Prosim o kontrolu logu
Napsal: 04 dub 2016 09:41
Lsass vytezuje procesor, ntb se sem tam vypne cca 2/tyden- restart a zase jede
Dekuji
Sonny
Logfile of random's system information tool 1.10 (written by random/random)
Run by Stanislav at 2016-04-04 10:08:45
Microsoft Windows 10 Pro Insider Preview
System drive C: has 26 GB (52%) free of 51 GB
Total RAM: 8088 MB (76% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:08:56, on 04.04.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14291.1001)
Boot mode: Normal
Running processes:
C:\Program Files\CCleaner\CCleaner.exe
C:\Users\Stanislav\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Program Files (x86)\GlassWire\GlassWire.exe
C:\Users\Stanislav\AppData\Local\MEGAsync\MEGAsync.exe
C:\Program Files (x86)\GlassWire\GWIdlMon.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.14.13007.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Users\Stanislav\AppData\Local\RadioSure\RadioSure.exe
C:\Program Files\trend micro\Stanislav.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkI ... id=UE01DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll
O4 - HKLM\..\Run: [KeePass 2 PreLoad] "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe" --preload
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Stanislav\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [BlackTop] C:\Program Files\BlackTop\BlackTop.exe
O4 - HKCU\..\Run: [WiFi Guard] "C:\Program Files\SoftPerfect WiFi Guard\WiFiGuard.exe" /hide
O4 - HKCU\..\Run: [f.lux] "C:\Users\Stanislav\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - HKCU\..\Run: [GlassWire] "C:\Program Files (x86)\GlassWire\glasswire.exe" -hide
O4 - HKCU\..\Run: [KeePass Password Safe 2] "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe"
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: MEGAsync.lnk = Stanislav\AppData\Local\MEGAsync\MEGAsync.exe
O4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files (x86)\Bonjour\ExplorerPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: @oem6.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GlassWire Control Service (GlassWire) - SecureMix LLC - C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @oem34.inf,%ibm.svcDesc0%;Lenovo PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Maxthon Core Update Service (MaxthonUpdateSvc) - Maxthon - C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NitroPDFReaderDriverCreatorReadSpool3 (NitroReaderDriverReadSpool3) - Nitro PDF Software - C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
--
End of file - 8782 bytes
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\atiesrxx.exe
atieclxx
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-e20fc738-5e34-41e1-b9aa-f1253ff9d69d -SystemEventPortName:HostProcess-a6aa73be-ece4-4df7-a198-6f940b9295a9 -IoCancelEventPortName:HostProcess-ecc2adfc-5129-4a0a-b95e-1f2ed956298e -NonStateChangingEventPortName:HostProcess-399f1d49-fe2c-438a-8cec-4df8e40f6412 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a77c7a87-6ef4-4943-a75b-ef78e6425e70 -DeviceGroupId:
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-36be023b-f559-4608-989a-4123ad487b33 -SystemEventPortName:HostProcess-a33176e5-36db-4309-8263-2b55365edfcd -IoCancelEventPortName:HostProcess-91606dc3-8aa0-4dce-9f61-52979e6aff2d -NonStateChangingEventPortName:HostProcess-03236712-ae4a-499d-8a29-0f04953440fe -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:18efa2fe-241a-4109-9764-eee5b0b35860 -DeviceGroupId:
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-13940384-4626-4fa5-915f-0519b515313d -SystemEventPortName:HostProcess-a7d0743f-debd-44d2-8cac-bdc99ce5aac2 -IoCancelEventPortName:HostProcess-2effe2c9-aa00-4025-b303-65dd023112e0 -NonStateChangingEventPortName:HostProcess-775cacf7-e9cb-43dd-86b8-c12f5f4fdfb5 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:74ea9486-7426-4f45-bece-bc6cec9025ff -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\System32\spoolsv.exe
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe"
C:\WINDOWS\SysWOW64\svchost.exe -k LocalDriverService
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe"
"C:\Program Files (x86)\GlassWire\GWCtlSrv.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1077870916-1689238671-2405686497-10011_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1077870916-1689238671-2405686497-10011 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
C:\WINDOWS\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849}
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files\BlackTop\BlackTop.exe"
"C:\Program Files\SoftPerfect WiFi Guard\WiFiGuard.exe" /hide
"C:\Users\Stanislav\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
"C:\Program Files (x86)\GlassWire\GlassWire.exe" -hide
"C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe"
"C:\Users\Stanislav\AppData\Local\MEGAsync\MEGAsync.exe"
"C:\Program Files (x86)\GlassWire\GWIdlMon.exe" --cookie 4471060974603 --port 26887
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Rainmeter\Rainmeter.exe"
C:\WINDOWS\system32\rundll32.exe dfshim.dll,ShOpenVerbShortcut C:\Users\Stanislav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo\Lenovo Service Bridge.appref-ms
"fontdrvhost.exe"
"C:\Jts\tws.exe"
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.14.13007.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Users\Stanislav\AppData\Local\RadioSure\RadioSure.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\wermgr.exe -upload
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Users\Stanislav\Downloads\RSITx64.exe"
taskhostw.exe TpmTasks
======Scheduled tasks folder======
C:\WINDOWS\tasks\CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}.job - C:\ProgramData\cis21A0.exe --PostUninstall {81EFDD93-DBBE-415B-BE6E-49B9664E3E82}
C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements (1).job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements (2).job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements (3).job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements (4).job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\Stanislav\AppData\Roaming\Mozilla\Firefox\Profiles\uppezppw.dev-edition-default
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.65.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.65.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nitropdf.com/NitroPDF]
"Description"=NitroPDF Web Browser Plugin
"Path"=C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-26 460384]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-26 172640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2016-03-23 1610936]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2016-02-14 2963184]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Stanislav\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-04-01 551104]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-03-25 8686296]
"BlackTop"=C:\Program Files\BlackTop\BlackTop.exe [2015-07-14 332288]
"WiFi Guard"=C:\Program Files\SoftPerfect WiFi Guard\WiFiGuard.exe [2016-02-05 4953928]
"f.lux"=C:\Users\Stanislav\AppData\Local\FluxSoftware\Flux\flux.exe [2016-02-01 1017224]
"GlassWire"=C:\Program Files (x86)\GlassWire\glasswire.exe [2016-03-17 10571776]
"KeePass Password Safe 2"=C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2016-03-25 2756672]
"Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [2015-11-20 563416]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"KeePass 2 PreLoad"=C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2016-03-25 2756672]
C:\Users\Stanislav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MEGAsync.lnk - C:\Users\Stanislav\AppData\Local\MEGAsync\MEGAsync.exe
Rainmeter.lnk - C:\Program Files\Rainmeter\Rainmeter.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"DisableCAD"=1
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-04-04 10:08:45 ----D---- C:\rsit
2016-04-04 08:14:46 ----A---- C:\WINDOWS\SYSWOW64\vccorlib120.dll
2016-04-04 08:14:46 ----A---- C:\WINDOWS\SYSWOW64\msvcr120.dll
2016-04-04 08:14:46 ----A---- C:\WINDOWS\SYSWOW64\msvcp120.dll
2016-04-04 08:14:46 ----A---- C:\WINDOWS\system32\vccorlib120.dll
2016-04-04 08:14:46 ----A---- C:\WINDOWS\system32\msvcr120.dll
2016-04-04 08:14:46 ----A---- C:\WINDOWS\system32\msvcp120.dll
2016-04-03 23:53:27 ----D---- C:\Users\Stanislav\AppData\Roaming\Process Hacker 2
2016-04-03 23:52:35 ----D---- C:\Program Files\Process Hacker 2
2016-04-02 10:52:10 ----D---- C:\Users\Stanislav\AppData\Roaming\Google
2016-04-02 10:38:35 ----D---- C:\Program Files (x86)\GUMAD35.tmp
2016-04-02 09:18:46 ----D---- C:\ProgramData\USOShared
2016-04-02 07:43:50 ----D---- C:\WINDOWS\system32\Microsoft
2016-04-02 07:42:05 ----D---- C:\Program Files\Reference Assemblies
2016-04-02 07:42:05 ----D---- C:\Program Files\MSBuild
2016-04-02 07:42:05 ----D---- C:\Program Files (x86)\Reference Assemblies
2016-04-02 07:42:05 ----D---- C:\Program Files (x86)\MSBuild
2016-04-02 07:41:27 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2016-04-02 07:41:27 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2016-04-02 07:41:27 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-04-02 07:41:21 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2016-04-02 07:41:21 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-04-02 07:41:21 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-04-01 22:21:47 ----D---- C:\ProgramData\Microsoft OneDrive
2016-04-01 22:16:53 ----SHD---- C:\ProgramData\Templates
2016-04-01 22:16:53 ----SHD---- C:\ProgramData\Start Menu
2016-04-01 22:16:53 ----SHD---- C:\ProgramData\Documents
2016-04-01 22:16:53 ----SHD---- C:\ProgramData\Desktop
2016-04-01 22:16:53 ----SHD---- C:\ProgramData\Application Data
2016-04-01 22:13:33 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-04-01 22:01:05 ----SD---- C:\Users\Stanislav\AppData\Roaming\Microsoft
2016-04-01 21:57:32 ----AD---- C:\Program Files\Synaptics
2016-04-01 21:56:06 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2016-04-01 21:54:13 ----AS---- C:\WINDOWS\bootstat.dat
2016-04-01 21:53:15 ----D---- C:\WINDOWS\Prefetch
2016-04-01 21:52:52 ----D---- C:\WINDOWS\ServiceProfiles
2016-04-01 21:52:33 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2016-04-01 21:52:19 ----ASH---- C:\swapfile.sys
2016-04-01 21:52:18 ----ASH---- C:\pagefile.sys
2016-04-01 19:57:58 ----A---- C:\WINDOWS\SYSWOW64\mfc71.dll
2016-04-01 19:48:12 ----HD---- C:\$Windows.~GWX
2016-04-01 16:42:22 ----D---- C:\AdwCleaner
2016-04-01 16:22:10 ----HD---- C:\OneDriveTemp
2016-04-01 09:10:25 ----D---- C:\Program Files\trend micro
2016-04-01 08:22:55 ----D---- C:\Users\Stanislav\AppData\Roaming\YoWindow
2016-03-31 19:17:30 ----D---- C:\ProgramData\Google
2016-03-31 19:17:27 ----D---- C:\Program Files\Google
2016-03-31 19:17:14 ----D---- C:\Program Files (x86)\Google
2016-03-26 22:02:21 ----D---- C:\Users\Stanislav\AppData\Roaming\Lunascape
2016-03-26 21:53:19 ----D---- C:\Program Files (x86)\Lunascape
2016-03-25 22:50:25 ----D---- C:\Users\Stanislav\AppData\Roaming\KeePass
2016-03-25 22:49:43 ----AD---- C:\Program Files (x86)\KeePass Password Safe 2
2016-03-25 18:21:13 ----A---- C:\WINDOWS\WiseHDInfo64.dll
2016-03-25 18:20:59 ----D---- C:\Program Files (x86)\Wise
2016-03-25 17:48:39 ----D---- C:\Users\Stanislav\AppData\Roaming\HandBrake Team
2016-03-25 17:48:37 ----D---- C:\Users\Stanislav\AppData\Roaming\HandBrake
2016-03-25 17:48:19 ----D---- C:\Program Files\Handbrake
2016-03-25 13:13:52 ----D---- C:\ESD
2016-03-21 09:45:20 ----A---- C:\WINDOWS\system32\drivers\BazisPortableCDBus.sys
2016-03-19 17:41:47 ----D---- C:\Program Files (x86)\Seznam.cz
2016-03-18 10:50:23 ----D---- C:\Users\Stanislav\AppData\Roaming\LibreOffice
2016-03-17 09:02:49 ----D---- C:\Users\Stanislav\AppData\Roaming\HEXelon
2016-03-17 09:01:30 ----RD---- C:\Program Files (x86)\TC UP
2016-03-17 08:24:54 ----A---- C:\WINDOWS\system32\drivers\gwdrv.sys
2016-03-17 08:24:47 ----D---- C:\ProgramData\GlassWire
2016-03-17 08:24:44 ----D---- C:\Program Files (x86)\GlassWire
2016-03-15 16:33:19 ----A---- C:\WINDOWS\SYSWOW64\opencl.dll
2016-03-15 16:33:16 ----SHD---- C:\WINDOWS\BitLockerDiscoveryVolumeContents
2016-03-15 16:33:16 ----D---- C:\WINDOWS\ShellNew
2016-03-15 16:33:16 ----D---- C:\Program Files\Windows Journal
2016-03-15 16:23:45 ----D---- C:\WINDOWS\OCR
2016-03-15 16:23:21 ----D---- C:\WINDOWS\SKB
2016-03-15 16:22:55 ----D---- C:\WINDOWS\SYSWOW64\winrm
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\WCN
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\sysprep
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\en
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-US
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\0409
2016-03-15 16:22:54 ----D---- C:\WINDOWS\system32\winrm
2016-03-15 16:22:54 ----D---- C:\WINDOWS\system32\WCN
2016-03-15 16:22:53 ----D---- C:\WINDOWS\system32\slmgr
2016-03-15 16:22:53 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2016-03-15 16:22:52 ----D---- C:\WINDOWS\system32\en
2016-03-15 16:22:50 ----D---- C:\WINDOWS\system32\drivers\en-US
2016-03-15 16:22:50 ----D---- C:\WINDOWS\system32\0409
2016-03-15 16:22:50 ----D---- C:\WINDOWS\en-US
2016-03-15 16:22:50 ----D---- C:\WINDOWS\DigitalLocker
2016-03-15 14:54:39 ----D---- C:\WINDOWS\Setup
2016-03-15 14:54:15 ----A---- C:\WINDOWS\system32\perfi009.dat
2016-03-15 14:54:15 ----A---- C:\WINDOWS\system32\perfd009.dat
2016-03-15 14:54:12 ----A---- C:\WINDOWS\system32\perfh009.dat
2016-03-15 14:54:12 ----A---- C:\WINDOWS\system32\perfc009.dat
2016-03-15 14:53:51 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-03-15 14:50:41 ----A---- C:\WINDOWS\SYSWOW64\NOISE.DAT
2016-03-15 14:50:41 ----A---- C:\WINDOWS\SYSWOW64\msclmd.dll
2016-03-15 14:50:40 ----A---- C:\WINDOWS\SYSWOW64\dssec.dat
2016-03-15 14:50:33 ----A---- C:\WINDOWS\system32\NOISE.DAT
2016-03-15 14:50:32 ----A---- C:\WINDOWS\system32\msclmd.dll
2016-03-15 14:50:31 ----A---- C:\WINDOWS\system32\dssec.dat
2016-03-15 14:50:25 ----RASH---- C:\WINDOWS\fonts\StaticCache.dat
2016-03-15 14:50:25 ----A---- C:\WINDOWS\fonts\desktop.ini
2016-03-15 14:50:23 ----ASH---- C:\Program Files\desktop.ini
2016-03-15 14:50:23 ----ASH---- C:\Program Files (x86)\desktop.ini
2016-03-15 14:50:17 ----SD---- C:\WINDOWS\SYSWOW64\Nui
2016-03-15 14:50:17 ----SD---- C:\WINDOWS\SYSWOW64\F12
2016-03-15 14:50:17 ----SD---- C:\WINDOWS\SYSWOW64\DiagSvcs
2016-03-15 14:50:17 ----SD---- C:\WINDOWS\SYSWOW64\Configuration
2016-03-15 14:50:17 ----D---- C:\WINDOWS\Web
2016-03-15 14:50:17 ----D---- C:\WINDOWS\Vss
2016-03-15 14:50:17 ----D---- C:\WINDOWS\twain_32
2016-03-15 14:50:17 ----D---- C:\WINDOWS\tracing
2016-03-15 14:50:17 ----D---- C:\WINDOWS\Temp
2016-03-15 14:50:17 ----D---- C:\WINDOWS\Tasks
2016-03-15 14:50:17 ----D---- C:\WINDOWS\TAPI
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\zh-HK
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\WinMetadata
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\WindowsPowerShell
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\wbem
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Tasks
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sru
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-CS
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sppui
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\spp
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Speech_OneCore
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Speech
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\SMI
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\setup
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\restore
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Recovery
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\RasToast
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\ras
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\oobe
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\networklist
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\NDF
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\MUI
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\MsDtc
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\MSDRM
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\MailContactsCalendarSync
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\LogFiles
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Licenses
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Ipmi
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\InstallShield
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\InputMethod
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\IME
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\icsxml
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicyUsers
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicy
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\FxsTmp
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\fr-CA
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\es-MX
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\DriverStore
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\drivers
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\config
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Com
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\catroot
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Bthprops
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\AppLocker
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SystemResources
2016-03-15 14:50:16 ----SD---- C:\WINDOWS\system32\Nui
2016-03-15 14:50:16 ----SD---- C:\WINDOWS\system32\F12
2016-03-15 14:50:16 ----SD---- C:\WINDOWS\system32\dsc
2016-03-15 14:50:16 ----SD---- C:\WINDOWS\system32\DiagSvcs
2016-03-15 14:50:16 ----SD---- C:\WINDOWS\system32\Configuration
2016-03-15 14:50:16 ----RD---- C:\WINDOWS\PurchaseDialog
2016-03-15 14:50:16 ----RD---- C:\WINDOWS\PrintDialog
2016-03-15 14:50:16 ----RD---- C:\WINDOWS\Offline Web Pages
2016-03-15 14:50:16 ----RD---- C:\WINDOWS\MiracastView
2016-03-15 14:50:16 ----D---- C:\WINDOWS\SystemApps
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\zh-TW
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\zh-HK
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\zh-CN
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\WinMetadata
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\winevt
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\WinBioDatabase
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\WDI
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\wbem
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\uk-UA
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\tr-TR
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\th-TH
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Tasks
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sv-SE
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sru
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sppui
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\spp
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\spool
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Speech_OneCore
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Speech
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sl-SI
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sk-SK
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\setup
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\SecureBootUpdates
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ru-RU
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ro-RO
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\restore
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Recovery
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\RasToast
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ras
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\pt-PT
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\pt-BR
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ProximityToast
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\PointOfService
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\pl-PL
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\oobe
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\nl-NL
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\networklist
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\NDF
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\nb-NO
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\MUI
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\MsDtc
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\MSDRM
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\migwiz
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\migration
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\MailContactsCalendarSync
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Macromed
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\lv-LV
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\lt-LT
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\LogFiles
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Licenses
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ko-KR
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ja-jp
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\it-IT
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Ipmi
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\InputMethod
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\inetsrv
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\IME
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\icsxml
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ias
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\hu-HU
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\hr-HR
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\he-IL
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\FxsTmp
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\fr-FR
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\fr-CA
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\fi-FI
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\et-EE
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\es-MX
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\es-ES
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\en-US
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\en-GB
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\el-GR
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\drivers\etc
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\de-DE
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\da-DK
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\cs-CZ
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Com
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\CodeIntegrity
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\catroot2
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Bthprops
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Boot
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\bg-BG
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ar-SA
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\appraiser
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\AppLocker
2016-03-15 14:50:16 ----D---- C:\WINDOWS\System
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Speech_OneCore
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Speech
2016-03-15 14:50:16 ----D---- C:\WINDOWS\schemas
2016-03-15 14:50:16 ----D---- C:\WINDOWS\SchCache
2016-03-15 14:50:16 ----D---- C:\WINDOWS\ShellExperiences
2016-03-15 14:50:16 ----D---- C:\WINDOWS\security
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Resources
2016-03-15 14:50:16 ----D---- C:\WINDOWS\rescache
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Registration
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Provisioning
2016-03-15 14:50:16 ----D---- C:\WINDOWS\PolicyDefinitions
2016-03-15 14:50:16 ----D---- C:\WINDOWS\PLA
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Performance
2016-03-15 14:50:16 ----D---- C:\WINDOWS\ModemLogs
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Migration
2016-03-15 14:50:15 ----SHD---- C:\WINDOWS\Installer
2016-03-15 14:50:15 ----SD---- C:\WINDOWS\Downloaded Program Files
2016-03-15 14:50:15 ----RSD---- C:\WINDOWS\Media
2016-03-15 14:50:15 ----RSD---- C:\WINDOWS\Fonts
2016-03-15 14:50:15 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-03-15 14:50:15 ----RD---- C:\WINDOWS\DesktopTileResources
2016-03-15 14:50:15 ----HD---- C:\WINDOWS\ELAMBKUP
2016-03-15 14:50:15 ----D---- C:\WINDOWS\LiveKernelReports
2016-03-15 14:50:15 ----D---- C:\WINDOWS\L2Schemas
2016-03-15 14:50:15 ----D---- C:\WINDOWS\InputMethod
2016-03-15 14:50:15 ----D---- C:\WINDOWS\InfusedApps
2016-03-15 14:50:15 ----D---- C:\WINDOWS\IME
2016-03-15 14:50:15 ----D---- C:\WINDOWS\Help
2016-03-15 14:50:15 ----D---- C:\WINDOWS\Globalization
2016-03-15 14:50:15 ----D---- C:\WINDOWS\diagnostics
2016-03-15 14:50:15 ----D---- C:\WINDOWS\debug
2016-03-15 14:50:15 ----D---- C:\WINDOWS\Cursors
2016-03-15 14:50:15 ----D---- C:\WINDOWS\Branding
2016-03-15 14:50:15 ----D---- C:\WINDOWS\Boot
2016-03-15 14:50:15 ----D---- C:\WINDOWS\bcastdvr
2016-03-15 14:50:15 ----D---- C:\WINDOWS\AppReadiness
2016-03-15 14:50:15 ----D---- C:\WINDOWS\AppPatch
2016-03-15 14:50:15 ----D---- C:\WINDOWS\appcompat
2016-03-15 14:50:15 ----D---- C:\WINDOWS\addins
2016-03-15 14:50:15 ----D---- C:\ProgramData\USOPrivate
2016-03-15 14:50:15 ----D---- C:\ProgramData\SoftwareDistribution
2016-03-15 14:50:15 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2016-03-15 14:50:14 ----SHD---- C:\Program Files\Windows Sidebar
2016-03-15 14:50:14 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2016-03-15 14:50:14 ----SD---- C:\ProgramData\Microsoft
2016-03-15 14:50:14 ----RD---- C:\WINDOWS\assembly
2016-03-15 14:50:14 ----HD---- C:\ProgramData
2016-03-15 14:50:14 ----HD---- C:\Program Files\WindowsApps
2016-03-15 14:50:14 ----D---- C:\WINDOWS\Microsoft.NET
2016-03-15 14:50:14 ----D---- C:\ProgramData\Comms
2016-03-15 14:50:14 ----D---- C:\Program Files\WindowsPowerShell
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Portable Devices
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Photo Viewer
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows NT
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Multimedia Platform
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Media Player
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Mail
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Defender
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Advanced Threat Protection
2016-03-15 14:50:14 ----D---- C:\Program Files\Internet Explorer
2016-03-15 14:50:14 ----D---- C:\Program Files\Common Files\System
2016-03-15 14:50:14 ----D---- C:\Program Files\Common Files\Services
2016-03-15 14:50:14 ----D---- C:\Program Files\Common Files\microsoft shared
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\WindowsPowerShell
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows NT
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows Media Player
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows Mail
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows Defender
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Microsoft.NET
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-15 14:50:14 ----D---- C:\PerfLogs
2016-03-15 14:49:11 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-03-15 14:49:07 ----D---- C:\WINDOWS\system32\drivers
2016-03-15 14:46:00 ----D---- C:\WINDOWS\INF
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\WPDSp.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\WPDShServiceObj.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\WPDShextAutoplay.exe
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\wpdshext.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\WinFax.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsRaw.txt
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\sxproxy.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\srdelayed.exe
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\spp.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceWiaCompat.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceTypes.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceStatus.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceConnectApi.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceClassExtension.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceApi.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\photowiz.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PhotoScreensaver.scr
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\FXSXP32.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\FXSRESM.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\FXSEXT32.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\FXSCOMEX.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\FXSCOM.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\WinFax.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSUNATD.exe
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSTIFF.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXST30.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSSVC.exe
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSST.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSROUTE.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSRESM.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSMON.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSEVENT.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSCOM.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\blbres.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\blb_ps.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmpshell.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmpps.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmploc.DLL
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmpeffects.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmpdxm.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmerror.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmdmps.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmdmlog.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsRaw.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\unregmp2.exe
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\spwmp.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\mswmdm.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\elshyph.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\dxmasf.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\cewmdm.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\audiodev.dll
2016-03-15 14:43:29 ----A---- C:\WINDOWS\SYSWOW64\msvcr100_clr0400.dll
2016-03-15 14:43:29 ----A---- C:\WINDOWS\SYSWOW64\msvcp120_clr0400.dll
2016-03-15 14:43:29 ----A---- C:\WINDOWS\SYSWOW64\aspnet_counters.dll
2016-03-15 14:43:26 ----A---- C:\WINDOWS\SYSWOW64\msvcr120_clr0400.dll
2016-03-15 14:43:26 ----A---- C:\WINDOWS\SYSWOW64\DscCoreConfProv.dll
2016-03-15 14:43:22 ----A---- C:\WINDOWS\SYSWOW64\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\SYSWOW64\sdchange.exe
2016-03-15 14:43:21 ----A---- C:\WINDOWS\SYSWOW64\raserver.exe
2016-03-15 14:43:21 ----A---- C:\WINDOWS\SYSWOW64\racpldlg.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\SYSWOW64\msra.exe
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\whealogr.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\wclWdi.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\wclUnicode.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\wclSqm.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\wclPowrProf.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\wclEtw.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\wcl.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\mpeval.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\Family.SyncEngine.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\Family.Client.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\Family.Cache.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\Family.Authentication.dll
2016-03-15 14:43:19 ----A---- C:\WINDOWS\system32\mpunits.dll
2016-03-15 14:43:19 ----A---- C:\WINDOWS\system32\DscTimer.dll
2016-03-15 14:43:19 ----A---- C:\WINDOWS\system32\dscproxy.dll
2016-03-15 14:43:19 ----A---- C:\WINDOWS\system32\DscCoreConfProv.dll
2016-03-15 14:43:19 ----A---- C:\WINDOWS\system32\DscCore.dll
2016-03-15 14:43:18 ----A---- C:\WINDOWS\system32\wbengine.exe
2016-03-15 14:43:18 ----A---- C:\WINDOWS\system32\wbadmin.exe
2016-03-15 14:43:18 ----A---- C:\WINDOWS\system32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
2016-03-15 14:43:18 ----A---- C:\WINDOWS\system32\BlbEvents.dll
2016-03-15 14:42:21 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2016-03-15 14:42:21 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2016-03-15 14:42:21 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2016-03-15 14:42:21 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\rdpendp.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\PeerDistSh.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\PeerDist.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\gpscript.exe
