Logfile of random's system information tool 1.10 (written by random/random)
Run by milan at 2016-08-02 09:20:53
Microsoft Windows 10 Home
System drive C: has 73 GB (28%) free of 258 GB
Total RAM: 3992 MB (43% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:20:56, on 2.8.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0494)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avpui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\Program Files\trend micro\milan.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject - {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll
O2 - BHO: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files (x86)\Mindjet\MindManager 14\Mm8InternetExplorer.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: ContentBlockerBrowserHelperObject - {93BC2EA7-2F17-4729-948A-D2E03FFB2412} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll
O2 - BHO: Safe Money Plugin - {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKCU\..\Run: [NETGATEDataBackup] C:\Program Files\NETGATE\Data Backup\DataBackup.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\milan\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Send Image To Mindjet - res://C:\Program Files (x86)\Mindjet\MindManager 14\Mm8InternetExplorer.dll/201
O8 - Extra context menu item: Send Link To Mindjet - res://C:\Program Files (x86)\Mindjet\MindManager 14\Mm8InternetExplorer.dll/203
O8 - Extra context menu item: Send Page To Mindjet - res://C:\Program Files (x86)\Mindjet\MindManager 14\Mm8InternetExplorer.dll/204
O8 - Extra context menu item: Send Text To Mindjet - res://C:\Program Files (x86)\Mindjet\MindManager 14\Mm8InternetExplorer.dll/202
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Send to Mindjet - {2F72393D-2472-4F82-B600-ED77F354B7FF} - C:\Program Files (x86)\Mindjet\MindManager 14\Mm8InternetExplorer.dll
O9 - Extra button: Virtuální klávesnice - {5547CE1F-74E9-41E5-9CBF-5211ECC37341} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll/206 (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Služba Kaspersky Anti-Virus 15.0.2 (AVP15.0.2) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avp.exe
O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - www.BitComet.com - C:\Program Files\BitComet\tools\BitCometService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @oem24.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\WINDOWS\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NETGATE Data Backup Service (NGDatBckpSrv) - NETGATE Technologies s.r.o. - C:\Program Files\NETGATE\Data Backup\DataBackupSrv.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: ArcCapture (uArcCapture) - ArcSoft, Inc. - C:\Windows\SysWow64\ArcVCapRender\uArcCapture.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Validity WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\WINDOWS\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 13293 bytes
======Listing Processes======
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\WINDOWS\System32\svchost.exe -k NetworkService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-206aa3fe-103b-4b85-a517-8c7db733069f -SystemEventPortName:HostProcess-eb4ce35e-566f-4e4a-8978-6aab90c9a865 -IoCancelEventPortName:HostProcess-1e052604-5c2d-4d1a-b9cf-7f361e65c4c5 -NonStateChangingEventPortName:HostProcess-b20bb9bc-4374-49c9-8187-e14b60c89396 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:25bf6cba-1394-4de1-8621-2a806154d474 -DeviceGroupId:
C:\WINDOWS\system32\Hpservice.exe
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
dashost.exe {e3328164-e30e-4a52-b3a9269d93ebfc90}
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files\IDT\WDM\AESTSr64.exe"
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k iissvcs
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avp.exe" -r
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\Windows\SysWow64\ArcVCapRender\uArcCapture.exe
C:\WINDOWS\system32\valWBFPolicyService.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
C:\Windows\system32\vcsFPService.exe
"C:\Program Files\NETGATE\Data Backup\DataBackupSrv.exe"
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /c
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avpui.exe" -hidden
taskeng.exe {5DDDEB26-AAC9-4E34-9D0C-BF78AD7FE4F6}
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
sihost.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ua /installsource core
C:\Windows\System32\InstallAgent.exe -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849}
"C:\Windows\System32\igfxtray.exe"
"C:\WINDOWS\System32\NetworkUXBroker.exe" -ServerName:Windows.Networking.UX
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\milan\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=51.0.2704.103 --handshake-handle=0x1b4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,IncidentReportingSuspiciousModuleReporting<SafeBrowsingIncidentReportingServiceFeatures,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow,WebFontsIntervention<WebFontsIntervention,*WebRTC-EnableWebRtcEcdsa<WebRTC-EnableWebRtcEcdsa,brotli-encoding<BrotliEncoding --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,RenderingPipelineThrottling<RenderingPipelineThrottling --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/AutomaticTabDiscarding/Enabled_Once_10-gen2/*BrotliEncoding/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableMediaRouter/Disabled/ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/Stable_DisplayHintTextPrePeriod1/OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/*QUIC/EnabledNoId/RenderingPipelineThrottling/Disabled/ReportCertificateErrors/ShowAndPossiblySend/ResourcePriorities/Control25PermanentA/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingIncidentReportingServiceFeatures/WithSuspiciousModuleReporting/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_68/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_11/*UMA-Uniformity-Trial-50-Percent/default/WebFontsIntervention/Enabled/WebRTC-EnableWebRtcEcdsa/Default/ --type=gpu-process --channel="6704.0.1759250737\993324793" --supports-dual-gpus=false --gpu-driver-bug-workarounds=4,13,25,46,54 --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=9.17.10.4229 --mojo-platform-channel-handle=1228 