:29 - 000002387 _____ C:\Users\kosmet srbima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-02-09 19:35 - 2019-02-09 19:35 - 000000020 ___SH C:\Users\kosmet srbima\ntuser.ini
2019-02-09 19:33 - 2019-02-16 09:16 - 000795988 _____ C:\Windows\system32\PerfStringBackup.INI
2019-02-09 19:30 - 2019-02-09 19:30 - 000000000 ____D C:\Windows\CSC
2019-02-09 19:30 - 2018-09-15 08:28 - 002864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2019-01-20 14:01 - 2018-11-15 01:09 - 000264800 _____ C:\Windows\system32\igfxCPL.cpl
2019-01-20 14:01 - 2018-11-15 01:09 - 000004846 _____ C:\Windows\system32\iglhxs64.vp
2019-01-20 13:59 - 2018-11-15 01:09 - 039511840 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 038561648 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 006627496 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 005675088 _____ (Intel Corporation) C:\Windows\system32\igdmcl64.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 005084016 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 004922464 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 004360280 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 003963472 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmcl32.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 002363936 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 001834016 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 001792456 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 001789840 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 001582176 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 001170016 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000696416 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000407648 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000381048 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000309856 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000231392 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000226400 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v5063.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000194960 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000173728 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000172696 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000150264 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000150264 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000103008 _____ ( ) C:\Windows\system32\igfxSDKLibv2_0.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000095328 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000094816 _____ C:\Windows\system32\igfxCUIServicePS.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000092280 _____ ( ) C:\Windows\system32\igfxSDKLib.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000091232 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000086624 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000076408 _____ ( ) C:\Windows\system32\igfxDHLib.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000046032 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000044128 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000020600 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000020576 _____ ( ) C:\Windows\system32\igfxDILib.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000019040 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000019040 _____ ( ) C:\Windows\system32\igfxEMLib.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000013920 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll
2019-01-20 13:59 - 2018-11-15 01:09 - 000013920 _____ ( ) C:\Windows\system32\igfxLHMLib.dll
2019-01-20 13:58 - 2018-11-15 01:09 - 000257616 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2019-01-20 13:57 - 2018-11-15 01:09 - 033176440 _____ (Intel Corporation) C:\Windows\system32\igd11dxva64.dll
2019-01-20 13:57 - 2018-11-15 01:09 - 004223208 _____ (Intel Corporation) C:\Windows\system32\igd12umd64.dll
2019-01-20 13:57 - 2018-11-15 01:09 - 004195144 _____ (Intel Corporation) C:\Windows\SysWOW64\igd12umd32.dll
2019-01-20 13:57 - 2018-11-15 01:09 - 000430160 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2019-01-20 13:57 - 2018-11-15 01:09 - 000379984 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2019-01-20 13:57 - 2018-11-15 01:09 - 000216656 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2019-01-20 13:57 - 2018-11-15 01:09 - 000212152 _____ (Intel Corporation) C:\Windows\system32\igdde64.dll
2019-01-20 13:57 - 2018-11-15 01:09 - 000184400 _____ (Intel Corporation) C:\Windows\system32\igdail64.dll
2019-01-20 13:57 - 2018-11-15 01:09 - 000171616 _____ (Intel Corporation) C:\Windows\SysWOW64\igdde32.dll
2019-01-20 13:57 - 2018-11-15 01:09 - 000164944 _____ (Intel Corporation) C:\Windows\SysWOW64\igdail32.dll
