Rozhozený PC (Plocha - zástupci, lišta..)

[mlzd]

Zdravím! Nevím co s tím a čím to může být..prosím o radu! Dnes večer jsem zapnul PC, místo na plochu s mými zástupci mi najel na přednastavenou plochu Windows. nešlo mi přepnout na původní mé nastavení, na spodní liště se též změnily ikony, navíc nejde pravým myšidlem ze spodní lišty otevřít nabídku jako dřív a vůbec je PC "nějakej divnej". Zkusil jsem bodem obnovy vrátit se zpet o dva dny - do 11.10.2016 - plocha mi už najela jak má být, ale stejně se mi některé věci nezdají. Obnovou se nepodařilo všechny soubory ošetřit - např. nějaký Avastový - posílám obrázek hlášky a log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by wow at 2016-10-13 23:24:51
Microsoft Windows 10 Home
System drive C: has 139 GB (69%) free of 199 GB
Total RAM: 3056 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:24:54, on 13.10.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0589)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Altap Salamander\salamand.exe
C:\Program Files (x86)\Altap Salamander\utils\salmon.exe
C:\Program Files\trend micro\wow.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [WD Drive Unlocker] C:\Program Files (x86)\Western Digital\WD Apps\WDDriveAutoUnlock.exe
O4 - HKLM\..\Run: [DriveUtilitiesHelper] C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe
O4 - HKLM\..\Run: [WD Quick View] C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\wow\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: WD Backup (WDBackup) - Western Digital Technologies, Inc. - C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
O23 - Service: WD Drive Manager (WDDriveService) - Western Digital Technologies, Inc. - C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7703 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a2b65da0-3b3d-4649-9281-5fb4382fa79c -SystemEventPortName:HostProcess-459c86ed-af14-4093-9dab-3c7481350031 -IoCancelEventPortName:HostProcess-4c5eb254-a236-48cc-8acc-f39cc24c753f -NonStateChangingEventPortName:HostProcess-e8ddcd15-eff4-4b75-9b34-a97c57a8dbf3 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:087f7cf8-75b0-41d1-b965-5c0d9f15bce3 -DeviceGroupId:WpdFsGroup
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\svchost.exe -k iissvcs
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe"
"C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe"
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
sihost.exe
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"fontdrvhost.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding

C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\compattelrunner.exe
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\CompatTelRunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun -cv:syJpBLOuTkG7QQ/M.1

"C:\Program Files (x86)\Altap Salamander\salamand.exe"
"C:\Program Files (x86)\Altap Salamander\utils\salmon.exe" "SalmonDDF" "czech.slg"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3331582564-1448147210-1963712125-10014_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3331582564-1448147210-1963712125-10014 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 620 624 632 8192 628
"D:\Programy\Safety\Viry_RSIT\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\wow\AppData\Roaming\Mozilla\Firefox\Profiles\zq8h03do.default-1461098688056

prefs.js - "browser.startup.homepage" - " https://www.seznam.cz"