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,IncidentReportingSuspiciousModuleReporting<SafeBrowsingIncidentReportingServiceFeatures,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow,WebFontsIntervention<WebFontsIntervention,*WebRTC-EnableWebRtcEcdsa<WebRTC-EnableWebRtcEcdsa,brotli-encoding<BrotliEncoding --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,RenderingPipelineThrottling<RenderingPipelineThrottling --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/*BrotliEncoding/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Disabled/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Stable_DisplayHintTextPrePeriod1/*OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/*QUIC/EnabledNoId/*RenderingPipelineThrottling/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Control25PermanentA/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithSuspiciousModuleReporting/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_68/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_11/*UMA-Uniformity-Trial-50-Percent/default/*WebFontsIntervention/Enabled/WebRTC-EnableWebRtcEcdsa/Default/ --primordial-pipe-token=D35381B6737206B5B1B708CF9E9F31A4 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="6704.13.1580437077\31428499" --mojo-platform-channel-handle=4664 /prefetch:1
"C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,IncidentReportingSuspiciousModuleReporting<SafeBrowsingIncidentReportingServiceFeatures,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow,WebFontsIntervention<WebFontsIntervention,*WebRTC-EnableWebRtcEcdsa<WebRTC-EnableWebRtcEcdsa,brotli-encoding<BrotliEncoding --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,RenderingPipelineThrottling<RenderingPipelineThrottling --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/*BrotliEncoding/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Disabled/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Stable_DisplayHintTextPrePeriod1/*OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/*QUIC/EnabledNoId/*RenderingPipelineThrottling/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Control25PermanentA/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithSuspiciousModuleReporting/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_68/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_11/*UMA-Uniformity-Trial-50-Percent/default/*WebFontsIntervention/Enabled/WebRTC-EnableWebRtcEcdsa/Default/ --primordial-pipe-token=0E30D723319226377D85959169BDEED6 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="6704.20.1151676002\1743085557" --mojo-platform-channel-handle=3888 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,IncidentReportingSuspiciousModuleReporting<SafeBrowsingIncidentReportingServiceFeatures,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow,WebFontsIntervention<WebFontsIntervention,*WebRTC-EnableWebRtcEcdsa<WebRTC-EnableWebRtcEcdsa,brotli-encoding<BrotliEncoding --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,RenderingPipelineThrottling<RenderingPipelineThrottling --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/*BrotliEncoding/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Disabled/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Stable_DisplayHintTextPrePeriod1/*OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/*QUIC/EnabledNoId/*RenderingPipelineThrottling/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Control25PermanentA/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithSuspiciousModuleReporting/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_68/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_11/*UMA-Uniformity-Trial-50-Percent/default/*WebFontsIntervention/Enabled/WebRTC-EnableWebRtcEcdsa/Default/ --primordial-pipe-token=94C8E919CC296FCDAE6F55C08E065581 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="6704.25.974126900\294279487" --mojo-platform-channel-handle=2736 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,IncidentReportingSuspiciousModuleReporting<SafeBrowsingIncidentReportingServiceFeatures,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow,WebFontsIntervention<WebFontsIntervention,*WebRTC-EnableWebRtcEcdsa<WebRTC-EnableWebRtcEcdsa,brotli-encoding<BrotliEncoding --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,RenderingPipelineThrottling<RenderingPipelineThrottling --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/*BrotliEncoding/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Disabled/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Stable_DisplayHintTextPrePeriod1/*OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/*QUIC/EnabledNoId/*RenderingPipelineThrottling/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Control25PermanentA/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithSuspiciousModuleReporting/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_68/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_11/*UMA-Uniformity-Trial-50-Percent/default/*WebFontsIntervention/Enabled/WebRTC-EnableWebRtcEcdsa/Default/ --primordial-pipe-token=4FAE3C394B8A00B6CA1F1ACCD4E88B33 --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="6704.28.1780202340\5518785" --mojo-platform-channel-handle=4152 /prefetch:1
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 636 640 648 8192 644
"C:\Program Files\totalcmd\TOTALCMD.EXE"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3748969029-1923012692-3726554447-10009_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3748969029-1923012692-3726554447-10009 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"D:\instal\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD}]
Virtual Keyboard Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2016-03-22 1871864]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{93BC2EA7-2F17-4729-948A-D2E03FFB2412}]
Content Blocker Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2016-03-22 1871864]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB379017-4C03-4E00-8EDF-E6D6AF7CCF82}]
Safe Money Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2016-03-22 1871864]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29 767280]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD}]
Virtual Keyboard Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2016-03-22 1705976]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6FE6A929-59D1-4763-91AD-29B61CFFB35B}]