2019-01-20 13:57 - 2018-11-15 01:08 - 034517288 _____ (Intel Corporation) C:\Windows\SysWOW64\igd11dxva32.dll
2019-01-20 13:57 - 2018-11-15 01:08 - 016301088 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll
2019-01-20 13:57 - 2018-11-15 01:08 - 015336896 _____ (Intel Corporation) C:\Windows\system32\igc64.dll
2019-01-20 13:57 - 2018-11-15 01:08 - 012941952 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll
2019-01-20 13:57 - 2018-11-15 01:08 - 000300968 _____ (Intel Corporation) C:\Windows\system32\igd10idpp64.dll
2019-01-20 13:57 - 2018-11-15 01:08 - 000285936 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10idpp32.dll
2019-01-20 13:56 - 2018-11-15 01:08 - 013358704 _____ (Intel Corporation) C:\Windows\SysWOW64\igc32.dll
2019-01-20 13:55 - 2018-11-15 01:09 - 001004008 _____ C:\Windows\system32\igfxSDK.exe
2019-01-20 13:55 - 2018-11-15 01:09 - 000429032 _____ (Intel Corporation) C:\Windows\system32\IntelCpHDCPSvc.exe
2019-01-20 13:55 - 2018-11-15 01:09 - 000381928 _____ C:\Windows\system32\igfxTray.exe
2019-01-20 13:55 - 2018-11-15 01:09 - 000376296 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2019-01-20 13:55 - 2018-11-15 01:09 - 000248296 _____ (Intel Corporation) C:\Windows\system32\igfxHK.exe
2019-01-20 13:55 - 2018-11-15 01:09 - 000216552 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2019-01-20 13:55 - 2018-11-15 01:08 - 029092944 _____ (Intel Corporation) C:\Windows\system32\common_clang64.dll
2019-01-20 13:55 - 2018-11-15 01:08 - 019852880 _____ (Intel Corporation) C:\Windows\SysWOW64\common_clang32.dll
2019-01-20 13:55 - 2018-11-15 01:08 - 011739728 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll
2019-01-20 13:55 - 2018-11-15 01:08 - 008725584 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll
2019-01-20 13:55 - 2018-11-15 01:08 - 005254224 _____ (Intel Corporation) C:\Windows\system32\GfxResources.dll
2019-01-20 13:55 - 2018-11-15 01:08 - 000948200 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe
2019-01-20 13:55 - 2018-11-15 01:08 - 000944616 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe
2019-01-20 13:55 - 2018-11-15 01:08 - 000830871 _____ C:\Windows\system32\DisplayAudiox64.cab
2019-01-20 13:55 - 2018-11-15 01:08 - 000446952 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe
2019-01-20 13:55 - 2018-11-15 01:08 - 000212456 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe
2019-01-20 13:55 - 2018-11-15 01:08 - 000211944 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe
2019-01-20 13:55 - 2018-11-15 01:08 - 000155624 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2019-01-20 12:56 - 2018-04-25 18:41 - 000541080 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2019-01-20 12:56 - 2018-04-25 18:41 - 000230672 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2019-01-20 12:56 - 2018-04-25 18:41 - 000218240 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2019-01-20 12:56 - 2018-04-25 18:41 - 000174904 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2019-01-20 12:56 - 2018-04-25 18:40 - 003452120 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2019-01-20 12:56 - 2018-04-25 18:40 - 001353288 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2019-01-20 12:56 - 2018-04-25 18:40 - 000692128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2019-01-20 12:56 - 2018-04-25 18:40 - 000392840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2019-01-20 12:56 - 2018-04-25 18:40 - 000343672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2019-01-20 12:56 - 2018-04-25 18:40 - 000327240 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2019-01-20 12:56 - 2018-04-25 18:40 - 000220352 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2019-01-20 12:56 - 2018-04-25 18:40 - 000192944 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2019-01-20 12:56 - 2018-04-25 18:40 - 000116504 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2019-01-20 12:56 - 2018-04-25 18:40 - 000093872 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2019-01-20 12:56 - 2018-04-25 18:39 - 006197704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2019-01-20 12:56 - 2018-04-25 18:39 - 003691368 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2019-01-20 12:56 - 2018-04-25 18:39 - 003677128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2019-01-20 12:56 - 2018-04-25 18:39 - 003215184 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2019-01-20 12:56 - 2018-04-25 18:39 - 002930632 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2019-01-20 12:56 - 2018-04-25 18:39 - 000327232 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2019-01-20 12:56 - 2018-04-25 18:39 - 000122288 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2019-01-20 12:56 - 2018-04-25 18:39 - 000023656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2019-01-20 12:56 - 2018-04-25 18:13 - 018013667 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2019-01-20 11:51 - 2018-09-03 19:19 - 001068968 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorE.sys
