Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prevenčka NB

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Thomas
Návštěvník
Návštěvník
Příspěvky: 235
Registrován: 07 dub 2005 20:02
Bydliště: Hradec Králové
Kontaktovat uživatele:

Prevenčka NB

#1 Příspěvek od Thomas »

Čau log je na kontrolu jen preventivně, žádný problémy s notebookem nemám....

Logfile of random's system information tool 1.10 (written by random/random)
Run by spravce at 2017-04-23 16:19:30
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 30 GB (39%) free of 76 GB
Total RAM: 2038 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:19:41, on 23.4.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18639)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
C:\Program Files (x86)\PDF24\pdf24.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\spravce.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mysearch.avg.com/?cid=%7B7345281 ... sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [PDFPrint] "C:\Program Files (x86)\PDF24\pdf24.exe"
O4 - HKLM\..\Run: [Printsrv] c:\Windows\System32\Printing_Admin_Scripts\en-US\pubpr.vbs
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{1360F16F-A558-4B2F-96A0-648304963376}: NameServer = 62.84.128.6,62.84.132.6
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7232 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
winlogon.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide
C:\Windows\Explorer.EXE
"taskhost.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\iTunes\iTunesHelper.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe"
"C:\Program Files (x86)\PDF24\pdf24.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5dfe5f45-3340-4a68-a214-df2fa9d7be1d -SystemEventPortName:HostProcess-ed6ad764-84e5-4de3-b674-4ec031b3627b -IoCancelEventPortName:HostProcess-51d26f51-30ff-4619-b363-eb48f1ff94c2 -NonStateChangingEventPortName:HostProcess-9df0cedc-cf3e-451f-9ba5-9023180b881c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:60d848c8-2a03-40a2-8636-7ca3baadd88e -DeviceGroupId:
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
taskeng.exe {A2787B13-9DA9-4B27-844F-13E0C6DB378F}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
{531BBDDE-E671-4E7B-A577-0406307E9A75}
{25B49870-6E27-4C3E-8438-006BF5887DC2}
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\spravce\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\spravce\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=57.0.2987.133 --initial-client-data=0x9c,0xa0,0xa4,0x98,0xa8,0x73c67dc8,0x73c67dbc,0x73c67dd4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=1536 --on-initialized-event-handle=320 --parent-handle=332 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1120 --disable-d3d11 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=7,10,16,18,19,20,23,41,61,74 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x8086 --gpu-device-id=0x2a02 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.1930 --gpu-driver-date=9-23-2009 --gpu-secondary-vendor-ids=0x8086 --gpu-secondary-device-ids=0x2a03 --service-request-channel-token=90B0B7C91F7BD25D027C43EC7477D3A0 --mojo-platform-channel-handle=1124 --ignored=" --type=renderer " /prefetch:2
"taskhost.exe"
C:\Windows\system32\msiexec.exe /V