CmjBrowserHelperObject Object - C:\Program Files (x86)\Mindjet\MindManager 14\Mm8InternetExplorer.dll [2013-09-06 82248]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{93BC2EA7-2F17-4729-948A-D2E03FFB2412}]
Content Blocker Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2016-03-22 1705976]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB379017-4C03-4E00-8EDF-E6D6AF7CCF82}]
Safe Money Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2016-03-22 1705976]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2015-02-04 41760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2015-06-01 183216]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2015-06-01 411056]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2015-06-01 453552]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-09-20 1664000]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-07-03 3944136]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NETGATEDataBackup"=C:\Program Files\NETGATE\Data Backup\DataBackup.exe [2013-06-21 2153288]
"OneDrive"=C:\Users\milan\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-04-30 554176]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-04-15 8698584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
C:\Program Files\BitComet\BitComet.exe [2013-12-31 17257648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2016-04-15 8698584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dropbox]
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2016-07-05 24204648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\Windows\system32\hkcmd.exe [2015-06-01 411056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAStorIcon]
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MMReminderService]
C:\Program Files (x86)\Mindjet\MindManager 14\MMReminderService.exe [2013-09-06 42312]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QLBController]
C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2012-03-14 319360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe /autoRun []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-03-01 50676864]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SysTrayApp]
C:\Program Files\IDT\WDM\sttray64.exe [2012-09-20 1664000]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^milan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Sledovat výstrahy inkoustu - HP Deskjet 3050A J611 series.lnk]
C:\Windows\system32\RunDll32.exe [2015-10-30 59392]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2016-07-05 24204648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2015-06-01 451584]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=28
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-08-02 09:15:45 ----D---- C:\rsit
2016-07-19 17:38:40 ----SHD---- C:\Config.Msi
2016-07-18 19:31:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-07-18 19:31:20 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-07-18 19:31:19 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-07-18 19:31:19 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-07-18 19:31:18 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-07-18 19:31:17 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-07-18 19:31:16 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2016-07-18 19:31:16 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2016-07-18 19:31:16 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2016-07-18 19:31:16 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-07-18 19:31:16 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2016-07-18 19:31:16 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2016-07-18 19:31:16 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2016-07-18 19:31:16 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2016-07-18 19:31:16 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-07-18 19:31:15 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-07-18 19:31:14 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-07-18 19:31:08 ----A---- C:\WINDOWS\system32\wmp.dll
2016-07-18 19:31:07 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-07-18 19:31:06 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-07-18 19:31:05 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-07-18 19:31:04 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-07-18 19:31:04 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-07-18 19:31:03 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-07-18 19:31:02 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-07-18 19:31:02 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-07-18 19:31:02 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-07-18 19:31:01 ----A---- C:\WINDOWS\system32\sppobjs.dll
2016-07-18 19:31:01 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-07-18 19:31:01 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-07-18 19:31:01 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-07-18 19:31:00 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-07-18 19:31:00 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-07-18 19:30:59 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-07-18 19:30:58 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-07-18 19:30:57 ----A---- C:\WINDOWS\system32\localspl.dll
2016-07-18 19:30:57 ----A---- C:\WINDOWS\system32\authui.dll
2016-07-18 19:30:56 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-07-18 19:30:56 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-07-18 19:30:56 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2016-07-18 19:30:56 ----A---- C:\WINDOWS\system32\provhandlers.dll
2016-07-18 19:30:56 ----A---- C:\WINDOWS\system32\provengine.dll
2016-07-18 19:30:56 ----A---- C:\WINDOWS\system32\ole32.dll
2016-07-18 19:30:56 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-07-18 19:30:56 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-07-18 19:30:56 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-07-18 19:30:56 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-07-18 19:30:56 ----A---- C:\WINDOWS\system32\aadtb.dll
