Firefox nahodne otevira ruzne nevhodne stranky

Zpráva

ladda · #1 Příspěvek od **ladda** » 08 dub 2017 23:47

Dobry den,

potreboval bych poradit. Firefox nahodne otevira nevhodne stranky s reklamou nebo sexualnim obsahem. Na pocitaci bezi AVG, ktere nevykazuje zadne napadeni. Ani ESET online scanner nic nenasel. Bohuzel zobrazovani techto nevhodnych stranek je velmi nahodne

Dekuji za pripadnou pomoc
Lada

ladda · #2 Příspěvek od **ladda** » 08 dub 2017 23:50

Logfile of random's system information tool 1.16 (written by random/random)
Run by admin at 2017-04-09 00:27:13
Microsoft Windows 10 Home
System drive C: has 402 GB (88%) free of 458 GB
Total RAM: 3982 MB (42% free)
X64

HijackThis download failed

====== Enumerating Processes ======

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\dashost.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE"
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe"
"C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe"
"C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.1.0\ToolbarUpdater.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.1.0\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties"
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Browny02\BrYNSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
C:\Program Files (x86)\AVG\Av\avgcsrva.exe /pipeName=44800c66-0200-0000-35c5-1b2adbe9894e /binaryPath="C:\Program Files (x86)\AVG\Av\\" /logPath=C:\WINDOWS\system32\config\systemprofile\AppData\Local\Avg\log\av16 /logCfgPath=C:\ProgramData\Avg\log\av16
"C:\Program Files (x86)\AVG\Av\avgfwsa.exe"
"C:\Program Files (x86)\AVG\Av\avgwdsvca.exe"
"C:\Program Files (x86)\AVG\Av\avgnsa.exe"
"C:\Program Files (x86)\AVG\Av\avgemca.exe"
C:\Program Files (x86)\AVG\Av\avgrsa.exe
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
C:\WINDOWS\System32\dwm.exe
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\taskhostw.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\igfxEM.exe
C:\WINDOWS\system32\igfxHK.exe
C:\WINDOWS\Explorer.EXE
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe" -scheduler
"C:\Users\Dana\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe"
C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
"C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe" /AUTORUN
C:\Program Files (x86)\AVG\Av\avgui.exe
"C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe"
C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
"C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe"
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
C:\WINDOWS\System32\fontdrvhost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
"C:\Program Files\Mozilla Firefox\firefox.exe"
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="7448.0.79893890\1704611174" -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" 7448 "\\.\pipe\gecko-crash-server-pipe.7448" tab
C:\WINDOWS\system32\DllHost.exe /Processid:{49F6E667-6658-4BD1-9DE9-6AF87F9FAF85}
C:\WINDOWS\system32\AUDIODG.EXE 0x4d0
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-d92d60ec-48bd-41f6-91ef-7dffe2bdd6a5 -SystemEventPortName:HostProcess-6494a6cf-ef46-43ca-bbaf-93deea16f306 -IoCancelEventPortName:HostProcess-c2f5e87d-7b7b-4f74-bce4-51194ffd4f8c -NonStateChangingEventPortName:HostProcess-1446c9f7-a962-4839-86bd-208e3c3506c7 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:542aafe9-a2cc-492a-9a33-10de72c61128 -DeviceGroupId:WpdFsGroup
C:\Windows\System32\smartscreen.exe -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe150_ Global\UsGthrCtrlFltPipeMssGthrPipe150 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 608 604 648 8192 644
"F:\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

====== Scheduled tasks folder ======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\HPCeeScheduleForDana.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForDana (null)
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\WINDOWS\system32\tasks\Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\system32\tasks\AVG EUpdate Task - avgsetupx.exe /eu
C:\WINDOWS\system32\tasks\CLMLSvc_P2G8 - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\WINDOWS\system32\tasks\CLVDLauncher - C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe
C:\WINDOWS\system32\tasks\HPCeeScheduleForDana - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForDana (null)
C:\WINDOWS\system32\tasks\McAfee Remediation (Prepare) - C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe /prepare
C:\WINDOWS\system32\tasks\OneDrive Standalone Update Task - C:\Users\Dana\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
C:\WINDOWS\system32\tasks\OneDrive Standalone Update Task v2 - %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
C:\WINDOWS\system32\tasks\Synaptics TouchPad Enhancements - "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\system32\tasks\User_Feed_Synchronization-{9695109D-29D3-4036-9971-3E09C1B51A9B} - C:\WINDOWS\system32\msfeedssync.exe sync
C:\WINDOWS\system32\tasks\User_Feed_Synchronization-{D06FE6F7-1320-40B2-8591-87C6F985548C} - C:\Windows\system32\msfeedssync.exe sync
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTask - %windir%\System32\XblGameSaveTask.exe standby
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTaskLogon - %windir%\System32\XblGameSaveTask.exe logon
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join - %SystemRoot%\System32\AutoWorkplace.exe join
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network - C:\Windows\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCleanup
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan - %ProgramFiles%\Windows Defender\MpCmdRun.exe Scan -ScheduleJob
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdVerification
C:\WINDOWS\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe RebootDialog
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Refresh Settings - %systemroot%\system32\usoclient.exe RefreshSettings
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot - %systemroot%\system32\usoclient.exe ResumeUpdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display - C:\windows\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot - C:\windows\system32\MusNotification.exe ReadyToReboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\WINDOWS\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\WINDOWS\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\WINDOWS\system32\tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask - %windir%\system32\speech_onecore\common\SpeechModelDownload.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\WINDOWS\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemovalTools\MRT_HB - C:\Windows\system32\MRT.exe /EHB /Q
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\WINDOWS\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\WINDOWS\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\Lpksetup - C:\Windows\System32\lpksetup.exe -v
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\Mcbuilder - C:\Windows\System32\mcbuilder.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload - %windir%\system32\dmclient.exe utcwnf
C:\WINDOWS\system32\tasks\Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask - %windir%\system32\MDMAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\WINDOWS\system32\tasks\Microsoft\Windows\Device Information\Device - %windir%\system32\devicecensus.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\WINDOWS\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\WINDOWS\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /taskrestart
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe /send
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /u
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\Product Configurator - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe /noreport
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA

=========Mozilla firefox=========

ProfilePath - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5owphnal.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.162 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\19.1.0\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.121.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.121.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.162 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=C:\Program Files\mcafee\msc\npMcSnFFPl64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL

C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5owphnal.default\addons.json

C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5owphnal.default\extensions.json
Application Update Service Helper - extension - aushelper@mozilla.org - C:\Program Files\Mozilla Firefox\browser\features\aushelper@mozilla.org.xpi
Site Deployment Checker - extension - deployment-checker@mozilla.org - C:\Program Files\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi
Multi-process staged rollout - extension - e10srollout@mozilla.org - C:\Program Files\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi
Pocket - extension - firefox@getpocket.com - C:\Program Files\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi
Web Compat - extension - webcompat@mozilla.org - C:\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
Disable Prefetch - extension - disable-prefetch@mozilla.org - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5owphnal.default\features\{92d4ce23-894f-4eb4-9751-eda40d58bfdc}\disable-prefetch@mozilla.org.xpi
Multi-process staged rollout - extension - e10srollout@mozilla.org - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5owphnal.default\features\{92d4ce23-894f-4eb4-9751-eda40d58bfdc}\e10srollout@mozilla.org.xpi

C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5owphnal.default\pluginreg.dat
Plugin - Shockwave Flash - 23.0.0.162 - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll

======Registry dump ======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTer ... c=CMNTDFJS
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{FB45EA3F-8648-4EEA-BD9E-E0925B78849C}]
"URL"=http://www.amazon.co.uk/s/ref=azs_osd_i ... earchTerms}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTer ... c=CMNTDFJS
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{FB45EA3F-8648-4EEA-BD9E-E0925B78849C}]
"URL"=http://www.amazon.co.uk/s/ref=azs_osd_i ... earchTerms}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21 440712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{551A852F-39A6-44A7-9C13-AFBEC9185A9D}]
PlusIEEventHelper Class - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06 249856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-02-23 473152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-02-23 186944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21 416320]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-01-14 7510896]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-04-05 1518304]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HPMessageService"=C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [2013-10-08 1045304]
"ControlCenter4"=C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [2012-09-06 143360]
"BrStsMon00"=C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2012-06-06 3076096]
"AVG_UI"=C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [2016-12-06 240400]
"vProt"=C:\Program Files (x86)\AVG Secure Search\vprot.exe [2015-12-14 2573712]
"IndexSearch"=C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [2010-03-09 46368]
"PaperPort PTD"=C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [2010-03-09 29984]
"PPort12reminder"=C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe [2010-02-09 328992]
"PDFHook"=C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe [2010-03-05 636192]
"PDF5 Registry Controller"=C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe [2010-03-05 62752]
"AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [2016-12-06 240400]
"ICAMaintenance_ICAPKIService_RegKeysRefresh"=C:\Program Files (x86)\I.CA\I.CA Maintenance\ICAMaintenance.exe [2016-10-07 272120]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-12-12 587288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"undockwithoutlogon"=1
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
"StubPath" = %SystemRoot%\inf\unregmp2.exe /ShowWMP