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1120 --primordial-pipe-token=42866C5456EDDE14EA053AF6B6F7F0B1 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --disable-accelerated-video-decode --service-request-channel-token=42866C5456EDDE14EA053AF6B6F7F0B1 --renderer-client-id=15 --mojo-platform-channel-handle=3980 /prefetch:1
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe22_ Global\UsGthrCtrlFltPipeMssGthrPipe22 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\spravce\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-23 165912]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-23 385560]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-23 363544]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2016-11-01 176440]
"Printsrv"=c:\Windows\System32\Printing_Admin_Scripts\en-US\pubpr.vbs []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-04-15 8698584]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"OpwareSE4"=C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"PDFPrint"=C:\Program Files (x86)\PDF24\pdf24.exe [2016-07-05 210432]
"Printsrv"=c:\Windows\System32\Printing_Admin_Scripts\en-US\pubpr.vbs []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-23 261120]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-04-23 16:19:30 ----D---- C:\rsit
2017-04-23 16:11:13 ----D---- C:\Program Files (x86)\Company
2017-04-23 15:24:32 ----A---- C:\Windows\system32\drivers\ESETCleanersDriver.sys
2017-04-13 14:38:44 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2017-04-13 14:38:44 ----A---- C:\Windows\system32\rdpcorets.dll
2017-04-13 14:38:44 ----A---- C:\Windows\system32\mshtml.dll
2017-04-13 14:38:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-04-13 14:38:35 ----A---- C:\Windows\system32\ieframe.dll
2017-04-13 14:38:34 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-04-13 14:38:32 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-04-13 14:38:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-04-13 14:38:32 ----A---- C:\Windows\system32\wininet.dll
2017-04-13 14:38:31 ----A---- C:\Windows\system32\wuaueng.dll
2017-04-13 14:38:31 ----A---- C:\Windows\system32\iertutil.dll
2017-04-13 14:38:30 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2017-04-13 14:38:29 ----A---- C:\Windows\system32\win32k.sys
2017-04-13 14:38:29 ----A---- C:\Windows\system32\ole32.dll
2017-04-13 14:38:28 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-04-13 14:38:28 ----A---- C:\Windows\system32\wucltux.dll
2017-04-13 14:38:28 ----A---- C:\Windows\system32\urlmon.dll
2017-04-13 14:38:28 ----A---- C:\Windows\system32\samsrv.dll
2017-04-13 14:38:27 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2017-04-13 14:38:27 ----A---- C:\Windows\system32\wuapi.dll
2017-04-13 14:38:27 ----A---- C:\Windows\system32\win32spl.dll
2017-04-13 14:38:26 ----A---- C:\Windows\system32\quartz.dll
2017-04-13 14:38:25 ----A---- C:\Windows\system32\ucrtbase.dll
2017-04-13 14:38:25 ----A---- C:\Windows\system32\msfeeds.dll
2017-04-13 14:38:25 ----A---- C:\Windows\system32\cdosys.dll
2017-04-13 14:38:24 ----A---- C:\Windows\system32\atmfd.dll
2017-04-13 14:38:23 ----A---- C:\Windows\system32\gdi32.dll
2017-04-13 14:38:21 ----A---- C:\Windows\SYSWOW64\ole32.dll
2017-04-13 14:38:21 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2017-04-13 14:38:20 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2017-04-13 14:38:20 ----A---- C:\Windows\SYSWOW64\quartz.dll
2017-04-13 14:38:20 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2017-04-13 14:38:19 ----A---- C:\Windows\system32\rdpudd.dll
2017-04-13 14:38:19 ----A---- C:\Windows\system32\iedkcs32.dll
2017-04-13 14:38:19 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2017-04-13 14:38:18 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2017-04-13 14:38:17 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2017-04-13 14:38:17 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-04-13 14:38:17 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-04-13 14:38:17 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-04-13 14:38:17 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2017-04-13 14:38:17 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-04-13 14:38:17 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-04-13 14:38:16 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-04-13 14:38:15 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-04-13 14:38:15 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-04-13 14:38:15 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-04-13 14:38:15 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-04-13 14:38:15 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-04-13 14:38:15 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-04-13 14:38:15 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-04-13 14:38:15 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-04-13 14:38:14 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-04-13 14:38:14 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-04-13 14:38:14 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-04-13 14:38:14 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-04-13 14:38:14 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-04-13 14:38:14 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-04-13 14:38:14 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-04-13 14:38:14 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2017-04-13 14:38:14 ----A---- C:\Windows\system32\jscript.dll