2016-07-18 19:30:55 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-07-18 19:30:55 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-07-18 19:30:55 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-07-18 19:30:55 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-07-18 19:30:55 ----A---- C:\WINDOWS\system32\winmde.dll
2016-07-18 19:30:55 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-07-18 19:30:55 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2016-07-18 19:30:55 ----A---- C:\WINDOWS\system32\sppwinob.dll
2016-07-18 19:30:55 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-07-18 19:30:55 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-07-18 19:30:55 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-07-18 19:30:55 ----A---- C:\WINDOWS\system32\d3d9.dll
2016-07-18 19:30:54 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-07-18 19:30:54 ----A---- C:\WINDOWS\system32\provops.dll
2016-07-18 19:30:54 ----A---- C:\WINDOWS\system32\propsys.dll
2016-07-18 19:30:54 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-07-18 19:30:54 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-07-18 19:30:53 ----A---- C:\WINDOWS\SYSWOW64\xpsservices.dll
2016-07-18 19:30:53 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-07-18 19:30:53 ----A---- C:\WINDOWS\system32\twinapi.dll
2016-07-18 19:30:53 ----A---- C:\WINDOWS\system32\dui70.dll
2016-07-18 19:30:53 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2016-07-18 19:30:52 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2016-07-18 19:30:52 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2016-07-18 19:30:52 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-07-18 19:30:52 ----A---- C:\WINDOWS\system32\wpdshext.dll
2016-07-18 19:30:52 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-07-18 19:30:52 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-07-18 19:30:52 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-07-18 19:30:52 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-07-18 19:30:52 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-07-18 19:30:52 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-07-18 19:30:52 ----A---- C:\WINDOWS\system32\SHCore.dll
2016-07-18 19:30:52 ----A---- C:\WINDOWS\system32\comdlg32.dll
2016-07-18 19:30:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2016-07-18 19:30:51 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2016-07-18 19:30:51 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2016-07-18 19:30:51 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-07-18 19:30:51 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2016-07-18 19:30:51 ----A---- C:\WINDOWS\system32\WindowsCodecsExt.dll
2016-07-18 19:30:51 ----A---- C:\WINDOWS\system32\webio.dll
2016-07-18 19:30:51 ----A---- C:\WINDOWS\system32\StikyNot.exe
2016-07-18 19:30:51 ----A---- C:\WINDOWS\system32\inetpp.dll
2016-07-18 19:30:51 ----A---- C:\WINDOWS\system32\dxtrans.dll
2016-07-18 19:30:51 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-07-18 19:30:51 ----A---- C:\WINDOWS\system32\cdd.dll
2016-07-18 19:30:50 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2016-07-18 19:30:50 ----A---- C:\WINDOWS\SYSWOW64\ActionCenterCPL.dll
2016-07-18 19:30:50 ----A---- C:\WINDOWS\system32\ntprint.dll
2016-07-18 19:30:50 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-07-18 19:30:50 ----A---- C:\WINDOWS\system32\duser.dll
2016-07-18 19:30:50 ----A---- C:\WINDOWS\system32\d3d10.dll
2016-07-18 19:30:49 ----A---- C:\WINDOWS\SYSWOW64\wlanui.dll
2016-07-18 19:30:49 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2016-07-18 19:30:49 ----A---- C:\WINDOWS\system32\WPDShServiceObj.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\SYSWOW64\WPDShServiceObj.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\SYSWOW64\wpdshext.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SmartCards.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Picker.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\SYSWOW64\PlayToReceiver.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\SYSWOW64\netplwiz.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\SYSWOW64\netcenter.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\SYSWOW64\dot3ui.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\system32\winsrv.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\system32\RADCUI.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\system32\d3d10_1.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-07-18 19:30:48 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2016-07-18 19:30:47 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-07-18 19:30:47 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-07-18 19:30:47 ----A---- C:\WINDOWS\system32\twinui.dll
2016-07-18 19:30:46 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-07-18 19:30:46 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-07-18 19:30:45 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-07-18 19:30:45 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-07-18 19:30:44 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-07-18 19:30:44 ----A---- C:\WINDOWS\system32\wininet.dll
2016-07-18 19:30:44 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-07-18 19:30:44 ----A---- C:\WINDOWS\explorer.exe
2016-07-18 19:30:43 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-07-18 19:30:43 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-07-18 19:30:43 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-07-18 19:30:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2016-07-18 19:30:42 ----A---- C:\WINDOWS\system32\Wpc.dll
2016-07-18 19:30:42 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-07-18 19:30:42 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-07-18 19:30:41 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-07-18 19:30:41 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-07-18 19:30:41 ----A---- C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-07-18 19:30:41 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2016-07-18 19:30:41 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-07-18 19:30:40 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2016-07-18 19:30:40 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2016-07-18 19:30:40 ----A---- C:\WINDOWS\system32\WpcMon.exe
2016-07-18 19:30:40 ----A---- C:\WINDOWS\system32\samsrv.dll