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\gpscript.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\gpprefcl.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\appmgmts.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\umrdp.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\manage-bde.wsf
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\jnwmon.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\fvewiz.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\fveprompt.exe
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\fvecpl.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\dfdts.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\BitLockerWizardElev.exe
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\BitLockerWizard.exe
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\BdeSysprep.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\bdechangepin.exe
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\BdeHdCfgLib.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\BdeHdCfg.exe
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\baaupdate.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\XPSSHHDR.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\wmpmde.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\rfxvmt.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\provsvc.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\ms3dthumbnailprovider.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\CameraSettingsUIHost.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\XPSSHHDR.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\srwmi.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\SrTasks.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\srrstr.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\srhelper.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\SrEvents.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\srdelayed.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\srcore.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\srclient.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\rstrui.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\ms3dthumbnailprovider.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\manage-bde.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\fvenotify.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\fvecerts.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\fveapibase.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\drivers\dumpfve.sys
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\WMVCORE.DLL
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\WMNetMgr.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\wmidx.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\WMASF.DLL
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\srchadmin.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\pnrpnsp.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\p2pnetsh.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\P2PGraph.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\P2P.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\msrdc.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\logagent.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\LAPRXY.DLL
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\drttransport.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\drtprov.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\drt.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\asferror.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wsepno.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WPDSp.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WPDShServiceObj.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WPDShextAutoplay.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wpdshext.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wpdbusenum.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wpd_ci.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WofTasks.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmpshell.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmploc.DLL
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmpeffects.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmp.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmerror.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmdmps.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmdmlog.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WindowsCodecsRaw.txt
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WindowsCodecsRaw.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WFSR.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WFS.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\unregmp2.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\spwmp.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\repair-bde.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PortableDeviceWiaCompat.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PortableDeviceTypes.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PortableDeviceStatus.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PortableDeviceConnectApi.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PortableDeviceClassExtension.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PortableDeviceApi.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\photowiz.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PhotoScreensaver.scr
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\mswmdm.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\FXSUTILITY.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\FXSCOVER.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\FXSCOMPOSERES.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\FXSCOMPOSE.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\fveui.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\fveskybackup.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\dxmasf.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\drivers\WpdUpFltr.sys
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\cewmdm.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\bdeunlock.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\BdeUISrv.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\bdeui.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\bdesvc.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\bderepair.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\rtmpltfm.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\rtmpal.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\rtmmvrortc.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\rtmcodecs.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\pngfilt.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\ortcengine.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\mshtmler.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\mshta.exe
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\imgutil.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\Chakrathunk.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\system32\elshyph.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\wextract.exe
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\NetworkCollectionAgent.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\licmgr10.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\inseng.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\iexpress.exe
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\IEAdvpack.dll
2016-03-15 14:42:11 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2016-03-15 14:42:11 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-03-15 14:42:06 ----A---- C:\WINDOWS\system32\msvcr120_clr0400.dll
2016-03-15 14:42:06 ----A---- C:\WINDOWS\system32\aspnet_counters.dll
2016-03-15 14:42:02 ----A---- C:\WINDOWS\system32\msvcr100_clr0400.dll
2016-03-15 14:42:02 ----A---- C:\WINDOWS\system32\msvcp120_clr0400.dll
2016-03-15 14:41:59 ----A---- C:\WINDOWS\SYSWOW64\PresentationHostProxy.dll
2016-03-15 14:41:59 ----A---- C:\WINDOWS\SYSWOW64\PresentationHost.exe
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\UserAccountControlSettings.exe
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\UserAccountControlSettings.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\SmartScreenSettings.exe
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\isoburn.exe
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\hcproviders.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\GameUXLegacyGDFs.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\CredentialUIBroker.exe
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\ConnectedAccountState.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\cleanmgr.exe
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\ActionCenterCPL.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\twain_32.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wscproxystub.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wscisvif.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wscinterop.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.XamlHost.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Picker.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiatrace.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiashext.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiascanprofiles.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiadss.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiadefui.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiaaut.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiaacmgr.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\vsstrace.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\VscMgrPS.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\tvratings.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\syncui.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\synceng.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\SyncCenter.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\sti.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\ssText3d.scr
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\SMBHelperClass.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\scansetting.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\sberes.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\sbeio.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\sbe.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Ribbons.scr
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\recover.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\rasppp.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\qedwipes.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\pwrshplugin.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\psisdecd.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\OobeFldr.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\NlsData0000.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\nlaapi.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\NaturalLanguage6.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Mystify.scr
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\MSWB7.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\MsSpellCheckingFacility.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\msauserext.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\moricons.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\mobsync.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\MicrosoftAccountTokenProvider.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\MicrosoftAccountExtension.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\MCEWMDRMNDBootstrap.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\ir32_32original.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\ir32_32.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\iccvid.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\charmap.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\getuname.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\eventcls.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\EncDec.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\elsTrans.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\elslad.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\ELSCore.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\dataclen.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\cca.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\calc.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Bubbles.scr
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\autochk.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\syncui.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\synceng.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\ssText3d.scr
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\SecondaryTileExperienceCallback.ProxyStub.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\Mystify.scr
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\mobsync.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\LockScreenContentServer.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\LockScreenContentHost.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\LockScreenContent.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\Bubbles.scr
2016-03-15 14:41:55 ----A---- C:\WINDOWS\system32\SmartScreenSettings.exe
2016-03-15 14:41:55 ----A---- C:\WINDOWS\system32\Ribbons.scr
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiawow64.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiatrace.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiashext.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiaservc.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiascanprofiles.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiarpc.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\WiaExtensionHost64.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiadss.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiadefui.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiaaut.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiaacmgr.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\WallpaperHost.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\UserAccountControlSettings.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\UserAccountControlSettings.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\sti.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\scansetting.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\rasppp.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\OobeFldr.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\nlasvc.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\nlaapi.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\ncsi.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\msauserext.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\moricons.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\isoburn.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\charmap.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\hcproviders.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\getuname.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\GameUXLegacyGDFs.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\gameux.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\DataSenseLiveTileTask.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\dataclen.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\CredentialUIBroker.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\ConnectedAccountState.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\cleanmgr.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\calc.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\bootux.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\bootim.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\authui.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\ActionCenterCPL.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\notepad.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\vdmdbg.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\typelib.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\storage.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\PlayToStatusProvider.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\ole2nls.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\ole2disp.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\ole2.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\DeviceSetupStatusProvider.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\compobj.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\vsstrace.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\vssapi.