2019-01-20 11:48 - 2015-06-18 03:25 - 001854096 _____ (Logitech, Inc.) C:\Windows\system32\LkmdfCoInst.dll
2019-01-20 11:48 - 2015-06-18 03:25 - 000087696 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LEqdUsb.sys
2019-01-20 11:29 - 2019-01-10 16:47 - 000125488 _____ C:\Windows\system32\kapp_ci.sbin
2019-01-20 11:29 - 2019-01-10 16:47 - 000120208 _____ C:\Windows\system32\kapp_si.sbin
2019-01-20 11:29 - 2019-01-10 16:47 - 000034450 _____ C:\Windows\system32\AMDKernelEvents.man
2019-01-20 11:27 - 2019-01-10 16:47 - 003735456 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amfrt64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 003471376 _____ C:\Windows\SysWOW64\atiumdva.cap
2019-01-20 11:27 - 2019-01-10 16:47 - 003437632 _____ C:\Windows\system32\atiumd6a.cap
2019-01-20 11:27 - 2019-01-10 16:47 - 003363744 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amfrt32.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 001685496 _____ (AMD) C:\Windows\system32\amf-mft-mjpeg-decoder64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 001364880 _____ (AMD) C:\Windows\SysWOW64\amf-mft-mjpeg-decoder32.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 001210784 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 001210784 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000906488 _____ C:\Windows\SysWOW64\atiapfxx.blb
2019-01-20 11:27 - 2019-01-10 16:47 - 000906488 _____ C:\Windows\system32\atiapfxx.blb
2019-01-20 11:27 - 2019-01-10 16:47 - 000570976 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Rapidfire64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000481888 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\Rapidfire.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000480352 _____ C:\Windows\system32\GameManager64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000467872 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000382560 _____ C:\Windows\SysWOW64\GameManager32.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000240032 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000211360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000183904 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000177568 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000169064 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000162912 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000158816 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000154016 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000152160 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000147904 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000137824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000135776 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000127752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000127752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000124832 _____ (AMD) C:\Windows\system32\atimuixx.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000123296 _____ C:\Windows\system32\atidxx64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000119712 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdxc64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000106856 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000106856 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000105888 _____ C:\Windows\SysWOW64\atidxx32.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000104864 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdxc32.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000090208 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mcl64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000074848 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mcl32.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000069536 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ati2erec.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000046176 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\RapidFireServer64.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000043104 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\RapidFireServer.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000019392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\detoured.dll
2019-01-20 11:27 - 2019-01-10 16:47 - 000019392 _____ (Microsoft Corporation) C:\Windows\system32\detoured.dll