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

ladda · #3 Příspěvek od **ladda** » 08 dub 2017 23:50

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-04-09 00:27:13 ----D---- C:\Program Files\trend micro
2017-04-09 00:27:12 ----D---- C:\rsit
2017-04-06 13:04:03 ----D---- C:\Users\admin\AppData\Roaming\Sun
2017-04-05 09:05:45 ----D---- C:\Users\admin\AppData\Roaming\Zeon
2017-04-05 09:05:36 ----D---- C:\Users\admin\AppData\Roaming\Nuance
2017-04-05 07:25:27 ----D---- C:\Users\admin\AppData\Roaming\Macromedia
2017-04-05 07:21:05 ----D---- C:\Users\admin\AppData\Roaming\Mozilla
2017-04-05 06:55:29 ----D---- C:\Users\admin\AppData\Roaming\AVG
2017-04-05 06:52:59 ----D---- C:\Users\admin\AppData\Roaming\Skype
2017-04-05 06:52:47 ----D---- C:\Users\admin\AppData\Roaming\Hewlett-Packard
2017-04-05 06:49:25 ----D---- C:\Users\admin\AppData\Roaming\ControlCenter4
2017-04-05 06:47:21 ----D---- C:\Users\admin\AppData\Roaming\Adobe
2017-04-05 06:47:08 ----D---- C:\Users\admin\AppData\Roaming\Synaptics
2017-04-03 08:42:25 ----SD---- C:\Users\admin\AppData\Roaming\Microsoft
2017-04-03 08:42:25 ----D---- C:\Users\admin\AppData\Roaming\TuneUp Software
2017-03-30 07:14:40 ----D---- C:\Program Files (x86)\Winmail Opener
2017-03-16 08:50:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-03-16 08:50:37 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2017-03-16 08:50:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2017-03-16 08:50:36 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2017-03-16 08:50:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2017-03-16 08:50:34 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2017-03-16 08:50:33 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2017-03-16 08:50:32 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-03-16 08:50:32 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2017-03-16 08:50:30 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2017-03-16 08:50:29 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2017-03-16 08:50:28 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2017-03-16 08:50:26 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2017-03-16 08:50:25 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2017-03-16 08:50:25 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2017-03-16 08:50:24 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2017-03-16 08:50:24 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2017-03-16 08:50:23 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2017-03-16 08:50:23 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2017-03-16 08:50:22 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2017-03-16 08:50:21 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2017-03-16 08:50:21 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2017-03-16 08:50:20 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2017-03-16 08:50:19 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-03-16 08:50:19 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2017-03-16 08:50:18 ----A---- C:\WINDOWS\SYSWOW64\MapRouter.dll
2017-03-16 08:50:18 ----A---- C:\WINDOWS\SYSWOW64\CloudBackupSettings.dll
2017-03-16 08:50:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2017-03-16 08:50:16 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2017-03-16 08:50:16 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2017-03-16 08:50:15 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2017-03-16 08:50:15 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2017-03-16 08:50:15 ----A---- C:\WINDOWS\SYSWOW64\MapGeocoder.dll
2017-03-16 08:50:14 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2017-03-16 08:50:14 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2017-03-16 08:50:13 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2017-03-16 08:50:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2017-03-16 08:50:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Phone.dll
2017-03-16 08:50:12 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2017-03-16 08:50:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2017-03-16 08:50:11 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2017-03-16 08:50:11 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2017-03-16 08:50:10 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2017-03-16 08:50:10 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2017-03-16 08:50:10 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2017-03-16 08:50:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2017-03-16 08:50:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2017-03-16 08:50:09 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2017-03-16 08:50:08 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2017-03-16 08:50:08 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-03-16 08:50:08 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2017-03-16 08:50:08 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2017-03-16 08:50:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2017-03-16 08:50:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2017-03-16 08:50:07 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2017-03-16 08:50:07 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2017-03-16 08:50:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2017-03-16 08:50:06 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2017-03-16 08:50:05 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2017-03-16 08:50:05 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2017-03-16 08:50:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2017-03-16 08:50:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2017-03-16 08:50:04 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2017-03-16 08:50:04 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2017-03-16 08:50:03 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2017-03-16 08:50:03 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2017-03-16 08:50:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2017-03-16 08:50:02 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2017-03-16 08:50:02 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2017-03-16 08:50:01 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2017-03-16 08:50:01 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2017-03-16 08:50:01 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2017-03-16 08:50:00 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2017-03-16 08:50:00 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2017-03-16 08:50:00 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2017-03-16 08:49:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2017-03-16 08:49:59 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2017-03-16 08:49:59 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2017-03-16 08:49:59 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2017-03-16 08:49:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2017-03-16 08:49:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2017-03-16 08:49:58 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2017-03-16 08:49:58 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2017-03-16 08:49:57 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2017-03-16 08:49:57 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2017-03-16 08:49:57 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2017-03-16 08:49:56 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2017-03-16 08:49:56 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2017-03-16 08:49:56 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2017-03-16 08:49:56 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2017-03-16 08:49:55 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2017-03-16 08:49:55 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2017-03-16 08:49:55 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2017-03-16 08:49:55 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore6.dll
2017-03-16 08:49:54 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2017-03-16 08:49:54 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2017-03-16 08:49:54 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2017-03-16 08:49:53 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2017-03-16 08:49:53 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2017-03-16 08:49:52 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2017-03-16 08:49:52 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2017-03-16 08:49:52 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2017-03-16 08:49:51 ----A---- C:\WINDOWS\SYSWOW64\MMDevAPI.dll
2017-03-16 08:49:51 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2017-03-16 08:49:51 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2017-03-16 08:49:50 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2017-03-16 08:49:50 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2017-03-16 08:49:50 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2017-03-16 08:49:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2017-03-16 08:49:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.3D.dll
2017-03-16 08:49:49 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2017-03-16 08:49:48 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2017-03-16 08:49:48 ----A---- C:\WINDOWS\SYSWOW64\mmc.exe
2017-03-16 08:49:48 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2017-03-16 08:49:47 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2017-03-16 08:49:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Perception.dll