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\tvratings.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\TSSessionUX.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\tpmvscmgrsvr.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\tpmvscmgr.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\tpmvsc.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\SMBHelperClass.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\SmartCardSimulator.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\sdchange.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\scavengeui.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\sberes.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\sbeio.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\sbe.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\rmttpmvscmgrsvr.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\resutils.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\RemoteWipeCSP.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\recovery.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\recover.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\raserver.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\racpldlg.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\qedwipes.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\qedit.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\psisdecd.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\PlayToStatusProvider.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\NlsData0000.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\NaturalLanguage6.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\MSWB7.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\MsSpellCheckingHost.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\msrahc.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\msra.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\MCEWMDRMNDBootstrap.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\immersivetpmvscmgrsvr.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\eventcls.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\EncDec.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\elsTrans.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\elslad.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\ELSCore.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\Dxpserver.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\dxpps.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\DXP.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\DsmUserTask.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\drivers\ntosext.sys
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\DeviceSetupManagerAPI.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\DeviceMetadataRetrievalClient.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\DeviceDriverRetrievalClient.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\CPFilters.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\clusapi.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\cca.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\autochk.exe
2016-03-15 14:41:50 ----A---- C:\WINDOWS\SYSWOW64\DaOtpCredentialProvider.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\wscsvc.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\wscproxystub.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\wscisvif.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\wscinterop.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\wscapi.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\WalletService.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\VscMgrPS.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\sxproxy.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\spp.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\sdshext.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\sdrsvc.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\sdengin2.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\sdcpl.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\sdclt.exe
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\recdisc.exe
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\pwrshplugin.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\cdp.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2016-03-15 14:41:33 ----A---- C:\WINDOWS\system32\prm0009.dll
2016-03-15 14:41:05 ----A---- C:\WINDOWS\system32\UpgradeSubscription.exe
2016-03-15 14:41:01 ----A---- C:\WINDOWS\system32\IoTAssignedAccessLockFramework.dll
2016-03-15 14:41:01 ----A---- C:\WINDOWS\system32\EmbeddedAppLauncherConfig.exe
2016-03-15 14:41:01 ----A---- C:\WINDOWS\system32\EmbeddedAppLauncherConfig.dll
2016-03-15 14:41:01 ----A---- C:\WINDOWS\system32\embeddedapplauncher.exe
2016-03-15 14:41:01 ----A---- C:\WINDOWS\system32\AssignedAccessCsp.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\SYSWOW64\rdvgumd32.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\SYSWOW64\rdvgu1132.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\SYSWOW64\rdvgogl32.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\SYSWOW64\rdvgocl32.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\SYSWOW64\cscobj.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\tssrvlic.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\tskill.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\tscon.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\StikyNot.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\SNTSearch.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\SnippingTool.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\rwinsta.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\RotMgr.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\reset.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\RDVGHelper.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\rdpinput.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\rdpendp.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\rdpclip.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\qwinsta.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\quser.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\query.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\qprocess.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\qappsrv.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\printmanagement.msc
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PrintBrmUi.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\ppcsnap.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\pmcsnap.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistSvc.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistSh.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistHttpTrans.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistCleaner.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistCacheProvider.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistAD.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDist.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\msTextPrediction.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\msg.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\LSCSHostPolicy.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\logoff.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\chgusr.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\chgport.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\chglogon.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\change.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\hwrreg.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\hwrcomp.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\ddputils.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\ddptrace.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\ddpchunk.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\ddp_ps.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\cscui.dll
2016-03-15 14:40:52 ----A---- C:\WINDOWS\system32\cscsvc.dll
2016-03-15 14:40:52 ----A---- C:\WINDOWS\system32\CscMig.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\SrpUxNativeSnapIn.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\SensorsCpl.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\scrptadm.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\rsop.msc
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\NcaApi.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\gpedit.msc
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\auditpolmsg.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\AuditPolicyGPInterop.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\AuditNativeSnapIn.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\appmgr.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\AppIdPolicyEngineApi.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\AdmTmpl.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\SrpUxNativeSnapIn.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\sensrsvc.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\SensorsCpl.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\SensorsClassExtension.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\SensorPerformanceEvents.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\SensorCustomAdbAlgorithm.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\secpol.msc
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\scrptadm.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\rsop.msc
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\PresentationSettings.exe
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\NcaSvc.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\NcaApi.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\mblctr.exe
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\gpedit.msc
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\drivers\csc.sys
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\cscobj.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\auditpolmsg.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\AuditPolicyGPInterop.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\AuditNativeSnapIn.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\appmgr.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\AppIdPolicyEngineApi.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\AdmTmpl.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srmtrace.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srmstormod.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srmshell.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srmscan.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srmlib.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srmclient.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srm_ps.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srm.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\adrclient.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\wpnpinst.exe
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srmtrace.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srmstormod.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srmshell.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srmscan.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srmlib.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srmclient.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srm_ps.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srm.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\inetppui.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\inetpp.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\gpscript.exe
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\gpscript.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\gpprefcl.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\DFDWiz.exe
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\appmgmts.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\adrclient.dll
2016-03-15 14:40:48 ----A---- C:\WINDOWS\SYSWOW64\browcli.dll
2016-03-15 14:40:48 ----A---- C:\WINDOWS\system32\drivers\bowser.sys
2016-03-15 14:40:48 ----A---- C:\WINDOWS\system32\browcli.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\WorkFoldersRes.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\WmpDui.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.ps.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\PlayToReceiver.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WSReset.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WSCollect.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WorkFoldersRes.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WorkFoldersGPExt.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WorkFolders.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WMVCORE.DLL
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\wmpmde.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WmpDui.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WMNetMgr.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\wmidx.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WMASF.DLL
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\winmde.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WebCache.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\srchadmin.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\rtmpltfm.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\rtmpal.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\rtmmvrortc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\rtmcodecs.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\provsvc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\pnrpsvc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\pnrpnsp.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Pnrphc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\pnrpauto.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\pngfilt.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\p2psvc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\p2pnetsh.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\P2PGraph.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\P2P.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\ortcengine.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\msrdc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\mshta.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\logagent.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\ListSvc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\LAPRXY.DLL
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\jscript.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\imgutil.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\ieui.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\ieproxy.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\iepeers.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Chakrathunk.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\hgprint.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Groupinghc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\dxtrans.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\drttransport.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\drtprov.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\drt.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\drivers\usbrpm.sys
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\DMRServer.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\dlnashext.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\CameraSettingsUIHost.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\browser_broker.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\browser.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\asferror.dll
2016-03-15 14:40:44 ----A---- C:\WINDOWS\system32\mshtmler.dll
2016-03-15 14:40:44 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-03-15 14:40:44 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-03-15 14:40:44 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\SYSWOW64\netfxperf.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\SYSWOW64\mscories.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\SYSWOW64\mscorier.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\SYSWOW64\mscoree.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\SYSWOW64\dfshim.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\SYSWOW64\clrhost.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\system32\wextract.exe
2016-03-15 14:40:43 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\system32\url.dll
Dekuji
Sonny
Logfile of random's system information tool 1.10 (written by random/random)
Run by Stanislav at 2016-04-04 10:08:45