2016-07-18 19:30:40 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-07-18 19:30:40 ----A---- C:\WINDOWS\system32\dcomp.dll
2016-07-18 19:30:40 ----A---- C:\WINDOWS\system32\crypt32.dll
2016-07-18 19:30:39 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2016-07-18 19:30:39 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-07-18 19:30:39 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-07-18 19:30:39 ----A---- C:\WINDOWS\system32\msxml3.dll
2016-07-18 19:30:39 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2016-07-18 19:30:39 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2016-07-18 19:30:38 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2016-07-18 19:30:38 ----A---- C:\WINDOWS\system32\wmpmde.dll
2016-07-18 19:30:38 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2016-07-18 19:30:38 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-07-18 19:30:38 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-07-18 19:30:38 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2016-07-18 19:30:37 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2016-07-18 19:30:37 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2016-07-18 19:30:37 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2016-07-18 19:30:37 ----A---- C:\WINDOWS\system32\wwanconn.dll
2016-07-18 19:30:37 ----A---- C:\WINDOWS\system32\WLanConn.dll
2016-07-18 19:30:37 ----A---- C:\WINDOWS\system32\winipcsecproc.dll
2016-07-18 19:30:37 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2016-07-18 19:30:37 ----A---- C:\WINDOWS\system32\shutdownux.dll
2016-07-18 19:30:37 ----A---- C:\WINDOWS\system32\SettingsHandlers_Maps.dll
2016-07-18 19:30:37 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2016-07-18 19:30:37 ----A---- C:\WINDOWS\system32\gameux.dll
2016-07-18 19:30:37 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2016-07-18 19:30:37 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-07-18 19:30:37 ----A---- C:\WINDOWS\system32\DMRServer.dll
2016-07-18 19:30:37 ----A---- C:\WINDOWS\system32\dmcsps.dll
2016-07-18 19:30:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.3D.dll
2016-07-18 19:30:36 ----A---- C:\WINDOWS\system32\winipcfile.dll
2016-07-18 19:30:36 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2016-07-18 19:30:36 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2016-07-18 19:30:36 ----A---- C:\WINDOWS\system32\OneBackupHandler.dll
2016-07-18 19:30:36 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2016-07-18 19:30:36 ----A---- C:\WINDOWS\system32\hgcpl.dll
2016-07-18 19:30:36 ----A---- C:\WINDOWS\system32\cdpsvc.dll
2016-07-18 19:30:36 ----A---- C:\WINDOWS\system32\ApplicationFrame.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\SYSWOW64\mssphtb.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\wwanmm.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\themecpl.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\musdialoghandlers.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\efswrt.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\Display.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2016-07-18 19:30:35 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2016-07-18 19:30:34 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll
2016-07-18 19:30:34 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2016-07-18 19:30:34 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2016-07-18 19:30:34 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2016-07-18 19:30:34 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-07-18 19:30:34 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2016-07-18 19:30:33 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\SYSWOW64\sbe.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\SYSWOW64\ntprint.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\zipfldr.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\WmpDui.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\wlanui.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\winmsipc.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\sud.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\msieftp.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\ListSvc.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2016-07-18 19:30:33 ----A---- C:\WINDOWS\system32\credprovs.dll
2016-07-18 19:30:32 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-07-18 19:30:32 ----A---- C:\WINDOWS\SYSWOW64\msscntrs.dll
2016-07-18 19:30:32 ----A---- C:\WINDOWS\SYSWOW64\IconCodecService.dll
2016-07-18 19:30:32 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2016-07-18 19:30:32 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-07-18 19:30:32 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2016-07-18 19:30:32 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2016-07-18 19:30:32 ----A---- C:\WINDOWS\system32\werui.dll
2016-07-18 19:30:32 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-07-18 19:30:32 ----A---- C:\WINDOWS\system32\mspaint.exe
2016-07-18 19:30:32 ----A---- C:\WINDOWS\system32\FingerprintEnrollment.dll
2016-07-18 19:30:32 ----A---- C:\WINDOWS\system32\cdpreference.exe
2016-07-18 19:30:31 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-07-18 19:30:31 ----A---- C:\WINDOWS\system32\NMAA.dll
2016-07-18 19:30:31 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-07-18 19:30:31 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2016-07-18 19:30:31 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2016-07-18 19:30:31 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2016-07-18 19:30:31 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2016-07-18 19:30:30 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-07-18 19:30:29 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-07-18 19:30:29 ----A---- C:\WINDOWS\system32\mos.dll
2016-07-18 19:30:28 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-07-18 19:30:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-07-18 19:30:27 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-07-18 19:30:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-07-18 19:30:26 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-07-18 19:30:26 ----A---- C:\WINDOWS\system32\tquery.dll
