offline
- Pridružio: 15 Feb 2011
- Poruke: 112
|
Treba mi pomoc.
Mislim da sam zakacio neki virus.
Malo malo pa mi se upali neki microsoft removal program,podigne buku u kucistu momentalno.
Imam neki strani iptv i slika pocne da mi koci.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 8.02.2019
Ran by Aca (administrator) on DESKTOP-5CJKF12 (08-02-2019 23:07:07)
Running from C:\Users\Aca\AppData\Local\Temp\scoped_dir3332_14714
Loaded Profiles: Aca (Available Profiles: Aca)
Platform: Windows 10 Pro Version 1803 17134.523 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: geekstogo.com/forum/topic/335081-frst-t.....scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\DriverStore\FileRepository\c0338124.inf_amd64_923c69fb6002c3cc\B337967\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AMD) C:\Windows\System32\DriverStore\FileRepository\c0338124.inf_amd64_923c69fb6002c3cc\B337967\atieclxx.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TunnelBear) C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1901.7-0\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.38.138.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.1000_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.38.138.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19011.11311.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Innovative Digital Technologies) C:\Users\Aca\AppData\Roaming\ACEStream\engine\ace_engine.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Innovative Digital Technologies) C:\Users\Aca\AppData\Roaming\ACEStream\engine\ace_engine.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(AMD) C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe
(AMD) C:\Program Files\AMD\Performance Profile Client\AUEPMaster.exe
(AMD) C:\Program Files\AMD\Performance Profile Client\AUEPUF.exe
(Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
() C:\Users\Aca\AppData\Roaming\ACEStream\updater\ace_update.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\System32\osk.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
(Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe
(CM&V Hackbart) C:\Program Files (x86)\DVBViewer\DVBViewer.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Opera Software) C:\Program Files\Opera\58.0.3135.53\opera.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech -> Logitech Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2675176 2018-12-13] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [4810224 2018-12-19] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\Run: [Viber] => C:\Users\Aca\AppData\Local\Viber\Viber.exe [37117512 2018-12-21] (Viber Media S.à r.l. -> Viber Media S.Ã r.l.)
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3131680 2018-11-26] (Valve -> Valve Corporation)
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\Run: [AceStream] => C:\Users\Aca\AppData\Roaming\ACEStream\engine\ace_engine.exe [27960 2018-08-23] (INNOVATIVE DIGITAL TECHNOLOGIES LLC -> Innovative Digital Technologies)
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [731240 2018-10-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\MountPoints2: {08c314cd-dd27-11e8-9ce6-c46e1f018836} - "G:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\MountPoints2: {10645927-92c0-11e7-9c1d-c46e1f018836} - "I:\Setup.exe"
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\MountPoints2: {b1694dc9-f4de-11e8-9cf3-c46e1f018836} - "D:\setup.exe"
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\MountPoints2: {e87495f0-8eed-11e8-9cd0-c46e1f018836} - "G:\setup.exe"
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\MountPoints2: {ecdd3eb5-9e5c-11e8-9cd3-c46e1f018836} - "D:\Setup.exe"
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\MountPoints2: {f3e9928a-721a-11e7-9bf6-c46e1f018836} - "H:\setup.exe"
HKU\S-1-5-18\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [30872640 2018-11-28] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.96\Installer\chrmstp.exe [2019-02-06] (Google LLC -> Google Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{5b1f49b7-7890-492f-a24a-af3b8702a3f7}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{ffca23f2-0ee3-4772-a07b-4b2507c237e0}: [DhcpNameServer] 172.18.10.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10440__180526__yaie
SearchScopes: HKU\S-1-5-21-1063614729-1431274192-2396134605-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1063614729-1431274192-2396134605-1001 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://search.yahoo.com/yhs/search?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__ch_WCYID10440__180526__yaie&p={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> No File