2017-04-13 14:38:14 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-04-13 14:38:14 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-04-13 14:38:14 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-04-13 14:38:14 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-04-13 14:38:14 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-04-13 14:38:14 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-04-13 14:38:13 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2017-04-13 14:38:13 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-04-13 14:38:13 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-04-13 14:38:12 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2017-04-13 14:38:11 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2017-04-13 14:38:11 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2017-04-13 14:38:10 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-04-13 14:38:10 ----A---- C:\Windows\system32\ntdll.dll
2017-04-13 14:38:10 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2017-04-13 14:38:10 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2017-04-13 14:38:09 ----A---- C:\Windows\system32\jscript9.dll
2017-04-13 14:38:09 ----A---- C:\Windows\system32\asycfilt.dll
2017-04-13 14:38:08 ----A---- C:\Windows\system32\samlib.dll
2017-04-13 14:38:07 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2017-04-13 14:38:07 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2017-04-13 14:38:06 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2017-04-13 14:38:06 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-04-13 14:38:06 ----A---- C:\Windows\SYSWOW64\mfmjpegdec.dll
2017-04-13 14:38:06 ----A---- C:\Windows\system32\webcheck.dll
2017-04-13 14:38:06 ----A---- C:\Windows\system32\mfmjpegdec.dll
2017-04-13 14:38:05 ----A---- C:\Windows\SYSWOW64\samlib.dll
2017-04-13 14:38:05 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2017-04-13 14:38:04 ----A---- C:\Windows\SYSWOW64\certcli.dll
2017-04-13 14:38:04 ----A---- C:\Windows\system32\certcli.dll
2017-04-13 14:38:03 ----A---- C:\Windows\system32\ie4uinit.exe
2017-04-13 14:38:02 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2017-04-13 14:38:02 ----A---- C:\Windows\system32\wuwebv.dll
2017-04-13 14:38:02 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-04-13 14:38:01 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-04-13 14:38:01 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-04-13 14:38:01 ----A---- C:\Windows\system32\wups2.dll
2017-04-13 14:38:01 ----A---- C:\Windows\system32\wups.dll
2017-04-13 14:38:01 ----A---- C:\Windows\system32\vbscript.dll
2017-04-13 14:38:00 ----A---- C:\Windows\SYSWOW64\wups.dll
2017-04-13 14:38:00 ----A---- C:\Windows\system32\wudriver.dll
2017-04-13 14:38:00 ----A---- C:\Windows\system32\wuauclt.exe
2017-04-13 14:38:00 ----A---- C:\Windows\system32\srcore.dll
2017-04-13 14:38:00 ----A---- C:\Windows\system32\rpcrt4.dll
2017-04-13 14:38:00 ----A---- C:\Windows\system32\ieapfltr.dll
2017-04-13 14:37:59 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2017-04-13 14:37:59 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2017-04-13 14:37:59 ----A---- C:\Windows\system32\lsasrv.dll
2017-04-13 14:37:59 ----A---- C:\Windows\system32\ieui.dll
2017-04-13 14:37:58 ----A---- C:\Windows\system32\dxtrans.dll
2017-04-13 14:37:58 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2017-04-13 14:37:57 ----A---- C:\Windows\system32\srclient.dll
2017-04-13 14:37:57 ----A---- C:\Windows\system32\smss.exe
2017-04-13 14:37:57 ----A---- C:\Windows\system32\mshtmled.dll
2017-04-13 14:37:57 ----A---- C:\Windows\system32\kerberos.dll
2017-04-13 14:37:57 ----A---- C:\Windows\system32\dxtmsft.dll
2017-04-13 14:37:57 ----A---- C:\Windows\system32\advapi32.dll
2017-04-13 14:37:56 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-04-13 14:37:56 ----A---- C:\Windows\system32\msrating.dll
2017-04-13 14:37:55 ----A---- C:\Windows\system32\WinSetupUI.dll
2017-04-13 14:37:55 ----A---- C:\Windows\system32\rstrui.exe
2017-04-13 14:37:55 ----A---- C:\Windows\system32\kernel32.dll
2017-04-13 14:37:55 ----A---- C:\Windows\system32\jscript9diag.dll
2017-04-13 14:37:54 ----A---- C:\Windows\SYSWOW64\srclient.dll
2017-04-13 14:37:54 ----A---- C:\Windows\system32\occache.dll
2017-04-13 14:37:54 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-04-13 14:37:54 ----A---- C:\Windows\system32\jsproxy.dll
2017-04-13 14:37:53 ----A---- C:\Windows\system32\schannel.dll
2017-04-13 14:37:53 ----A---- C:\Windows\system32\conhost.exe
2017-04-13 14:37:52 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2017-04-13 14:37:52 ----A---- C:\Windows\SYSWOW64\ieui.dll
2017-04-13 14:37:52 ----A---- C:\Windows\system32\msv1_0.dll
2017-04-13 14:37:52 ----A---- C:\Windows\system32\KernelBase.dll
2017-04-13 14:37:52 ----A---- C:\Windows\system32\inseng.dll
2017-04-13 14:37:52 ----A---- C:\Windows\system32\ieUnatt.exe
2017-04-13 14:37:52 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2017-04-13 14:37:51 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2017-04-13 14:37:51 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2017-04-13 14:37:51 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2017-04-13 14:37:51 ----A---- C:\Windows\system32\wow64win.dll