2017-03-16 08:49:47 ----A---- C:\WINDOWS\SYSWOW64\PCPTpm12.dll
2017-03-16 08:49:47 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2017-03-16 08:49:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2017-03-16 08:49:46 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2017-03-16 08:49:45 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2017-03-16 08:49:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2017-03-16 08:49:45 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2017-03-16 08:49:45 ----A---- C:\WINDOWS\system32\drivers\IPMIDrv.sys
2017-03-16 08:49:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2017-03-16 08:49:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.PointOfService.dll
2017-03-16 08:49:44 ----A---- C:\WINDOWS\SYSWOW64\CompPkgSup.dll
2017-03-16 08:49:44 ----A---- C:\WINDOWS\SYSWOW64\basecsp.dll
2017-03-16 08:49:43 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2017-03-16 08:49:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2017-03-16 08:49:43 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2017-03-16 08:49:43 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2017-03-16 08:49:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.AllJoyn.dll
2017-03-16 08:49:42 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2017-03-16 08:49:42 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2017-03-16 08:49:41 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2017-03-16 08:49:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2017-03-16 08:49:41 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2017-03-16 08:49:40 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2017-03-16 08:49:40 ----A---- C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
2017-03-16 08:49:39 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2017-03-16 08:49:39 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2017-03-16 08:49:39 ----A---- C:\WINDOWS\SYSWOW64\gpapi.dll
2017-03-16 08:49:39 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostUser.dll
2017-03-16 08:49:38 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2017-03-16 08:49:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2017-03-16 08:49:38 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2017-03-16 08:49:37 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2017-03-16 08:49:37 ----A---- C:\WINDOWS\SYSWOW64\input.dll
2017-03-16 08:49:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Picker.dll
2017-03-16 08:49:36 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2017-03-16 08:49:36 ----A---- C:\WINDOWS\SYSWOW64\netiohlp.dll
2017-03-16 08:49:36 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2017-03-16 08:49:35 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2017-03-16 08:49:35 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2017-03-16 08:49:35 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2017-03-16 08:49:35 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2017-03-16 08:49:34 ----A---- C:\WINDOWS\SYSWOW64\wsp_sr.dll
2017-03-16 08:49:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2017-03-16 08:49:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SmartCards.dll
2017-03-16 08:49:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Import.dll
2017-03-16 08:49:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2017-03-16 08:49:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.LowLevel.dll
2017-03-16 08:49:33 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2017-03-16 08:49:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2017-03-16 08:49:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2017-03-16 08:49:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-03-16 08:49:32 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2017-03-16 08:49:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-03-16 08:49:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2017-03-16 08:49:31 ----A---- C:\WINDOWS\SYSWOW64\netiougc.exe
2017-03-16 08:49:31 ----A---- C:\WINDOWS\SYSWOW64\MCCSEngineShared.dll
2017-03-16 08:49:31 ----A---- C:\WINDOWS\SYSWOW64\imapi2fs.dll
2017-03-16 08:49:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.BackgroundMediaPlayback.dll
2017-03-16 08:49:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2017-03-16 08:49:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFiDirect.dll
2017-03-16 08:49:30 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2017-03-16 08:49:29 ----A---- C:\WINDOWS\SYSWOW64\icm32.dll
2017-03-16 08:49:29 ----A---- C:\WINDOWS\SYSWOW64\CryptoWinRT.dll
2017-03-16 08:49:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.Input.dll
2017-03-16 08:49:18 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2017-03-16 08:49:17 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2017-03-16 08:49:16 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2017-03-16 08:49:15 ----A---- C:\WINDOWS\SYSWOW64\scksp.dll
2017-03-16 08:49:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Perception.Stub.dll
2017-03-16 08:49:14 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2017-03-16 08:49:14 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2017-03-16 08:49:13 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2017-03-16 08:49:13 ----A---- C:\WINDOWS\SYSWOW64\WinRtTracing.dll
2017-03-16 08:49:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFi.dll
2017-03-16 08:49:13 ----A---- C:\WINDOWS\SYSWOW64\mssphtb.dll
2017-03-16 08:49:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2017-03-16 08:49:12 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2017-03-16 08:49:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-03-16 08:49:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.FaceAnalysis.dll
2017-03-16 08:49:11 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2017-03-16 08:49:11 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2017-03-16 08:49:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SerialCommunication.dll
2017-03-16 08:49:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.dll
2017-03-16 08:49:10 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2017-03-16 08:49:10 ----A---- C:\WINDOWS\SYSWOW64\PlayToReceiver.dll
2017-03-16 08:49:10 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2017-03-16 08:49:09 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2017-03-16 08:49:09 ----A---- C:\WINDOWS\SYSWOW64\Pimstore.dll
2017-03-16 08:49:09 ----A---- C:\WINDOWS\SYSWOW64\oleacc.dll
2017-03-16 08:49:09 ----A---- C:\WINDOWS\SYSWOW64\mscms.dll
2017-03-16 08:49:09 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2017-03-16 08:49:08 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2017-03-16 08:49:08 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2017-03-16 08:49:08 ----A---- C:\WINDOWS\SYSWOW64\mtxclu.dll
2017-03-16 08:49:08 ----A---- C:\WINDOWS\SYSWOW64\msutb.dll
2017-03-16 08:49:08 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2017-03-16 08:49:08 ----A---- C:\WINDOWS\SYSWOW64\BcastDVRHelper.dll
2017-03-16 08:49:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-03-16 08:49:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2017-03-16 08:49:07 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2017-03-16 08:49:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2017-03-16 08:49:06 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2017-03-16 08:49:06 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2017-03-16 08:49:06 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2017-03-16 08:49:05 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2017-03-16 08:49:05 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.dll
2017-03-16 08:49:05 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2017-03-16 08:49:04 ----A---- C:\WINDOWS\SYSWOW64\msdtcuiu.dll
2017-03-16 08:49:04 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2017-03-16 08:49:03 ----A---- C:\WINDOWS\SYSWOW64\WsmWmiPl.dll
2017-03-16 08:49:03 ----A---- C:\WINDOWS\SYSWOW64\wlanui.dll
2017-03-16 08:49:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2017-03-16 08:49:03 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2017-03-16 08:49:03 ----A---- C:\WINDOWS\SYSWOW64\azroleui.dll
2017-03-16 08:49:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Ocr.dll
2017-03-16 08:49:02 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2017-03-16 08:49:01 ----A---- C:\WINDOWS\SYSWOW64\regedit.exe
2017-03-16 08:49:01 ----A---- C:\WINDOWS\SYSWOW64\iprtrmgr.dll
2017-03-16 08:49:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.HostName.dll
2017-03-16 08:49:00 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2017-03-16 08:49:00 ----A---- C:\WINDOWS\SYSWOW64\SearchFilterHost.exe
2017-03-16 08:49:00 ----A---- C:\WINDOWS\SYSWOW64\RADCUI.dll
2017-03-16 08:48:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.Search.dll
2017-03-16 08:48:59 ----A---- C:\WINDOWS\SYSWOW64\MSPhotography.dll
2017-03-16 08:48:59 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2017-03-16 08:48:59 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2017-03-16 08:48:58 ----A---- C:\WINDOWS\SYSWOW64\WwaApi.dll
2017-03-16 08:48:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2017-03-16 08:48:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Radios.dll
2017-03-16 08:48:58 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2017-03-16 08:48:58 ----A---- C:\WINDOWS\SYSWOW64\ErrorDetails.dll