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2018-12-22] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_171\bin\ssv.dll [2018-05-05] (Oracle America, Inc. -> Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-02-17] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2018-07-20] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-05-05] (Oracle America, Inc. -> Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-02-17] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2018-12-22] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-02-17] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2018-07-22] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-02-17] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-02-17] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-02-17] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2018-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2018-04-10] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2018-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2018-04-10] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: nqeczspd.default
FF ProfilePath: C:\Users\Aca\AppData\Roaming\Mozilla\Firefox\Profiles\nqeczspd.default [2019-02-08]
FF Homepage: Mozilla\Firefox\Profiles\nqeczspd.default -> hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10440__180526__yaff
FF NewTab: Mozilla\Firefox\Profiles\nqeczspd.default -> hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10440__180526__yaff
FF SearchPlugin: C:\Users\Aca\AppData\Roaming\Mozilla\Firefox\Profiles\nqeczspd.default\searchplugins\yahoo-lavasoft-ff59.xml [2018-05-26]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2018-10-06]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Aca\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi
FF Extension: (Ace Script) - C:\Users\Aca\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi [2018-11-26]
FF HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Aca\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Aca\AppData\Roaming\IDM\idmmzcc5 [2017-09-01] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_114.dll [2019-01-08] ()
FF Plugin: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-05-05] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-05-05] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-01-23] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_114.dll [2019-01-08] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1232202.dll [2018-03-09] (Adobe Systems, Inc.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-04-10] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2018-12-19] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-01-23] (Adobe Systems)
FF Plugin HKU\S-1-5-21-1063614729-1431274192-2396134605-1001: @acestream.net/acestreamplugin,version=3.1.32 -> C:\Users\Aca\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-13] (Innovative Digital Technologies)
Chrome:
=======
CHR HomePage: Default -> hxxps://poslovi.infostud.com/oglasi-za-posao/grad/beograd-35#last_search_time=&page=0&submit=0&q=&city%5B%5D=35&dist=50&vreme_postavljanja=2&rok_konkursa=&firma_uid=&education=&vrste_kategorija_posla=&jezik=&sort=
CHR Profile: C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default [2019-02-08]
CHR Extension: (Slides) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-10-12]
CHR Extension: (Magic Actions for YouTube™) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2019-01-21]
CHR Extension: (Docs) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-10-12]
CHR Extension: (Google Drive) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-12]
CHR Extension: (YouTube) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-10-12]
CHR Extension: (X-notifier (for Gmail™,Hotmail,Yahoo,AOL...)) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdfjbkbddpfnoplfhceolpopfoepleco [2019-02-05]
CHR Extension: (Tampermonkey) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2018-10-12]
CHR Extension: (Adobe Acrobat) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2018-10-12]
CHR Extension: (Sheets) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-10-12]
CHR Extension: (Google Docs Offline) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-10-12]
CHR Extension: (AdBlock) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-02-08]
CHR Extension: (Tools for Instagram™) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\khnadcdfjbjgojiilfdebbpiepokangj [2018-10-12]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2018-10-12]
CHR Extension: (Ace Script) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2018-12-20]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-10-12]
CHR Extension: (Tab Hibernation) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbdpajcdgknpendpmecafmopknefafha [2018-10-12]
CHR Extension: (Gmail) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-10-12]
CHR Extension: (Chrome Media Router) - C:\Users\Aca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-01-30]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - <no Path/update_url>
CHR HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1063614729-1431274192-2396134605-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx <not found>
Opera:
=======
OPR Extension: (Magic Actions for YouTube™) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2019-01-16]
OPR Extension: (X-notifier (for Gmail™,Hotmail,Yahoo,AOL...)) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\cdfjbkbddpfnoplfhceolpopfoepleco [2018-05-01]
OPR Extension: (Install Chrome Extensions) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2018-08-20]