2017-04-13 14:37:51 ----A---- C:\Windows\system32\winsrv.dll
2017-04-13 14:37:51 ----A---- C:\Windows\system32\ncrypt.dll
2017-04-13 14:37:51 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-04-13 14:37:51 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-04-13 14:37:50 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2017-04-13 14:37:50 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2017-04-13 14:37:50 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-04-13 14:37:49 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2017-04-13 14:37:49 ----A---- C:\Windows\system32\wdigest.dll
2017-04-13 14:37:49 ----A---- C:\Windows\system32\TSpkg.dll
2017-04-13 14:37:49 ----A---- C:\Windows\system32\sspicli.dll
2017-04-13 14:37:48 ----A---- C:\Windows\SYSWOW64\occache.dll
2017-04-13 14:37:48 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2017-04-13 14:37:48 ----A---- C:\Windows\SYSWOW64\msrating.dll
2017-04-13 14:37:48 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2017-04-13 14:37:48 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2017-04-13 14:37:48 ----A---- C:\Windows\system32\wuapp.exe
2017-04-13 14:37:48 ----A---- C:\Windows\system32\iesetup.dll
2017-04-13 14:37:48 ----A---- C:\Windows\system32\bcrypt.dll
2017-04-13 14:37:47 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2017-04-13 14:37:47 ----A---- C:\Windows\system32\wow64.dll
2017-04-13 14:37:47 ----A---- C:\Windows\system32\rpchttp.dll
2017-04-13 14:37:47 ----A---- C:\Windows\system32\cdd.dll
2017-04-13 14:37:46 ----A---- C:\Windows\system32\iernonce.dll
2017-04-13 14:37:46 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2017-04-13 14:37:46 ----A---- C:\Windows\system32\csrsrv.dll
2017-04-13 14:37:45 ----A---- C:\Windows\SYSWOW64\schannel.dll
2017-04-13 14:37:45 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2017-04-13 14:37:45 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2017-04-13 14:37:44 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2017-04-13 14:37:44 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2017-04-13 14:37:44 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2017-04-13 14:37:44 ----A---- C:\Windows\SYSWOW64\inseng.dll
2017-04-13 14:37:44 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-04-13 14:37:44 ----A---- C:\Windows\system32\cryptbase.dll
2017-04-13 14:37:43 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2017-04-13 14:37:43 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2017-04-13 14:37:43 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2017-04-13 14:37:43 ----A---- C:\Windows\system32\wow64cpu.dll
2017-04-13 14:37:43 ----A---- C:\Windows\system32\sspisrv.dll
2017-04-13 14:37:43 ----A---- C:\Windows\system32\lsass.exe
2017-04-13 14:37:43 ----A---- C:\Windows\system32\lpk.dll
2017-04-13 14:37:43 ----A---- C:\Windows\system32\drivers\appid.sys
2017-04-13 14:37:42 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2017-04-13 14:37:41 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2017-04-13 14:37:41 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2017-04-13 14:37:41 ----A---- C:\Windows\system32\setbcdlocale.dll
2017-04-13 14:37:41 ----A---- C:\Windows\system32\secur32.dll
2017-04-13 14:37:41 ----A---- C:\Windows\system32\fontsub.dll
2017-04-13 14:37:41 ----A---- C:\Windows\system32\appidsvc.dll
2017-04-13 14:37:41 ----A---- C:\Windows\system32\appidapi.dll
2017-04-13 14:37:40 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2017-04-13 14:37:40 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2017-04-13 14:37:40 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2017-04-13 14:37:40 ----A---- C:\Windows\system32\dciman32.dll
2017-04-13 14:37:40 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2017-04-13 14:37:39 ----A---- C:\Windows\SYSWOW64\secur32.dll
2017-04-13 14:37:39 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2017-04-13 14:37:39 ----A---- C:\Windows\system32\ntvdm64.dll
2017-04-13 14:37:39 ----A---- C:\Windows\system32\credssp.dll
2017-04-13 14:37:37 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2017-04-13 14:37:37 ----A---- C:\Windows\SYSWOW64\lpk.dll
2017-04-13 14:37:37 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2017-04-13 14:37:37 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2017-04-13 14:37:37 ----A---- C:\Windows\SYSWOW64\credssp.dll
2017-04-13 14:37:37 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2017-04-13 14:37:37 ----A---- C:\Windows\system32\auditpol.exe
2017-04-13 14:37:37 ----A---- C:\Windows\system32\atmlib.dll
2017-04-13 14:37:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-04-13 14:37:36 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-04-13 14:37:36 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-04-13 14:37:36 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-04-13 14:37:36 ----A---- C:\Windows\SYSWOW64\wow32.dll