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"jid1-r1tDuNiNb4SEww@jetpack"=C:\Program Files\AVAST Software\Avast\pam\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.162 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.50709.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.162 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"snpstd3"=C:\WINDOWS\vsnpstd3.exe [2006-09-18 843776]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\wow\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-02-22 551112]
"Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [2015-07-12 563416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-09-16 1156824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend]
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay]
C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-06-27 7408312]
"WD Drive Unlocker"=C:\Program Files (x86)\Western Digital\WD Apps\WDDriveAutoUnlock.exe [2011-12-16 1687968]
"DriveUtilitiesHelper"=C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [2015-07-31 1890664]
"WD Quick View"=C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [2015-07-20 5564784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - "C:\Program Files (x86)\Macromedia\Dreamweaver 8\dreamweaver.exe" "%1"
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-10-13 23:09:38 ----A---- C:\WINDOWS\system32\aswBoot.exe
2016-09-14 00:29:49 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-09-14 00:29:47 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-09-14 00:29:46 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-09-14 00:29:44 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-09-14 00:29:43 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-09-14 00:29:42 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-09-14 00:29:40 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-09-14 00:29:40 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-09-14 00:29:39 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-09-14 00:29:39 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-09-14 00:29:37 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-09-14 00:29:37 ----A---- C:\WINDOWS\system32\tquery.dll
2016-09-14 00:29:37 ----A---- C:\WINDOWS\system32\combase.dll
2016-09-14 00:29:36 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-09-14 00:29:35 ----A---- C:\WINDOWS\system32\Wpc.dll
2016-09-14 00:29:35 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-09-14 00:29:34 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-09-14 00:29:34 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-09-14 00:29:34 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-09-14 00:29:33 ----A---- C:\WINDOWS\SYSWOW64\xpsservices.dll
2016-09-14 00:29:33 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-09-14 00:29:33 ----A---- C:\WINDOWS\system32\mssrch.dll
2016-09-14 00:29:33 ----A---- C:\WINDOWS\system32\mmcndmgr.dll
2016-09-14 00:29:32 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2016-09-14 00:29:32 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-14 00:29:31 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-09-14 00:29:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Phone.dll
2016-09-14 00:29:30 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2016-09-14 00:29:30 ----A---- C:\WINDOWS\system32\OpcServices.dll
2016-09-14 00:29:29 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-09-14 00:29:29 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2016-09-14 00:29:29 ----A---- C:\WINDOWS\system32\authui.dll
2016-09-14 00:29:28 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2016-09-14 00:29:28 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-09-14 00:29:27 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2016-09-14 00:29:27 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-09-14 00:29:27 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-09-14 00:29:26 ----A---- C:\WINDOWS\SYSWOW64\winipcsecproc.dll
2016-09-14 00:29:26 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-09-14 00:29:26 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-09-14 00:29:25 ----A---- C:\WINDOWS\SYSWOW64\Pimstore.dll
2016-09-14 00:29:25 ----A---- C:\WINDOWS\system32\xpsservices.dll
2016-09-14 00:29:25 ----A---- C:\WINDOWS\system32\wmdrmdev.dll
2016-09-14 00:29:24 ----A---- C:\WINDOWS\system32\twinapi.dll
2016-09-14 00:29:24 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2016-09-14 00:29:24 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2016-09-14 00:29:23 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2016-09-14 00:29:23 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2016-09-14 00:29:23 ----A---- C:\WINDOWS\system32\WpcMon.exe
2016-09-14 00:29:23 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-09-14 00:29:22 ----A---- C:\WINDOWS\SYSWOW64\winmsipc.dll
2016-09-14 00:29:22 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-09-14 00:29:22 ----A---- C:\WINDOWS\SYSWOW64\hnetcfg.dll
2016-09-14 00:29:22 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2016-09-14 00:29:22 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2016-09-14 00:29:22 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-09-14 00:29:21 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2016-09-14 00:29:20 ----A---- C:\WINDOWS\system32\winhttp.dll
2016-09-14 00:29:20 ----A---- C:\WINDOWS\system32\rpcss.dll
2016-09-14 00:29:20 ----A---- C:\WINDOWS\system32\msdtctm.dll
2016-09-14 00:29:19 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-09-14 00:29:19 ----A---- C:\WINDOWS\system32\wmdrmsdk.dll
2016-09-14 00:29:19 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-09-14 00:29:18 ----A---- C:\WINDOWS\SYSWOW64\wmdrmdev.dll
2016-09-14 00:29:18 ----A---- C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2016-09-14 00:29:18 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2016-09-14 00:29:18 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-09-14 00:29:17 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2016-09-14 00:29:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2016-09-14 00:29:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2016-09-14 00:29:17 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2016-09-14 00:29:17 ----A---- C:\WINDOWS\system32\uDWM.dll
2016-09-14 00:29:17 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll
2016-09-14 00:29:16 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2016-09-14 00:29:16 ----A---- C:\WINDOWS\system32\wiaservc.dll
2016-09-14 00:29:16 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-09-14 00:29:16 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-09-14 00:29:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2016-09-14 00:29:15 ----A---- C:\WINDOWS\SYSWOW64\wbemcomn.dll
2016-09-14 00:29:15 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2016-09-14 00:29:15 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-09-14 00:29:15 ----A---- C:\WINDOWS\system32\SHCore.dll
2016-09-14 00:29:15 ----A---- C:\WINDOWS\system32\propsys.dll
2016-09-14 00:29:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2016-09-14 00:29:14 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-09-14 00:29:14 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-09-14 00:29:14 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2016-09-14 00:29:13 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2016-09-14 00:29:13 ----A---- C:\WINDOWS\SYSWOW64\wmdrmsdk.dll
2016-09-14 00:29:13 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2016-09-14 00:29:13 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-09-14 00:29:13 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-09-14 00:29:13 ----A---- C:\WINDOWS\system32\mfps.dll
2016-09-14 00:29:12 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-09-14 00:29:12 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-09-14 00:29:12 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-09-14 00:29:12 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-09-14 00:29:12 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-09-14 00:29:11 ----A---- C:\WINDOWS\SYSWOW64\upnphost.dll
2016-09-14 00:29:11 ----A---- C:\WINDOWS\system32\shsetup.dll
2016-09-14 00:29:11 ----A---- C:\WINDOWS\system32\ExecModelClient.dll
2016-09-14 00:29:11 ----A---- C:\WINDOWS\system32\dcomp.dll
2016-09-14 00:29:10 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-09-14 00:29:10 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-09-14 00:29:10 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-09-14 00:29:10 ----A---- C:\WINDOWS\system32\mssprxy.dll
2016-09-14 00:29:10 ----A---- C:\WINDOWS\system32\apprepsync.dll
2016-09-14 00:29:09 ----A---- C:\WINDOWS\SYSWOW64\XpsDocumentTargetPrint.dll
2016-09-14 00:29:09 ----A---- C:\WINDOWS\SYSWOW64\taskschd.dll
2016-09-14 00:29:09 ----A---- C:\WINDOWS\system32\SensorService.dll
2016-09-14 00:29:08 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2016-09-14 00:29:08 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2016-09-14 00:29:08 ----A---- C:\WINDOWS\system32\evr.dll
2016-09-14 00:29:08 ----A---- C:\WINDOWS\system32\ClipUp.exe