OPR Extension: (Google Translate) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\mchdgimobfnilobnllpdnompfjkkfdmi [2019-01-21]
OPR Extension: (Ace Script) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2018-05-02]
OPR Extension: (Adblock Plus - free ad blocker) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2019-01-23]
OPR Extension: (Downloader for Instagram™ (+ Upload photo)) - C:\Users\Aca\AppData\Roaming\Opera Software\Opera Stable\Extensions\olkpikmlhoaojbbmmpejnimiglejmboe [2019-02-07]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2917864 2018-12-13] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2709480 2018-12-13] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
R2 AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\c0338124.inf_amd64_923c69fb6002c3cc\B337967\atiesrxx.exe [507904 2019-01-17] (Advanced Micro Devices, Inc. -> AMD)
R2 AUEPLauncher; C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe [43008 2019-01-09] (AMD) [File not signed]
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3729512 2018-10-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [365040 2017-10-20] (Intel(R) pGFX -> Intel Corporation)
S2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [26112 2017-07-28] () [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2167056 2018-12-30] (Electronic Arts, Inc. -> Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2018-11-09] (Even Balance, Inc. -> )
R2 ReimageRealTimeProtector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [9037680 2018-04-25] (Reimage Limited -> Reimage®)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-07-18] (TeamViewer GmbH -> TeamViewer GmbH)
R2 TunnelBearMaintenance; C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe [138872 2018-10-29] (TunnelBear -> TunnelBear)
S3 uSHAREitSvc; C:\Program Files (x86)\SHAREit Technologies\SHAREit\SHAREit.Service.exe [33224 2017-09-11] (SHAREit Technologies Co.Ltd -> SHAREit Technologies Co.Ltd)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1901.7-0\NisSrv.exe [4096976 2019-01-25] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1901.7-0\MsMpEng.exe [113992 2019-01-25] (Microsoft Corporation -> Microsoft Corporation)
S2 CG6Service; "C:\Program Files\CyberGhost 6\CyberGhost.Service.exe" [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [49448 2016-08-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0338124.inf_amd64_923c69fb6002c3cc\B337967\atikmdag.sys [52792320 2019-01-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0338124.inf_amd64_923c69fb6002c3cc\B337967\atikmpag.sys [589824 2019-01-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [107496 2018-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-07-26] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-07-26] (Disc Soft Ltd -> Disc Soft Ltd)
R3 ETDSMBus; C:\WINDOWS\System32\drivers\ETDSMBus.sys [32840 2017-07-26] (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronic Corp.)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-07-26] (Martin Malik - REALiX -> REALiX(tm))
S3 iaLPSSi_GPIO; C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128 2018-04-12] (Intel Corporation - Client Components Group -> Intel Corporation)
R0 iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [1477648 2017-07-26] (Intel(R) Rapid Storage Technology -> Intel Corporation)
R3 igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [7963632 2017-10-20] (Intel(R) pGFX -> Intel Corporation)
R3 IntcDAud; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [481768 2016-05-12] (Intel(R) OWR -> Intel(R) Corporation)
R3 MEIx64; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [206496 2017-07-27] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R1 MpKsl782509f3; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{CB6D5465-0F5E-4647-9D21-9A70E703D726}\MpKsl782509f3.sys [58120 2019-02-08] (Microsoft Corporation -> Microsoft Corporation)
R3 MTSBDA; C:\WINDOWS\System32\Drivers\MtsBda.sys [344592 2009-07-13] (TechniSat Digital S.A. -> TechniSat Provide)
R3 MtsHID; C:\WINDOWS\system32\drivers\MtsHID.sys [27664 2009-07-13] (TechniSat Digital S.A. -> TechniSat Provide)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [984040 2017-07-26] (Realtek Semiconductor Corp. -> Realtek )
R3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2018-07-31] (TunnelBear, Inc. -> The OpenVPN Project)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46488 2019-01-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [343032 2019-01-25] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [63480 2019-01-25] (Microsoft Windows -> Microsoft Corporation)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [63840 2015-06-06] (Intel(R) Software -> Intel Corporation)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-12-09] (Zemana Ltd. -> Zemana Ltd.)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-02-08 23:06 - 2019-02-08 23:07 - 000000000 ____D C:\FRST
2019-02-08 23:06 - 2019-02-08 23:06 - 002434048 _____ (Farbar) C:\Users\Aca\Desktop\FRST64.exe
2019-02-08 22:56 - 2019-02-08 22:57 - 000000000 ____D C:\rei
2019-02-08 22:56 - 2019-02-08 22:56 - 000004348 _____ C:\WINDOWS\System32\Tasks\ReimageUpdater