2017-03-16 08:48:57 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2017-03-16 08:48:57 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll
2017-03-16 08:48:57 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2017-03-16 08:48:56 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2017-03-16 08:48:56 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2017-03-16 08:48:56 ----A---- C:\WINDOWS\SYSWOW64\ProximityCommon.dll
2017-03-16 08:48:55 ----A---- C:\WINDOWS\SYSWOW64\tcpipcfg.dll
2017-03-16 08:48:55 ----A---- C:\WINDOWS\SYSWOW64\mscandui.dll
2017-03-16 08:48:55 ----A---- C:\WINDOWS\SYSWOW64\findnetprinters.dll
2017-03-16 08:48:54 ----A---- C:\WINDOWS\SYSWOW64\vaultcli.dll
2017-03-16 08:48:54 ----A---- C:\WINDOWS\SYSWOW64\puiapi.dll
2017-03-16 08:48:54 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2017-03-16 08:48:54 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2017-03-16 08:48:54 ----A---- C:\WINDOWS\SYSWOW64\BrowserSettingSync.dll
2017-03-16 08:48:53 ----A---- C:\WINDOWS\SYSWOW64\WMVSENCD.DLL
2017-03-16 08:48:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.UI.GameBar.dll
2017-03-16 08:48:53 ----A---- C:\WINDOWS\SYSWOW64\dmenrollengine.dll
2017-03-16 08:48:53 ----A---- C:\WINDOWS\SYSWOW64\DavSyncProvider.dll
2017-03-16 08:48:53 ----A---- C:\WINDOWS\SYSWOW64\DafPrintProvider.dll
2017-03-16 08:48:53 ----A---- C:\WINDOWS\SYSWOW64\cemapi.dll
2017-03-16 08:48:53 ----A---- C:\WINDOWS\SYSWOW64\accountaccessor.dll
2017-03-16 08:48:52 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2017-03-16 08:48:51 ----A---- C:\WINDOWS\SYSWOW64\XInputUap.dll
2017-03-16 08:48:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Diagnostics.dll
2017-03-16 08:48:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.SystemManagement.dll
2017-03-16 08:48:51 ----A---- C:\WINDOWS\SYSWOW64\mssitlb.dll
2017-03-16 08:48:50 ----A---- C:\WINDOWS\SYSWOW64\tbauth.dll
2017-03-16 08:48:50 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2017-03-16 08:48:50 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2017-03-16 08:48:49 ----A---- C:\WINDOWS\SYSWOW64\MSVP9DEC.dll
2017-03-16 08:48:49 ----A---- C:\WINDOWS\SYSWOW64\CameraCaptureUI.dll
2017-03-16 08:48:48 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2017-03-16 08:48:48 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2017-03-16 08:48:47 ----A---- C:\WINDOWS\SYSWOW64\TokenBrokerCookies.exe
2017-03-16 08:48:47 ----A---- C:\WINDOWS\SYSWOW64\tapi32.dll
2017-03-16 08:48:47 ----A---- C:\WINDOWS\SYSWOW64\msctfui.dll
2017-03-16 08:48:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-16 08:48:46 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2017-03-16 08:48:46 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2017-03-16 08:48:45 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2017-03-16 08:48:45 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2017-03-16 08:48:44 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.Ngc.dll
2017-03-16 08:48:44 ----A---- C:\WINDOWS\SYSWOW64\NaturalLanguage6.dll
2017-03-16 08:48:44 ----A---- C:\WINDOWS\SYSWOW64\msctfp.dll
2017-03-16 08:48:44 ----A---- C:\WINDOWS\SYSWOW64\fontext.dll
2017-03-16 08:48:44 ----A---- C:\WINDOWS\SYSWOW64\ddrawex.dll
2017-03-16 08:48:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2017-03-16 08:48:42 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2017-03-16 08:48:42 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2017-03-16 08:48:42 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2017-03-16 08:48:42 ----A---- C:\WINDOWS\SYSWOW64\ddraw.dll
2017-03-16 08:48:42 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2017-03-16 08:48:41 ----A---- C:\WINDOWS\SYSWOW64\GamePanelExternalHook.dll
2017-03-16 08:48:30 ----A---- C:\WINDOWS\system32\tquery.dll
2017-03-16 08:48:30 ----A---- C:\WINDOWS\system32\mssrch.dll
2017-03-16 08:48:29 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2017-03-16 08:48:29 ----A---- C:\WINDOWS\system32\wmpmde.dll
2017-03-16 08:48:28 ----A---- C:\WINDOWS\SYSWOW64\wmpmde.dll
2017-03-16 08:48:28 ----A---- C:\WINDOWS\system32\WWAHost.exe
2017-03-16 08:48:26 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2017-03-16 08:48:26 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-03-16 08:48:25 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2017-03-16 08:48:25 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2017-03-16 08:48:24 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2017-03-16 08:48:24 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-03-16 08:48:23 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2017-03-16 08:48:21 ----A---- C:\WINDOWS\system32\Windows.Devices.Perception.dll
2017-03-16 08:48:18 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2017-03-16 08:48:17 ----A---- C:\WINDOWS\system32\XblGameSaveExt.dll
2017-03-16 08:48:06 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2017-03-16 08:48:04 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2017-03-16 08:48:04 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2017-03-16 08:48:04 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2017-03-16 08:48:04 ----A---- C:\WINDOWS\system32\mssphtb.dll
2017-03-16 08:48:03 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2017-03-16 08:48:03 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2017-03-16 08:48:03 ----A---- C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2017-03-16 08:48:03 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2017-03-16 08:48:03 ----A---- C:\WINDOWS\system32\mssvp.dll
2017-03-16 08:48:03 ----A---- C:\WINDOWS\system32\mssprxy.dll
2017-03-16 08:48:03 ----A---- C:\WINDOWS\system32\mssph.dll
2017-03-16 08:48:02 ----A---- C:\WINDOWS\system32\wwansvc.dll
2017-03-16 08:48:02 ----A---- C:\WINDOWS\system32\wwanmm.dll
2017-03-16 08:48:02 ----A---- C:\WINDOWS\system32\Windows.Gaming.UI.GameBar.dll
2017-03-16 08:48:02 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-03-16 08:48:01 ----A---- C:\WINDOWS\SYSWOW64\WPDShServiceObj.dll
2017-03-16 08:48:01 ----A---- C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2017-03-16 08:48:01 ----A---- C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2017-03-16 08:47:59 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-03-16 08:47:59 ----A---- C:\WINDOWS\system32\wlanui.dll
2017-03-16 08:47:59 ----A---- C:\WINDOWS\system32\WinRtTracing.dll
2017-03-16 08:47:59 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2017-03-16 08:47:59 ----A---- C:\WINDOWS\system32\nshwfp.dll
2017-03-16 08:47:59 ----A---- C:\WINDOWS\system32\mssitlb.dll
2017-03-16 08:47:58 ----A---- C:\WINDOWS\system32\wwanconn.dll
2017-03-16 08:47:58 ----A---- C:\WINDOWS\system32\WwaApi.dll
2017-03-16 08:47:58 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2017-03-16 08:47:58 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-03-16 08:47:58 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2017-03-16 08:47:52 ----A---- C:\WINDOWS\system32\wmp.dll
2017-03-16 08:47:50 ----A---- C:\WINDOWS\system32\shell32.dll
2017-03-16 08:47:48 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2017-03-16 08:47:47 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-03-16 08:47:46 ----A---- C:\WINDOWS\system32\mos.dll
2017-03-16 08:47:45 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2017-03-16 08:47:43 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-03-16 08:47:42 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-03-16 08:47:42 ----A---- C:\WINDOWS\system32\BingMaps.dll
2017-03-16 08:47:41 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2017-03-16 08:47:41 ----A---- C:\WINDOWS\system32\mfcore.dll
2017-03-16 08:47:40 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-03-16 08:47:40 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2017-03-16 08:47:40 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2017-03-16 08:47:40 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-03-16 08:47:38 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2017-03-16 08:47:38 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-03-16 08:47:38 ----A---- C:\WINDOWS\system32\MapGeocoder.dll
2017-03-16 08:47:37 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-03-16 08:47:36 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2017-03-16 08:47:36 ----A---- C:\WINDOWS\system32\MapRouter.dll
2017-03-16 08:47:35 ----A---- C:\WINDOWS\system32\Wpc.dll
2017-03-16 08:47:35 ----A---- C:\WINDOWS\system32\MapsStore.dll
2017-03-16 08:47:34 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2017-03-16 08:47:34 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2017-03-16 08:47:34 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2017-03-16 08:47:34 ----A---- C:\WINDOWS\system32\ContactApis.dll
2017-03-16 08:47:33 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2017-03-16 08:47:33 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2017-03-16 08:47:32 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-03-16 08:47:32 ----A---- C:\WINDOWS\system32\mfplat.dll
2017-03-16 08:47:32 ----A---- C:\WINDOWS\system32\KernelBase.dll
2017-03-16 08:47:31 ----A---- C:\WINDOWS\system32\mstscax.dll
2017-03-16 08:47:31 ----A---- C:\WINDOWS\system32\localspl.dll
2017-03-16 08:47:30 ----A---- C:\WINDOWS\system32\wpncore.dll
2017-03-16 08:47:30 ----A---- C:\WINDOWS\system32\mmc.exe
2017-03-16 08:47:30 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2017-03-16 08:47:29 ----A---- C:\WINDOWS\system32\wpnapps.dll
2017-03-16 08:47:28 ----A---- C:\WINDOWS\system32\usercpl.dll
2017-03-16 08:47:28 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2017-03-16 08:47:27 ----A---- C:\WINDOWS\system32\WpcMon.exe