2016-09-14 00:29:07 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-09-14 00:29:06 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2016-09-14 00:29:06 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-09-14 00:29:06 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-09-14 00:29:06 ----A---- C:\WINDOWS\system32\azroleui.dll
2016-09-14 00:29:05 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-09-14 00:29:05 ----A---- C:\WINDOWS\system32\sti.dll
2016-09-14 00:29:05 ----A---- C:\WINDOWS\system32\comdlg32.dll
2016-09-14 00:29:05 ----A---- C:\WINDOWS\system32\authfwcfg.dll
2016-09-14 00:29:05 ----A---- C:\WINDOWS\system32\apprepapi.dll
2016-09-14 00:29:04 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2016-09-14 00:29:04 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2016-09-14 00:29:04 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2016-09-14 00:29:04 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2016-09-14 00:29:03 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2016-09-14 00:29:03 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-09-14 00:29:03 ----A---- C:\WINDOWS\system32\MrmIndexer.dll
2016-09-14 00:29:03 ----A---- C:\WINDOWS\system32\easwrt.dll
2016-09-14 00:29:03 ----A---- C:\WINDOWS\system32\DictationManager.dll
2016-09-14 00:29:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2016-09-14 00:29:02 ----A---- C:\WINDOWS\system32\wiarpc.dll
2016-09-14 00:29:02 ----A---- C:\WINDOWS\system32\LegacyNetUXHost.exe
2016-09-14 00:29:02 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-09-14 00:29:02 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2016-09-14 00:29:01 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-09-14 00:29:01 ----A---- C:\WINDOWS\SYSWOW64\udhisapi.dll
2016-09-14 00:29:01 ----A---- C:\WINDOWS\system32\msdt.exe
2016-09-14 00:29:01 ----A---- C:\WINDOWS\system32\edputil.dll
2016-09-14 00:29:00 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-09-14 00:29:00 ----A---- C:\WINDOWS\system32\msi.dll
2016-09-14 00:29:00 ----A---- C:\WINDOWS\system32\DiagCpl.dll
2016-09-14 00:28:59 ----A---- C:\WINDOWS\SYSWOW64\WmpDui.dll
2016-09-14 00:28:59 ----A---- C:\WINDOWS\SYSWOW64\upnpcont.exe
2016-09-14 00:28:59 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-09-14 00:28:59 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2016-09-14 00:28:59 ----A---- C:\WINDOWS\system32\SmartCardSimulator.dll
2016-09-14 00:28:59 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-09-14 00:28:59 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2016-09-14 00:28:58 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-09-14 00:28:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.ps.dll
2016-09-14 00:28:58 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2016-09-14 00:28:58 ----A---- C:\WINDOWS\system32\pngfilt.dll
2016-09-14 00:28:58 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-09-14 00:28:58 ----A---- C:\WINDOWS\system32\fwcfg.dll
2016-09-14 00:28:58 ----A---- C:\WINDOWS\system32\drivers\HdAudio.sys
2016-09-14 00:28:57 ----A---- C:\WINDOWS\SYSWOW64\sti.dll
2016-09-14 00:28:57 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-09-14 00:28:57 ----A---- C:\WINDOWS\system32\prnntfy.dll
2016-09-14 00:28:57 ----A---- C:\WINDOWS\system32\CheckNetIsolation.exe
2016-09-14 00:28:57 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-09-14 00:28:56 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-09-14 00:28:52 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-09-14 00:28:51 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-09-14 00:28:51 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2016-09-14 00:28:51 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-09-14 00:28:50 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2016-09-14 00:28:50 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2016-09-14 00:28:49 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2016-09-14 00:28:49 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-09-14 00:28:49 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-09-14 00:28:49 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2016-09-14 00:28:49 ----A---- C:\WINDOWS\system32\InputService.dll
2016-09-14 00:28:48 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll
2016-09-14 00:28:48 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2016-09-14 00:28:48 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-09-14 00:28:47 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2016-09-14 00:28:47 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-09-14 00:28:47 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-09-14 00:28:47 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2016-09-14 00:28:47 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-09-14 00:28:46 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2016-09-14 00:28:46 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2016-09-14 00:28:46 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-09-14 00:28:46 ----A---- C:\WINDOWS\system32\MSAJApi.dll
2016-09-14 00:28:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2016-09-14 00:28:45 ----A---- C:\WINDOWS\system32\wwanconn.dll
2016-09-14 00:28:45 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-09-14 00:28:44 ----A---- C:\WINDOWS\SYSWOW64\wdc.dll
2016-09-14 00:28:44 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2016-09-14 00:28:44 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2016-09-14 00:28:44 ----A---- C:\WINDOWS\SYSWOW64\Geolocation.dll
2016-09-14 00:28:44 ----A---- C:\WINDOWS\system32\wpnapps.dll
2016-09-14 00:28:44 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2016-09-14 00:28:43 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2016-09-14 00:28:43 ----A---- C:\WINDOWS\system32\rdpcore.dll
2016-09-14 00:28:43 ----A---- C:\WINDOWS\system32\das.dll
2016-09-14 00:28:43 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-09-14 00:28:42 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-09-14 00:28:42 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2016-09-14 00:28:42 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2016-09-14 00:28:42 ----A---- C:\WINDOWS\system32\mf.dll
2016-09-14 00:28:41 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2016-09-14 00:28:41 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2016-09-14 00:28:41 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-09-14 00:28:41 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2016-09-14 00:28:41 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-09-14 00:28:40 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-09-14 00:28:40 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-09-14 00:28:40 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2016-09-14 00:28:40 ----A---- C:\WINDOWS\system32\printfilterpipelinesvc.exe
2016-09-14 00:28:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2016-09-14 00:28:39 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2016-09-14 00:28:39 ----A---- C:\WINDOWS\SYSWOW64\shsetup.dll
2016-09-14 00:28:39 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-09-14 00:28:38 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2016-09-14 00:28:38 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2016-09-14 00:28:38 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-09-14 00:28:38 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-09-14 00:28:38 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2016-09-14 00:28:37 ----A---- C:\WINDOWS\SYSWOW64\winipcsecproc_ssp.dll
2016-09-14 00:28:37 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2016-09-14 00:28:37 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-09-14 00:28:37 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2016-09-14 00:28:37 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-09-14 00:28:37 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-09-14 00:28:37 ----A---- C:\WINDOWS\system32\localspl.dll
2016-09-14 00:28:36 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-09-14 00:28:36 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-09-14 00:28:36 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-09-14 00:28:36 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2016-09-14 00:28:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2016-09-14 00:28:35 ----A---- C:\WINDOWS\system32\wpncore.dll
2016-09-14 00:28:35 ----A---- C:\WINDOWS\system32\rasgcw.dll
2016-09-14 00:28:34 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2016-09-14 00:28:34 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2016-09-14 00:28:34 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-09-14 00:28:34 ----A---- C:\WINDOWS\system32\wifitask.exe
2016-09-14 00:28:33 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2016-09-14 00:28:33 ----A---- C:\WINDOWS\system32\wwanmm.dll
2016-09-14 00:28:33 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2016-09-14 00:28:32 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2016-09-14 00:28:32 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-09-14 00:28:32 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-09-14 00:28:32 ----A---- C:\WINDOWS\system32\netlogon.dll
2016-09-14 00:28:31 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-09-14 00:28:31 ----A---- C:\WINDOWS\system32\XboxNetApiSvc.dll