2019-02-08 22:56 - 2019-02-08 22:56 - 000001886 _____ C:\Users\Public\Desktop\PC Scan & Repair by Reimage.lnk
2019-02-08 22:56 - 2019-02-08 22:56 - 000000000 ____D C:\ProgramData\Reimage Protector
2019-02-08 22:56 - 2019-02-08 22:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2019-02-08 22:56 - 2019-02-08 22:56 - 000000000 ____D C:\Program Files\Reimage
2019-02-08 22:55 - 2019-02-08 22:57 - 000000150 _____ C:\WINDOWS\Reimage.ini
2019-02-08 22:55 - 2019-02-08 22:55 - 000587920 _____ (Reimage) C:\Users\Aca\Desktop\ReimageRepair.exe
2019-02-08 22:55 - 2019-02-08 22:55 - 000587920 _____ (Reimage) C:\Users\Aca\Desktop\ReimageRepair (1).exe
2019-02-08 22:47 - 2019-02-08 22:47 - 000000916 _____ C:\Users\Public\Desktop\VLC media player.lnk
2019-02-08 19:28 - 2019-02-08 19:28 - 000003108 _____ C:\WINDOWS\System32\Tasks\AMDLinkUpdate
2019-02-08 19:23 - 2019-02-08 19:23 - 000003160 _____ C:\WINDOWS\System32\Tasks\StartCN
2019-02-08 19:23 - 2019-02-08 19:23 - 000003074 _____ C:\WINDOWS\System32\Tasks\StartDVR
2019-02-08 19:23 - 2019-02-08 19:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2019-02-08 19:22 - 2019-02-08 19:22 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2019-02-08 18:16 - 2019-02-08 19:30 - 000000000 ____D C:\Users\Aca\AppData\LocalLow\AMD
2019-02-08 18:07 - 2019-02-08 18:07 - 026490000 _____ (AMD Inc.) C:\Users\Aca\Downloads\radeon-software-adrenalin-2019-19.1.1-minimalsetup-190117_64bit.exe
2019-01-29 22:16 - 2019-01-29 22:16 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-01-28 09:18 - 2019-01-28 09:18 - 001032248 _____ (Akeo Consulting) C:\Users\Aca\Desktop\rufus-3.4.exe
2019-01-21 17:14 - 2019-02-08 18:13 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-01-17 20:48 - 2019-01-17 20:48 - 000018784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2019-01-17 20:48 - 2019-01-17 20:48 - 000018784 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2019-01-17 20:47 - 2019-01-17 20:47 - 001210368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2019-01-17 20:47 - 2019-01-17 20:47 - 000177152 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2019-01-17 20:47 - 2019-01-17 20:47 - 000153600 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2019-01-14 17:19 - 2019-01-18 18:48 - 000001068 _____ C:\Users\Aca\Desktop\ZLOrigin.lnk
2019-01-14 17:19 - 2019-01-18 18:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZLOrigin
2019-01-14 17:19 - 2019-01-18 18:48 - 000000000 ____D C:\Program Files (x86)\ZLOrigin
2019-01-09 20:14 - 2019-01-01 08:12 - 009084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-01-09 20:14 - 2019-01-01 08:12 - 007520104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-01-09 20:14 - 2019-01-01 08:12 - 002765344 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-01-09 20:14 - 2019-01-01 08:12 - 002465792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-01-09 20:14 - 2019-01-01 08:12 - 002421288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-01-09 20:14 - 2019-01-01 08:12 - 000128824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2019-01-09 20:14 - 2019-01-01 07:55 - 025856512 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-01-09 20:14 - 2019-01-01 07:50 - 022715392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-01-09 20:14 - 2019-01-01 07:45 - 007573504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-01-09 20:14 - 2019-01-01 07:45 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-01-09 20:14 - 2019-01-01 07:42 - 004939776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-01-09 20:14 - 2019-01-01 07:42 - 000717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2019-01-09 20:14 - 2019-01-01 07:41 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2019-01-09 20:14 - 2019-01-01 07:41 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-01-09 20:14 - 2019-01-01 07:37 - 006571584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-01-09 20:14 - 2019-01-01 07:37 - 002253696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-01-09 20:14 - 2019-01-01 07:37 - 001989040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-01-09 20:14 - 2019-01-01 07:29 - 022016512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-01-09 20:14 - 2019-01-01 07:22 - 019405312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-01-09 20:14 - 2019-01-01 07:15 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-01-09 20:14 - 2019-01-01 07:14 - 004514816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2019-01-09 20:13 - 2019-01-01 14:50 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2019-01-09 20:13 - 2019-01-01 14:47 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowslivelogin.dll
2019-01-09 20:13 - 2019-01-01 14:46 - 012710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-01-09 20:13 - 2019-01-01 14:45 - 000714752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2019-01-09 20:13 - 2019-01-01 14:45 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2019-01-09 20:13 - 2019-01-01 14:43 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-01-09 20:13 - 2019-01-01 14:20 - 011902976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-01-09 20:13 - 2019-01-01 14:20 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowslivelogin.dll