Microsoft Windows 10 Pro Insider Preview
System drive C: has 26 GB (52%) free of 51 GB
Total RAM: 8088 MB (76% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:08:56, on 04.04.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14291.1001)
Boot mode: Normal
Running processes:
C:\Program Files\CCleaner\CCleaner.exe
C:\Users\Stanislav\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Program Files (x86)\GlassWire\GlassWire.exe
C:\Users\Stanislav\AppData\Local\MEGAsync\MEGAsync.exe
C:\Program Files (x86)\GlassWire\GWIdlMon.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.14.13007.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Users\Stanislav\AppData\Local\RadioSure\RadioSure.exe
C:\Program Files\trend micro\Stanislav.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkI ... id=UE01DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll
O4 - HKLM\..\Run: [KeePass 2 PreLoad] "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe" --preload
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Stanislav\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [BlackTop] C:\Program Files\BlackTop\BlackTop.exe
O4 - HKCU\..\Run: [WiFi Guard] "C:\Program Files\SoftPerfect WiFi Guard\WiFiGuard.exe" /hide
O4 - HKCU\..\Run: [f.lux] "C:\Users\Stanislav\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - HKCU\..\Run: [GlassWire] "C:\Program Files (x86)\GlassWire\glasswire.exe" -hide
O4 - HKCU\..\Run: [KeePass Password Safe 2] "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe"
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: MEGAsync.lnk = Stanislav\AppData\Local\MEGAsync\MEGAsync.exe
O4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files (x86)\Bonjour\ExplorerPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: @oem6.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GlassWire Control Service (GlassWire) - SecureMix LLC - C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @oem34.inf,%ibm.svcDesc0%;Lenovo PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Maxthon Core Update Service (MaxthonUpdateSvc) - Maxthon - C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NitroPDFReaderDriverCreatorReadSpool3 (NitroReaderDriverReadSpool3) - Nitro PDF Software - C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
--
End of file - 8782 bytes
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\atiesrxx.exe
atieclxx
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-e20fc738-5e34-41e1-b9aa-f1253ff9d69d -SystemEventPortName:HostProcess-a6aa73be-ece4-4df7-a198-6f940b9295a9 -IoCancelEventPortName:HostProcess-ecc2adfc-5129-4a0a-b95e-1f2ed956298e -NonStateChangingEventPortName:HostProcess-399f1d49-fe2c-438a-8cec-4df8e40f6412 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a77c7a87-6ef4-4943-a75b-ef78e6425e70 -DeviceGroupId:
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-36be023b-f559-4608-989a-4123ad487b33 -SystemEventPortName:HostProcess-a33176e5-36db-4309-8263-2b55365edfcd -IoCancelEventPortName:HostProcess-91606dc3-8aa0-4dce-9f61-52979e6aff2d -NonStateChangingEventPortName:HostProcess-03236712-ae4a-499d-8a29-0f04953440fe -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:18efa2fe-241a-4109-9764-eee5b0b35860 -DeviceGroupId:
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-13940384-4626-4fa5-915f-0519b515313d -SystemEventPortName:HostProcess-a7d0743f-debd-44d2-8cac-bdc99ce5aac2 -IoCancelEventPortName:HostProcess-2effe2c9-aa00-4025-b303-65dd023112e0 -NonStateChangingEventPortName:HostProcess-775cacf7-e9cb-43dd-86b8-c12f5f4fdfb5 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:74ea9486-7426-4f45-bece-bc6cec9025ff -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\System32\spoolsv.exe
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe"
C:\WINDOWS\SysWOW64\svchost.exe -k LocalDriverService
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe"
"C:\Program Files (x86)\GlassWire\GWCtlSrv.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1077870916-1689238671-2405686497-10011_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1077870916-1689238671-2405686497-10011 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
C:\WINDOWS\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849}
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files\BlackTop\BlackTop.exe"
"C:\Program Files\SoftPerfect WiFi Guard\WiFiGuard.exe" /hide
"C:\Users\Stanislav\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
"C:\Program Files (x86)\GlassWire\GlassWire.exe" -hide
"C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe"
"C:\Users\Stanislav\AppData\Local\MEGAsync\MEGAsync.exe"
"C:\Program Files (x86)\GlassWire\GWIdlMon.exe" --cookie 4471060974603 --port 26887
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Rainmeter\Rainmeter.exe"
C:\WINDOWS\system32\rundll32.exe dfshim.dll,ShOpenVerbShortcut C:\Users\Stanislav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo\Lenovo Service Bridge.appref-ms
"fontdrvhost.exe"
"C:\Jts\tws.exe"
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.14.13007.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Users\Stanislav\AppData\Local\RadioSure\RadioSure.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\wermgr.exe -upload
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Users\Stanislav\Downloads\RSITx64.exe"
taskhostw.exe TpmTasks
======Scheduled tasks folder======
C:\WINDOWS\tasks\CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}.job - C:\ProgramData\cis21A0.exe --PostUninstall {81EFDD93-DBBE-415B-BE6E-49B9664E3E82}
C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements (1).job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements (2).job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements (3).job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements (4).job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\Stanislav\AppData\Roaming\Mozilla\Firefox\Profiles\uppezppw.dev-edition-default
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.65.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.65.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nitropdf.com/NitroPDF]
"Description"=NitroPDF Web Browser Plugin
"Path"=C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-26 460384]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-26 172640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2016-03-23 1610936]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2016-02-14 2963184]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Stanislav\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-04-01 551104]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-03-25 8686296]
"BlackTop"=C:\Program Files\BlackTop\BlackTop.exe [2015-07-14 332288]
"WiFi Guard"=C:\Program Files\SoftPerfect WiFi Guard\WiFiGuard.exe [2016-02-05 4953928]
"f.lux"=C:\Users\Stanislav\AppData\Local\FluxSoftware\Flux\flux.exe [2016-02-01 1017224]
"GlassWire"=C:\Program Files (x86)\GlassWire\glasswire.exe [2016-03-17 10571776]
"KeePass Password Safe 2"=C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2016-03-25 2756672]
"Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [2015-11-20 563416]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"KeePass 2 PreLoad"=C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2016-03-25 2756672]
C:\Users\Stanislav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MEGAsync.lnk - C:\Users\Stanislav\AppData\Local\MEGAsync\MEGAsync.exe
Rainmeter.lnk - C:\Program Files\Rainmeter\Rainmeter.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"DisableCAD"=1
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-04-04 10:08:45 ----D---- C:\rsit
2016-04-04 08:14:46 ----A---- C:\WINDOWS\SYSWOW64\vccorlib120.dll
2016-04-04 08:14:46 ----A---- C:\WINDOWS\SYSWOW64\msvcr120.dll
2016-04-04 08:14:46 ----A---- C:\WINDOWS\SYSWOW64\msvcp120.dll
2016-04-04 08:14:46 ----A---- C:\WINDOWS\system32\vccorlib120.dll
2016-04-04 08:14:46 ----A---- C:\WINDOWS\system32\msvcr120.dll
2016-04-04 08:14:46 ----A---- C:\WINDOWS\system32\msvcp120.dll
2016-04-03 23:53:27 ----D---- C:\Users\Stanislav\AppData\Roaming\Process Hacker 2
2016-04-03 23:52:35 ----D---- C:\Program Files\Process Hacker 2
2016-04-02 10:52:10 ----D---- C:\Users\Stanislav\AppData\Roaming\Google
2016-04-02 10:38:35 ----D---- C:\Program Files (x86)\GUMAD35.tmp
2016-04-02 09:18:46 ----D---- C:\ProgramData\USOShared
2016-04-02 07:43:50 ----D---- C:\WINDOWS\system32\Microsoft
2016-04-02 07:42:05 ----D---- C:\Program Files\Reference Assemblies
2016-04-02 07:42:05 ----D---- C:\Program Files\MSBuild
2016-04-02 07:42:05 ----D---- C:\Program Files (x86)\Reference Assemblies
2016-04-02 07:42:05 ----D---- C:\Program Files (x86)\MSBuild
2016-04-02 07:41:27 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2016-04-02 07:41:27 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2016-04-02 07:41:27 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-04-02 07:41:21 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2016-04-02 07:41:21 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-04-02 07:41:21 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-04-01 22:21:47 ----D---- C:\ProgramData\Microsoft OneDrive
2016-04-01 22:16:53 ----SHD---- C:\ProgramData\Templates
2016-04-01 22:16:53 ----SHD---- C:\ProgramData\Start Menu
2016-04-01 22:16:53 ----SHD---- C:\ProgramData\Documents
2016-04-01 22:16:53 ----SHD---- C:\ProgramData\Desktop
2016-04-01 22:16:53 ----SHD---- C:\ProgramData\Application Data
2016-04-01 22:13:33 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-04-01 22:01:05 ----SD---- C:\Users\Stanislav\AppData\Roaming\Microsoft
2016-04-01 21:57:32 ----AD---- C:\Program Files\Synaptics
2016-04-01 21:56:06 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2016-04-01 21:54:13 ----AS---- C:\WINDOWS\bootstat.dat
2016-04-01 21:53:15 ----D---- C:\WINDOWS\Prefetch
2016-04-01 21:52:52 ----D---- C:\WINDOWS\ServiceProfiles
2016-04-01 21:52:33 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2016-04-01 21:52:19 ----ASH---- C:\swapfile.sys
2016-04-01 21:52:18 ----ASH---- C:\pagefile.sys
2016-04-01 19:57:58 ----A---- C:\WINDOWS\SYSWOW64\mfc71.dll
2016-04-01 19:48:12 ----HD---- C:\$Windows.~GWX
2016-04-01 16:42:22 ----D---- C:\AdwCleaner
2016-04-01 16:22:10 ----HD---- C:\OneDriveTemp
2016-04-01 09:10:25 ----D---- C:\Program Files\trend micro
2016-04-01 08:22:55 ----D---- C:\Users\Stanislav\AppData\Roaming\YoWindow
2016-03-31 19:17:30 ----D---- C:\ProgramData\Google
2016-03-31 19:17:27 ----D---- C:\Program Files\Google
2016-03-31 19:17:14 ----D---- C:\Program Files (x86)\Google
2016-03-26 22:02:21 ----D---- C:\Users\Stanislav\AppData\Roaming\Lunascape
2016-03-26 21:53:19 ----D---- C:\Program Files (x86)\Lunascape
2016-03-25 22:50:25 ----D---- C:\Users\Stanislav\AppData\Roaming\KeePass
2016-03-25 22:49:43 ----AD---- C:\Program Files (x86)\KeePass Password Safe 2
2016-03-25 18:21:13 ----A---- C:\WINDOWS\WiseHDInfo64.dll
2016-03-25 18:20:59 ----D---- C:\Program Files (x86)\Wise
2016-03-25 17:48:39 ----D---- C:\Users\Stanislav\AppData\Roaming\HandBrake Team
2016-03-25 17:48:37 ----D---- C:\Users\Stanislav\AppData\Roaming\HandBrake
2016-03-25 17:48:19 ----D---- C:\Program Files\Handbrake
2016-03-25 13:13:52 ----D---- C:\ESD
2016-03-21 09:45:20 ----A---- C:\WINDOWS\system32\drivers\BazisPortableCDBus.sys
2016-03-19 17:41:47 ----D---- C:\Program Files (x86)\Seznam.cz
2016-03-18 10:50:23 ----D---- C:\Users\Stanislav\AppData\Roaming\LibreOffice
2016-03-17 09:02:49 ----D---- C:\Users\Stanislav\AppData\Roaming\HEXelon
2016-03-17 09:01:30 ----RD---- C:\Program Files (x86)\TC UP
2016-03-17 08:24:54 ----A---- C:\WINDOWS\system32\drivers\gwdrv.sys
2016-03-17 08:24:47 ----D---- C:\ProgramData\GlassWire
2016-03-17 08:24:44 ----D---- C:\Program Files (x86)\GlassWire
2016-03-15 16:33:19 ----A---- C:\WINDOWS\SYSWOW64\opencl.dll
2016-03-15 16:33:16 ----SHD---- C:\WINDOWS\BitLockerDiscoveryVolumeContents
2016-03-15 16:33:16 ----D---- C:\WINDOWS\ShellNew
2016-03-15 16:33:16 ----D---- C:\Program Files\Windows Journal
2016-03-15 16:23:45 ----D---- C:\WINDOWS\OCR
2016-03-15 16:23:21 ----D---- C:\WINDOWS\SKB
2016-03-15 16:22:55 ----D---- C:\WINDOWS\SYSWOW64\winrm
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\WCN
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\sysprep
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\en
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-US
2016-03-15 16:22:54 ----D---- C:\WINDOWS\SYSWOW64\0409
2016-03-15 16:22:54 ----D---- C:\WINDOWS\system32\winrm
2016-03-15 16:22:54 ----D---- C:\WINDOWS\system32\WCN
2016-03-15 16:22:53 ----D---- C:\WINDOWS\system32\slmgr
2016-03-15 16:22:53 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2016-03-15 16:22:52 ----D---- C:\WINDOWS\system32\en
2016-03-15 16:22:50 ----D---- C:\WINDOWS\system32\drivers\en-US
2016-03-15 16:22:50 ----D---- C:\WINDOWS\system32\0409
2016-03-15 16:22:50 ----D---- C:\WINDOWS\en-US
2016-03-15 16:22:50 ----D---- C:\WINDOWS\DigitalLocker
2016-03-15 14:54:39 ----D---- C:\WINDOWS\Setup
2016-03-15 14:54:15 ----A---- C:\WINDOWS\system32\perfi009.dat
2016-03-15 14:54:15 ----A---- C:\WINDOWS\system32\perfd009.dat
2016-03-15 14:54:12 ----A---- C:\WINDOWS\system32\perfh009.dat
2016-03-15 14:54:12 ----A---- C:\WINDOWS\system32\perfc009.dat
2016-03-15 14:53:51 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-03-15 14:50:41 ----A---- C:\WINDOWS\SYSWOW64\NOISE.DAT
2016-03-15 14:50:41 ----A---- C:\WINDOWS\SYSWOW64\msclmd.dll
2016-03-15 14:50:40 ----A---- C:\WINDOWS\SYSWOW64\dssec.dat
2016-03-15 14:50:33 ----A---- C:\WINDOWS\system32\NOISE.DAT
2016-03-15 14:50:32 ----A---- C:\WINDOWS\system32\msclmd.dll
2016-03-15 14:50:31 ----A---- C:\WINDOWS\system32\dssec.dat
2016-03-15 14:50:25 ----RASH---- C:\WINDOWS\fonts\StaticCache.dat
2016-03-15 14:50:25 ----A---- C:\WINDOWS\fonts\desktop.ini
2016-03-15 14:50:23 ----ASH---- C:\Program Files\desktop.ini
2016-03-15 14:50:23 ----ASH---- C:\Program Files (x86)\desktop.ini
2016-03-15 14:50:17 ----SD---- C:\WINDOWS\SYSWOW64\Nui
2016-03-15 14:50:17 ----SD---- C:\WINDOWS\SYSWOW64\F12
2016-03-15 14:50:17 ----SD---- C:\WINDOWS\SYSWOW64\DiagSvcs
2016-03-15 14:50:17 ----SD---- C:\WINDOWS\SYSWOW64\Configuration
2016-03-15 14:50:17 ----D---- C:\WINDOWS\Web
2016-03-15 14:50:17 ----D---- C:\WINDOWS\Vss
2016-03-15 14:50:17 ----D---- C:\WINDOWS\twain_32
2016-03-15 14:50:17 ----D---- C:\WINDOWS\tracing
2016-03-15 14:50:17 ----D---- C:\WINDOWS\Temp
2016-03-15 14:50:17 ----D---- C:\WINDOWS\Tasks
2016-03-15 14:50:17 ----D---- C:\WINDOWS\TAPI
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\zh-HK
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\WinMetadata
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\WindowsPowerShell
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\wbem
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Tasks
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sru
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-CS
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sppui
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\spp
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Speech_OneCore
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Speech
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\SMI
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\setup
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\restore
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Recovery
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\RasToast
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\ras
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\oobe
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\networklist
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\NDF
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\MUI
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\MsDtc
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\MSDRM
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\MailContactsCalendarSync
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\LogFiles
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Licenses
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Ipmi
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\InstallShield
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\InputMethod
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\IME
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\icsxml
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicyUsers
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicy
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\FxsTmp
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\fr-CA
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\es-MX