2019-01-20 11:26 - 2019-01-10 16:47 - 000922528 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2019-01-20 11:26 - 2019-01-10 16:47 - 000752544 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2019-01-20 11:26 - 2019-01-10 16:47 - 000552864 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmcl64.dll
2019-01-20 11:26 - 2019-01-10 16:47 - 000546880 _____ C:\Windows\system32\amdmiracast.dll
2019-01-20 11:26 - 2019-01-10 16:47 - 000492640 _____ C:\Windows\system32\dgtrayicon.exe
2019-01-20 11:26 - 2019-01-10 16:47 - 000474016 _____ C:\Windows\system32\amdgfxinfo64.dll
2019-01-20 11:26 - 2019-01-10 16:47 - 000439712 _____ C:\Windows\system32\atieah64.exe
2019-01-20 11:26 - 2019-01-10 16:47 - 000417888 _____ C:\Windows\system32\EEURestart.exe
2019-01-20 11:26 - 2019-01-10 16:47 - 000382880 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmcl32.dll
2019-01-20 11:26 - 2019-01-10 16:47 - 000382368 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2019-01-20 11:26 - 2019-01-10 16:47 - 000353184 _____ C:\Windows\SysWOW64\atieah32.exe
2019-01-20 11:26 - 2019-01-10 16:47 - 000341088 _____ C:\Windows\system32\clinfo.exe
2019-01-20 11:26 - 2019-01-10 16:47 - 000190096 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2019-01-20 11:26 - 2019-01-10 16:47 - 000167208 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2019-01-20 11:26 - 2019-01-10 16:47 - 000133944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2019-01-20 11:26 - 2019-01-10 16:47 - 000118856 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-02-16 11:15 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-02-16 10:02 - 2018-09-15 08:33 - 000000000 ___HD C:\Windows\ELAMBKUP
2019-02-16 09:54 - 2018-09-15 08:31 - 000000000 ____D C:\Windows\INF
2019-02-16 09:09 - 2018-09-15 07:09 - 000262144 _____ C:\Windows\system32\config\BBI
2019-02-15 17:30 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-02-15 17:30 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\AppReadiness
2019-02-14 01:10 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\appraiser
2019-02-14 01:10 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\bcastdvr
2019-02-13 19:37 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\LiveKernelReports
2019-02-13 18:10 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-02-13 17:20 - 2018-09-15 08:23 - 000000000 ____D C:\Windows\CbsTemp
2019-02-10 07:11 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\appcompat
2019-02-10 04:25 - 2018-09-15 08:33 - 000000000 ___RD C:\Windows\PrintDialog
2019-02-10 04:25 - 2018-09-15 08:33 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2019-02-10 04:25 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\USOPrivate
2019-02-10 04:24 - 2018-09-15 07:09 - 000032768 _____ C:\Windows\system32\config\ELAM
2019-02-10 04:22 - 2018-09-15 08:31 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2019-02-09 22:01 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2019-02-09 22:01 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\Macromed
2019-02-09 22:01 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\System
2019-02-09 21:34 - 2017-11-17 07:20 - 000107496 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdWT6.sys
2019-02-09 21:33 - 2017-07-27 08:47 - 000206488 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverW8x64.sys
2019-02-09 20:22 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\TextInput
2019-02-09 20:22 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\SysWOW64\oobe
2019-02-09 20:22 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\SysWOW64\Dism
2019-02-09 20:22 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\oobe
2019-02-09 20:22 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\migwiz
2019-02-09 20:22 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\ShellExperiences
2019-02-09 20:22 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\ShellComponents
2019-02-09 20:22 - 2018-09-15 07:09 - 000000000 ____D C:\Windows\system32\Dism
2019-02-09 20:21 - 2018-09-15 07:09 - 000000000 ____D C:\Windows\servicing
2019-02-09 20:15 - 2018-09-15 08:33 - 000000000 ___RD C:\Program Files\Windows Defender
2019-02-09 19:53 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\ServiceState
2019-02-09 19:31 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\WinBioDatabase
2019-02-09 19:30 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\spool
2019-02-09 19:30 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\FxsTmp
2019-02-01 23:31 - 2018-09-15 08:36 - 000835480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-02-01 23:31 - 2018-09-15 08:36 - 000179600 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\dllhost.exe => File is digitally signed
C:\Windows\SysWOW64\dllhost.exe => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================
mycity.rs/must-login.png

offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Otvori Notepad i iskopiraj sljedeći tekst koji se nalazi unutar Kod polja.


FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\autoconfig.js [2018-11-08] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\cck2.cfg [2018-11-08] <==== ATTENTION



U okviru Notepad-a klikni na File --> Save As
Pod Encoding izaberi UTF-8.
Fajl nazovi Fixlist i sačuvaj na Desktop
Dvoklikom ponovo pokreni FRST.exe
Klikni na Fix i sačekaj dok program ne završi.
Ukoliko program zatraži restart računara, omogući mu da to nesmetano obavi.
Nakon završetka rada, otvoriće se fixlog.txt, sa sadržajem koji treba da kopiraš u temu.
Takođe, na Desktop-u će se nalaziti (fixlog.txt).

offline
  • Pridružio: 15 Feb 2011
  • Poruke: 112

Izvini sto kasnim.
Restart mi nije trazio.


Fix result of Farbar Recovery Scan Tool (x64) Version: 18.02.2019
Ran by kosmet srbima (19-02-2019 17:35:58) Run:1
Running from C:\Users\kosmet srbima\Desktop
Loaded Profiles: kosmet srbima (Available Profiles: kosmet srbima)
Boot Mode: Normal
==============================================

fixlist content:
*****************
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\autoconfig.js [2018-11-08] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\cck2.cfg [2018-11-08] <==== ATTENTION

*****************

C:\Program Files\mozilla firefox\defaults\pref\autoconfig.js => moved successfully
C:\Program Files\mozilla firefox\cck2.cfg => moved successfully

==== End of Fixlog 17:35:58 ====

offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Preuzmi Malwarebytes Anti-Malware sa ovog ili ovog ili ovog linka i instaliraj aplikaciju.
Pokreni mb3-setup-consumer-{verzija}.exe i isprati uputstva za instalaciju programa. Nakon instalacije, klikni na Finish

Prilikom prvog pokretanja, program će prikazati prozor "dobrodošlice". Slobodno zatvori taj prozor.
Napomena: Premium funkcije programa su već aktivirane i važe 13 dana od trenutka instalacije. Premium funkcije možeš isključiti preko Settings > My Account tab podešavanja.

• Podešavanja skenera - u Settings, klikni na Protection tab. Ispod Scan Options sekcije, uključi "Scan for rootkits" opciju.
• Pripremi podešavanja za Threat Scan - u Dashboard , klikni na Scan Now dugme. MBAM će ažurirati bazu i započeti skeniranje.

Kada se skeniranje završi, ako je infekcija detektovana, obrati pažnju da je sve označeno, pa klikni na Remove Selected. Restartuj računar ako program upita za restart.
• Dostavi log: Pod Reports izaberi trenutni datum izveštaja Scan Report i potom klikni na View Report.

Izvezi log na Desktop;
- Klikni na Export dugme na dnu, pa onda izaberi 'Text file (*.txt)'
# U Save File dijalogu koji se pojavi, klikni na Desktop. U File name: polje, upiši "mbam" (bez navodnika) i klikni na Save.
- Pojaviće se poruka "Your file has been successfully exported", klikni Ok i zatvori prozor.



• U odgovoru prikači mbam.txt log koristeći "Prikači fajl" opciju.

offline
  • Pridružio: 15 Feb 2011
  • Poruke: 112

mycity.rs/must-login.png

offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Kakvo je sada stanje?

offline
  • Pridružio: 15 Feb 2011
  • Poruke: 112

Napisano: 22 Feb 2019 18:31

Za sad sve ok.
Hvala.

Dopuna: 28 Feb 2019 18:47

Opet ja. :-)

Kad pokusavam da napravim nov folder ne mogu da mu dam ime koje zelim.
Nece da prihvati neki custom naziv nego samo NEW FOLDER .


offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Za to se raspitaj u potforumu Windows. Smile
http://mycity.rs/Windows/

Ovdje se bavimo samo malwareom.

Ko je trenutno na forumu
 

Ukupno su 981 korisnika na forumu :: 44 registrovanih, 8 sakrivenih i 929 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: _Petar, A.R.Chafee.Jr., Apok, Atomski čoban, babaroga, BlekMen, Bluper, Brana01, dane007, Dannyboy, dekan.m, djboj, Djokislav, doktor123, Dorcolac, dzoni19, Fog of War, gorval, havoc995, HogarStrashni, ikan, Istman, ivan1973, JOntra, Karla, Kubovac, mercedesamg, Metanoja, Mixelotti, mrav pesadinac, Nemanja.M, operniki, panzerwaffe, slonic_tonic, sombrero, StefanNBG90, Tvrtko I, vathra, Vatreni Zmaj, vobo, voja64, wizzardone, |_MeD_|, šumar bk2