2019-01-09 20:13 - 2019-01-01 14:18 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2019-01-09 20:13 - 2019-01-01 14:17 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2019-01-09 20:13 - 2019-01-01 08:14 - 001221432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-01-09 20:13 - 2019-01-01 08:14 - 001063224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2019-01-09 20:13 - 2019-01-01 08:14 - 001029944 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-01-09 20:13 - 2019-01-01 08:14 - 000566568 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-01-09 20:13 - 2019-01-01 08:14 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-01-09 20:13 - 2019-01-01 08:14 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2019-01-09 20:13 - 2019-01-01 08:13 - 003292152 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2019-01-09 20:13 - 2019-01-01 08:13 - 001363536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2019-01-09 20:13 - 2019-01-01 08:13 - 000709728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2019-01-09 20:13 - 2019-01-01 08:13 - 000436024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-01-09 20:13 - 2019-01-01 08:13 - 000170808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2019-01-09 20:13 - 2019-01-01 08:12 - 000713272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2019-01-09 20:13 - 2019-01-01 08:12 - 000268304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2019-01-09 20:13 - 2019-01-01 08:12 - 000043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2019-01-09 20:13 - 2019-01-01 07:50 - 004383744 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-01-09 20:13 - 2019-01-01 07:48 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2019-01-09 20:13 - 2019-01-01 07:48 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2019-01-09 20:13 - 2019-01-01 07:48 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Print.Workflow.Source.dll
2019-01-09 20:13 - 2019-01-01 07:47 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-01-09 20:13 - 2019-01-01 07:47 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2019-01-09 20:13 - 2019-01-01 07:46 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2019-01-09 20:13 - 2019-01-01 07:46 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-01-09 20:13 - 2019-01-01 07:46 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2019-01-09 20:13 - 2019-01-01 07:45 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-01-09 20:13 - 2019-01-01 07:44 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2019-01-09 20:13 - 2019-01-01 07:44 - 001549824 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-01-09 20:13 - 2019-01-01 07:44 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-01-09 20:13 - 2019-01-01 07:44 - 000662528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2019-01-09 20:13 - 2019-01-01 07:44 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2019-01-09 20:13 - 2019-01-01 07:43 - 001805312 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-01-09 20:13 - 2019-01-01 07:42 - 002247680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2019-01-09 20:13 - 2019-01-01 07:42 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2019-01-09 20:13 - 2019-01-01 07:41 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2019-01-09 20:13 - 2019-01-01 07:41 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2019-01-09 20:13 - 2019-01-01 07:37 - 002478664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2019-01-09 20:13 - 2019-01-01 07:37 - 000880048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2019-01-09 20:13 - 2019-01-01 07:37 - 000581808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2019-01-09 20:13 - 2019-01-01 07:37 - 000381240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-01-09 20:13 - 2019-01-01 07:17 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll
2019-01-09 20:13 - 2019-01-01 07:16 - 005775872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-01-09 20:13 - 2019-01-01 07:16 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2019-01-09 20:13 - 2019-01-01 07:16 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2019-01-09 20:13 - 2019-01-01 07:15 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2019-01-09 20:13 - 2019-01-01 07:15 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-01-09 20:13 - 2019-01-01 07:15 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2019-01-09 20:13 - 2019-01-01 07:14 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-01-09 20:13 - 2019-01-01 07:14 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-01-09 20:13 - 2019-01-01 07:13 - 001628160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-01-09 20:13 - 2019-01-01 07:13 - 000594432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2019-01-09 20:13 - 2019-01-01 07:13 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2019-01-09 20:13 - 2019-01-01 07:12 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2019-01-09 20:13 - 2019-01-01 07:12 - 000795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2019-01-09 20:13 - 2019-01-01 07:12 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2019-01-09 20:13 - 2019-01-01 07:12 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2019-01-09 20:13 - 2019-01-01 06:23 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2019-01-09 20:13 - 2018-12-19 05:49 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-01-09 19:12 - 2019-01-09 19:12 - 000173432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdihk64.dll