2017-03-16 08:47:27 ----A---- C:\WINDOWS\system32\wlansec.dll
2017-03-16 08:47:27 ----A---- C:\WINDOWS\system32\win32spl.dll
2017-03-16 08:47:27 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2017-03-16 08:47:27 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2017-03-16 08:47:26 ----A---- C:\WINDOWS\system32\msxml3.dll
2017-03-16 08:47:26 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-03-16 08:47:25 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2017-03-16 08:47:25 ----A---- C:\WINDOWS\system32\MusNotification.exe
2017-03-16 08:47:25 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2017-03-16 08:47:24 ----A---- C:\WINDOWS\system32\wlansvc.dll
2017-03-16 08:47:24 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2017-03-16 08:47:24 ----A---- C:\WINDOWS\system32\ntshrui.dll
2017-03-16 08:47:24 ----A---- C:\WINDOWS\system32\mprddm.dll
2017-03-16 08:47:24 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2017-03-16 08:47:23 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2017-03-16 08:47:23 ----A---- C:\WINDOWS\system32\spoolsv.exe
2017-03-16 08:47:23 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2017-03-16 08:47:22 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2017-03-16 08:47:22 ----A---- C:\WINDOWS\system32\SpaceControl.dll
2017-03-16 08:47:22 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2017-03-16 08:47:22 ----A---- C:\WINDOWS\system32\MMDevAPI.dll
2017-03-16 08:47:21 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-03-16 08:47:21 ----A---- C:\WINDOWS\system32\usocore.dll
2017-03-16 08:47:21 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2017-03-16 08:47:21 ----A---- C:\WINDOWS\system32\NgcCtnrSvc.dll
2017-03-16 08:47:21 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2017-03-16 08:47:21 ----A---- C:\WINDOWS\system32\mf.dll
2017-03-16 08:47:20 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2017-03-16 08:47:20 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2017-03-16 08:47:20 ----A---- C:\WINDOWS\system32\EmailApis.dll
2017-03-16 08:47:19 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2017-03-16 08:47:19 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-03-16 08:47:19 ----A---- C:\WINDOWS\system32\Pimstore.dll
2017-03-16 08:47:18 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2017-03-16 08:47:18 ----A---- C:\WINDOWS\system32\rasgcw.dll
2017-03-16 08:47:18 ----A---- C:\WINDOWS\system32\ChatApis.dll
2017-03-16 08:47:18 ----A---- C:\WINDOWS\system32\AuthHost.exe
2017-03-16 08:47:18 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2017-03-16 08:47:17 ----A---- C:\WINDOWS\system32\wmpps.dll
2017-03-16 08:47:17 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-03-16 08:47:17 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2017-03-16 08:47:17 ----A---- C:\WINDOWS\system32\mfds.dll
2017-03-16 08:47:17 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2017-03-16 08:47:17 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2017-03-16 08:47:16 ----A---- C:\WINDOWS\system32\wlanapi.dll
2017-03-16 08:47:16 ----A---- C:\WINDOWS\system32\UserDataService.dll
2017-03-16 08:47:16 ----A---- C:\WINDOWS\system32\InputService.dll
2017-03-16 08:47:15 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2017-03-16 08:47:15 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-03-16 08:47:15 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-03-16 08:47:15 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2017-03-16 08:47:15 ----A---- C:\WINDOWS\system32\moshost.dll
2017-03-16 08:47:15 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2017-03-16 08:47:14 ----A---- C:\WINDOWS\system32\musdialoghandlers.dll
2017-03-16 08:47:14 ----A---- C:\WINDOWS\system32\mfsvr.dll
2017-03-16 08:47:14 ----A---- C:\WINDOWS\system32\efswrt.dll
2017-03-16 08:47:14 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2017-03-16 08:47:14 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2017-03-16 08:47:13 ----A---- C:\WINDOWS\system32\MCCSEngineShared.dll
2017-03-16 08:47:13 ----A---- C:\WINDOWS\system32\internetmail.dll
2017-03-16 08:47:13 ----A---- C:\WINDOWS\system32\FrameServer.dll
2017-03-16 08:47:12 ----A---- C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-03-16 08:47:12 ----A---- C:\WINDOWS\system32\RADCUI.dll
2017-03-16 08:47:11 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2017-03-16 08:47:11 ----A---- C:\WINDOWS\system32\usoapi.dll
2017-03-16 08:47:11 ----A---- C:\WINDOWS\system32\MSPhotography.dll
2017-03-16 08:47:10 ----A---- C:\WINDOWS\system32\RelPost.exe
2017-03-16 08:47:10 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2017-03-16 08:47:10 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2017-03-16 08:47:09 ----A---- C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-03-16 08:47:09 ----A---- C:\WINDOWS\system32\wfdprov.dll
2017-03-16 08:47:09 ----A---- C:\WINDOWS\system32\puiobj.dll
2017-03-16 08:47:09 ----A---- C:\WINDOWS\system32\PrintDialogs.dll
2017-03-16 08:47:09 ----A---- C:\WINDOWS\system32\netshell.dll
2017-03-16 08:47:09 ----A---- C:\WINDOWS\system32\MSVP9DEC.dll
2017-03-16 08:47:09 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2017-03-16 08:47:08 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-03-16 08:47:08 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2017-03-16 08:47:08 ----A---- C:\WINDOWS\system32\ExSMime.dll
2017-03-16 08:47:07 ----A---- C:\WINDOWS\system32\Windows.Storage.Search.dll
2017-03-16 08:47:07 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2017-03-16 08:47:07 ----A---- C:\WINDOWS\system32\sdengin2.dll
2017-03-16 08:47:07 ----A---- C:\WINDOWS\system32\PrintDialogs3D.dll
2017-03-16 08:47:06 ----A---- C:\WINDOWS\system32\Unistore.dll
2017-03-16 08:47:06 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2017-03-16 08:47:06 ----A---- C:\WINDOWS\system32\iprtrmgr.dll
2017-03-16 08:47:05 ----A---- C:\WINDOWS\system32\PrintRenderAPIHost.DLL
2017-03-16 08:47:05 ----A---- C:\WINDOWS\system32\drivers\tcpipreg.sys
2017-03-16 08:47:04 ----A---- C:\WINDOWS\system32\wpninprc.dll
2017-03-16 08:47:04 ----A---- C:\WINDOWS\system32\puiapi.dll
2017-03-16 08:47:04 ----A---- C:\WINDOWS\system32\DavSyncProvider.dll
2017-03-16 08:47:04 ----A---- C:\WINDOWS\system32\DafPrintProvider.dll
2017-03-16 08:47:03 ----A---- C:\WINDOWS\system32\cemapi.dll
2017-03-16 08:47:03 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2017-03-16 08:47:01 ----A---- C:\WINDOWS\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2017-03-16 08:47:01 ----A---- C:\WINDOWS\system32\tapi32.dll
2017-03-16 08:47:01 ----A---- C:\WINDOWS\system32\sdshext.dll
2017-03-16 08:47:01 ----A---- C:\WINDOWS\system32\pnidui.dll
2017-03-16 08:47:01 ----A---- C:\WINDOWS\system32\netiougc.exe
2017-03-16 08:47:01 ----A---- C:\WINDOWS\system32\DuCsps.dll
2017-03-16 08:47:00 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-16 08:47:00 ----A---- C:\WINDOWS\system32\odbcconf.dll
2017-03-16 08:46:59 ----A---- C:\WINDOWS\system32\VCardParser.dll
2017-03-16 08:46:57 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-03-16 08:46:55 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-03-16 08:46:52 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-03-16 08:46:51 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-03-16 08:46:49 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-03-16 08:46:48 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2017-03-16 08:46:46 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-03-16 08:46:45 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-03-16 08:46:43 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2017-03-16 08:46:42 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-03-16 08:46:41 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-03-16 08:46:41 ----A---- C:\WINDOWS\system32\wininet.dll
2017-03-16 08:46:39 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-03-16 08:46:38 ----A---- C:\WINDOWS\system32\dwmcore.dll
2017-03-16 08:46:38 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-03-16 08:46:38 ----A---- C:\WINDOWS\system32\d3d11.dll
2017-03-16 08:46:37 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-03-16 08:46:37 ----A---- C:\WINDOWS\system32\DWrite.dll
2017-03-16 08:46:35 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2017-03-16 08:46:35 ----A---- C:\WINDOWS\system32\comsvcs.dll
2017-03-16 08:46:34 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2017-03-16 08:46:33 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-03-16 08:46:32 ----A---- C:\WINDOWS\system32\msdtctm.dll
2017-03-16 08:46:32 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-03-16 08:46:32 ----A---- C:\WINDOWS\system32\dxgi.dll
2017-03-16 08:46:31 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2017-03-16 08:46:31 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2017-03-16 08:46:31 ----A---- C:\WINDOWS\system32\FntCache.dll
2017-03-16 08:46:31 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2017-03-16 08:46:30 ----A---- C:\WINDOWS\system32\vbscript.dll
2017-03-16 08:46:30 ----A---- C:\WINDOWS\system32\schannel.dll
2017-03-16 08:46:30 ----A---- C:\WINDOWS\system32\inetcomm.dll
2017-03-16 08:46:30 ----A---- C:\WINDOWS\system32\CloudBackupSettings.dll
2017-03-16 08:46:29 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2017-03-16 08:46:29 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2017-03-16 08:46:29 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2017-03-16 08:46:29 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2017-03-16 08:46:28 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2017-03-16 08:46:28 ----A---- C:\WINDOWS\system32\dnsapi.dll