2016-09-14 00:28:31 ----A---- C:\WINDOWS\system32\werconcpl.dll
2016-09-14 00:28:31 ----A---- C:\WINDOWS\system32\netcenter.dll
2016-09-14 00:28:30 ----N---- C:\WINDOWS\system32\deviceassociation.dll
2016-09-14 00:28:30 ----A---- C:\WINDOWS\SYSWOW64\WsmWmiPl.dll
2016-09-14 00:28:30 ----A---- C:\WINDOWS\SYSWOW64\syncutil.dll
2016-09-14 00:28:30 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2016-09-14 00:28:30 ----A---- C:\WINDOWS\SYSWOW64\duser.dll
2016-09-14 00:28:30 ----A---- C:\WINDOWS\system32\mscms.dll
2016-09-14 00:28:30 ----A---- C:\WINDOWS\system32\deviceassociation(81).dll
2016-09-14 00:28:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-14 00:28:29 ----A---- C:\WINDOWS\SYSWOW64\SyncController.dll
2016-09-14 00:28:29 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-14 00:28:29 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2016-09-14 00:28:29 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2016-09-14 00:28:29 ----A---- C:\WINDOWS\system32\dot3ui.dll
2016-09-14 00:28:28 ----A---- C:\WINDOWS\SYSWOW64\wsmprovhost.exe
2016-09-14 00:28:28 ----A---- C:\WINDOWS\SYSWOW64\WsmAuto.dll
2016-09-14 00:28:28 ----A---- C:\WINDOWS\SYSWOW64\vsstrace.dll
2016-09-14 00:28:28 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2016-09-14 00:28:28 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-09-14 00:28:28 ----A---- C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2016-09-14 00:28:27 ----A---- C:\WINDOWS\SYSWOW64\WsmAgent.dll
2016-09-14 00:28:27 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2016-09-14 00:28:27 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2016-09-14 00:28:27 ----A---- C:\WINDOWS\SYSWOW64\deviceassociation.dll
2016-09-14 00:28:27 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-09-14 00:28:27 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2016-09-14 00:28:27 ----A---- C:\WINDOWS\system32\wificonnapi.dll
2016-09-14 00:28:27 ----A---- C:\WINDOWS\system32\RADCUI.dll
2016-09-14 00:28:26 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2016-09-14 00:28:24 ----A---- C:\WINDOWS\system32\sppsvc.exe
2016-09-14 00:28:23 ----A---- C:\WINDOWS\system32\shell32.dll
2016-09-14 00:28:23 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2016-09-14 00:28:22 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-09-14 00:28:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-09-14 00:28:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-09-14 00:28:20 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-09-14 00:28:19 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2016-09-14 00:28:19 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2016-09-14 00:28:19 ----A---- C:\WINDOWS\system32\wininet.dll
2016-09-14 00:28:19 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-09-14 00:28:19 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-09-14 00:28:18 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-09-14 00:28:18 ----A---- C:\WINDOWS\SYSWOW64\mmcndmgr.dll
2016-09-14 00:28:17 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-09-14 00:28:17 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-09-14 00:28:16 ----A---- C:\WINDOWS\SYSWOW64\mmc.exe
2016-09-14 00:28:16 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-09-14 00:28:16 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-09-14 00:28:15 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2016-09-14 00:28:15 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-09-14 00:28:15 ----A---- C:\WINDOWS\system32\webservices.dll
2016-09-14 00:28:15 ----A---- C:\WINDOWS\system32\ole32.dll
2016-09-14 00:28:14 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-09-14 00:28:14 ----A---- C:\WINDOWS\system32\winresume.exe
2016-09-14 00:28:13 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-09-14 00:28:13 ----A---- C:\WINDOWS\SYSWOW64\MsSpellCheckingFacility.dll
2016-09-14 00:28:13 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-09-14 00:28:13 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2016-09-14 00:28:12 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2016-09-14 00:28:12 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-09-14 00:28:11 ----A---- C:\WINDOWS\SYSWOW64\PhoneOm.dll
2016-09-14 00:28:11 ----A---- C:\WINDOWS\system32\winload.exe
2016-09-14 00:28:11 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-09-14 00:28:11 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-09-14 00:28:10 ----A---- C:\WINDOWS\SYSWOW64\MSAJApi.dll
2016-09-14 00:28:10 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2016-09-14 00:28:10 ----A---- C:\WINDOWS\system32\ntshrui.dll
2016-09-14 00:28:09 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2016-09-14 00:28:09 ----A---- C:\WINDOWS\SYSWOW64\filemgmt.dll
2016-09-14 00:28:08 ----A---- C:\WINDOWS\SYSWOW64\mscms.dll
2016-09-14 00:28:08 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2016-09-14 00:28:08 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-09-14 00:28:08 ----A---- C:\WINDOWS\system32\nettrace.dll
2016-09-14 00:28:08 ----A---- C:\WINDOWS\system32\comuid.dll
2016-09-14 00:28:07 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2016-09-14 00:28:07 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2016-09-14 00:28:07 ----A---- C:\WINDOWS\system32\wbemcomn.dll
2016-09-14 00:28:07 ----A---- C:\WINDOWS\system32\msxml3.dll
2016-09-14 00:28:07 ----A---- C:\WINDOWS\system32\drivers\ufxsynopsys.sys
2016-09-14 00:28:06 ----A---- C:\WINDOWS\system32\WlanMM.dll
2016-09-14 00:28:06 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2016-09-14 00:28:06 ----A---- C:\WINDOWS\system32\quartz.dll
2016-09-14 00:28:06 ----A---- C:\WINDOWS\system32\mstsc.exe
2016-09-14 00:28:05 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2016-09-14 00:28:05 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2016-09-14 00:28:05 ----A---- C:\WINDOWS\system32\sspicli.dll
2016-09-14 00:28:05 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-09-14 00:28:04 ----A---- C:\WINDOWS\SYSWOW64\cryptui.dll
2016-09-14 00:28:04 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-09-14 00:28:04 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2016-09-14 00:28:03 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2016-09-14 00:28:03 ----A---- C:\WINDOWS\system32\winipcsecproc_ssp.dll
2016-09-14 00:28:03 ----A---- C:\WINDOWS\system32\usocore.dll
2016-09-14 00:28:03 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2016-09-14 00:28:03 ----A---- C:\WINDOWS\system32\lsass.exe
2016-09-14 00:28:03 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2016-09-14 00:28:02 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2016-09-14 00:28:02 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2016-09-14 00:28:02 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2016-09-14 00:28:02 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2016-09-14 00:28:02 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2016-09-14 00:28:01 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2016-09-14 00:28:01 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2016-09-14 00:28:01 ----A---- C:\WINDOWS\SYSWOW64\cic.dll
2016-09-14 00:28:01 ----A---- C:\WINDOWS\SYSWOW64\azroleui.dll
2016-09-14 00:28:01 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-09-14 00:28:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.LowLevel.dll
2016-09-14 00:28:00 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2016-09-14 00:28:00 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2016-09-14 00:28:00 ----A---- C:\WINDOWS\SYSWOW64\mmcbase.dll
2016-09-14 00:28:00 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-09-14 00:28:00 ----A---- C:\WINDOWS\system32\AppxApplicabilityEngine.dll
2016-09-14 00:27:59 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2016-09-14 00:27:59 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2016-09-14 00:27:59 ----A---- C:\WINDOWS\system32\azroles.dll
2016-09-14 00:27:58 ----A---- C:\WINDOWS\SYSWOW64\mmcshext.dll
2016-09-14 00:27:58 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2016-09-14 00:27:58 ----A---- C:\WINDOWS\system32\wdc.dll
2016-09-14 00:27:58 ----A---- C:\WINDOWS\system32\wcncsvc.dll
2016-09-14 00:27:58 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2016-09-14 00:27:58 ----A---- C:\WINDOWS\system32\spcompat.dll
2016-09-14 00:27:57 ----A---- C:\WINDOWS\SYSWOW64\pla.dll
2016-09-14 00:27:55 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2016-09-14 00:27:55 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2016-09-14 00:27:55 ----A---- C:\WINDOWS\system32\SettingsHandlers_Geolocation.dll
2016-09-14 00:27:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.Cortana.ProxyStub.dll
2016-09-14 00:27:54 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2016-09-14 00:27:54 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2016-09-14 00:27:54 ----A---- C:\WINDOWS\system32\WsmAuto.dll
2016-09-14 00:27:54 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2016-09-14 00:27:54 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-09-14 00:27:53 ----A---- C:\WINDOWS\SYSWOW64\gpedit.dll
2016-09-14 00:27:53 ----A---- C:\WINDOWS\SYSWOW64\fwcfg.dll
2016-09-14 00:27:53 ----A---- C:\WINDOWS\system32\Windows.Storage.Search.dll
2016-09-14 00:27:53 ----A---- C:\WINDOWS\system32\WcnApi.dll