2019-01-09 19:12 - 2019-01-09 19:12 - 000145104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdihk32.dll
==================== One month (modified) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-02-08 23:08 - 2017-12-09 21:15 - 000217982 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2019-02-08 23:00 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-02-08 22:59 - 2018-12-02 08:47 - 000000000 ____D C:\Program Files (x86)\DVBViewer
2019-02-08 22:54 - 2018-02-17 23:32 - 000000000 ____D C:\Users\Aca\AppData\Roaming\vlc
2019-02-08 19:48 - 2018-11-08 18:49 - 000226168 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2019-02-08 19:44 - 2018-11-07 19:46 - 000000000 ____D C:\Users\Aca\Desktop\Zlo
2019-02-08 19:44 - 2018-11-07 19:35 - 000000000 ____D C:\ProgramData\Origin
2019-02-08 19:28 - 2018-05-17 17:25 - 000422072 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-02-08 19:28 - 2017-07-27 18:13 - 000000000 ____D C:\Users\Aca\AppData\Roaming\.ACEStream
2019-02-08 19:28 - 2017-07-26 08:45 - 000000000 __SHD C:\Users\Aca\IntelGraphicsProfiles
2019-02-08 19:27 - 2018-12-30 10:17 - 000000000 ____D C:\Program Files (x86)\TunnelBear
2019-02-08 19:27 - 2018-05-17 17:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-02-08 19:25 - 2018-04-11 22:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-02-08 19:25 - 2017-07-26 11:44 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2019-02-08 19:24 - 2018-12-29 18:15 - 000003304 _____ C:\WINDOWS\System32\Tasks\StartCNBM
2019-02-08 19:24 - 2018-05-17 17:28 - 000000000 ____D C:\Users\Aca
2019-02-08 19:24 - 2017-11-30 23:06 - 000000000 ____D C:\Program Files\AMD
2019-02-08 19:23 - 2018-12-10 17:16 - 000000000 ____D C:\Program Files (x86)\AMD
2019-02-08 19:22 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2019-02-08 19:21 - 2017-11-30 23:07 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2019-02-08 19:20 - 2017-08-28 15:19 - 000000060 _____ C:\ProgramData\SoftwareUpdateTemp.xml
2019-02-08 18:13 - 2018-05-17 17:25 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-02-08 18:13 - 2017-07-26 13:48 - 000000000 ____D C:\Program Files\CCleaner
2019-02-08 18:07 - 2017-07-26 08:38 - 000000000 ____D C:\AMD
2019-02-08 17:27 - 2018-07-10 21:23 - 000000000 ____D C:\ProgramData\Packages
2019-02-08 17:27 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2019-02-08 17:25 - 2018-05-17 17:43 - 000004164 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B5E66D46-CC5B-420F-8C72-6181807EDC07}
2019-02-07 17:24 - 2018-11-08 18:49 - 000226168 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2019-02-06 22:21 - 2018-10-12 17:02 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-02-06 22:21 - 2018-10-12 17:02 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-02-06 18:27 - 2017-09-08 21:24 - 000000000 ____D C:\Program Files\Opera
2019-02-05 18:07 - 2017-07-28 06:32 - 000000000 ____D C:\Users\Aca\AppData\LocalLow\Mozilla
2019-02-03 08:42 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-02-02 20:23 - 2017-07-26 18:49 - 000000000 ____D C:\Users\Aca\AppData\Roaming\uTorrent
2019-02-01 14:31 - 2018-05-17 17:43 - 000003958 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1504902358
2019-02-01 14:31 - 2017-09-08 21:25 - 000001107 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk
2019-02-01 14:22 - 2018-05-15 21:00 - 000000000 ___DC C:\WINDOWS\Panther
2019-01-30 22:13 - 2017-07-27 07:26 - 000000000 ____D C:\Users\Aca\AppData\Local\JDownloader 2.0
2019-01-29 18:45 - 2018-12-21 01:09 - 000000000 ___HD C:\_acestream_cache_
2019-01-25 18:34 - 2018-02-24 12:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-01-24 18:07 - 2018-05-17 17:43 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2019-01-24 18:06 - 2018-02-21 21:57 - 000002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2019-01-24 18:06 - 2018-02-21 21:57 - 000002114 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2019-01-20 14:30 - 2017-07-28 06:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-01-18 21:15 - 2018-05-17 17:39 - 000838560 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-01-18 21:11 - 2017-07-27 11:11 - 000000000 ____D C:\Program Files\Microsoft Silverlight
2019-01-18 21:11 - 2017-07-27 11:11 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2019-01-18 19:17 - 2018-11-16 18:23 - 000000000 ____D C:\Program Files\rempl
2019-01-18 18:53 - 2018-12-30 10:22 - 000000000 ____D C:\Program Files (x86)\Origin
2019-01-18 18:53 - 2018-11-07 19:49 - 000000000 ____D C:\Users\Aca\AppData\Roaming\Origin
2019-01-17 20:48 - 2018-12-13 00:39 - 001587224 _____ (AMD) C:\WINDOWS\system32\coinst_18.50.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000570376 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000492040 _____ C:\WINDOWS\system32\dgtrayicon.exe