2017-03-16 08:46:27 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2017-03-16 08:46:27 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2017-03-16 08:46:26 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2017-03-16 08:46:26 ----A---- C:\WINDOWS\system32\winmde.dll
2017-03-16 08:46:26 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2017-03-16 08:46:26 ----A---- C:\WINDOWS\system32\rasmans.dll
2017-03-16 08:46:26 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2017-03-16 08:46:25 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-03-16 08:46:25 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2017-03-16 08:46:25 ----A---- C:\WINDOWS\system32\dhcpcore6.dll
2017-03-16 08:46:24 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2017-03-16 08:46:24 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2017-03-16 08:46:24 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-03-16 08:46:24 ----A---- C:\WINDOWS\system32\vpnike.dll
2017-03-16 08:46:23 ----A---- C:\WINDOWS\system32\uDWM.dll
2017-03-16 08:46:23 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2017-03-16 08:46:22 ----A---- C:\WINDOWS\HelpPane.exe
2017-03-16 08:46:21 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2017-03-16 08:46:21 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2017-03-16 08:46:21 ----A---- C:\WINDOWS\system32\werconcpl.dll
2017-03-16 08:46:21 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2017-03-16 08:46:20 ----A---- C:\WINDOWS\system32\XboxNetApiSvc.dll
2017-03-16 08:46:20 ----A---- C:\WINDOWS\system32\SettingSync.dll
2017-03-16 08:46:20 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2017-03-16 08:46:20 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2017-03-16 08:46:20 ----A---- C:\WINDOWS\system32\DMRServer.dll
2017-03-16 08:46:19 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2017-03-16 08:46:19 ----A---- C:\WINDOWS\system32\SHCore.dll
2017-03-16 08:46:19 ----A---- C:\WINDOWS\system32\quartz.dll
2017-03-16 08:46:18 ----A---- C:\WINDOWS\system32\WorkFoldersGPExt.dll
2017-03-16 08:46:18 ----A---- C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2017-03-16 08:46:18 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2017-03-16 08:46:17 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-03-16 08:46:16 ----A---- C:\WINDOWS\system32\msftedit.dll
2017-03-16 08:46:15 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-03-16 08:46:14 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-03-16 08:46:14 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2017-03-16 08:46:14 ----A---- C:\WINDOWS\system32\RDXService.dll
2017-03-16 08:46:13 ----A---- C:\WINDOWS\system32\wlidprov.dll
2017-03-16 08:46:13 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2017-03-16 08:46:13 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2017-03-16 08:46:13 ----A---- C:\WINDOWS\system32\evr.dll
2017-03-16 08:46:12 ----A---- C:\WINDOWS\system32\IPHLPAPI.DLL
2017-03-16 08:46:12 ----A---- C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2017-03-16 08:46:10 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2017-03-16 08:46:08 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2017-03-16 08:46:08 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-03-16 08:46:08 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2017-03-16 08:46:08 ----A---- C:\WINDOWS\system32\LogonController.dll
2017-03-16 08:46:07 ----A---- C:\WINDOWS\system32\thumbcache.dll
2017-03-16 08:46:07 ----A---- C:\WINDOWS\system32\PhotoScreensaver.scr
2017-03-16 08:46:07 ----A---- C:\WINDOWS\system32\MFPlay.dll
2017-03-16 08:46:07 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2017-03-16 08:46:07 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2017-03-16 08:46:06 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2017-03-16 08:46:05 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-03-16 08:46:05 ----A---- C:\WINDOWS\system32\Tabbtn.dll
2017-03-16 08:46:05 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2017-03-16 08:46:05 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2017-03-16 08:46:04 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2017-03-16 08:46:04 ----A---- C:\WINDOWS\system32\icm32.dll
2017-03-16 08:46:04 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2017-03-16 08:46:04 ----A---- C:\WINDOWS\system32\dialclient.dll
2017-03-16 08:46:03 ----A---- C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2017-03-16 08:46:03 ----A---- C:\WINDOWS\system32\shutdownux.dll
2017-03-16 08:46:03 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2017-03-16 08:46:03 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2017-03-16 08:46:02 ----A---- C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2017-03-16 08:46:02 ----A---- C:\WINDOWS\system32\Geolocation.dll
2017-03-16 08:46:01 ----A---- C:\WINDOWS\SYSWOW64\PhotoScreensaver.scr
2017-03-16 08:46:01 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2017-03-16 08:46:01 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2017-03-16 08:45:59 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2017-03-16 08:45:59 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2017-03-16 08:45:59 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2017-03-16 08:45:59 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2017-03-16 08:45:58 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2017-03-16 08:45:58 ----A---- C:\WINDOWS\system32\WorkFolders.exe
2017-03-16 08:45:58 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-03-16 08:45:57 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2017-03-16 08:45:57 ----A---- C:\WINDOWS\system32\BrowserSettingSync.dll
2017-03-16 08:45:56 ----A---- C:\WINDOWS\system32\TokenBrokerCookies.exe
2017-03-16 08:45:56 ----A---- C:\WINDOWS\system32\tbauth.dll
2017-03-16 08:45:56 ----A---- C:\WINDOWS\system32\fhcfg.dll
2017-03-16 08:45:55 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2017-03-16 08:45:55 ----A---- C:\WINDOWS\SYSWOW64\indexeddbserver.dll
2017-03-16 08:45:55 ----A---- C:\WINDOWS\system32\indexeddbserver.dll
2017-03-16 08:45:55 ----A---- C:\WINDOWS\system32\CameraCaptureUI.dll
2017-03-16 08:45:55 ----A---- C:\WINDOWS\system32\aadtb.dll
2017-03-16 08:45:54 ----A---- C:\WINDOWS\system32\NaturalLanguage6.dll
2017-03-16 08:45:54 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2017-03-16 08:45:53 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2017-03-16 08:45:52 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2017-03-16 08:45:52 ----A---- C:\WINDOWS\system32\Windows.Networking.HostName.dll
2017-03-16 08:45:52 ----A---- C:\WINDOWS\system32\ddrawex.dll
2017-03-16 08:45:51 ----A---- C:\WINDOWS\system32\ddraw.dll
2017-03-16 08:45:39 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-03-16 08:45:37 ----A---- C:\WINDOWS\system32\twinui.dll
2017-03-16 08:45:37 ----A---- C:\WINDOWS\system32\dbgeng.dll
2017-03-16 08:45:36 ----A---- C:\WINDOWS\SYSWOW64\aepic.dll
2017-03-16 08:45:36 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2017-03-16 08:45:36 ----A---- C:\WINDOWS\system32\appraiser.dll
2017-03-16 08:45:36 ----A---- C:\WINDOWS\system32\aepic.dll
2017-03-16 08:45:36 ----A---- C:\WINDOWS\system32\aeinv.dll
2017-03-16 08:45:35 ----A---- C:\WINDOWS\explorer.exe
2017-03-16 08:45:34 ----A---- C:\WINDOWS\system32\mispace.dll
2017-03-16 08:45:34 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2017-03-16 08:45:34 ----A---- C:\WINDOWS\system32\bisrv.dll
2017-03-16 08:45:33 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-03-16 08:45:33 ----A---- C:\WINDOWS\system32\msxml6.dll
2017-03-16 08:45:33 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-03-16 08:45:32 ----A---- C:\WINDOWS\system32\wsp_health.dll
2017-03-16 08:45:32 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-03-16 08:45:32 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2017-03-16 08:45:31 ----A---- C:\WINDOWS\system32\storagewmi.dll
2017-03-16 08:45:31 ----A---- C:\WINDOWS\system32\msctf.dll
2017-03-16 08:45:31 ----A---- C:\WINDOWS\system32\devinv.dll
2017-03-16 08:45:30 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-03-16 08:45:30 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2017-03-16 08:45:30 ----A---- C:\WINDOWS\system32\AppContracts.dll
2017-03-16 08:45:29 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2017-03-16 08:45:29 ----A---- C:\WINDOWS\system32\generaltel.dll
2017-03-16 08:45:29 ----A---- C:\WINDOWS\system32\EnterpriseAPNCsp.dll
2017-03-16 08:45:29 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2017-03-16 08:45:29 ----A---- C:\WINDOWS\system32\dcntel.dll
2017-03-16 08:45:29 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2017-03-16 08:45:29 ----A---- C:\WINDOWS\system32\CspCellularSettings.dll
2017-03-16 08:45:29 ----A---- C:\WINDOWS\system32\CfgSPCellular.dll
2017-03-16 08:45:28 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2017-03-16 08:45:27 ----A---- C:\WINDOWS\system32\winload.exe
2017-03-16 08:45:26 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2017-03-16 08:45:26 ----A---- C:\WINDOWS\system32\invagent.dll
2017-03-16 08:45:26 ----A---- C:\WINDOWS\system32\clusapi.dll
2017-03-16 08:45:25 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2017-03-16 08:45:25 ----A---- C:\WINDOWS\system32\gdi32full.dll
2017-03-16 08:45:23 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2017-03-16 08:45:22 ----A---- C:\WINDOWS\system32\winresume.exe