2016-09-14 00:27:53 ----A---- C:\WINDOWS\system32\WalletService.dll
2016-09-14 00:27:53 ----A---- C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-09-14 00:27:53 ----A---- C:\WINDOWS\system32\drivers\MTConfig.sys
2016-09-14 00:27:53 ----A---- C:\WINDOWS\system32\CPFilters.dll
2016-09-14 00:27:52 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2016-09-14 00:27:52 ----A---- C:\WINDOWS\system32\WmpDui.dll
2016-09-14 00:27:52 ----A---- C:\WINDOWS\system32\GamePanel.exe
2016-09-14 00:27:52 ----A---- C:\WINDOWS\system32\fdWCN.dll
2016-09-14 00:27:52 ----A---- C:\WINDOWS\system32\efswrt.dll
2016-09-14 00:27:51 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2016-09-14 00:27:51 ----A---- C:\WINDOWS\SYSWOW64\oemlicense.dll
2016-09-14 00:27:51 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-09-14 00:27:50 ----A---- C:\WINDOWS\SYSWOW64\VoipRT.dll
2016-09-14 00:27:50 ----A---- C:\WINDOWS\SYSWOW64\SmartcardCredentialProvider.dll
2016-09-14 00:27:50 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2016-09-14 00:27:50 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2016-09-14 00:27:50 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-09-14 00:27:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.Search.dll
2016-09-14 00:27:49 ----A---- C:\WINDOWS\system32\wlanui.dll
2016-09-14 00:27:49 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-09-14 00:27:49 ----A---- C:\WINDOWS\system32\ieui.dll
2016-09-14 00:27:49 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-09-14 00:27:48 ----A---- C:\WINDOWS\SYSWOW64\WlanMM.dll
2016-09-14 00:27:48 ----A---- C:\WINDOWS\SYSWOW64\MrmIndexer.dll
2016-09-14 00:27:48 ----A---- C:\WINDOWS\SYSWOW64\authfwcfg.dll
2016-09-14 00:27:48 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-09-14 00:27:47 ----A---- C:\WINDOWS\SYSWOW64\WLanConn.dll
2016-09-14 00:27:47 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2016-09-14 00:27:47 ----A---- C:\WINDOWS\SYSWOW64\certmgr.dll
2016-09-14 00:27:47 ----A---- C:\WINDOWS\system32\wsmprovhost.exe
2016-09-14 00:27:47 ----A---- C:\WINDOWS\system32\WLanConn.dll
2016-09-14 00:27:47 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-09-14 00:27:47 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-09-14 00:27:46 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2016-09-14 00:27:46 ----A---- C:\WINDOWS\SYSWOW64\msobjs.dll
2016-09-14 00:27:46 ----A---- C:\WINDOWS\SYSWOW64\licensingdiag.exe
2016-09-14 00:27:46 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2016-09-14 00:27:46 ----A---- C:\WINDOWS\system32\Windows.Graphics.dll
2016-09-14 00:27:46 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2016-09-14 00:27:46 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-09-14 00:27:46 ----A---- C:\WINDOWS\system32\dafWCN.dll
2016-09-14 00:27:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.AllJoyn.dll
2016-09-14 00:27:45 ----A---- C:\WINDOWS\system32\WsmAgent.dll
2016-09-14 00:27:45 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2016-09-14 00:27:45 ----A---- C:\WINDOWS\system32\IconCodecService.dll
2016-09-14 00:27:45 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2016-09-14 00:27:45 ----A---- C:\WINDOWS\system32\dialserver.dll
2016-09-14 00:27:45 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2016-09-14 00:27:44 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2016-09-14 00:27:44 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2016-09-14 00:27:44 ----A---- C:\WINDOWS\SYSWOW64\CheckNetIsolation.exe
2016-09-14 00:27:44 ----A---- C:\WINDOWS\system32\odbcconf.dll
2016-09-14 00:27:40 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-09-14 00:27:38 ----A---- C:\WINDOWS\system32\mos.dll
2016-09-14 00:27:37 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-09-14 00:27:36 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2016-09-14 00:27:36 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-09-14 00:27:35 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-09-14 00:27:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-09-14 00:27:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-09-14 00:27:34 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2016-09-14 00:27:33 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2016-09-14 00:27:33 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-09-14 00:27:33 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2016-09-14 00:27:33 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-09-14 00:27:32 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-09-14 00:27:32 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-09-14 00:27:31 ----A---- C:\WINDOWS\system32\storagewmi.dll
2016-09-14 00:27:31 ----A---- C:\WINDOWS\system32\qmgr.dll
2016-09-14 00:27:30 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-09-14 00:27:30 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-09-14 00:27:30 ----A---- C:\WINDOWS\system32\VSSVC.exe
2016-09-14 00:27:30 ----A---- C:\WINDOWS\system32\msctf.dll
2016-09-14 00:27:29 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2016-09-14 00:27:29 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2016-09-14 00:27:29 ----A---- C:\WINDOWS\system32\PhoneService.dll
2016-09-14 00:27:29 ----A---- C:\WINDOWS\system32\oleaut32.dll
2016-09-14 00:27:29 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-09-14 00:27:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-09-14 00:27:28 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-09-14 00:27:28 ----A---- C:\WINDOWS\system32\vssapi.dll
2016-09-14 00:27:28 ----A---- C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2016-09-14 00:27:28 ----A---- C:\WINDOWS\system32\diagperf.dll
2016-09-14 00:27:27 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2016-09-14 00:27:27 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-09-14 00:27:27 ----A---- C:\WINDOWS\system32\usercpl.dll
2016-09-14 00:27:27 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-09-14 00:27:27 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-09-14 00:27:26 ----A---- C:\WINDOWS\system32\wmpmde.dll
2016-09-14 00:27:26 ----A---- C:\WINDOWS\system32\termsrv.dll
2016-09-14 00:27:26 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2016-09-14 00:27:26 ----A---- C:\WINDOWS\system32\PhoneOm.dll
2016-09-14 00:27:26 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2016-09-14 00:27:25 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2016-09-14 00:27:25 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2016-09-14 00:27:25 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2016-09-14 00:27:25 ----A---- C:\WINDOWS\system32\wlidprov.dll
2016-09-14 00:27:25 ----A---- C:\WINDOWS\system32\d3d9.dll
2016-09-14 00:27:24 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2016-09-14 00:27:24 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2016-09-14 00:27:24 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2016-09-14 00:27:24 ----A---- C:\WINDOWS\system32\clusapi.dll
2016-09-14 00:27:24 ----A---- C:\WINDOWS\system32\BCP47Langs.dll
2016-09-14 00:27:23 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-09-14 00:27:23 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-09-14 00:27:23 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2016-09-14 00:27:23 ----A---- C:\WINDOWS\system32\hnetcfg.dll
2016-09-14 00:27:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2016-09-14 00:27:22 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2016-09-14 00:27:22 ----A---- C:\WINDOWS\system32\NMAA.dll
2016-09-14 00:27:22 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-09-14 00:27:22 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-09-14 00:27:21 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-09-14 00:27:21 ----A---- C:\WINDOWS\system32\swprv.dll
2016-09-14 00:27:21 ----A---- C:\WINDOWS\system32\mprddm.dll
2016-09-14 00:27:21 ----A---- C:\WINDOWS\system32\D3D12.dll
2016-09-14 00:27:20 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-09-14 00:27:20 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-09-14 00:27:20 ----A---- C:\WINDOWS\SYSWOW64\BCP47Langs.dll
2016-09-14 00:27:20 ----A---- C:\WINDOWS\system32\wsp_health.dll
2016-09-14 00:27:20 ----A---- C:\WINDOWS\system32\vds.exe
2016-09-14 00:27:20 ----A---- C:\WINDOWS\system32\defragsvc.dll
2016-09-14 00:27:19 ----A---- C:\WINDOWS\system32\pnidui.dll
2016-09-14 00:27:19 ----A---- C:\WINDOWS\system32\mispace.dll
2016-09-14 00:27:19 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2016-09-14 00:27:19 ----A---- C:\WINDOWS\system32\apphelp.dll
2016-09-14 00:27:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2016-09-14 00:27:18 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2016-09-14 00:27:18 ----A---- C:\WINDOWS\system32\resutils.dll
2016-09-14 00:27:18 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-09-14 00:27:18 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-09-14 00:27:17 ----A---- C:\WINDOWS\SYSWOW64\comuid.dll
2016-09-14 00:27:17 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-09-14 00:27:17 ----A---- C:\WINDOWS\SYSWOW64\certca.dll
2016-09-14 00:27:17 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2016-09-14 00:27:17 ----A---- C:\WINDOWS\system32\moshostcore.dll