2017-04-13 14:37:36 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2017-04-13 14:37:36 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2017-04-13 14:37:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-04-13 14:37:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2017-04-13 14:37:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-04-13 14:37:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-04-13 14:37:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-04-13 14:37:35 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-04-13 14:37:35 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-04-13 14:37:35 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-04-13 14:37:35 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-04-13 14:37:35 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-04-13 14:37:35 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-04-13 14:37:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-04-13 14:37:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-04-13 14:37:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-04-13 14:37:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-04-13 14:37:34 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-04-13 14:37:34 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-04-13 14:37:34 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-04-13 14:37:33 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-04-13 14:37:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-04-13 14:37:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-04-13 14:37:31 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-04-13 14:37:31 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-04-13 14:37:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2017-04-13 14:37:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-04-13 14:37:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-04-13 14:37:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2017-04-13 14:37:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-04-13 14:37:30 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-04-13 14:37:30 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-04-13 14:37:30 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-04-13 14:37:30 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-04-13 14:37:30 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-04-13 14:37:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-04-13 14:37:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-04-13 14:37:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-04-13 14:37:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-04-13 14:37:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-04-13 14:37:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-04-13 14:37:28 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-04-13 14:37:28 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-04-13 14:37:28 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-04-13 14:37:28 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-04-13 14:37:28 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-04-13 14:37:28 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-04-13 14:37:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2017-04-13 14:37:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2017-04-13 14:37:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-04-13 14:37:27 ----A---- C:\Windows\SYSWOW64\setup16.exe
2017-04-13 14:37:27 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2017-04-13 14:37:27 ----A---- C:\Windows\system32\apisetschema.dll
2017-04-13 14:37:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-04-13 14:37:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2017-04-13 14:37:26 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-04-13 14:37:26 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-04-13 14:37:26 ----A---- C:\Windows\SYSWOW64\instnm.exe
2017-04-13 14:37:25 ----A---- C:\Windows\SYSWOW64\user.exe
2017-04-13 14:37:25 ----A---- C:\Windows\SYSWOW64\tzres.dll
2017-04-13 14:37:25 ----A---- C:\Windows\system32\tzres.dll
2017-04-13 14:37:24 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2017-04-13 14:37:24 ----A---- C:\Windows\system32\adtschema.dll
2017-04-13 14:37:23 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2017-04-13 14:37:23 ----A---- C:\Windows\system32\msaudite.dll
2017-04-13 14:37:22 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2017-04-13 14:37:22 ----A---- C:\Windows\system32\msobjs.dll
2017-04-13 14:37:21 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2017-04-02 11:16:27 ----A---- C:\Windows\system32\shell32.dll
2017-04-02 11:16:26 ----A---- C:\Windows\SYSWOW64\shell32.dll
2017-04-02 11:16:24 ----A---- C:\Windows\explorer.exe
2017-04-02 11:16:23 ----A---- C:\Windows\SYSWOW64\explorer.exe
2017-04-02 11:16:21 ----A---- C:\Windows\system32\ExplorerFrame.dll
2017-04-02 11:16:20 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2017-04-02 11:13:11 ----A---- C:\Windows\system32\UtcResources.dll
2017-04-02 11:12:56 ----A---- C:\Windows\system32\diagtrack.dll
2017-04-02 11:12:22 ----A---- C:\Windows\system32\wmp.dll
2017-04-02 11:12:18 ----A---- C:\Windows\SYSWOW64\wmp.dll
2017-04-02 11:12:13 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2017-04-02 11:12:13 ----A---- C:\Windows\system32\FntCache.dll
2017-04-02 11:12:13 ----A---- C:\Windows\system32\DWrite.dll
2017-04-02 11:12:12 ----A---- C:\Windows\system32\mf.dll
2017-04-02 11:12:04 ----A---- C:\Windows\SYSWOW64\mf.dll
2017-04-02 11:12:00 ----A---- C:\Windows\system32\blackbox.dll
2017-04-02 11:11:59 ----A---- C:\Windows\system32\MSVidCtl.dll