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\DriverStore
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\drivers
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\config
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Com
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\catroot
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\Bthprops
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SYSWOW64\AppLocker
2016-03-15 14:50:17 ----D---- C:\WINDOWS\SystemResources
2016-03-15 14:50:16 ----SD---- C:\WINDOWS\system32\Nui
2016-03-15 14:50:16 ----SD---- C:\WINDOWS\system32\F12
2016-03-15 14:50:16 ----SD---- C:\WINDOWS\system32\dsc
2016-03-15 14:50:16 ----SD---- C:\WINDOWS\system32\DiagSvcs
2016-03-15 14:50:16 ----SD---- C:\WINDOWS\system32\Configuration
2016-03-15 14:50:16 ----RD---- C:\WINDOWS\PurchaseDialog
2016-03-15 14:50:16 ----RD---- C:\WINDOWS\PrintDialog
2016-03-15 14:50:16 ----RD---- C:\WINDOWS\Offline Web Pages
2016-03-15 14:50:16 ----RD---- C:\WINDOWS\MiracastView
2016-03-15 14:50:16 ----D---- C:\WINDOWS\SystemApps
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\zh-TW
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\zh-HK
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\zh-CN
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\WinMetadata
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\winevt
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\WinBioDatabase
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\WDI
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\wbem
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\uk-UA
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\tr-TR
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\th-TH
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Tasks
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sv-SE
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sru
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sppui
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\spp
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\spool
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Speech_OneCore
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Speech
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sl-SI
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\sk-SK
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\setup
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\SecureBootUpdates
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ru-RU
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ro-RO
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\restore
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Recovery
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\RasToast
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ras
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\pt-PT
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\pt-BR
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ProximityToast
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\PointOfService
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\pl-PL
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\oobe
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\nl-NL
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\networklist
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\NDF
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\nb-NO
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\MUI
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\MsDtc
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\MSDRM
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\migwiz
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\migration
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\MailContactsCalendarSync
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Macromed
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\lv-LV
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\lt-LT
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\LogFiles
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Licenses
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ko-KR
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ja-jp
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\it-IT
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Ipmi
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\InputMethod
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\inetsrv
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\IME
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\icsxml
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ias
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\hu-HU
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\hr-HR
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\he-IL
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\FxsTmp
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\fr-FR
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\fr-CA
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\fi-FI
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\et-EE
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\es-MX
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\es-ES
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\en-US
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\en-GB
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\el-GR
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\drivers\etc
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\de-DE
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\da-DK
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\cs-CZ
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Com
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\CodeIntegrity
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\catroot2
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Bthprops
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\Boot
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\bg-BG
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\ar-SA
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\appraiser
2016-03-15 14:50:16 ----D---- C:\WINDOWS\system32\AppLocker
2016-03-15 14:50:16 ----D---- C:\WINDOWS\System
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Speech_OneCore
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Speech
2016-03-15 14:50:16 ----D---- C:\WINDOWS\schemas
2016-03-15 14:50:16 ----D---- C:\WINDOWS\SchCache
2016-03-15 14:50:16 ----D---- C:\WINDOWS\ShellExperiences
2016-03-15 14:50:16 ----D---- C:\WINDOWS\security
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Resources
2016-03-15 14:50:16 ----D---- C:\WINDOWS\rescache
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Registration
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Provisioning
2016-03-15 14:50:16 ----D---- C:\WINDOWS\PolicyDefinitions
2016-03-15 14:50:16 ----D---- C:\WINDOWS\PLA
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Performance
2016-03-15 14:50:16 ----D---- C:\WINDOWS\ModemLogs
2016-03-15 14:50:16 ----D---- C:\WINDOWS\Migration
2016-03-15 14:50:15 ----SHD---- C:\WINDOWS\Installer
2016-03-15 14:50:15 ----SD---- C:\WINDOWS\Downloaded Program Files
2016-03-15 14:50:15 ----RSD---- C:\WINDOWS\Media
2016-03-15 14:50:15 ----RSD---- C:\WINDOWS\Fonts
2016-03-15 14:50:15 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-03-15 14:50:15 ----RD---- C:\WINDOWS\DesktopTileResources
2016-03-15 14:50:15 ----HD---- C:\WINDOWS\ELAMBKUP
2016-03-15 14:50:15 ----D---- C:\WINDOWS\LiveKernelReports
2016-03-15 14:50:15 ----D---- C:\WINDOWS\L2Schemas
2016-03-15 14:50:15 ----D---- C:\WINDOWS\InputMethod
2016-03-15 14:50:15 ----D---- C:\WINDOWS\InfusedApps
2016-03-15 14:50:15 ----D---- C:\WINDOWS\IME
2016-03-15 14:50:15 ----D---- C:\WINDOWS\Help
2016-03-15 14:50:15 ----D---- C:\WINDOWS\Globalization
2016-03-15 14:50:15 ----D---- C:\WINDOWS\diagnostics
2016-03-15 14:50:15 ----D---- C:\WINDOWS\debug
2016-03-15 14:50:15 ----D---- C:\WINDOWS\Cursors
2016-03-15 14:50:15 ----D---- C:\WINDOWS\Branding
2016-03-15 14:50:15 ----D---- C:\WINDOWS\Boot
2016-03-15 14:50:15 ----D---- C:\WINDOWS\bcastdvr
2016-03-15 14:50:15 ----D---- C:\WINDOWS\AppReadiness
2016-03-15 14:50:15 ----D---- C:\WINDOWS\AppPatch
2016-03-15 14:50:15 ----D---- C:\WINDOWS\appcompat
2016-03-15 14:50:15 ----D---- C:\WINDOWS\addins
2016-03-15 14:50:15 ----D---- C:\ProgramData\USOPrivate
2016-03-15 14:50:15 ----D---- C:\ProgramData\SoftwareDistribution
2016-03-15 14:50:15 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2016-03-15 14:50:14 ----SHD---- C:\Program Files\Windows Sidebar
2016-03-15 14:50:14 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2016-03-15 14:50:14 ----SD---- C:\ProgramData\Microsoft
2016-03-15 14:50:14 ----RD---- C:\WINDOWS\assembly
2016-03-15 14:50:14 ----HD---- C:\ProgramData
2016-03-15 14:50:14 ----HD---- C:\Program Files\WindowsApps
2016-03-15 14:50:14 ----D---- C:\WINDOWS\Microsoft.NET
2016-03-15 14:50:14 ----D---- C:\ProgramData\Comms
2016-03-15 14:50:14 ----D---- C:\Program Files\WindowsPowerShell
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Portable Devices
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Photo Viewer
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows NT
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Multimedia Platform
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Media Player
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Mail
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Defender
2016-03-15 14:50:14 ----D---- C:\Program Files\Windows Advanced Threat Protection
2016-03-15 14:50:14 ----D---- C:\Program Files\Internet Explorer
2016-03-15 14:50:14 ----D---- C:\Program Files\Common Files\System
2016-03-15 14:50:14 ----D---- C:\Program Files\Common Files\Services
2016-03-15 14:50:14 ----D---- C:\Program Files\Common Files\microsoft shared
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\WindowsPowerShell
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows NT
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows Media Player
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows Mail
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Windows Defender
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Microsoft.NET
2016-03-15 14:50:14 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-15 14:50:14 ----D---- C:\PerfLogs
2016-03-15 14:49:11 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-03-15 14:49:07 ----D---- C:\WINDOWS\system32\drivers
2016-03-15 14:46:00 ----D---- C:\WINDOWS\INF
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\WPDSp.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\WPDShServiceObj.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\WPDShextAutoplay.exe
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\wpdshext.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\WinFax.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsRaw.txt
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\sxproxy.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\srdelayed.exe
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\spp.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceWiaCompat.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceTypes.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceStatus.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceConnectApi.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceClassExtension.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceApi.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\photowiz.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\PhotoScreensaver.scr
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\FXSXP32.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\FXSRESM.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\FXSEXT32.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\FXSCOMEX.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\FXSCOM.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\WinFax.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSUNATD.exe
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSTIFF.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXST30.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSSVC.exe
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSST.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSROUTE.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSRESM.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSMON.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSEVENT.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSCOM.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\blbres.dll
2016-03-15 14:43:32 ----A---- C:\WINDOWS\system32\blb_ps.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmpshell.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmpps.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmploc.DLL
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmpeffects.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmpdxm.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmerror.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmdmps.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\wmdmlog.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsRaw.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\unregmp2.exe
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\spwmp.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\mswmdm.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\elshyph.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\dxmasf.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\cewmdm.dll
2016-03-15 14:43:31 ----A---- C:\WINDOWS\SYSWOW64\audiodev.dll
2016-03-15 14:43:29 ----A---- C:\WINDOWS\SYSWOW64\msvcr100_clr0400.dll
2016-03-15 14:43:29 ----A---- C:\WINDOWS\SYSWOW64\msvcp120_clr0400.dll
2016-03-15 14:43:29 ----A---- C:\WINDOWS\SYSWOW64\aspnet_counters.dll
2016-03-15 14:43:26 ----A---- C:\WINDOWS\SYSWOW64\msvcr120_clr0400.dll
2016-03-15 14:43:26 ----A---- C:\WINDOWS\SYSWOW64\DscCoreConfProv.dll
2016-03-15 14:43:22 ----A---- C:\WINDOWS\SYSWOW64\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\SYSWOW64\sdchange.exe
2016-03-15 14:43:21 ----A---- C:\WINDOWS\SYSWOW64\raserver.exe
2016-03-15 14:43:21 ----A---- C:\WINDOWS\SYSWOW64\racpldlg.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\SYSWOW64\msra.exe
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\whealogr.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\wclWdi.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\wclUnicode.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\wclSqm.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\wclPowrProf.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\wclEtw.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\wcl.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\mpeval.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\Family.SyncEngine.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\Family.Client.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\Family.Cache.dll
2016-03-15 14:43:21 ----A---- C:\WINDOWS\system32\Family.Authentication.dll
2016-03-15 14:43:19 ----A---- C:\WINDOWS\system32\mpunits.dll
2016-03-15 14:43:19 ----A---- C:\WINDOWS\system32\DscTimer.dll
2016-03-15 14:43:19 ----A---- C:\WINDOWS\system32\dscproxy.dll
2016-03-15 14:43:19 ----A---- C:\WINDOWS\system32\DscCoreConfProv.dll
2016-03-15 14:43:19 ----A---- C:\WINDOWS\system32\DscCore.dll
2016-03-15 14:43:18 ----A---- C:\WINDOWS\system32\wbengine.exe
2016-03-15 14:43:18 ----A---- C:\WINDOWS\system32\wbadmin.exe
2016-03-15 14:43:18 ----A---- C:\WINDOWS\system32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
2016-03-15 14:43:18 ----A---- C:\WINDOWS\system32\BlbEvents.dll
2016-03-15 14:42:21 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2016-03-15 14:42:21 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2016-03-15 14:42:21 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2016-03-15 14:42:21 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\rdpendp.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\PeerDistSh.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\PeerDist.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\gpscript.exe
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\gpscript.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\gpprefcl.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\SYSWOW64\appmgmts.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\umrdp.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\manage-bde.wsf