2016-09-14 00:27:17 ----A---- C:\WINDOWS\system32\eappcfg.dll
2016-09-14 00:27:16 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-09-14 00:27:16 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2016-09-14 00:27:16 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-09-14 00:27:16 ----A---- C:\WINDOWS\system32\kernel32.dll
2016-09-14 00:27:16 ----A---- C:\WINDOWS\system32\APHostService.dll
2016-09-14 00:27:15 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-09-14 00:27:15 ----A---- C:\WINDOWS\system32\wbengine.exe
2016-09-14 00:27:15 ----A---- C:\WINDOWS\system32\upnphost.dll
2016-09-14 00:27:15 ----A---- C:\WINDOWS\system32\tdh.dll
2016-09-14 00:27:15 ----A---- C:\WINDOWS\system32\netman.dll
2016-09-14 00:27:15 ----A---- C:\WINDOWS\system32\icsvc.dll
2016-09-14 00:27:15 ----A---- C:\WINDOWS\system32\DMRServer.dll
2016-09-14 00:27:14 ----A---- C:\WINDOWS\system32\pcasvc.dll
2016-09-14 00:27:14 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2016-09-14 00:27:14 ----A---- C:\WINDOWS\system32\moshost.dll
2016-09-14 00:27:14 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-09-14 00:27:13 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2016-09-14 00:27:13 ----A---- C:\WINDOWS\system32\setupapi.dll
2016-09-14 00:27:13 ----A---- C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-09-14 00:27:13 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-09-14 00:27:13 ----A---- C:\WINDOWS\system32\csrsrv.dll
2016-09-14 00:27:12 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-09-14 00:27:12 ----A---- C:\WINDOWS\system32\wusa.exe
2016-09-14 00:27:12 ----A---- C:\WINDOWS\system32\netcfgx.dll
2016-09-14 00:27:12 ----A---- C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2016-09-14 00:27:12 ----A---- C:\WINDOWS\system32\drvstore.dll
2016-09-14 00:27:11 ----A---- C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2016-09-14 00:27:11 ----A---- C:\WINDOWS\system32\sdengin2.dll
2016-09-14 00:27:11 ----A---- C:\WINDOWS\system32\MosStorage.dll
2016-09-14 00:27:10 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2016-09-14 00:27:10 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-09-14 00:27:10 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-09-14 00:27:10 ----A---- C:\WINDOWS\system32\MicrosoftAccountCloudAP.dll
2016-09-14 00:27:10 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2016-09-14 00:27:09 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2016-09-14 00:27:09 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-09-14 00:27:09 ----A---- C:\WINDOWS\system32\wimserv.exe
2016-09-14 00:27:09 ----A---- C:\WINDOWS\system32\fdProxy.dll
2016-09-14 00:27:08 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-09-14 00:27:08 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-09-14 00:27:08 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-09-14 00:27:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2016-09-14 00:27:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-09-14 00:27:07 ----A---- C:\WINDOWS\SYSWOW64\usbceip.dll
2016-09-14 00:27:07 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-09-14 00:27:07 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-09-14 00:27:07 ----A---- C:\WINDOWS\system32\WindowsCodecsExt.dll
2016-09-14 00:27:07 ----A---- C:\WINDOWS\system32\udhisapi.dll
2016-09-14 00:27:07 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2016-09-14 00:27:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2016-09-14 00:27:06 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2016-09-14 00:27:06 ----A---- C:\WINDOWS\system32\upnpcont.exe
2016-09-14 00:27:05 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2016-09-14 00:27:05 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-09-14 00:27:05 ----A---- C:\WINDOWS\system32\autochk.exe
2016-09-14 00:27:04 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2016-09-14 00:27:04 ----A---- C:\WINDOWS\system32\VoipRT.dll
2016-09-14 00:27:04 ----A---- C:\WINDOWS\system32\netplwiz.dll
2016-09-14 00:27:04 ----A---- C:\WINDOWS\system32\mcbuilder.exe
2016-09-14 00:27:04 ----A---- C:\WINDOWS\system32\duser.dll
2016-09-14 00:27:04 ----A---- C:\WINDOWS\system32\dui70.dll
2016-09-14 00:27:04 ----A---- C:\WINDOWS\system32\adtschema.dll
2016-09-14 00:27:03 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2016-09-14 00:27:03 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2016-09-14 00:27:03 ----A---- C:\WINDOWS\system32\pla.dll
2016-09-14 00:27:03 ----A---- C:\WINDOWS\system32\netshell.dll
2016-09-14 00:27:03 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2016-09-14 00:27:02 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2016-09-14 00:27:02 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2016-09-14 00:27:01 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2016-09-14 00:27:01 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-09-14 00:27:01 ----A---- C:\WINDOWS\system32\StikyNot.exe
2016-09-14 00:27:01 ----A---- C:\WINDOWS\system32\scapi.dll
2016-09-14 00:27:01 ----A---- C:\WINDOWS\system32\eapphost.dll
2016-09-14 00:27:01 ----A---- C:\WINDOWS\system32\dlnashext.dll
2016-09-14 00:27:00 ----N---- C:\WINDOWS\system32\win32kbase.sys
2016-09-14 00:27:00 ----A---- C:\WINDOWS\SYSWOW64\srpapi.dll
2016-09-14 00:27:00 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2016-09-14 00:27:00 ----A---- C:\WINDOWS\system32\win32kbase(85).sys
2016-09-14 00:27:00 ----A---- C:\WINDOWS\system32\vdsutil.dll
2016-09-14 00:27:00 ----A---- C:\WINDOWS\system32\aitstatic.exe
2016-09-14 00:26:59 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2016-09-14 00:26:59 ----A---- C:\WINDOWS\system32\syncutil.dll
2016-09-14 00:26:59 ----A---- C:\WINDOWS\system32\eapsvc.dll
2016-09-14 00:26:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-09-14 00:26:58 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-09-14 00:26:58 ----A---- C:\WINDOWS\system32\themeui.dll
2016-09-14 00:26:57 ----A---- C:\WINDOWS\system32\vsstrace.dll
2016-09-14 00:26:57 ----A---- C:\WINDOWS\system32\vss_ps.dll
2016-09-14 00:26:57 ----A---- C:\WINDOWS\system32\ipsecsnp.dll
2016-09-14 00:26:57 ----A---- C:\WINDOWS\system32\fhcfg.dll
2016-09-14 00:26:57 ----A---- C:\WINDOWS\system32\configurationclient.dll
2016-09-14 00:26:57 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-09-14 00:26:56 ----A---- C:\WINDOWS\SYSWOW64\azroles.dll
2016-09-14 00:26:56 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-09-14 00:26:56 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2016-09-14 00:26:56 ----A---- C:\WINDOWS\system32\rasapi32.dll
2016-09-14 00:26:56 ----A---- C:\WINDOWS\system32\msobjs.dll
2016-09-14 00:26:55 ----A---- C:\WINDOWS\SYSWOW64\dot3ui.dll
2016-09-14 00:26:55 ----A---- C:\WINDOWS\system32\SyncController.dll
2016-09-14 00:26:55 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2016-09-14 00:26:55 ----A---- C:\WINDOWS\system32\fhsvc.dll
2016-09-14 00:26:55 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2016-09-14 00:26:55 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-09-14 00:26:55 ----A---- C:\WINDOWS\system32\aadtb.dll
2016-09-14 00:26:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2016-09-14 00:26:54 ----A---- C:\WINDOWS\SYSWOW64\AppLockerCSP.dll
2016-09-14 00:26:54 ----A---- C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2016-09-14 00:26:54 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2016-09-14 00:26:54 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2016-09-14 00:26:54 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2016-09-14 00:26:54 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2016-09-14 00:26:53 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2016-09-14 00:26:52 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2016-09-14 00:26:52 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2016-09-14 00:26:52 ----A---- C:\WINDOWS\system32\winsrv.dll
2016-09-14 00:26:51 ----A---- C:\WINDOWS\SYSWOW64\IdCtrls.dll
2016-09-14 00:26:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-09-14 00:26:42 ----A---- C:\WINDOWS\system32\wmp.dll
2016-09-14 00:26:41 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-09-14 00:26:39 ----A---- C:\WINDOWS\system32\twinui.dll
2016-09-14 00:26:38 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-09-14 00:26:37 ----N---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-09-14 00:26:37 ----A---- C:\WINDOWS\SYSWOW64\shell32(87).dll
2016-09-14 00:26:35 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-09-14 00:26:35 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-09-14 00:26:34 ----A---- C:\WINDOWS\system32\drivers\ClipSp.sys
2016-09-14 00:26:33 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-09-14 00:26:33 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-09-14 00:26:32 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-09-14 00:26:32 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-09-14 00:26:30 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsRaw.dll
2016-09-14 00:26:29 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-09-14 00:26:27 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2016-09-14 00:26:27 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-09-14 00:26:27 ----A---- C:\WINDOWS\explorer.exe