2016-07-18 19:30:25 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-07-18 19:30:25 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-07-18 19:30:25 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-07-18 19:30:25 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-07-18 19:30:24 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-07-18 19:30:24 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-07-18 19:30:24 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-07-18 19:30:24 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2016-07-18 19:30:24 ----A---- C:\WINDOWS\system32\MosStorage.dll
2016-07-18 19:30:24 ----A---- C:\WINDOWS\system32\moshostcore.dll
2016-07-18 19:30:24 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2016-07-18 19:30:24 ----A---- C:\WINDOWS\system32\moshost.dll
2016-07-18 19:30:24 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2016-07-18 19:30:24 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2016-07-18 19:30:24 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2016-07-18 19:30:24 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-07-18 19:30:23 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-07-18 19:30:23 ----A---- C:\WINDOWS\system32\wpncore.dll
2016-07-18 19:30:23 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2016-07-18 19:30:23 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2016-07-18 19:30:23 ----A---- C:\WINDOWS\system32\mssrch.dll
2016-07-18 19:30:23 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-07-18 19:30:22 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-07-18 19:30:22 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2016-07-18 19:30:22 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2016-07-18 19:30:22 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2016-07-18 19:30:22 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2016-07-18 19:30:22 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-07-18 19:30:22 ----A---- C:\WINDOWS\system32\SRH.dll
2016-07-18 19:30:22 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-07-18 19:30:22 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2016-07-18 19:30:22 ----A---- C:\WINDOWS\system32\mf.dll
2016-07-18 19:30:22 ----A---- C:\WINDOWS\system32\diagperf.dll
2016-07-18 19:30:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-07-18 19:30:21 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2016-07-18 19:30:21 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-07-18 19:30:21 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2016-07-18 19:30:21 ----A---- C:\WINDOWS\system32\ShareHost.dll
2016-07-18 19:30:21 ----A---- C:\WINDOWS\system32\NotificationController.dll
2016-07-18 19:30:21 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2016-07-18 19:30:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2016-07-18 19:30:20 ----A---- C:\WINDOWS\SYSWOW64\SmartcardCredentialProvider.dll
2016-07-18 19:30:20 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2016-07-18 19:30:20 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2016-07-18 19:30:20 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-07-18 19:30:20 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-07-18 19:30:20 ----A---- C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2016-07-18 19:30:19 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2016-07-18 19:30:19 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2016-07-18 19:30:19 ----A---- C:\WINDOWS\system32\WSShared.dll
2016-07-18 19:30:19 ----A---- C:\WINDOWS\system32\wldp.dll
2016-07-18 19:30:19 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-07-18 19:30:19 ----A---- C:\WINDOWS\system32\rdpcore.dll
2016-07-18 19:30:19 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-07-18 19:30:19 ----A---- C:\WINDOWS\system32\mssphtb.dll
2016-07-18 19:30:19 ----A---- C:\WINDOWS\system32\APHostService.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\SYSWOW64\winipcsecproc.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\SYSWOW64\SyncCenter.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\SYSWOW64\Clipc.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\WSService.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\SettingMonitor.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\sbe.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\phoneactivate.exe
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\mfpmp.exe
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\fhcfg.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\edputil.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\ClipUp.exe
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-07-18 19:30:18 ----A---- C:\WINDOWS\system32\apprepapi.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\SYSWOW64\winipcfile.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BlockedShutdown.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\SYSWOW64\wiaaut.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\SYSWOW64\themeui.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\SYSWOW64\SettingMonitor.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\SYSWOW64\licensingdiag.exe
2016-07-18 19:30:17 ----A---- C:\WINDOWS\SYSWOW64\IdCtrls.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\system32\WSSync.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\system32\WSClient.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\system32\GamePanel.exe
2016-07-18 19:30:17 ----A---- C:\WINDOWS\system32\fhsettingsprovider.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\system32\fhengine.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2016-07-18 19:30:17 ----A---- C:\WINDOWS\HelpPane.exe
2016-07-18 19:30:16 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2016-07-18 19:30:16 ----A---- C:\WINDOWS\SYSWOW64\WmpDui.dll
2016-07-18 19:30:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2016-07-18 19:30:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFiDirect.dll
2016-07-18 19:30:16 ----A---- C:\WINDOWS\SYSWOW64\oemlicense.dll
2016-07-18 19:30:16 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2016-07-18 19:30:16 ----A---- C:\WINDOWS\SYSWOW64\msieftp.dll
2016-07-18 19:30:16 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2016-07-18 19:30:16 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2016-07-18 19:30:16 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2016-07-18 19:30:16 ----A---- C:\WINDOWS\system32\Windows.Speech.Pal.dll