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\jnwmon.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\fvewiz.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\fveprompt.exe
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\fvecpl.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\dfdts.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\BitLockerWizardElev.exe
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\BitLockerWizard.exe
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\BdeSysprep.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\bdechangepin.exe
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\BdeHdCfgLib.dll
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\BdeHdCfg.exe
2016-03-15 14:42:20 ----A---- C:\WINDOWS\system32\baaupdate.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\XPSSHHDR.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\wmpmde.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\rfxvmt.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\provsvc.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\ms3dthumbnailprovider.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\SYSWOW64\CameraSettingsUIHost.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\XPSSHHDR.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\srwmi.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\SrTasks.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\srrstr.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\srhelper.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\SrEvents.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\srdelayed.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\srcore.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\srclient.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\rstrui.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\ms3dthumbnailprovider.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\manage-bde.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\fvenotify.exe
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\fvecerts.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\fveapibase.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2016-03-15 14:42:16 ----A---- C:\WINDOWS\system32\drivers\dumpfve.sys
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\WMVCORE.DLL
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\WMNetMgr.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\wmidx.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\WMASF.DLL
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\srchadmin.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\pnrpnsp.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\p2pnetsh.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\P2PGraph.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\P2P.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\msrdc.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\logagent.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\LAPRXY.DLL
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\drttransport.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\drtprov.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\drt.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\SYSWOW64\asferror.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wsepno.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WPDSp.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WPDShServiceObj.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WPDShextAutoplay.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wpdshext.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wpdbusenum.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wpd_ci.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WofTasks.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmpshell.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmploc.DLL
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmpeffects.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmp.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmerror.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmdmps.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\wmdmlog.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WindowsCodecsRaw.txt
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WindowsCodecsRaw.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WFSR.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\WFS.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\unregmp2.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\spwmp.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\repair-bde.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PortableDeviceWiaCompat.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PortableDeviceTypes.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PortableDeviceStatus.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PortableDeviceConnectApi.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PortableDeviceClassExtension.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PortableDeviceApi.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\photowiz.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\PhotoScreensaver.scr
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\mswmdm.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\FXSUTILITY.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\FXSCOVER.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\FXSCOMPOSERES.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\FXSCOMPOSE.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\fveui.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\fveskybackup.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\dxmasf.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\drivers\WpdUpFltr.sys
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\cewmdm.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\bdeunlock.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\BdeUISrv.exe
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\bdeui.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\bdesvc.dll
2016-03-15 14:42:15 ----A---- C:\WINDOWS\system32\bderepair.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\rtmpltfm.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\rtmpal.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\rtmmvrortc.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\rtmcodecs.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\pngfilt.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\ortcengine.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\mshtmler.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\mshta.exe
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\imgutil.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\Chakrathunk.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2016-03-15 14:42:14 ----A---- C:\WINDOWS\system32\elshyph.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\wextract.exe
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\NetworkCollectionAgent.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\licmgr10.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\inseng.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\iexpress.exe
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-03-15 14:42:12 ----A---- C:\WINDOWS\SYSWOW64\IEAdvpack.dll
2016-03-15 14:42:11 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2016-03-15 14:42:11 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-03-15 14:42:06 ----A---- C:\WINDOWS\system32\msvcr120_clr0400.dll
2016-03-15 14:42:06 ----A---- C:\WINDOWS\system32\aspnet_counters.dll
2016-03-15 14:42:02 ----A---- C:\WINDOWS\system32\msvcr100_clr0400.dll
2016-03-15 14:42:02 ----A---- C:\WINDOWS\system32\msvcp120_clr0400.dll
2016-03-15 14:41:59 ----A---- C:\WINDOWS\SYSWOW64\PresentationHostProxy.dll
2016-03-15 14:41:59 ----A---- C:\WINDOWS\SYSWOW64\PresentationHost.exe
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\UserAccountControlSettings.exe
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\UserAccountControlSettings.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\SmartScreenSettings.exe
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\isoburn.exe
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\hcproviders.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\GameUXLegacyGDFs.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\CredentialUIBroker.exe
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\ConnectedAccountState.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\cleanmgr.exe
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\ActionCenterCPL.dll
2016-03-15 14:41:57 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\twain_32.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wscproxystub.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wscisvif.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wscinterop.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.XamlHost.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Picker.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiatrace.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiashext.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiascanprofiles.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiadss.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiadefui.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiaaut.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\wiaacmgr.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\vsstrace.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\VscMgrPS.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\tvratings.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\syncui.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\synceng.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\SyncCenter.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\sti.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\ssText3d.scr
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\SMBHelperClass.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\scansetting.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\sberes.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\sbeio.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\sbe.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Ribbons.scr
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\recover.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\rasppp.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\qedwipes.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\pwrshplugin.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\psisdecd.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\OobeFldr.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\NlsData0000.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\nlaapi.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\NaturalLanguage6.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Mystify.scr
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\MSWB7.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\MsSpellCheckingFacility.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\msauserext.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\moricons.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\mobsync.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\MicrosoftAccountTokenProvider.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\MicrosoftAccountExtension.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\MCEWMDRMNDBootstrap.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\ir32_32original.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\ir32_32.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\iccvid.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\charmap.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\getuname.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\eventcls.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\EncDec.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\elsTrans.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\elslad.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\ELSCore.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\dataclen.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\cca.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\calc.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\Bubbles.scr
2016-03-15 14:41:56 ----A---- C:\WINDOWS\SYSWOW64\autochk.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\syncui.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\synceng.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\ssText3d.scr
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\SecondaryTileExperienceCallback.ProxyStub.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\Mystify.scr
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\mobsync.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\LockScreenContentServer.exe
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\LockScreenContentHost.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\LockScreenContent.dll
2016-03-15 14:41:56 ----A---- C:\WINDOWS\system32\Bubbles.scr
2016-03-15 14:41:55 ----A---- C:\WINDOWS\system32\SmartScreenSettings.exe
2016-03-15 14:41:55 ----A---- C:\WINDOWS\system32\Ribbons.scr
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiawow64.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiatrace.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiashext.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiaservc.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiascanprofiles.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiarpc.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\WiaExtensionHost64.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiadss.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiadefui.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiaaut.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\wiaacmgr.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\WallpaperHost.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\UserAccountControlSettings.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\UserAccountControlSettings.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\sti.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\scansetting.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\rasppp.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\OobeFldr.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\nlasvc.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\nlaapi.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\ncsi.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\msauserext.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\moricons.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\isoburn.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\charmap.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\hcproviders.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\getuname.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\GameUXLegacyGDFs.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\gameux.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\DataSenseLiveTileTask.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\dataclen.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\CredentialUIBroker.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\ConnectedAccountState.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\cleanmgr.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\calc.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\bootux.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\bootim.exe