2016-09-14 00:26:26 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2016-09-14 00:26:26 ----A---- C:\WINDOWS\system32\mmc.exe
2016-09-14 00:26:25 ----A---- C:\WINDOWS\system32\winmde.dll
2016-09-14 00:26:25 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-09-14 00:26:25 ----A---- C:\WINDOWS\system32\Pimstore.dll
2016-09-14 00:26:24 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-09-14 00:26:24 ----A---- C:\WINDOWS\system32\winipcsecproc.dll
2016-09-14 00:26:24 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-09-14 00:26:23 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-09-14 00:26:23 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-09-14 00:26:22 ----A---- C:\WINDOWS\system32\UserDataService.dll
2016-09-14 00:26:22 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2016-09-14 00:26:21 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-09-14 00:26:20 ----A---- C:\WINDOWS\system32\WindowsCodecsRaw.dll
2016-09-14 00:26:20 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-09-14 00:26:18 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-09-14 00:26:18 ----A---- C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-09-14 00:26:18 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-09-14 00:26:17 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2016-09-14 00:26:17 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-09-14 00:26:17 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-09-14 00:26:16 ----A---- C:\WINDOWS\system32\winmsipc.dll
2016-09-14 00:26:16 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-09-14 00:26:15 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2016-09-14 00:26:15 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-09-14 00:26:15 ----A---- C:\WINDOWS\system32\gameux.dll
2016-09-14 00:26:14 ----A---- C:\WINDOWS\system32\WSShared.dll
2016-09-14 00:26:13 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2016-09-14 00:26:13 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-09-14 00:26:13 ----A---- C:\WINDOWS\system32\Geolocation.dll
2016-09-14 00:26:12 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2016-09-14 00:26:12 ----A---- C:\WINDOWS\system32\w32time.dll
2016-09-14 00:26:12 ----A---- C:\WINDOWS\system32\mqqm.dll
2016-09-14 00:26:11 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2016-09-14 00:26:11 ----A---- C:\WINDOWS\system32\ShareHost.dll
2016-09-14 00:26:11 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2016-09-14 00:26:11 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-09-14 00:26:11 ----A---- C:\WINDOWS\system32\certca.dll
2016-09-14 00:26:10 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-09-14 00:26:10 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-09-14 00:26:10 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-09-14 00:26:10 ----A---- C:\WINDOWS\system32\hgcpl.dll
2016-09-14 00:26:10 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-09-14 00:26:09 ----A---- C:\WINDOWS\system32\wmpeffects.dll
2016-09-14 00:26:09 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-09-14 00:26:09 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-09-14 00:26:08 ----A---- C:\WINDOWS\SYSWOW64\wmploc.DLL
2016-09-14 00:26:08 ----A---- C:\WINDOWS\system32\wmploc.DLL
2016-09-14 00:26:08 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-09-14 00:26:07 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2016-09-14 00:26:07 ----A---- C:\WINDOWS\system32\SecureTimeAggregator.dll
2016-09-14 00:26:07 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-09-14 00:26:07 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-09-14 00:26:06 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-09-14 00:26:06 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2016-09-14 00:26:05 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-09-14 00:26:05 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2016-09-14 00:26:05 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2016-09-14 00:26:04 ----A---- C:\WINDOWS\SYSWOW64\wmpeffects.dll
2016-09-14 00:26:04 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-09-14 00:26:04 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-09-14 00:26:03 ----A---- C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-09-14 00:26:03 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-09-14 00:26:03 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-09-14 00:26:03 ----A---- C:\WINDOWS\system32\sppcext.dll
2016-09-14 00:26:02 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-09-14 00:26:02 ----A---- C:\WINDOWS\system32\filemgmt.dll
2016-09-14 00:26:02 ----A---- C:\WINDOWS\system32\cryptui.dll
2016-09-14 00:26:01 ----A---- C:\WINDOWS\system32\WSService.dll
2016-09-14 00:26:01 ----A---- C:\WINDOWS\system32\sppobjs.dll
2016-09-14 00:26:01 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-09-14 00:26:01 ----A---- C:\WINDOWS\system32\dbgeng.dll
2016-09-14 00:26:00 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-09-14 00:26:00 ----A---- C:\WINDOWS\system32\hal.dll
2016-09-14 00:26:00 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2016-09-14 00:26:00 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-09-14 00:25:59 ----A---- C:\WINDOWS\system32\winipcfile.dll
2016-09-14 00:25:59 ----A---- C:\WINDOWS\system32\SRH.dll
2016-09-14 00:25:59 ----A---- C:\WINDOWS\system32\mmcshext.dll
2016-09-14 00:25:59 ----A---- C:\WINDOWS\system32\mmcbase.dll
2016-09-14 00:25:59 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2016-09-14 00:25:59 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2016-09-14 00:25:59 ----A---- C:\WINDOWS\system32\AudioEng.dll
2016-09-14 00:25:58 ----A---- C:\WINDOWS\system32\themecpl.dll
2016-09-14 00:25:58 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2016-09-14 00:25:57 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2016-09-14 00:25:57 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2016-09-14 00:25:57 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2016-09-14 00:25:57 ----A---- C:\WINDOWS\system32\sppwinob.dll
2016-09-14 00:25:56 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-09-14 00:25:56 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-09-14 00:25:56 ----A---- C:\WINDOWS\system32\mprdim.dll
2016-09-14 00:25:56 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2016-09-14 00:25:56 ----A---- C:\WINDOWS\system32\ApplicationFrame.dll
2016-09-14 00:25:55 ----A---- C:\WINDOWS\SYSWOW64\prnntfy.dll
2016-09-14 00:25:55 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-09-14 00:25:55 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-09-14 00:25:54 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsExt.dll
2016-09-14 00:25:54 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-09-14 00:25:54 ----A---- C:\WINDOWS\SYSWOW64\DbgModel.dll
2016-09-14 00:25:54 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-09-14 00:25:54 ----A---- C:\WINDOWS\system32\gpedit.dll
2016-09-14 00:25:54 ----A---- C:\WINDOWS\system32\DbgModel.dll
2016-09-14 00:25:54 ----A---- C:\WINDOWS\system32\cic.dll
2016-09-14 00:25:53 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-09-14 00:25:53 ----A---- C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2016-09-14 00:25:53 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-09-14 00:25:53 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2016-09-14 00:25:52 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-09-14 00:25:52 ----A---- C:\WINDOWS\SYSWOW64\PhotoScreensaver.scr
2016-09-14 00:25:52 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2016-09-14 00:25:52 ----A---- C:\WINDOWS\system32\certcli.dll
2016-09-14 00:25:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2016-09-14 00:25:51 ----A---- C:\WINDOWS\system32\usermgr.dll
2016-09-14 00:25:51 ----A---- C:\WINDOWS\system32\PhotoScreensaver.scr
2016-09-14 00:25:51 ----A---- C:\WINDOWS\system32\oemlicense.dll
2016-09-14 00:25:51 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2016-09-14 00:25:50 ----A---- C:\WINDOWS\system32\zipfldr.dll
2016-09-14 00:25:50 ----A---- C:\WINDOWS\system32\Display.dll
2016-09-14 00:25:49 ----A---- C:\WINDOWS\system32\WUDFx.dll
2016-09-14 00:25:49 ----A---- C:\WINDOWS\system32\dbghelp.dll
2016-09-14 00:25:48 ----A---- C:\WINDOWS\SYSWOW64\WSSync.dll
2016-09-14 00:25:48 ----A---- C:\WINDOWS\system32\WSSync.dll
2016-09-14 00:25:48 ----A---- C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-09-14 00:25:47 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2016-09-14 00:25:47 ----A---- C:\WINDOWS\system32\FingerprintEnrollment.dll
2016-09-14 00:25:47 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-09-14 00:25:47 ----A---- C:\WINDOWS\system32\credprovs.dll
2016-09-14 00:25:46 ----A---- C:\WINDOWS\system32\sppinst.dll
2016-09-14 00:25:46 ----A---- C:\WINDOWS\system32\SettingMonitor.dll
2016-09-14 00:25:46 ----A---- C:\WINDOWS\system32\licensingdiag.exe
2016-09-14 00:25:45 ----A---- C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2016-09-14 00:25:45 ----A---- C:\WINDOWS\system32\mqsnap.dll
2016-09-14 00:25:45 ----A---- C:\WINDOWS\system32\ImplatSetup.dll
2016-09-14 00:25:44 ----A---- C:\WINDOWS\system32\mspaint.exe
2016-09-14 00:25:43 ----A---- C:\WINDOWS\SYSWOW64\DictationManager.dll
2016-09-14 00:25:43 ----A---- C:\WINDOWS\system32\IdCtrls.dll