2017-03-16 08:45:22 ----A---- C:\WINDOWS\system32\ReAgent.dll
2017-03-16 08:45:21 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-03-16 08:45:21 ----A---- C:\WINDOWS\system32\resutils.dll
2017-03-16 08:45:20 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-03-16 08:45:20 ----A---- C:\WINDOWS\system32\twinapi.dll
2017-03-16 08:45:20 ----A---- C:\WINDOWS\system32\hvloader.exe
2017-03-16 08:45:20 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2017-03-16 08:45:19 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2017-03-16 08:45:19 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2017-03-16 08:45:19 ----A---- C:\WINDOWS\system32\imapi2fs.dll
2017-03-16 08:45:19 ----A---- C:\WINDOWS\system32\gameux.dll
2017-03-16 08:45:18 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2017-03-16 08:45:18 ----A---- C:\WINDOWS\system32\wer.dll
2017-03-16 08:45:18 ----A---- C:\WINDOWS\system32\uReFS.dll
2017-03-16 08:45:17 ----A---- C:\WINDOWS\system32\WinSetupUI.dll
2017-03-16 08:45:17 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2017-03-16 08:45:17 ----A---- C:\WINDOWS\system32\sppobjs.dll
2017-03-16 08:45:17 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-03-16 08:45:17 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2017-03-16 08:45:16 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2017-03-16 08:45:16 ----A---- C:\WINDOWS\system32\atmfd.dll
2017-03-16 08:45:15 ----A---- C:\WINDOWS\system32\wintrust.dll
2017-03-16 08:45:15 ----A---- C:\WINDOWS\system32\themecpl.dll
2017-03-16 08:45:15 ----A---- C:\WINDOWS\system32\acmigration.dll
2017-03-16 08:45:14 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2017-03-16 08:45:14 ----A---- C:\WINDOWS\system32\ubpm.dll
2017-03-16 08:45:14 ----A---- C:\WINDOWS\system32\authui.dll
2017-03-16 08:45:14 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-03-16 08:45:14 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2017-03-16 08:45:13 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-03-16 08:45:13 ----A---- C:\WINDOWS\system32\policymanager.dll
2017-03-16 08:45:13 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2017-03-16 08:45:12 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2017-03-16 08:45:12 ----A---- C:\WINDOWS\system32\bootux.dll
2017-03-16 08:45:11 ----A---- C:\WINDOWS\system32\Windows.Gaming.Input.dll
2017-03-16 08:45:11 ----A---- C:\WINDOWS\system32\reseteng.dll
2017-03-16 08:45:11 ----A---- C:\WINDOWS\system32\GamePanel.exe
2017-03-16 08:45:11 ----A---- C:\WINDOWS\system32\daxexec.dll
2017-03-16 08:45:11 ----A---- C:\WINDOWS\system32\ci.dll
2017-03-16 08:45:11 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-03-16 08:45:10 ----A---- C:\WINDOWS\system32\winhttp.dll
2017-03-16 08:45:10 ----A---- C:\WINDOWS\system32\stobject.dll
2017-03-16 08:45:10 ----A---- C:\WINDOWS\system32\dui70.dll
2017-03-16 08:45:09 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2017-03-16 08:45:09 ----A---- C:\WINDOWS\system32\PCPTpm12.dll
2017-03-16 08:45:09 ----A---- C:\WINDOWS\system32\icsvcext.dll
2017-03-16 08:45:08 ----A---- C:\WINDOWS\system32\VSSVC.exe
2017-03-16 08:45:08 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2017-03-16 08:45:08 ----A---- C:\WINDOWS\system32\DXP.dll
2017-03-16 08:45:07 ----A---- C:\WINDOWS\system32\wsp_sr.dll
2017-03-16 08:45:07 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2017-03-16 08:45:07 ----A---- C:\WINDOWS\system32\SpaceAgent.exe
2017-03-16 08:45:07 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2017-03-16 08:45:06 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2017-03-16 08:45:06 ----A---- C:\WINDOWS\system32\drivers\vmbkmcl.sys
2017-03-16 08:45:05 ----A---- C:\WINDOWS\system32\vssapi.dll
2017-03-16 08:45:05 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2017-03-16 08:45:05 ----A---- C:\WINDOWS\system32\combase.dll
2017-03-16 08:45:05 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2017-03-16 08:45:05 ----A---- C:\WINDOWS\system32\basecsp.dll
2017-03-16 08:45:04 ----A---- C:\WINDOWS\system32\systemreset.exe
2017-03-16 08:45:04 ----A---- C:\WINDOWS\system32\sud.dll
2017-03-16 08:45:04 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-03-16 08:45:04 ----A---- C:\WINDOWS\system32\icfupgd.dll
2017-03-16 08:45:04 ----A---- C:\WINDOWS\system32\CompPkgSup.dll
2017-03-16 08:45:04 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2017-03-16 08:45:03 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2017-03-16 08:45:03 ----A---- C:\WINDOWS\system32\WinTypes.dll
2017-03-16 08:45:03 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2017-03-16 08:45:03 ----A---- C:\WINDOWS\system32\certprop.dll
2017-03-16 08:45:02 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2017-03-16 08:45:02 ----A---- C:\WINDOWS\system32\gpapi.dll
2017-03-16 08:45:02 ----A---- C:\WINDOWS\system32\drivers\hvsocket.sys
2017-03-16 08:45:02 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2017-03-16 08:45:02 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2017-03-16 08:45:02 ----A---- C:\WINDOWS\system32\CloudExperienceHostUser.dll
2017-03-16 08:45:01 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2017-03-16 08:45:01 ----A---- C:\WINDOWS\system32\wbengine.exe
2017-03-16 08:45:01 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.dll
2017-03-16 08:45:01 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-03-16 08:45:01 ----A---- C:\WINDOWS\system32\ShareHost.dll
2017-03-16 08:45:01 ----A---- C:\WINDOWS\system32\input.dll
2017-03-16 08:45:01 ----A---- C:\WINDOWS\system32\drivers\vmbkmclr.sys
2017-03-16 08:45:00 ----A---- C:\WINDOWS\system32\netiohlp.dll
2017-03-16 08:45:00 ----A---- C:\WINDOWS\system32\hvix64.exe
2017-03-16 08:45:00 ----A---- C:\WINDOWS\system32\hvax64.exe
2017-03-16 08:45:00 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2017-03-16 08:45:00 ----A---- C:\WINDOWS\system32\AudioSes.dll
2017-03-16 08:44:59 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2017-03-16 08:44:59 ----A---- C:\WINDOWS\system32\spaceman.exe
2017-03-16 08:44:59 ----A---- C:\WINDOWS\system32\scksp.dll
2017-03-16 08:44:59 ----A---- C:\WINDOWS\system32\CryptoWinRT.dll
2017-03-16 08:44:58 ----A---- C:\WINDOWS\system32\Windows.System.SystemManagement.dll
2017-03-16 08:44:58 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2017-03-16 08:44:58 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2017-03-16 08:44:58 ----A---- C:\WINDOWS\system32\appinfo.dll
2017-03-16 08:44:57 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-03-16 08:44:57 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2017-03-16 08:44:57 ----A---- C:\WINDOWS\system32\tabcal.exe
2017-03-16 08:44:57 ----A---- C:\WINDOWS\system32\gpsvc.dll
2017-03-16 08:44:57 ----A---- C:\WINDOWS\system32\Family.SyncEngine.dll
2017-03-16 08:44:56 ----A---- C:\WINDOWS\system32\Windows.Devices.Radios.dll
2017-03-16 08:44:56 ----A---- C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-03-16 08:44:56 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2017-03-16 08:44:56 ----A---- C:\WINDOWS\system32\hgcpl.dll
2017-03-16 08:44:56 ----A---- C:\WINDOWS\system32\ApplicationFrame.dll
2017-03-16 08:44:55 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2017-03-16 08:44:55 ----A---- C:\WINDOWS\system32\msutb.dll
2017-03-16 08:44:55 ----A---- C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
2017-03-16 08:44:55 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-03-16 08:44:54 ----A---- C:\WINDOWS\system32\wups.dll
2017-03-16 08:44:54 ----A---- C:\WINDOWS\system32\MultiDigiMon.exe
2017-03-16 08:44:53 ----A---- C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-03-16 08:44:52 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-03-16 08:44:52 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-03-16 08:44:52 ----A---- C:\WINDOWS\system32\vaultcli.dll
2017-03-16 08:44:52 ----A---- C:\WINDOWS\system32\BluetoothDesktopHandlers.dll
2017-03-16 08:44:52 ----A---- C:\WINDOWS\regedit.exe
2017-03-16 08:44:51 ----A---- C:\WINDOWS\system32\XInputUap.dll
2017-03-16 08:44:51 ----A---- C:\WINDOWS\system32\werui.dll
2017-03-16 08:44:51 ----A---- C:\WINDOWS\system32\oleacc.dll
2017-03-16 08:44:50 ----A---- C:\WINDOWS\system32\vds.exe
2017-03-16 08:44:50 ----A---- C:\WINDOWS\system32\mscandui.dll
2017-03-16 08:44:49 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-03-16 08:44:49 ----A---- C:\WINDOWS\system32\mspaint.exe
2017-03-16 08:44:49 ----A---- C:\WINDOWS\system32\ErrorDetails.dll
2017-03-16 08:44:49 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2017-03-16 08:44:48 ----A---- C:\WINDOWS\system32\winsrv.dll
2017-03-16 08:44:48 ----A---- C:\WINDOWS\system32\rascustom.dll
2017-03-16 08:44:48 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2017-03-16 08:44:47 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-03-16 08:44:47 ----A---- C:\WINDOWS\system32\msctfui.dll
2017-03-16 08:44:47 ----A---- C:\WINDOWS\system32\apprepsync.dll
2017-03-16 08:44:47 ----A---- C:\WINDOWS\system32\apprepapi.dll
2017-03-16 08:44:46 ----A---- C:\WINDOWS\system32\msctfp.dll
2017-03-16 08:44:46 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2017-03-16 08:44:46 ----A---- C:\WINDOWS\system32\GamePanelExternalHook.dll
2017-03-16 08:44:45 ----A---- C:\WINDOWS\system32\cdp.dll
2017-03-16 08:44:41 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2017-03-16 08:44:41 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2017-03-16 08:43:37 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSetup.exe