2016-07-18 19:30:16 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2016-07-18 19:30:16 ----A---- C:\WINDOWS\system32\mssph.dll
2016-07-18 19:30:16 ----A---- C:\WINDOWS\system32\msscntrs.dll
2016-07-18 19:30:16 ----A---- C:\WINDOWS\system32\easwrt.dll
2016-07-18 19:30:15 ----A---- C:\WINDOWS\SYSWOW64\winmsipc.dll
2016-07-18 19:30:15 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-07-18 19:30:15 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-07-18 19:30:15 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-07-18 19:30:15 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2016-07-18 19:30:15 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-07-18 19:30:15 ----A---- C:\WINDOWS\system32\apprepsync.dll
2016-07-18 19:30:15 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-07-18 19:30:14 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-07-18 19:30:14 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-07-18 19:30:13 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-07-18 19:30:10 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-07-18 19:30:10 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-07-18 19:30:10 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-07-18 19:30:10 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-07-18 19:30:10 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-07-18 19:30:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-07-18 19:30:09 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-07-18 19:30:09 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2016-07-18 19:30:09 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-07-18 19:30:08 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-07-18 19:30:08 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-07-18 19:30:08 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-07-18 19:30:08 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-07-18 19:30:08 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-07-18 19:30:08 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2016-07-18 19:30:08 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2016-07-18 19:30:08 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2016-07-18 19:30:07 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2016-07-18 19:30:07 ----A---- C:\WINDOWS\SYSWOW64\MsSpellCheckingFacility.dll
2016-07-18 19:30:07 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2016-07-18 19:30:07 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2016-07-18 19:30:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2016-07-18 19:30:06 ----A---- C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2016-07-18 19:30:06 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-07-18 19:30:03 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-07-18 19:30:02 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2016-07-18 19:30:02 ----A---- C:\WINDOWS\SYSWOW64\Taskmgr.exe
2016-07-18 19:30:02 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2016-07-18 19:30:02 ----A---- C:\WINDOWS\system32\pnidui.dll
2016-07-18 19:30:02 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-07-18 19:30:02 ----A---- C:\WINDOWS\system32\eappcfg.dll
2016-07-18 19:30:02 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-07-18 19:30:01 ----A---- C:\WINDOWS\system32\WindowsCodecsRaw.dll
2016-07-18 19:29:59 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsRaw.dll
2016-07-18 19:29:58 ----A---- C:\WINDOWS\SYSWOW64\SimCfg.dll
2016-07-18 19:29:58 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2016-07-18 19:29:58 ----A---- C:\WINDOWS\system32\SimCfg.dll
2016-07-18 19:29:58 ----A---- C:\WINDOWS\system32\rasapi32.dll
2016-07-18 19:29:58 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-07-18 19:29:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2016-07-18 19:29:57 ----A---- C:\WINDOWS\SYSWOW64\taskeng.exe
2016-07-18 19:29:57 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2016-07-18 19:29:57 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2016-07-18 19:29:57 ----A---- C:\WINDOWS\system32\usercpl.dll
2016-07-18 19:29:57 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2016-07-18 19:29:57 ----A---- C:\WINDOWS\system32\SimAuth.dll
2016-07-18 19:29:57 ----A---- C:\WINDOWS\system32\schtasks.exe
2016-07-18 19:29:57 ----A---- C:\WINDOWS\system32\netshell.dll
2016-07-18 19:29:57 ----A---- C:\WINDOWS\system32\certcli.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\SYSWOW64\wldp.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\SYSWOW64\taskcomp.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-07-18 19:29:56 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\system32\themeui.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\system32\ExecModelClient.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-07-18 19:29:56 ----A---- C:\WINDOWS\system32\Clipc.dll
2016-07-18 19:29:55 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsExt.dll
2016-07-18 19:29:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2016-07-18 19:29:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2016-07-18 19:29:55 ----A---- C:\WINDOWS\SYSWOW64\SimAuth.dll
2016-07-18 19:29:55 ----A---- C:\WINDOWS\SYSWOW64\schtasks.exe
2016-07-18 19:29:55 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2016-07-18 19:29:55 ----A---- C:\WINDOWS\system32\Windows.Storage.Search.dll
2016-07-18 19:29:55 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-07-18 19:29:55 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-07-18 19:29:55 ----A---- C:\WINDOWS\system32\netplwiz.dll
2016-07-18 19:29:55 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-07-18 19:29:55 ----A---- C:\WINDOWS\system32\licensingdiag.exe
2016-07-18 19:29:55 ----A---- C:\WINDOWS\system32\eappgnui.dll
2016-07-18 19:29:55 ----A---- C:\WINDOWS\system32\dmdskmgr.dll
2016-07-18 19:29:55 ----A---- C:\WINDOWS\system32\ActionCenterCPL.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\SYSWOW64\WSSync.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\SYSWOW64\WSClient.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryClient.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.Speech.Pal.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\SYSWOW64\edputil.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\SYSWOW64\eappprxy.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\system32\PhotoScreensaver.scr