======List of files/folders modified in the last 1 month======

2016-10-13 23:24:53 ----D---- C:\Program Files\trend micro
2016-10-13 23:22:30 ----D---- C:\WINDOWS\Temp
2016-10-13 23:22:30 ----D---- C:\Windows
2016-10-13 23:21:38 ----HD---- C:\Program Files\WindowsApps
2016-10-13 23:18:59 ----D---- C:\WINDOWS\AppReadiness
2016-10-13 23:18:47 ----D---- C:\WINDOWS\system32\config
2016-10-13 23:17:16 ----D---- C:\WINDOWS\system32\sru
2016-10-13 23:17:12 ----D---- C:\WINDOWS\system32\catroot2
2016-10-13 23:15:45 ----D---- C:\WINDOWS\SysWOW64
2016-10-13 23:15:00 ----D---- C:\ProgramData\NVIDIA
2016-10-13 23:14:55 ----D---- C:\WINDOWS\system32\drivers
2016-10-13 23:11:34 ----D---- C:\WINDOWS\Prefetch
2016-10-13 23:11:31 ----D---- C:\WINDOWS\system32\Tasks
2016-10-13 23:09:38 ----D---- C:\WINDOWS\System32
2016-10-13 23:07:53 ----D---- C:\WINDOWS\WinSxS
2016-10-13 23:07:50 ----D---- C:\WINDOWS\system32\wbem
2016-10-13 23:06:45 ----SD---- C:\WINDOWS\SYSWOW64\DiagSvcs
2016-10-13 23:06:45 ----SD---- C:\WINDOWS\system32\DiagSvcs
2016-10-13 23:06:45 ----D---- C:\WINDOWS\SYSWOW64\wbem
2016-10-13 23:06:45 ----D---- C:\WINDOWS\system32\migration
2016-10-13 23:06:45 ----D---- C:\WINDOWS\system32\drivers\etc
2016-10-13 23:06:45 ----D---- C:\WINDOWS\system32\Boot
2016-10-13 23:06:45 ----D---- C:\WINDOWS\system32\appraiser
2016-10-13 23:06:45 ----D---- C:\WINDOWS\AppPatch
2016-10-13 23:06:45 ----D---- C:\Program Files\Windows Media Player
2016-10-13 23:06:45 ----D---- C:\Program Files (x86)\Windows Media Player
2016-10-13 23:06:45 ----D---- C:\Program Files (x86)\Internet Explorer
2016-10-13 23:06:42 ----SHD---- C:\WINDOWS\Installer
2016-10-13 23:06:42 ----D---- C:\WINDOWS\Tasks
2016-10-13 23:06:42 ----D---- C:\WINDOWS\system32\CodeIntegrity
2016-10-13 23:06:41 ----D---- C:\WINDOWS\INF
2016-10-13 23:06:39 ----D---- C:\ProgramData\RogueKiller
2016-10-13 23:05:46 ----RD---- C:\Program Files
2016-10-13 23:02:01 ----D---- C:\WINDOWS\registration
2016-10-13 23:01:48 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2016-10-13 23:01:31 ----D---- C:\WINDOWS\system32\Macromed
2016-10-13 23:01:21 ----D---- C:\WINDOWS\Microsoft.NET
2016-10-13 22:56:10 ----SHD---- C:\System Volume Information
2016-10-13 22:54:50 ----D---- C:\WINDOWS\Logs
2016-10-13 22:36:36 ----D---- C:\WINDOWS\CbsTemp
2016-10-12 23:07:17 ----D---- C:\WINDOWS\SoftwareDistribution
2016-10-10 09:09:05 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-10-08 18:38:54 ----D---- C:\WINDOWS\system32\DriverStore
2016-10-06 23:11:35 ----HD---- C:\ProgramData
2016-10-05 11:53:41 ----D---- C:\AdwCleaner
2016-10-05 11:45:06 ----RD---- C:\Program Files (x86)
2016-10-04 09:16:15 ----D---- C:\Users\wow\AppData\Roaming\BitTorrent
2016-09-30 11:00:30 ----SHD---- C:\Config.Msi
2016-09-24 09:33:16 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2016-09-23 22:49:15 ----D---- C:\Users\wow\AppData\Roaming\Skype
2016-09-23 22:48:43 ----D---- C:\ProgramData\Skype
2016-09-23 22:48:39 ----D---- C:\Program Files (x86)\Common Files
2016-09-23 09:35:04 ----D---- C:\WINDOWS\system32\NDF
2016-09-22 00:21:50 ----DC---- C:\WINDOWS\Panther
2016-09-22 00:17:55 ----HD---- C:\$WINDOWS.~BT
2016-09-20 23:53:20 ----AD---- C:\Program Files (x86)\Calibre2
2016-09-18 15:01:23 ----D---- C:\WINDOWS\rescache
2016-09-16 15:43:18 ----D---- C:\WINDOWS\debug
2016-09-16 05:42:40 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2016-09-16 05:42:40 ----AD---- C:\Program Files\Microsoft Silverlight
2016-09-15 20:59:39 ----SD---- C:\WINDOWS\SYSWOW64\F12
2016-09-15 20:59:39 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-09-15 20:59:39 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-09-15 20:59:39 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-09-15 20:59:39 ----D---- C:\WINDOWS\SYSWOW64\AdvancedInstallers
2016-09-15 20:59:35 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-09-15 20:59:35 ----D---- C:\WINDOWS\system32\setup
2016-09-15 20:59:35 ----D---- C:\WINDOWS\system32\oobe
2016-09-15 20:59:34 ----SD---- C:\WINDOWS\system32\F12
2016-09-15 20:59:34 ----D---- C:\WINDOWS\system32\migwiz
2016-09-15 20:59:34 ----D---- C:\WINDOWS\system32\Dism
2016-09-15 20:59:34 ----D---- C:\WINDOWS\system32\cs-CZ
2016-09-15 20:59:34 ----D---- C:\WINDOWS\system32\AdvancedInstallers
2016-09-15 20:59:28 ----RD---- C:\WINDOWS\PrintDialog
2016-09-15 20:59:27 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-09-15 20:59:27 ----RD---- C:\WINDOWS\DevicesFlow
2016-09-15 20:59:27 ----D---- C:\Program Files\Windows Photo Viewer
2016-09-15 20:59:27 ----D---- C:\Program Files\Windows Mail
2016-09-15 20:59:27 ----D---- C:\Program Files\Windows Defender
2016-09-15 20:59:27 ----D---- C:\Program Files\Internet Explorer
2016-09-15 20:59:27 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2016-09-15 20:59:27 ----D---- C:\Program Files (x86)\Windows Mail
2016-09-15 20:59:27 ----D---- C:\Program Files (x86)\Windows Defender
2016-09-15 18:32:51 ----D---- C:\ProgramData\Microsoft Help
2016-09-15 18:24:17 ----D---- C:\WINDOWS\ShellNew
2016-09-15 18:21:53 ----D---- C:\WINDOWS\system32\MRT
2016-09-15 18:15:09 ----AC---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-05-19 74544]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-08-05 292704]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2016-05-19 37144]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2016-05-19 103064]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-05-19 1070904]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-05-19 465792]
R1 dtsoftbus01;@oem0.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-10-25 283064]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2016-04-23 87552]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-05-19 37656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-05-19 107792]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2016-05-19 166432]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2016-02-22 175616]
R3 NVHDA;@oem11.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-11-19 206120]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-11-19 12907704]
R3 SNPSTD3;@oem1.inf,%SERVICE_DISPLAY_NAME%;USB PC Camera (SNPSTD3); C:\WINDOWS\system32\DRIVERS\snpstd3.sys [2007-04-03 10535040]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2016-02-22 117248]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-09-04 38048]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 TrueSight;TrueSight; \??\C:\Windows\System32\drivers\TrueSight.sys [2016-09-05 28272]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2016-04-23 63488]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2016-05-28 258912]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2016-09-07 131424]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-09-16 82128]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-05-19 243296]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2016-02-22 26624]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-10-13 933168]
R2 OneSyncSvc_2b9d5;Hostitel synchronizace_2b9d5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-07-02 411936]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_173beac;Hostitel synchronizace_173beac; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2c501;Hostitel synchronizace_2c501; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_30928;Hostitel synchronizace_30928; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3287b16;Hostitel synchronizace_3287b16; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_d6918c1;Hostitel synchronizace_d6918c1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_d9f6a7b;Hostitel synchronizace_d9f6a7b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_f1ef2f;Hostitel synchronizace_f1ef2f; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-07-25 324224]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-23 270016]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-10-30 51376]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_173beac;Služba zasílání zpráv_173beac; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2b9d5;Služba zasílání zpráv_2b9d5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2c501;Služba zasílání zpráv_2c501; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_30928;Služba zasílání zpráv_30928; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3287b16;Služba zasílání zpráv_3287b16; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_d6918c1;Služba zasílání zpráv_d6918c1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_d9f6a7b;Služba zasílání zpráv_d9f6a7b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_f1ef2f;Služba zasílání zpráv_f1ef2f; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_173beac;Data kontaktů_173beac; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_2b9d5;Data kontaktů_2b9d5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_2c501;Data kontaktů_2c501; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_30928;Data kontaktů_30928; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_3287b16;Data kontaktů_3287b16; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_d6918c1;Data kontaktů_d6918c1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_d9f6a7b;Data kontaktů_d9f6a7b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_f1ef2f;Data kontaktů_f1ef2f; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2016-09-07 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

[Rudy]

Zdravím!
Použil jste tu radu?

[mlzd]

Zdravím! Až dnes večer jsem zvolil jiný bod obnovy (2.10.), vypnul jsem Avast a spustil recovery.
Po dokončení obnovy a spuštění počítače téměř stejná hláška. Viz příloha.

[Rudy]

To vypadá na nějakou systémovou chybu. Zkuste při úvodních postech (před samotnným startem systému mačkat >F8<. Objeví se menu, v němž zvolte "Poslední známá funkční konfigurace", zvýrazněte a odentrujte. Pak zkontrolujte stav systému.

[mlzd]

Ano, zkusím. Ale ještě mě napadlo, jestli předtím nezkusit odinstalovat Avast Safe (browser). a zkusit ještě jednou recovery. V té hlášce je to asi on, na co je upozorněno. (?)

[Rudy]

Avast Safe nevím, jestli půjde odinstalovat, je to součást posledních verzí AV Avast.

[mlzd]

Avast Safe nevím, jestli půjde odinstalovat, je to součást posledních verzí AV Avast.

Pravda, ta možnost není. .. Jinak i přes ty hlášky zatím běží vše jak má. Plocha se vrátila po obnovení do původního (mého) nastavení, pravým myšidlem už jde vyvolat nabídku jak z dolní lišty tak z plochy.

[Rudy]

I tak si myslím, že váš OS je zřejmě poškozen. Jinak by musela obnova proběhnout bez problémů.

[mlzd]

Bohužel, mám stejné podezření. Během posledního týdne se mi z ničeho nic už dvakrát objevila modrá obrazovka a hláška o nutnosti restartu.

[Rudy]

Koukněte do C:\windows\minidump a pokud tam jsou nějaké soubory, zabalte je do raru a přiložte k vašemu příštímu postu.

[mlzd]

Koukněte do C:\windows\minidump a pokud tam jsou nějaké soubory, zabalte je do raru a přiložte k vašemu příštímu postu.

Složka je prázdná.

[Rudy]

Takže, bohužel, nezjistíme, co bylo příčinou té modré smrti. V případě potřeby se na nás můžete obrátit.

[mlzd]

Děkuji!! Zdenek.

[Rudy]

Rádo se stalo!

[franticek]

Omlouvám se za vstup,
ale Avast Safe by měl jít odstranit přímo v nastavení Avastu, tak jako i ostatní součásti tohoto 'bumbrlíčka'.