2017-04-02 11:11:58 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2017-04-02 11:11:58 ----A---- C:\Windows\system32\drmv2clt.dll
2017-04-02 11:11:57 ----A---- C:\Windows\system32\WsmSvc.dll
2017-04-02 11:11:54 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2017-04-02 11:11:53 ----A---- C:\Windows\system32\msi.dll
2017-04-02 11:11:51 ----A---- C:\Windows\SYSWOW64\msi.dll
2017-04-02 11:11:42 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2017-04-02 11:11:41 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2017-04-02 11:11:40 ----A---- C:\Windows\system32\crypt32.dll
2017-04-02 11:11:39 ----A---- C:\Windows\system32\scavengeui.dll
2017-04-02 11:11:35 ----A---- C:\Windows\system32\wmdrmsdk.dll
2017-04-02 11:11:33 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2017-04-02 11:11:33 ----A---- C:\Windows\system32\msxml3.dll
2017-04-02 11:11:32 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2017-04-02 11:11:31 ----A---- C:\Windows\system32\oleaut32.dll
2017-04-02 11:11:29 ----A---- C:\Windows\system32\msctf.dll
2017-04-02 11:11:28 ----A---- C:\Windows\system32\authui.dll
2017-04-02 11:11:28 ----A---- C:\Windows\system32\audiosrv.dll
2017-04-02 11:11:26 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2017-04-02 11:11:26 ----A---- C:\Windows\system32\UIAnimation.dll
2017-04-02 11:11:24 ----A---- C:\Windows\SYSWOW64\evr.dll
2017-04-02 11:11:23 ----A---- C:\Windows\SYSWOW64\authui.dll
2017-04-02 11:11:23 ----A---- C:\Windows\system32\AUDIOKSE.dll
2017-04-02 11:11:22 ----A---- C:\Windows\SYSWOW64\msctf.dll
2017-04-02 11:11:20 ----A---- C:\Windows\system32\evr.dll
2017-04-02 11:11:19 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2017-04-02 11:11:19 ----A---- C:\Windows\system32\IMJP10K.DLL
2017-04-02 11:11:17 ----A---- C:\Windows\system32\WebClnt.dll
2017-04-02 11:11:15 ----A---- C:\Windows\system32\drmmgrtn.dll
2017-04-02 11:11:14 ----A---- C:\Windows\system32\drivers\srv2.sys
2017-04-02 11:11:13 ----A---- C:\Windows\system32\winload.exe
2017-04-02 11:11:11 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2017-04-02 11:11:10 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2017-04-02 11:11:09 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2017-04-02 11:11:08 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2017-04-02 11:11:07 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2017-04-02 11:11:06 ----A---- C:\Windows\system32\WsmWmiPl.dll
2017-04-02 11:11:06 ----A---- C:\Windows\system32\user32.dll
2017-04-02 11:11:04 ----A---- C:\Windows\system32\wintrust.dll
2017-04-02 11:11:04 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2017-04-02 11:11:04 ----A---- C:\Windows\system32\cryptsvc.dll
2017-04-02 11:11:03 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2017-04-02 11:11:03 ----A---- C:\Windows\system32\clfs.sys
2017-04-02 11:11:02 ----A---- C:\Windows\system32\cryptui.dll
2017-04-02 11:11:01 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2017-04-02 11:11:01 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2017-04-02 11:11:01 ----A---- C:\Windows\system32\usp10.dll
2017-04-02 11:11:01 ----A---- C:\Windows\system32\drivers\srv.sys
2017-04-02 11:11:00 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll
2017-04-02 11:11:00 ----A---- C:\Windows\system32\qdvd.dll
2017-04-02 11:10:59 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2017-04-02 11:10:59 ----A---- C:\Windows\system32\AudioEng.dll
2017-04-02 11:10:57 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2017-04-02 11:10:57 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2017-04-02 11:10:57 ----A---- C:\Windows\system32\drivers\cng.sys
2017-04-02 11:10:56 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe
2017-04-02 11:10:56 ----A---- C:\Windows\system32\mfplat.dll
2017-04-02 11:10:55 ----A---- C:\Windows\SYSWOW64\user32.dll
2017-04-02 11:10:55 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2017-04-02 11:10:55 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2017-04-02 11:10:55 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2017-04-02 11:10:54 ----A---- C:\Windows\system32\davclnt.dll
2017-04-02 11:10:54 ----A---- C:\Windows\system32\AudioSes.dll
2017-04-02 11:10:53 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2017-04-02 11:10:53 ----A---- C:\Windows\HelpPane.exe
2017-04-02 11:10:52 ----A---- C:\Windows\system32\WsmAuto.dll
2017-04-02 11:10:52 ----A---- C:\Windows\system32\pcasvc.dll
2017-04-02 11:10:52 ----A---- C:\Windows\system32\cryptnet.dll
2017-04-02 11:10:51 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2017-04-02 11:10:51 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2017-04-02 11:10:49 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2017-04-02 11:10:48 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2017-04-02 11:10:47 ----A---- C:\Windows\system32\drivers\dfsc.sys
2017-04-02 11:10:45 ----A---- C:\Windows\system32\EncDump.dll
2017-04-02 11:10:44 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll
2017-04-02 11:10:44 ----A---- C:\Windows\system32\msiexec.exe
2017-04-02 11:10:44 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2017-04-02 11:10:40 ----A---- C:\Windows\SYSWOW64\usp10.dll
2017-04-02 11:10:38 ----A---- C:\Windows\system32\mfps.dll
2017-04-02 11:10:38 ----A---- C:\Windows\system32\consent.exe