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\authui.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\ActionCenterCPL.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2016-03-15 14:41:54 ----A---- C:\WINDOWS\notepad.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\vdmdbg.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\typelib.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\storage.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\PlayToStatusProvider.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\ole2nls.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\ole2disp.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\ole2.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\DeviceSetupStatusProvider.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\SYSWOW64\compobj.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\vsstrace.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\vssapi.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\tvratings.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\TSSessionUX.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\tpmvscmgrsvr.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\tpmvscmgr.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\tpmvsc.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\SMBHelperClass.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\SmartCardSimulator.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\sdchange.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\scavengeui.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\sberes.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\sbeio.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\sbe.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\rmttpmvscmgrsvr.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\resutils.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\RemoteWipeCSP.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\recovery.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\recover.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\raserver.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\racpldlg.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\qedwipes.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\qedit.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\psisdecd.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\PlayToStatusProvider.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\NlsData0000.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\NaturalLanguage6.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\MSWB7.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\MsSpellCheckingHost.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\msrahc.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\msra.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\MCEWMDRMNDBootstrap.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\immersivetpmvscmgrsvr.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\eventcls.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\EncDec.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\elsTrans.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\elslad.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\ELSCore.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\Dxpserver.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\dxpps.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\DXP.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\DsmUserTask.exe
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\drivers\ntosext.sys
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\DeviceSetupManagerAPI.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\DeviceMetadataRetrievalClient.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\DeviceDriverRetrievalClient.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\CPFilters.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\clusapi.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\cca.dll
2016-03-15 14:41:52 ----A---- C:\WINDOWS\system32\autochk.exe
2016-03-15 14:41:50 ----A---- C:\WINDOWS\SYSWOW64\DaOtpCredentialProvider.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\wscsvc.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\wscproxystub.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\wscisvif.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\wscinterop.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\wscapi.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\WalletService.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\VscMgrPS.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\sxproxy.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\spp.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\sdshext.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\sdrsvc.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\sdengin2.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\sdcpl.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\sdclt.exe
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\recdisc.exe
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\pwrshplugin.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\cdp.dll
2016-03-15 14:41:50 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2016-03-15 14:41:33 ----A---- C:\WINDOWS\system32\prm0009.dll
2016-03-15 14:41:05 ----A---- C:\WINDOWS\system32\UpgradeSubscription.exe
2016-03-15 14:41:01 ----A---- C:\WINDOWS\system32\IoTAssignedAccessLockFramework.dll
2016-03-15 14:41:01 ----A---- C:\WINDOWS\system32\EmbeddedAppLauncherConfig.exe
2016-03-15 14:41:01 ----A---- C:\WINDOWS\system32\EmbeddedAppLauncherConfig.dll
2016-03-15 14:41:01 ----A---- C:\WINDOWS\system32\embeddedapplauncher.exe
2016-03-15 14:41:01 ----A---- C:\WINDOWS\system32\AssignedAccessCsp.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\SYSWOW64\rdvgumd32.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\SYSWOW64\rdvgu1132.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\SYSWOW64\rdvgogl32.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\SYSWOW64\rdvgocl32.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\SYSWOW64\cscobj.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\tssrvlic.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\tskill.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\tscon.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\StikyNot.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\SNTSearch.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\SnippingTool.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\rwinsta.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\RotMgr.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\reset.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\RDVGHelper.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\rdpinput.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\rdpendp.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\rdpclip.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\qwinsta.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\quser.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\query.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\qprocess.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\qappsrv.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\printmanagement.msc
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PrintBrmUi.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\ppcsnap.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\pmcsnap.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistSvc.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistSh.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistHttpTrans.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistCleaner.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistCacheProvider.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDistAD.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\PeerDist.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\msTextPrediction.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\msg.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\LSCSHostPolicy.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\logoff.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\chgusr.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\chgport.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\chglogon.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\change.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\hwrreg.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\hwrcomp.exe
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\ddputils.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\ddptrace.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\ddpchunk.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\ddp_ps.dll
2016-03-15 14:40:53 ----A---- C:\WINDOWS\system32\cscui.dll
2016-03-15 14:40:52 ----A---- C:\WINDOWS\system32\cscsvc.dll
2016-03-15 14:40:52 ----A---- C:\WINDOWS\system32\CscMig.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\SrpUxNativeSnapIn.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\SensorsCpl.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\scrptadm.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\rsop.msc
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\NcaApi.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\gpedit.msc
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\auditpolmsg.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\AuditPolicyGPInterop.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\AuditNativeSnapIn.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\appmgr.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\AppIdPolicyEngineApi.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\SYSWOW64\AdmTmpl.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\SrpUxNativeSnapIn.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\sensrsvc.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\SensorsCpl.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\SensorsClassExtension.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\SensorPerformanceEvents.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\SensorCustomAdbAlgorithm.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\secpol.msc
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\scrptadm.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\rsop.msc
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\PresentationSettings.exe
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\NcaSvc.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\NcaApi.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\mblctr.exe
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\gpedit.msc
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\drivers\csc.sys
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\cscobj.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\auditpolmsg.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\AuditPolicyGPInterop.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\AuditNativeSnapIn.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\appmgr.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\AppIdPolicyEngineApi.dll
2016-03-15 14:40:51 ----A---- C:\WINDOWS\system32\AdmTmpl.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srmtrace.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srmstormod.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srmshell.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srmscan.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srmlib.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srmclient.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srm_ps.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\srm.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\SYSWOW64\adrclient.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\wpnpinst.exe
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srmtrace.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srmstormod.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srmshell.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srmscan.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srmlib.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srmclient.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srm_ps.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\srm.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\inetppui.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\inetpp.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\gpscript.exe
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\gpscript.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\gpprefcl.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\DFDWiz.exe
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\appmgmts.dll
2016-03-15 14:40:49 ----A---- C:\WINDOWS\system32\adrclient.dll
2016-03-15 14:40:48 ----A---- C:\WINDOWS\SYSWOW64\browcli.dll
2016-03-15 14:40:48 ----A---- C:\WINDOWS\system32\drivers\bowser.sys
2016-03-15 14:40:48 ----A---- C:\WINDOWS\system32\browcli.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\WorkFoldersRes.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\WmpDui.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.ps.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\PlayToReceiver.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WSReset.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WSCollect.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WorkFoldersRes.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WorkFoldersGPExt.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WorkFolders.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WMVCORE.DLL
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\wmpmde.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WmpDui.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WMNetMgr.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\wmidx.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WMASF.DLL
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\winmde.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\WebCache.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\srchadmin.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\rtmpltfm.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\rtmpal.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\rtmmvrortc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\rtmcodecs.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\provsvc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\pnrpsvc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\pnrpnsp.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Pnrphc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\pnrpauto.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\pngfilt.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\p2psvc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\p2pnetsh.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\P2PGraph.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\P2P.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\ortcengine.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\msrdc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\mshta.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\logagent.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\ListSvc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\LAPRXY.DLL
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\jscript.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\imgutil.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\ieui.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\ieproxy.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\iepeers.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Chakrathunk.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\hgprint.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\Groupinghc.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\dxtrans.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\drttransport.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\drtprov.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\drt.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\drivers\usbrpm.sys
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\DMRServer.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\dlnashext.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\CameraSettingsUIHost.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\browser_broker.exe
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\browser.dll
2016-03-15 14:40:45 ----A---- C:\WINDOWS\system32\asferror.dll
2016-03-15 14:40:44 ----A---- C:\WINDOWS\system32\mshtmler.dll
2016-03-15 14:40:44 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-03-15 14:40:44 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-03-15 14:40:44 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\SYSWOW64\netfxperf.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\SYSWOW64\mscories.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\SYSWOW64\mscorier.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\SYSWOW64\mscoree.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\SYSWOW64\dfshim.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\SYSWOW64\clrhost.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\system32\wextract.exe
2016-03-15 14:40:43 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-03-15 14:40:43 ----A---- C:\WINDOWS\system32\url.dll