2019-01-17 20:48 - 2018-04-26 23:36 - 000481288 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000479752 _____ C:\WINDOWS\system32\GameManager64.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000381960 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000340488 _____ C:\WINDOWS\system32\clinfo.exe
2019-01-17 20:48 - 2018-04-26 23:36 - 000183296 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000162304 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000151552 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000137216 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000045568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2019-01-17 20:48 - 2018-04-26 23:36 - 000042496 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 003735040 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 003363328 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 001652224 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 001210368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000921904 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000757256 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2019-01-17 20:47 - 2018-04-26 23:36 - 000751920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000552240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000473392 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000467456 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000439296 _____ C:\WINDOWS\system32\atieah64.exe
2019-01-17 20:47 - 2018-04-26 23:36 - 000382256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000381744 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000352792 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2019-01-17 20:47 - 2018-04-26 23:36 - 000239616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000210944 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000168656 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000158208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000147496 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000135168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000124416 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000122880 _____ C:\WINDOWS\system32\atidxx64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000119296 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000105472 _____ C:\WINDOWS\SysWOW64\atidxx32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000104448 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2019-01-17 20:47 - 2018-04-26 23:36 - 000069120 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000546048 _____ C:\WINDOWS\system32\amdmiracast.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000189264 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000166376 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000133128 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000126920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000126920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000118040 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000106024 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2019-01-17 20:46 - 2018-04-26 23:36 - 000106024 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2019-01-17 16:11 - 2018-04-26 23:36 - 003471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap
2019-01-17 16:11 - 2018-04-26 23:36 - 003437632 _____ C:\WINDOWS\system32\atiumd6a.cap
2019-01-17 16:11 - 2018-04-26 23:36 - 000906488 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb
2019-01-17 16:11 - 2018-04-26 23:36 - 000906488 _____ C:\WINDOWS\system32\atiapfxx.blb
2019-01-16 19:47 - 2017-07-27 11:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2019-01-12 10:40 - 2017-07-28 06:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-01-12 09:21 - 2018-12-30 10:18 - 000000000 ____D C:\Users\Aca\AppData\Roaming\TunnelBear
2019-01-11 16:11 - 2017-07-28 06:31 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-01-09 23:40 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput
2019-01-09 23:40 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-01-09 20:28 - 2017-11-14 21:14 - 000000000 ____D C:\WINDOWS\system32\MpEngineStore
2019-01-09 20:28 - 2017-08-08 20:32 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-01-09 20:26 - 2017-06-23 07:27 - 132790320 ____C (Microsoft Corporation) C:\WINDOWS\system32\mrt.exe
2019-01-09 20:12 - 2018-11-07 19:49 - 000000000 ____D C:\Program Files (x86)\Origin Games
2019-01-09 20:11 - 2016-07-16 12:47 - 000000167 _____ C:\WINDOWS\win.ini
==================== Files in the root of some directories =======
2018-09-28 18:23 - 2018-09-28 18:23 - 000000000 _____ () C:\Users\Aca\AppData\Local\oobelibMkey.log
Some files in TEMP:
====================
2019-02-08 22:46 - 2019-02-08 22:46 - 041846888 _____ () C:\Users\Aca\AppData\Local\Temp\vlc-3.0.6-win64.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\dllhost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-05-17 17:25
==================== End of FRST.txt ============================
mycity.rs/must-login.png
|