2016-07-18 19:29:54 ----A---- C:\WINDOWS\system32\oemlicense.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\system32\ieui.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\system32\IconCodecService.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\system32\eappprxy.dll
2016-07-18 19:29:54 ----A---- C:\WINDOWS\system32\eapphost.dll
2016-07-18 19:29:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryBroker.dll
2016-07-18 19:29:53 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2016-07-18 19:29:53 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2016-07-18 19:29:53 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2016-07-18 19:29:53 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2016-07-18 19:29:53 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2016-07-18 19:29:52 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-07-18 19:29:52 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS
2016-07-18 19:29:52 ----A---- C:\WINDOWS\system32\drivers\bthenum.sys
2016-07-18 19:29:49 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-07-18 19:29:48 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-07-18 19:29:48 ----A---- C:\WINDOWS\system32\sppsvc.exe
2016-07-18 19:29:46 ----A---- C:\WINDOWS\system32\shell32.dll
2016-07-18 19:29:46 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2016-07-18 19:29:44 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-07-18 19:29:44 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-07-18 19:29:44 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-07-18 19:29:44 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-07-18 19:29:44 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-07-18 19:29:44 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-07-18 19:29:44 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-07-18 19:29:44 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-07-18 19:29:43 ----A---- C:\WINDOWS\system32\devinv.dll
2016-07-18 19:29:43 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-07-18 19:29:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-07-18 19:29:42 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-07-18 19:29:41 ----A---- C:\WINDOWS\system32\invagent.dll
2016-07-18 19:29:41 ----A---- C:\WINDOWS\system32\dbgeng.dll
2016-07-18 19:29:40 ----A---- C:\WINDOWS\system32\xpsservices.dll
2016-07-18 19:29:40 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-07-18 19:29:40 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2016-07-18 19:29:40 ----A---- C:\WINDOWS\system32\PrintDialogs3D.dll
2016-07-18 19:29:40 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-07-18 19:29:40 ----A---- C:\WINDOWS\system32\aepic.dll
2016-07-18 19:29:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2016-07-18 19:29:39 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2016-07-18 19:29:39 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2016-07-18 19:29:39 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-07-18 19:29:39 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-07-18 19:29:39 ----A---- C:\WINDOWS\system32\wmicmiplugin.dll
2016-07-18 19:29:39 ----A---- C:\WINDOWS\system32\werconcpl.dll
2016-07-18 19:29:39 ----A---- C:\WINDOWS\system32\usocore.dll
2016-07-18 19:29:39 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2016-07-18 19:29:39 ----A---- C:\WINDOWS\system32\uDWM.dll
2016-07-18 19:29:39 ----A---- C:\WINDOWS\system32\taskeng.exe
2016-07-18 19:29:39 ----A---- C:\WINDOWS\system32\MusNotification.exe
2016-07-18 19:29:39 ----A---- C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2016-07-18 19:29:39 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2016-07-18 19:29:38 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2016-07-18 19:29:38 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-07-18 19:29:38 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-07-18 19:29:38 ----A---- C:\WINDOWS\SYSWOW64\mfpmp.exe
2016-07-18 19:29:38 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2016-07-18 19:29:38 ----A---- C:\WINDOWS\SYSWOW64\dmdskmgr.dll
2016-07-18 19:29:38 ----A---- C:\WINDOWS\system32\winresume.exe
2016-07-18 19:29:38 ----A---- C:\WINDOWS\system32\winload.exe
2016-07-18 19:29:38 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-07-18 19:29:38 ----A---- C:\WINDOWS\system32\Windows.Graphics.dll
2016-07-18 19:29:38 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2016-07-18 19:29:38 ----A---- C:\WINDOWS\system32\sdengin2.dll
2016-07-18 19:29:38 ----A---- C:\WINDOWS\system32\ntshrui.dll
2016-07-18 19:29:38 ----A---- C:\WINDOWS\system32\netcenter.dll
2016-07-18 19:29:38 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2016-07-18 19:29:38 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-07-18 19:29:38 ----A---- C:\WINDOWS\system32\dot3ui.dll
2016-07-18 19:29:38 ----A---- C:\WINDOWS\system32\dlnashext.dll
2016-07-18 19:29:37 ----A---- C:\WINDOWS\system32\taskcomp.dll
2016-07-18 19:29:37 ----A---- C:\WINDOWS\system32\PrintDialogs.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\SYSWOW64\WLanConn.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.Search.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\SYSWOW64\ProximityCommon.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\SYSWOW64\ExecModelClient.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\SYSWOW64\duser.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\SYSWOW64\credprovs.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\system32\wiaaut.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\system32\sdshext.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\system32\sdrsvc.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\system32\rasgcw.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\system32\LegacyNetUXHost.exe
2016-07-18 19:29:36 ----A---- C:\WINDOWS\system32\LegacyNetUX.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-07-18 19:29:36 ----A---- C:\WINDOWS\system32\actxprxy.dll
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
prosim o kontrolu NTB
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Time2Groove
- 2. Stupeň Varování
- Příspěvky: 147
- Registrován: 23 říj 2005 18:22
Přispějete na provoz fóra?