====== List of files/folders modified in the last 1 month ======

2017-04-09 00:27:13 ----RD---- C:\Program Files
2017-04-09 00:26:55 ----D---- C:\WINDOWS\Prefetch
2017-04-09 00:26:35 ----D---- C:\WINDOWS\Temp
2017-04-09 00:16:46 ----D---- C:\ProgramData\MFAData
2017-04-09 00:10:29 ----D---- C:\WINDOWS\system32\SleepStudy
2017-04-09 00:07:04 ----D---- C:\WINDOWS\AppReadiness
2017-04-09 00:06:36 ----D---- C:\WINDOWS\system32\sru
2017-04-07 15:07:14 ----D---- C:\SYSTEM
2017-04-07 15:06:00 ----AD---- C:\Premier
2017-04-07 09:52:34 ----RD---- C:\WINDOWS\Microsoft.NET
2017-04-07 07:37:19 ----D---- C:\CSOB BB24 CZ
2017-04-07 07:06:02 ----HD---- C:\Program Files\WindowsApps
2017-04-05 10:06:48 ----SHD---- C:\System Volume Information
2017-04-05 08:07:34 ----RD---- C:\Program Files (x86)
2017-04-05 07:34:30 ----D---- C:\WINDOWS\system32\Tasks
2017-04-05 06:48:21 ----SHD---- C:\$Recycle.Bin
2017-04-03 08:42:50 ----HD---- C:\ProgramData
2017-04-03 08:42:24 ----RD---- C:\Users
2017-04-03 00:12:25 ----D---- C:\WINDOWS\System32
2017-04-03 00:12:25 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-04-01 21:44:35 ----SHD---- C:\WINDOWS\Installer
2017-03-30 19:56:38 ----AD---- C:\FORM studio
2017-03-30 10:07:12 ----D---- C:\WINDOWS\system32\config
2017-03-29 13:57:41 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-03-29 13:57:41 ----AD---- C:\Program Files\Mozilla Firefox
2017-03-27 09:25:03 ----D---- C:\WINDOWS\system32\catroot2
2017-03-25 12:02:50 ----D---- C:\WINDOWS\Tasks
2017-03-20 10:19:41 ----D---- C:\WINDOWS\rescache
2017-03-17 09:56:43 ----D---- C:\WINDOWS\system32\DriverStore
2017-03-17 09:56:41 ----D---- C:\WINDOWS\WinSxS
2017-03-17 09:27:33 ----RSD---- C:\WINDOWS\assembly
2017-03-17 07:56:31 ----D---- C:\WINDOWS\CbsTemp
2017-03-17 07:56:29 ----D---- C:\WINDOWS\system32\appraiser
2017-03-17 07:56:19 ----AD---- C:\WINDOWS\SysWOW64
2017-03-17 07:44:36 ----D---- C:\WINDOWS\INF
2017-03-17 07:43:45 ----D---- C:\WINDOWS\system32\drivers
2017-03-16 16:17:16 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-CS
2017-03-16 16:17:15 ----D---- C:\WINDOWS\SYSWOW64\setup
2017-03-16 16:17:15 ----D---- C:\WINDOWS\SYSWOW64\migration
2017-03-16 16:17:14 ----SD---- C:\WINDOWS\SYSWOW64\F12
2017-03-16 16:17:14 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-03-16 16:17:14 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2017-03-16 16:16:44 ----D---- C:\WINDOWS\system32\wbem
2017-03-16 16:16:44 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2017-03-16 16:16:43 ----D---- C:\WINDOWS\system32\setup
2017-03-16 16:16:43 ----D---- C:\WINDOWS\system32\oobe
2017-03-16 16:16:43 ----D---- C:\WINDOWS\system32\migration
2017-03-16 16:16:41 ----SD---- C:\WINDOWS\system32\F12
2017-03-16 16:16:40 ----D---- C:\WINDOWS\system32\en-US
2017-03-16 16:16:40 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2017-03-16 16:16:40 ----D---- C:\WINDOWS\system32\cs-CZ
2017-03-16 16:16:40 ----D---- C:\WINDOWS\system32\Boot
2017-03-16 16:16:11 ----D---- C:\WINDOWS\ShellExperiences
2017-03-16 16:16:10 ----RD---- C:\WINDOWS\PrintDialog
2017-03-16 16:16:08 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-03-16 16:16:05 ----D---- C:\WINDOWS\bcastdvr
2017-03-16 16:16:05 ----D---- C:\WINDOWS\AppPatch
2017-03-16 16:16:05 ----D---- C:\Windows
2017-03-16 16:16:04 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-03-16 16:16:04 ----D---- C:\Program Files (x86)\Windows Mail
2017-03-16 16:16:04 ----D---- C:\Program Files (x86)\Windows Defender
2017-03-16 16:16:04 ----D---- C:\Program Files (x86)\Internet Explorer
2017-03-16 16:16:03 ----RD---- C:\Program Files\Windows Defender
2017-03-16 16:16:03 ----D---- C:\Program Files\Windows Photo Viewer
2017-03-16 16:16:03 ----D---- C:\Program Files\Windows Mail
2017-03-16 16:16:02 ----D---- C:\Program Files\Internet Explorer
2017-03-16 09:27:34 ----D---- C:\WINDOWS\system32\MRT
2017-03-16 09:22:51 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-03-14 07:59:51 ----D---- C:\WINDOWS\LiveKernelReports
2017-03-10 07:17:56 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

File C:\WINDOWS\system32\winlogon.exe is digitally signed
File C:\WINDOWS\system32\wininit.exe is digitally signed
File C:\WINDOWS\explorer.exe is digitally signed
File C:\WINDOWS\SysWOW64\explorer.exe is digitally signed
File C:\WINDOWS\system32\svchost.exe is digitally signed
File C:\WINDOWS\SysWOW64\svchost.exe is digitally signed
File C:\WINDOWS\system32\services.exe is digitally signed
File C:\WINDOWS\system32\User32.dll is digitally signed
File C:\WINDOWS\SysWOW64\User32.dll is digitally signed
File C:\WINDOWS\system32\userinit.exe is digitally signed
File C:\WINDOWS\SysWOW64\userinit.exe is digitally signed
File C:\WINDOWS\system32\rpcss.dll is digitally signed
File C:\WINDOWS\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2016-10-05 267008]
R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2016-02-16 360736]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2016-09-26 254208]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2016-06-01 52992]
R0 avguniva;AVG Universal Driver; C:\WINDOWS\system32\DRIVERS\avguniva.sys [2016-06-20 77056]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\WINDOWS\system32\drivers\iorate.sys [2016-11-02 48992]
R0 MBI;@oem4.inf,%MBI.SVCDESC%;Intel(R) Sideband Fabric Device Service; C:\WINDOWS\System32\drivers\MBI.sys [2014-01-23 29464]
R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2016-05-13 163072]
R1 Avgfwfd;@oem28.inf,%AvgfwfdService_Desc%;AVG network filter service; C:\WINDOWS\system32\DRIVERS\avgfwd6a.sys [2016-10-23 73992]
R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2017-02-20 313088]
R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2016-11-30 298240]
R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2016-08-04 313096]
R1 CLVirtualDrive;CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [2013-03-05 91712]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2016-07-16 70144]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2016-10-11 114176]
R3 BthLEEnum;@BthLEEnum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2016-10-11 249856]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2016-10-05 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2016-10-11 84992]
R3 GPIO;@oem14.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpioe.sys [2013-11-11 31232]
R3 iwdbus;@oem34.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-12-01 38896]
R3 netr28x;@oem0.inf,%Generic.Service.DispName%;Ralink 802.11n Extensible Wireless Driver; C:\WINDOWS\system32\DRIVERS\netr28x.sys [2015-06-12 2554528]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2016-07-16 183808]
R3 RSP2STOR;@oem32.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [2015-06-05 310528]
R3 rtbth;@oem16.inf,%General.Service.DispName%;RTBTH Bluetooth Device Driver; C:\WINDOWS\System32\drivers\rtbth.sys [2015-06-03 1219200]
R3 RTL8168;@oem13.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\System32\drivers\Rt630x64.sys [2014-01-28 839896]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-07-17 42696]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2016-07-16 12800]
R3 SynTP;@oem43.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2016-10-05 872024]
S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2016-01-07 21632]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2016-10-05 64352]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2016-07-16 88416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2016-11-11 967168]
S3 GemCCID;GemCCID; C:\WINDOWS\system32\DRIVERS\GemCCID.sys [2015-07-10 139632]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2016-10-11 73568]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-11-06 632168]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 intaud_WaveExtensible;@oem17.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-12-01 50160]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2016-07-16 120320]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\WINDOWS\System32\drivers\scmdisk0101.sys [2016-07-16 123904]
S3 SmbDrv;SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [2013-12-13 29936]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; %windir%\system32\svchost.exe -k apphost;"ServiceDll" = %windir%\system32\inetsrv\apphostsvc.dll
R2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\Av\avgfwsa.exe [2017-03-23 1824184]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [2017-03-23 5334432]
R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2016-12-06 1146128]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [2017-03-23 729048]
R2 CDPUserSvc_611f042;CDPUserSvc_611f042; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2016-12-07 31776]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [2013-10-08 1039160]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2016-05-03 337888]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [2013-07-01 733696]
R2 OneSyncSvc_611f042;Hostitel synchronizace_611f042; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 PDFProFiltSrvPP;PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [2010-03-09 144672]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2016-10-05 269400]
R3 BrYNSvc;BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [2012-06-05 266240]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2016-05-25 43696]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2015-04-28 1102472]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 PimIndexMaintenanceSvc_611f042;Data kontaktů_611f042; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\RMapi.dll
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\TimeBrokerServer.dll
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = %SystemRoot%\System32\CDPUserSvc.dll
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-07-16 52920]
S3 AvgAMPS;AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [2017-03-23 1002552]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll" = %SystemRoot%\system32\FrameServer.dll
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\hvhostsvc.dll
S3 I.CA Maintenance Service;I.CA Maintenance Service; C:\Program Files (x86)\I.CA\I.CA Maintenance\ICAMaintenance.exe [2016-10-07 272120]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-07-01 822232]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\irmon.dll
S3 MessagingService_611f042;Služba zasílání zpráv_611f042; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-03-29 196040]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; %SystemRoot%\System32\svchost.exe -k netsvcs;"ServiceDll" = %systemroot%\system32\Windows.SharedPC.AccountManager.dll

-----------------EOF-----------------

#4 Příspěvek od **JaRon** » 10 dub 2017 07:25

ahoj,
podla navodu kolegu https://forum.viry.cz/viewtopic.php?f=1 ... e#p1478603
vykonaj oba kroky

VIRY.CZ

Firefox nahodne otevira ruzne nevhodne stranky

Firefox nahodne otevira ruzne nevhodne stranky

Re: Firefox nahodne otevira ruzne nevhodne stranky

Re: Firefox nahodne otevira ruzne nevhodne stranky

Re: Firefox nahodne otevira ruzne nevhodne stranky