2017-04-02 11:10:37 ----A---- C:\Windows\system32\bcdedit.exe
2017-04-02 11:10:35 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2017-04-02 11:10:35 ----A---- C:\Windows\system32\wmploc.DLL
2017-04-02 11:10:31 ----A---- C:\Windows\system32\drivers\bowser.sys
2017-04-02 11:10:30 ----A---- C:\Windows\system32\inetcomm.dll
2017-04-02 11:10:30 ----A---- C:\Windows\system32\audiodg.exe
2017-04-02 11:10:25 ----A---- C:\Windows\system32\drivers\srvnet.sys
2017-04-02 11:10:22 ----A---- C:\Windows\system32\cryptsp.dll
2017-04-02 11:10:19 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2017-04-02 11:10:19 ----A---- C:\Windows\system32\adsmsext.dll
2017-04-02 11:10:18 ----A---- C:\Windows\system32\appinfo.dll
2017-04-02 11:10:16 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2017-04-02 11:10:16 ----A---- C:\Windows\SYSWOW64\adsmsext.dll
2017-04-02 11:10:12 ----A---- C:\Windows\system32\input.dll
2017-04-02 11:10:08 ----A---- C:\Windows\SYSWOW64\mfps.dll
2017-04-02 11:10:06 ----A---- C:\Windows\SYSWOW64\input.dll
2017-04-02 11:10:06 ----A---- C:\Windows\system32\mscms.dll
2017-04-02 11:10:04 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2017-04-02 11:10:04 ----A---- C:\Windows\system32\msscp.dll
2017-04-02 11:10:03 ----A---- C:\Windows\system32\hlink.dll
2017-04-02 11:10:02 ----A---- C:\Windows\SYSWOW64\hlink.dll
2017-04-02 11:10:01 ----A---- C:\Windows\system32\icm32.dll
2017-04-02 11:09:57 ----A---- C:\Windows\SYSWOW64\icm32.dll
2017-04-02 11:09:56 ----A---- C:\Windows\SYSWOW64\mscms.dll
2017-04-02 11:09:56 ----A---- C:\Windows\system32\msihnd.dll
2017-04-02 11:09:55 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2017-04-02 11:09:55 ----A---- C:\Windows\SYSWOW64\msscp.dll
2017-04-02 11:09:54 ----A---- C:\Windows\system32\nlsbres.dll
2017-04-02 11:09:52 ----A---- C:\Windows\system32\msnetobj.dll
2017-04-02 11:09:49 ----A---- C:\Windows\system32\WcsPlugInService.dll
2017-04-02 11:09:48 ----A---- C:\Windows\SYSWOW64\WcsPlugInService.dll
2017-04-02 11:09:48 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2017-04-02 11:09:46 ----A---- C:\Windows\system32\pcadm.dll
2017-04-02 11:09:45 ----A---- C:\Windows\system32\mfpmp.exe
2017-04-02 11:09:43 ----A---- C:\Windows\system32\rrinstaller.exe
2017-04-02 11:09:42 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2017-04-02 11:09:42 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2017-04-02 11:09:39 ----A---- C:\Windows\system32\pcawrk.exe
2017-04-02 11:09:31 ----A---- C:\Windows\system32\pcalua.exe
2017-04-02 11:09:29 ----A---- C:\Windows\SYSWOW64\wsmprovhost.exe
2017-04-02 11:09:29 ----A---- C:\Windows\system32\wsmprovhost.exe
2017-04-02 11:09:28 ----A---- C:\Windows\system32\wsmplpxy.dll
2017-04-02 11:09:26 ----A---- C:\Windows\SYSWOW64\wsmplpxy.dll
2017-04-02 11:09:26 ----A---- C:\Windows\system32\msmmsp.dll
2017-04-02 11:09:23 ----A---- C:\Windows\system32\spwmp.dll
2017-04-02 11:09:20 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2017-04-02 11:09:19 ----A---- C:\Windows\system32\dxmasf.dll
2017-04-02 11:09:07 ----A---- C:\Windows\SYSWOW64\INETRES.dll
2017-04-02 11:09:07 ----A---- C:\Windows\system32\pcaevts.dll
2017-04-02 11:09:07 ----A---- C:\Windows\system32\INETRES.dll
2017-04-02 11:09:06 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2017-04-02 11:09:04 ----A---- C:\Windows\SYSWOW64\WsmRes.dll
2017-04-02 11:09:04 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2017-04-02 11:09:04 ----A---- C:\Windows\system32\WsmRes.dll
2017-04-02 11:09:04 ----A---- C:\Windows\system32\msimsg.dll
2017-04-02 11:09:00 ----A---- C:\Windows\SYSWOW64\mferror.dll
2017-04-02 11:09:00 ----A---- C:\Windows\system32\mferror.dll
2017-04-02 11:08:56 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2017-04-02 11:08:56 ----A---- C:\Windows\system32\msxml3r.dll
2017-04-02 11:01:30 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2017-04-02 11:01:30 ----A---- C:\Windows\system32\poqexec.exe
2017-04-02 11:01:07 ----A---- C:\Windows\system32\centel.dll
2017-04-02 11:01:06 ----A---- C:\Windows\system32\invagent.dll
2017-04-02 11:01:06 ----A---- C:\Windows\system32\generaltel.dll
2017-04-02 11:01:06 ----A---- C:\Windows\system32\devinv.dll
2017-04-02 11:01:06 ----A---- C:\Windows\system32\CompatTelRunner.exe
2017-04-02 11:01:06 ----A---- C:\Windows\system32\appraiser.dll
2017-04-02 11:01:06 ----A---- C:\Windows\system32\acmigration.dll
2017-04-02 11:01:05 ----A---- C:\Windows\system32\aepic.dll
2017-04-02 11:01:05 ----A---- C:\Windows\system32\aeinv.dll
2017-04-02 11:00:49 ----A---- C:\Windows\system32\drivers\usbport.sys
2017-04-02 11:00:49 ----A---- C:\Windows\system32\drivers\usbhub.sys
2017-04-02 11:00:49 ----A---- C:\Windows\system32\drivers\usbehci.sys
2017-04-02 11:00:47 ----A---- C:\Windows\system32\drivers\usbohci.sys
2017-04-02 11:00:47 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2017-04-02 11:00:46 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2017-04-02 11:00:44 ----A---- C:\Windows\system32\drivers\usbd.sys
2017-04-02 10:20:55 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2017-04-02 10:17:26 ----A---- C:\Windows\system32\drivers\tcpip.sys
2017-04-02 10:17:25 ----A---- C:\Windows\system32\drivers\netio.sys
2017-04-02 10:17:21 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2017-04-02 10:17:21 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS

======List of files/folders modified in the last 1 month======

2017-04-23 16:19:38 ----D---- C:\Program Files\trend micro
2017-04-23 16:19:34 ----D---- C:\Windows\Temp
2017-04-23 16:17:25 ----D---- C:\Windows\system32\Tasks
2017-04-23 16:16:51 ----SHD---- C:\Windows\Installer
2017-04-23 16:12:15 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2017-04-23 16:12:08 ----D---- C:\Windows\inf
2017-04-23 16:11:13 ----RD---- C:\Program Files (x86)
2017-04-23 15:24:32 ----D---- C:\Windows\system32\drivers
2017-04-23 15:10:33 ----RD---- C:\Program Files
2017-04-23 10:07:18 ----D---- C:\Windows\system32\config
2017-04-23 09:55:11 ----D---- C:\Windows\SYSWOW64\Macromed
2017-04-21 16:39:24 ----D---- C:\Windows\debug
2017-04-21 15:13:36 ----D---- C:\Windows
2017-04-21 12:21:00 ----SHD---- C:\System Volume Information
2017-04-19 10:45:00 ----D---- C:\Windows\Microsoft.NET
2017-04-16 11:06:35 ----D---- C:\Windows\System32
2017-04-16 11:06:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-04-16 10:51:59 ----D---- C:\Windows\winsxs
2017-04-16 10:41:24 ----D---- C:\Windows\SYSWOW64\en-US
2017-04-16 10:41:24 ----D---- C:\Windows\SYSWOW64\cs-CZ
2017-04-16 10:41:24 ----D---- C:\Windows\SysWOW64
2017-04-16 10:41:24 ----D---- C:\Program Files\Internet Explorer
2017-04-16 10:41:22 ----D---- C:\Windows\system32\en-US
2017-04-16 10:41:22 ----D---- C:\Windows\system32\cs-CZ
2017-04-16 10:41:18 ----D---- C:\Windows\AppPatch
2017-04-16 10:41:18 ----D---- C:\Program Files (x86)\Internet Explorer
2017-04-16 10:41:16 ----D---- C:\Windows\system32\Boot
2017-04-15 16:34:10 ----D---- C:\Windows\system32\MRT
2017-04-15 16:33:56 ----AC---- C:\Windows\system32\MRT.exe
2017-04-15 09:42:34 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2017-04-13 16:44:41 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2017-04-13 16:44:14 ----D---- C:\Windows\system32\Macromed
2017-04-13 08:31:03 ----D---- C:\Windows\system32\catroot2
2017-04-08 00:06:58 ----N---- C:\Windows\system32\MpSigStub.exe
2017-04-03 19:37:58 ----RSD---- C:\Windows\assembly
2017-04-03 19:31:04 ----SD---- C:\ProgramData\Microsoft
2017-04-03 19:27:48 ----D---- C:\Windows\Logs
2017-04-03 19:20:08 ----D---- C:\Program Files\DVD Maker
2017-04-03 19:20:07 ----D---- C:\Program Files\Windows Media Player
2017-04-03 19:20:06 ----D---- C:\Program Files (x86)\Windows Media Player
2017-04-03 19:20:05 ----D---- C:\Windows\SYSWOW64\migration
2017-04-03 19:20:04 ----D---- C:\Windows\SYSWOW64\Dism
2017-04-03 19:19:28 ----D---- C:\Windows\system32\migration
2017-04-03 19:19:27 ----D---- C:\Windows\system32\Dism
2017-04-03 19:18:35 ----D---- C:\Windows\system32\drivers\cs-CZ
2017-04-03 19:18:31 ----D---- C:\Windows\cs-CZ
2017-04-03 19:18:28 ----SD---- C:\Windows\system32\CompatTel
2017-04-03 19:18:27 ----D---- C:\Windows\system32\appraiser
2017-04-03 19:18:22 ----D---- C:\Windows\system32\DriverStore
2017-04-03 19:13:40 ----D---- C:\Windows\system32\catroot
2017-04-01 09:13:05 ----D---- C:\ProgramData\CanonIJPLM
2017-03-30 17:00:23 ----D---- C:\Windows\Prefetch

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys [2014-08-11 50976]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2015-11-20 263528]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-11-20 186784]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2015-11-20 170792]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-09-23 6180832]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 64bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
R3 WinUsb;Ovladač WinUSB; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 ESETCleanersDriver;ESET Cleaner Service; \??\C:\Windows\system32\Drivers\ESETCleanersDriver.sys [2017-04-23 170280]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2012-01-09 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-02-02 82640]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2016-09-22 83768]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-03-20 105096]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-03-20 125064]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2015-11-20 2522616]
R2 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2006-11-10 99936]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2016-11-01 651576]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-12 107848]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-04-13 271448]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-12 107848]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-03-25 114688]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-02-13 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-03-20 51320]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-03-20 135800]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-03-20 135800]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-03-20 135800]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118200
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prevenčka NB

#2 Příspěvek od Rudy »

Zdravím!
Log vypadá OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Thomas
Návštěvník
Návštěvník
Příspěvky: 235
Registrován: 07 dub 2005 20:02
Bydliště: Hradec Králové
Kontaktovat uživatele:

Re: Prevenčka NB

#3 Příspěvek od Thomas »

Výborně :lol: to bylo rychlý :happy:

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118200
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prevenčka NB

#4 Příspěvek od Rudy »

Kde nic není, ani smrt nebere. :D
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět