VIRY.CZ

Zdravím, prosil by som o preventívnu kontrolu.

Logfile of random's system information tool 1.10 (written by random/random)
Run by mifo at 2016-09-20 16:09:23
Microsoft Windows 10 Home
System drive C: has 74 GB (33%) free of 228 GB
Total RAM: 6125 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:09:31, on 20. 9. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\IObit\Advanced SystemCare\AutoCare.exe
C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe
C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe
C:\Program Files (x86)\Opera\39.0.2256.71\opera_crashreporter.exe
C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe
C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe
C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe
C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe
C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe
C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe
C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe
C:\Program Files\trend micro\mifo.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKCU\..\Run: [Advanced SystemCare 9] "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\Program Files\Microsoft Office\Office15\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 9 (AdvancedSystemCareService9) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8148 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\System32\svchost.exe -k NetworkService

"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe"
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup
C:\WINDOWS\system32\svchost.exe -k iissvcs
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
dashost.exe {8d22ca91-94b5-4425-b07a923a14158e28}
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"

C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 55b9c430-c60f-4c4f-8d55-e47fb6bd1eb0 1
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\WINDOWS\system32\AUDIODG.EXE 0x33c
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
C:\Windows\System32\InstallAgent.exe -Embedding
C:\Windows\System32\InstallAgentUserBroker.exe -Embedding
"C:\Program Files (x86)\IObit\Advanced SystemCare\AutoCare.exe" /autorun /AdvanceScan
"C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe" /scheduler
C:\WINDOWS\system32\DllHost.exe /Processid:{49F6E667-6658-4BD1-9DE9-6AF87F9FAF85}
"C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\39.0.2256.71\opera_crashreporter.exe" --ran-launcher --crash-reporter-parent-id=5208
"C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe" --type=gpu-process --channel="5208.0.2091329341\918619863" --mojo-application-channel-token=B05A3DEA90014803F1CC2A35F63A280A --enable-features=DownloadResumption --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=6516 --supports-dual-gpus=false --gpu-driver-bug-workarounds=4,13,27,55,71 --gpu-vendor-id=0x10de --gpu-device-id=0x0df4 --gpu-driver-vendor=NVIDIA --gpu-driver-version=21.21.13.6909 --gpu-driver-date=8-1-2016 --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=6516 --mojo-platform-channel-handle=1424 --ignored=" --type=renderer "
"C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --enable-features=DownloadResumption --primordial-pipe-token=4263452EF8430BAEDE45713BA8326B9D --lang=sk --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=6516 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=CCE0FF86051D4D6B50C102B05DAD9690 --mojo-application-channel-token=2F9A2BB472F8E48D2B55198EAB4C889B --channel="5208.2.822813234\2058277908" --mojo-platform-channel-handle=2100
"C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --enable-features=DownloadResumption --primordial-pipe-token=F83454A17A6A5BC8731744845771ECC4 --lang=sk --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=6516 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=2072301817740A83AC1F9BF0D8A82A91 --mojo-application-channel-token=09BF6B7FDCDED3A24E1D7F9A620DF1C9 --channel="5208.3.1232779216\604155767" --mojo-platform-channel-handle=2452
"C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --enable-features=DownloadResumption --primordial-pipe-token=53674E177D4C3471A618D676B62F64C7 --lang=sk --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=6516 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=89AB64C28C95D315966780634217FFB3 --mojo-application-channel-token=32E70B4E8DD725428E56617222540955 --channel="5208.4.686370696\293003581" --mojo-platform-channel-handle=2432
"C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --enable-features=DownloadResumption --primordial-pipe-token=E75F66851C7117F8E5F7ED7DFE1DDDF3 --lang=sk --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=6516 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=699475D43E1BECDD05DC14322E7F1489 --mojo-application-channel-token=A63DEAD4C325E4983C785C92ABF3E9BE --channel="5208.5.419296378\1638902073" --mojo-platform-channel-handle=2680
"C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --enable-features=DownloadResumption --primordial-pipe-token=AE617A5A70963B7253C58779FF31F451 --lang=sk --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=6516 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=4E10940253E0DCCBEA62EED88128314B --mojo-application-channel-token=349F1B202FD93880F962AFA3749EB595 --channel="5208.7.1643607769\1995654876" --mojo-platform-channel-handle=5064
"C:\Program Files (x86)\Opera\39.0.2256.71\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --enable-features=DownloadResumption --primordial-pipe-token=1746E0F9CCE45983CB9A26C45EAF113C --lang=sk --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=6516 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=621837B6FFE618270C31BFA070C52F92 --mojo-application-channel-token=21C786FCF0AC7A732814340681A3DCD6 --channel="5208.8.1903706952\1484085343" --mojo-platform-channel-handle=4904

"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 660 664 672 8192 668
"C:\Users\mifo\AppData\Local\Temp\scoped_dir5208_6033\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player PPAPI Notifier.job - C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_23_0_0_162_pepper.exe -check pepperplugin
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\ASC9_SkipUac_mifo.job - C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe /SkipUac

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-08-27 229064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2016-08-16 1743664]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-06-14 1429248]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2015-07-08 5595848]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-08-03 1803848]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-06-14 16475392]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-08-21 3952800]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 9"=C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [2015-11-30 2010912]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-12-08 8590760]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
"vidc.mjpg"=bdmjpeg64.dll
"vidc.mpeg"=bdmpegv64.dll
"msacm.bdmpeg"=bdmpega64.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-09-20 16:09:23 ----D---- C:\rsit
2016-09-20 16:09:23 ----D---- C:\Program Files\trend micro
2016-09-17 02:33:17 ----D---- C:\WINDOWS\PCHEALTH
2016-09-17 02:31:06 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2016-09-17 02:31:05 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2016-09-17 02:31:03 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2016-09-17 02:31:03 ----A---- C:\WINDOWS\system32\setupugc.exe
2016-09-17 02:31:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2016-09-17 02:31:02 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-09-17 02:31:02 ----A---- C:\WINDOWS\SYSWOW64\Chakrathunk.dll
2016-09-17 02:31:02 ----A---- C:\WINDOWS\SYSWOW64\eappprxy.dll
2016-09-17 02:31:02 ----A---- C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2016-09-17 02:31:02 ----A---- C:\WINDOWS\system32\ole32.dll
2016-09-17 02:31:01 ----A---- C:\WINDOWS\system32\winresume.exe
2016-09-17 02:31:01 ----A---- C:\WINDOWS\system32\sspicli.dll
2016-09-17 02:31:01 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-09-17 02:31:00 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2016-09-17 02:31:00 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2016-09-17 02:31:00 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2016-09-17 02:31:00 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-09-17 02:30:59 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-09-17 02:30:59 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-09-17 02:30:59 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-09-17 02:30:57 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-09-17 02:30:57 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-09-17 02:30:56 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2016-09-17 02:30:56 ----A---- C:\WINDOWS\SYSWOW64\PhoneutilRes.dll
2016-09-17 02:30:56 ----A---- C:\WINDOWS\SYSWOW64\msxml6r.dll
2016-09-17 02:30:56 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2016-09-17 02:30:56 ----A---- C:\WINDOWS\SYSWOW64\MapControlStringsRes.dll
2016-09-17 02:30:56 ----A---- C:\WINDOWS\system32\tzres.dll
2016-09-17 02:30:56 ----A---- C:\WINDOWS\system32\PhoneutilRes.dll
2016-09-17 02:30:56 ----A---- C:\WINDOWS\system32\PhoneServiceRes.dll
2016-09-17 02:30:56 ----A---- C:\WINDOWS\system32\msxml6r.dll
2016-09-17 02:30:56 ----A---- C:\WINDOWS\system32\MapControlStringsRes.dll
2016-09-17 02:30:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2016-09-17 02:30:55 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2016-09-17 02:30:55 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2016-09-17 02:30:55 ----A---- C:\WINDOWS\system32\EncDec.dll
2016-09-17 02:30:55 ----A---- C:\WINDOWS\system32\CPFilters.dll
2016-09-17 02:30:54 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-09-17 02:30:54 ----A---- C:\WINDOWS\system32\CastLaunch.dll
2016-09-17 02:30:53 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2016-09-17 02:30:53 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-09-17 02:30:53 ----A---- C:\WINDOWS\SYSWOW64\PlayToReceiver.dll
2016-09-17 02:30:53 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-09-17 02:30:53 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-09-17 02:30:53 ----A---- C:\WINDOWS\system32\XamlTileRender.dll
2016-09-17 02:30:53 ----A---- C:\WINDOWS\system32\winsrv.dll
2016-09-17 02:30:53 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-09-17 02:30:53 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-09-17 02:30:53 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-09-17 02:30:53 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2016-09-17 02:30:53 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-09-17 02:30:52 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-17 02:30:52 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2016-09-17 02:30:52 ----A---- C:\WINDOWS\SYSWOW64\ClipboardServer.dll
2016-09-17 02:30:52 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-09-17 02:30:52 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-17 02:30:52 ----A---- C:\WINDOWS\system32\win32k.sys
2016-09-17 02:30:52 ----A---- C:\WINDOWS\system32\DscCore.dll
2016-09-17 02:30:52 ----A---- C:\WINDOWS\system32\ClipboardServer.dll
2016-09-17 02:30:52 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-09-17 02:30:51 ----A---- C:\WINDOWS\SYSWOW64\win32k.sys
2016-09-17 02:30:51 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-09-17 02:30:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2016-09-17 02:30:50 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-09-17 02:30:50 ----A---- C:\WINDOWS\system32\wups2.dll
2016-09-17 02:30:50 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-09-17 02:30:49 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2016-09-17 02:30:48 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-09-17 02:30:47 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2016-09-17 02:30:47 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2016-09-17 02:30:47 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-09-17 02:30:47 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2016-09-17 02:30:47 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2016-09-17 02:30:37 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2016-09-17 02:30:37 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-09-17 02:30:37 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-09-17 02:30:36 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-09-17 02:30:36 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-09-17 02:30:35 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-09-17 02:30:35 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-09-17 02:30:35 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-09-17 02:30:35 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-09-17 02:30:34 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-09-17 02:30:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-09-17 02:30:31 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2016-09-17 02:30:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Perception.dll
2016-09-17 02:30:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.dll
2016-09-17 02:30:29 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-09-17 02:30:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-09-17 02:30:28 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2016-09-17 02:30:26 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2016-09-17 02:30:26 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2016-09-17 02:30:26 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-09-17 02:30:25 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2016-09-17 02:30:25 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-09-17 02:30:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-09-17 02:30:25 ----A---- C:\WINDOWS\SYSWOW64\win32u.dll
2016-09-17 02:30:24 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2016-09-17 02:30:24 ----A---- C:\WINDOWS\SYSWOW64\DbgModel.dll
2016-09-17 02:30:24 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2016-09-17 02:30:23 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-09-17 02:30:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2016-09-17 02:30:22 ----A---- C:\WINDOWS\SYSWOW64\wmpmde.dll
2016-09-17 02:30:22 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2016-09-17 02:30:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-09-17 02:30:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-09-17 02:30:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2016-09-17 02:30:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BlockedShutdown.dll
2016-09-17 02:30:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2016-09-17 02:30:20 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2016-09-17 02:30:20 ----A---- C:\WINDOWS\SYSWOW64\UserDataTypeHelperUtil.dll
2016-09-17 02:30:20 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-09-17 02:30:20 ----A---- C:\WINDOWS\SYSWOW64\UserDataPlatformHelperUtil.dll
2016-09-17 02:30:20 ----A---- C:\WINDOWS\SYSWOW64\UserDataLanguageUtil.dll
2016-09-17 02:30:20 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccessRes.dll
2016-09-17 02:30:20 ----A---- C:\WINDOWS\SYSWOW64\POSyncServices.dll
2016-09-17 02:30:20 ----A---- C:\WINDOWS\SYSWOW64\ExtrasXmlParser.dll
2016-09-17 02:30:20 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2016-09-17 02:30:20 ----A---- C:\WINDOWS\SYSWOW64\ContactActivation.dll
2016-09-17 02:30:20 ----A---- C:\WINDOWS\SYSWOW64\AppointmentActivation.dll
2016-09-17 02:30:20 ----A---- C:\WINDOWS\SYSWOW64\AddressParser.dll
2016-09-17 02:30:19 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-09-17 02:30:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-09-17 02:30:18 ----A---- C:\WINDOWS\SYSWOW64\Phoneutil.dll
2016-09-17 02:30:18 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2016-09-17 02:30:17 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2016-09-17 02:30:15 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-09-17 02:30:15 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-09-17 02:30:14 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-09-17 02:30:14 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-09-17 02:30:14 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-09-17 02:30:14 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2016-09-17 02:30:14 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2016-09-17 02:30:13 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-09-17 02:30:13 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2016-09-17 02:30:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-09-17 02:30:12 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-09-17 02:30:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2016-09-17 02:30:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2016-09-17 02:30:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.3D.dll
2016-09-17 02:30:10 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2016-09-17 02:30:10 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2016-09-17 02:30:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2016-09-17 02:30:09 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-09-17 02:30:09 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2016-09-17 02:30:08 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-09-17 02:30:08 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-09-17 02:30:08 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-09-17 02:30:08 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-09-17 02:30:07 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-09-17 02:30:05 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-09-17 02:30:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2016-09-17 02:30:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-09-17 02:30:05 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-09-17 02:30:05 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2016-09-17 02:30:04 ----A---- C:\WINDOWS\SYSWOW64\NmaDirect.dll
2016-09-17 02:30:04 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2016-09-17 02:30:04 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2016-09-17 02:30:04 ----A---- C:\WINDOWS\SYSWOW64\MosResource.dll
2016-09-17 02:30:04 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2016-09-17 02:30:03 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-09-17 02:30:03 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MosTrace.dll
2016-09-17 02:30:03 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MosHost.dll
2016-09-17 02:30:03 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MapControls.dll
2016-09-17 02:30:03 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2016-09-17 02:30:03 ----A---- C:\WINDOWS\SYSWOW64\MapRouter.dll
2016-09-17 02:30:02 ----A---- C:\WINDOWS\SYSWOW64\MapGeocoder.dll
2016-09-17 02:30:02 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2016-09-17 02:30:02 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2016-09-17 02:30:02 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2016-09-17 02:30:02 ----A---- C:\WINDOWS\SYSWOW64\BingOnlineServices.dll
2016-09-17 02:30:01 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-09-17 02:30:00 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-09-17 02:30:00 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-09-17 02:29:59 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2016-09-17 02:29:59 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-09-17 02:29:59 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2016-09-17 02:29:59 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-09-17 02:29:59 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-09-17 02:29:57 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-09-17 02:29:56 ----A---- C:\WINDOWS\SYSWOW64\indexeddbserver.dll
2016-09-17 02:29:53 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2016-09-17 02:29:53 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-09-17 02:29:51 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-09-17 02:29:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2016-09-17 02:29:49 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-09-17 02:29:49 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2016-09-17 02:29:49 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2016-09-17 02:29:49 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2016-09-17 02:29:49 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2016-09-17 02:29:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-09-17 02:29:47 ----A---- C:\WINDOWS\SYSWOW64\DeviceFlows.DataModel.dll
2016-09-17 02:29:46 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-09-17 02:29:46 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-09-17 02:29:46 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-09-17 02:29:45 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-09-17 02:29:45 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-09-17 02:29:45 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-09-17 02:29:45 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2016-09-17 02:29:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2016-09-17 02:29:44 ----A---- C:\WINDOWS\SYSWOW64\MSAJApi.dll
2016-09-17 02:29:44 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-09-17 02:29:44 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2016-09-17 02:27:33 ----A---- C:\WINDOWS\system32\Windows.Devices.Perception.dll
2016-09-17 02:27:32 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.dll
2016-09-17 02:27:31 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-09-17 02:27:30 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2016-09-17 02:27:29 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-09-17 02:27:26 ----A---- C:\WINDOWS\system32\GamePanel.exe
2016-09-17 02:27:25 ----A---- C:\WINDOWS\system32\wwanmm.dll
2016-09-17 02:27:25 ----A---- C:\WINDOWS\system32\wwanconn.dll
2016-09-17 02:27:24 ----A---- C:\WINDOWS\system32\wsp_health.dll
2016-09-17 02:27:24 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2016-09-17 02:27:23 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-09-17 02:27:23 ----A---- C:\WINDOWS\system32\winmde.dll
2016-09-17 02:27:23 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-09-17 02:27:22 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-09-17 02:27:22 ----A---- C:\WINDOWS\system32\win32u.dll
2016-09-17 02:27:22 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-09-17 02:27:22 ----A---- C:\WINDOWS\system32\wifitask.exe
2016-09-17 02:27:21 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-09-17 02:27:21 ----A---- C:\WINDOWS\system32\wificonnapi.dll
2016-09-17 02:27:21 ----A---- C:\WINDOWS\system32\DbgModel.dll
2016-09-17 02:27:20 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-09-17 02:27:20 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2016-09-17 02:27:20 ----A---- C:\WINDOWS\system32\dbgeng.dll
2016-09-17 02:27:19 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-09-17 02:27:18 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-09-17 02:27:17 ----A---- C:\WINDOWS\system32\wmpmde.dll
2016-09-17 02:27:17 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-09-17 02:27:17 ----A---- C:\WINDOWS\system32\usercpl.dll
2016-09-17 02:27:17 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2016-09-17 02:27:17 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-09-17 02:27:12 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-09-17 02:27:11 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-09-17 02:27:11 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-09-17 02:27:11 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-09-17 02:27:11 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-09-17 02:27:09 ----A---- C:\WINDOWS\system32\VCardParser.dll
2016-09-17 02:27:09 ----A---- C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-09-17 02:27:09 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-09-17 02:27:09 ----A---- C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-09-17 02:27:09 ----A---- C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-09-17 02:27:09 ----A---- C:\WINDOWS\system32\UserDataAccessRes.dll
2016-09-17 02:27:09 ----A---- C:\WINDOWS\system32\POSyncServices.dll
2016-09-17 02:27:09 ----A---- C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-09-17 02:27:09 ----A---- C:\WINDOWS\system32\ExSMime.dll
2016-09-17 02:27:09 ----A---- C:\WINDOWS\system32\ContactActivation.dll
2016-09-17 02:27:09 ----A---- C:\WINDOWS\system32\AppointmentActivation.dll
2016-09-17 02:27:09 ----A---- C:\WINDOWS\system32\AddressParser.dll
2016-09-17 02:27:07 ----A---- C:\WINDOWS\system32\twinui.dll
2016-09-17 02:27:07 ----A---- C:\WINDOWS\system32\Phoneutil.dll
2016-09-17 02:27:07 ----A---- C:\WINDOWS\system32\PhoneService.dll
2016-09-17 02:27:06 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-09-17 02:27:06 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2016-09-17 02:27:05 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-09-17 02:27:04 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-09-17 02:27:04 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2016-09-17 02:27:04 ----A---- C:\WINDOWS\system32\mstsc.exe
2016-09-17 02:27:04 ----A---- C:\WINDOWS\system32\msctf.dll
2016-09-17 02:27:03 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2016-09-17 02:27:03 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2016-09-17 02:27:02 ----A---- C:\WINDOWS\system32\shutdownux.dll
2016-09-17 02:27:02 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-09-17 02:27:02 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-09-17 02:27:01 ----A---- C:\WINDOWS\system32\shell32.dll
2016-09-17 02:27:00 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-09-17 02:27:00 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-09-17 02:27:00 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-09-17 02:27:00 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-09-17 02:26:59 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2016-09-17 02:26:59 ----A---- C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-09-17 02:26:58 ----A---- C:\WINDOWS\system32\sppsvc.exe
2016-09-17 02:26:58 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-09-17 02:26:58 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-09-17 02:26:58 ----A---- C:\WINDOWS\system32\aadtb.dll
2016-09-17 02:26:57 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-09-17 02:26:57 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2016-09-17 02:26:57 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-09-17 02:26:56 ----A---- C:\WINDOWS\system32\Chakrathunk.dll
2016-09-17 02:26:56 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-09-17 02:26:55 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-09-17 02:26:55 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-09-17 02:26:54 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-09-17 02:26:54 ----A---- C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-09-17 02:26:53 ----A---- C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-09-17 02:26:52 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-09-17 02:26:52 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-09-17 02:26:50 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-09-17 02:26:50 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2016-09-17 02:26:49 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-09-17 02:26:48 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-09-17 02:26:48 ----A---- C:\WINDOWS\system32\provengine.dll
2016-09-17 02:26:47 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2016-09-17 02:26:47 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-09-17 02:26:47 ----A---- C:\WINDOWS\system32\pnidui.dll
2016-09-17 02:26:47 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2016-09-17 02:26:47 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2016-09-17 02:26:45 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-09-17 02:26:44 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-09-17 02:26:44 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2016-09-17 02:26:44 ----A---- C:\WINDOWS\system32\oleaut32.dll
2016-09-17 02:26:44 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-09-17 02:26:43 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-09-17 02:26:43 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-09-17 02:26:42 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2016-09-17 02:26:42 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-09-17 02:26:42 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2016-09-17 02:26:38 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-09-17 02:26:38 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-09-17 02:26:38 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-09-17 02:26:37 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-09-17 02:26:35 ----A---- C:\WINDOWS\system32\wmp.dll
2016-09-17 02:26:35 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-09-17 02:26:35 ----A---- C:\WINDOWS\system32\mf.dll
2016-09-17 02:26:34 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-09-17 02:26:34 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-09-17 02:26:34 ----A---- C:\WINDOWS\system32\NmaDirect.dll
2016-09-17 02:26:34 ----A---- C:\WINDOWS\system32\NMAA.dll
2016-09-17 02:26:34 ----A---- C:\WINDOWS\system32\nativemap.dll
2016-09-17 02:26:34 ----A---- C:\WINDOWS\system32\MosStorage.dll
2016-09-17 02:26:34 ----A---- C:\WINDOWS\system32\MosResource.dll
2016-09-17 02:26:34 ----A---- C:\WINDOWS\system32\moshostcore.dll
2016-09-17 02:26:34 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2016-09-17 02:26:33 ----A---- C:\WINDOWS\system32\moshost.dll
2016-09-17 02:26:32 ----A---- C:\WINDOWS\system32\mos.dll
2016-09-17 02:26:32 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2016-09-17 02:26:32 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2016-09-17 02:26:32 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2016-09-17 02:26:32 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2016-09-17 02:26:32 ----A---- C:\WINDOWS\system32\mapstoasttask.dll
2016-09-17 02:26:32 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-09-17 02:26:32 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2016-09-17 02:26:32 ----A---- C:\WINDOWS\system32\MapsBtSvcProxy.dll
2016-09-17 02:26:32 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2016-09-17 02:26:31 ----A---- C:\WINDOWS\system32\MapRouter.dll
2016-09-17 02:26:31 ----A---- C:\WINDOWS\system32\MapGeocoder.dll
2016-09-17 02:26:31 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2016-09-17 02:26:31 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2016-09-17 02:26:30 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2016-09-17 02:26:30 ----A---- C:\WINDOWS\system32\BingOnlineServices.dll
2016-09-17 02:26:29 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-09-17 02:26:28 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-09-17 02:26:27 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-09-17 02:26:27 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-09-17 02:26:26 ----A---- C:\WINDOWS\system32\lsass.exe
2016-09-17 02:26:26 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2016-09-17 02:26:26 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2016-09-17 02:26:26 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-09-17 02:26:26 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-09-17 02:26:26 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-09-17 02:26:26 ----A---- C:\WINDOWS\system32\cdd.dll
2016-09-17 02:26:25 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-09-17 02:26:25 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-09-17 02:26:25 ----A---- C:\WINDOWS\system32\InputService.dll
2016-09-17 02:26:25 ----A---- C:\WINDOWS\system32\drivers\ClipSp.sys
2016-09-17 02:26:23 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-09-17 02:26:21 ----A---- C:\WINDOWS\system32\indexeddbserver.dll
2016-09-17 02:26:21 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-09-17 02:26:18 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-09-17 02:26:18 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-09-17 02:26:18 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-09-17 02:26:18 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-09-17 02:26:17 ----A---- C:\WINDOWS\system32\wininet.dll
2016-09-17 02:26:17 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-09-17 02:26:14 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-09-17 02:26:12 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-09-17 02:26:10 ----A---- C:\WINDOWS\system32\resutils.dll
2016-09-17 02:26:10 ----A---- C:\WINDOWS\system32\clusapi.dll
2016-09-17 02:26:08 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2016-09-17 02:26:08 ----A---- C:\WINDOWS\system32\evr.dll
2016-09-17 02:26:08 ----A---- C:\WINDOWS\system32\eappprxy.dll
2016-09-17 02:26:07 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-09-17 02:26:07 ----A---- C:\WINDOWS\system32\eapphost.dll
2016-09-17 02:26:07 ----A---- C:\WINDOWS\system32\eappgnui.dll
2016-09-17 02:26:07 ----A---- C:\WINDOWS\system32\eappcfg.dll
2016-09-17 02:26:07 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2016-09-17 02:26:07 ----A---- C:\WINDOWS\system32\DMRServer.dll
2016-09-17 02:26:07 ----A---- C:\WINDOWS\system32\D3D12.dll
2016-09-17 02:26:05 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-09-17 02:26:04 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-09-17 02:26:04 ----A---- C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2016-09-17 02:26:03 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-09-17 02:26:03 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-09-17 02:26:01 ----A---- C:\WINDOWS\system32\csrsrv.dll
2016-09-17 02:26:00 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-09-17 02:26:00 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-17 02:26:00 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2016-09-17 02:25:50 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-09-17 02:25:30 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-09-17 02:25:29 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2016-09-17 02:25:29 ----A---- C:\WINDOWS\system32\combase.dll
2016-09-17 02:25:29 ----A---- C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2016-09-17 02:25:19 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2016-09-17 02:25:18 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-09-17 02:25:17 ----A---- C:\WINDOWS\system32\winload.exe
2016-09-17 02:25:12 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-09-17 02:25:12 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-09-17 02:25:11 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-09-17 02:25:11 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-09-17 02:25:11 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-09-17 02:25:10 ----A---- C:\WINDOWS\system32\MSAJApi.dll
2016-09-17 02:25:10 ----A---- C:\WINDOWS\system32\aclui.dll
2016-09-17 02:25:08 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2016-09-17 02:25:08 ----A---- C:\WINDOWS\system32\invagent.dll
2016-09-17 02:25:08 ----A---- C:\WINDOWS\system32\devinv.dll
2016-09-17 02:25:08 ----A---- C:\WINDOWS\system32\authui.dll
2016-09-17 02:25:08 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-09-17 02:25:07 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-09-17 02:25:06 ----A---- C:\WINDOWS\system32\dlnashext.dll
2016-09-17 02:25:06 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2016-09-17 02:25:06 ----A---- C:\WINDOWS\system32\CloudExperienceHostUser.dll
2016-09-17 02:25:06 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-09-17 02:25:01 ----A---- C:\WINDOWS\system32\kdhvcom.dll
2016-09-17 02:25:01 ----A---- C:\WINDOWS\system32\hvloader.exe
2016-09-17 02:25:01 ----A---- C:\WINDOWS\system32\hvix64.exe
2016-09-17 02:25:01 ----A---- C:\WINDOWS\system32\drivers\hvservice.sys
2016-09-17 02:25:00 ----A---- C:\WINDOWS\system32\hvax64.exe
2016-09-17 02:24:58 ----A---- C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
2016-09-17 02:24:56 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-09-17 02:24:56 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-09-06 19:45:43 ----D---- C:\ProgramData\Sony Corporation
2016-09-05 20:34:49 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2016-09-05 20:34:28 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo.exe
2016-09-05 20:34:28 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1.dll
2016-09-05 20:34:28 ----A---- C:\WINDOWS\system32\vulkaninfo.exe
2016-09-05 20:34:28 ----A---- C:\WINDOWS\system32\vulkan-1.dll
2016-09-05 20:34:17 ----D---- C:\Program Files (x86)\VulkanRT
2016-09-05 20:33:38 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.dll
2016-09-05 20:33:38 ----A---- C:\WINDOWS\system32\OpenCL.dll
2016-09-05 20:32:58 ----A---- C:\WINDOWS\SYSWOW64\mfksproxy.dll
2016-09-05 20:32:58 ----A---- C:\WINDOWS\SYSWOW64\encapi.dll
2016-09-05 20:32:57 ----A---- C:\WINDOWS\SYSWOW64\mfsensorgroup.dll
2016-09-05 20:32:57 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2016-09-05 20:32:57 ----A---- C:\WINDOWS\SYSWOW64\ConfigureExpandedStorage.dll
2016-09-05 20:32:55 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-09-05 20:32:54 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2016-09-05 20:32:53 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-09-05 20:32:53 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2016-09-05 20:32:52 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2016-09-05 20:32:52 ----A---- C:\WINDOWS\system32\mfksproxy.dll
2016-09-05 20:32:52 ----A---- C:\WINDOWS\system32\FSClient.dll
2016-09-05 20:32:52 ----A---- C:\WINDOWS\system32\drivers\xinputhid.sys
2016-09-05 20:32:49 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-09-05 20:32:49 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2016-09-05 20:32:47 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-09-05 20:32:47 ----A---- C:\WINDOWS\system32\mfps.dll
2016-09-05 20:32:44 ----A---- C:\WINDOWS\system32\FrameServer.dll
2016-09-05 20:32:32 ----A---- C:\WINDOWS\system32\schannel.dll
2016-09-05 20:32:29 ----A---- C:\WINDOWS\SYSWOW64\C_IS2022.DLL
2016-09-05 20:32:29 ----A---- C:\WINDOWS\system32\C_IS2022.DLL
2016-09-05 20:32:29 ----A---- C:\WINDOWS\system32\C_G18030.DLL
2016-09-05 20:32:28 ----A---- C:\WINDOWS\SYSWOW64\C_G18030.DLL
2016-09-05 20:32:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.InkControls.dll
2016-09-05 20:32:20 ----A---- C:\WINDOWS\SYSWOW64\c_GSM7.DLL
2016-09-05 20:32:20 ----A---- C:\WINDOWS\SYSWOW64\BcastDVRHelper.dll
2016-09-05 20:32:20 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2016-09-05 20:32:20 ----A---- C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-09-05 20:32:19 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2016-09-05 20:32:19 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2016-09-05 20:32:19 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2016-09-05 20:32:19 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostUser.dll
2016-09-05 20:32:19 ----A---- C:\WINDOWS\system32\usocore.dll
2016-09-05 20:32:19 ----A---- C:\WINDOWS\system32\provtool.exe
2016-09-05 20:32:19 ----A---- C:\WINDOWS\system32\provdatastore.dll
2016-09-05 20:32:19 ----A---- C:\WINDOWS\system32\MusNotification.exe
2016-09-05 20:32:19 ----A---- C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-09-05 20:32:18 ----A---- C:\WINDOWS\system32\provops.dll
2016-09-05 20:32:18 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2016-09-05 20:32:18 ----A---- C:\WINDOWS\system32\provhandlers.dll
2016-09-05 20:32:18 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-09-05 20:32:18 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-09-05 20:32:18 ----A---- C:\WINDOWS\system32\LicenseManagerSvc.dll
2016-09-05 20:32:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2016-09-05 20:32:15 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2016-09-05 20:32:14 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2016-09-05 20:32:13 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2016-09-05 20:32:10 ----A---- C:\WINDOWS\system32\fveapibase.dll
2016-09-05 20:32:07 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-09-05 20:32:04 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-09-05 20:32:04 ----A---- C:\WINDOWS\system32\c_GSM7.DLL
2016-09-05 20:32:03 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-09-05 20:32:03 ----A---- C:\WINDOWS\system32\encapi.dll
2016-09-05 20:32:00 ----A---- C:\WINDOWS\system32\ClipUp.exe
2016-09-05 20:31:50 ----A---- C:\WINDOWS\system32\wincorlib.dll
2016-09-05 20:31:44 ----A---- C:\WINDOWS\system32\DscCoreConfProv.dll
2016-09-05 20:31:43 ----A---- C:\WINDOWS\system32\storagewmi_passthru.dll
2016-09-05 20:31:43 ----A---- C:\WINDOWS\system32\storagewmi.dll
2016-09-05 20:31:43 ----A---- C:\WINDOWS\system32\smphost.dll
2016-09-05 20:31:43 ----A---- C:\WINDOWS\system32\mispace.dll
2016-09-05 20:31:43 ----A---- C:\WINDOWS\system32\delegatorprovider.dll
2016-09-05 20:31:39 ----A---- C:\WINDOWS\SYSWOW64\storagewmi_passthru.dll
2016-09-05 20:31:39 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2016-09-05 20:31:39 ----A---- C:\WINDOWS\SYSWOW64\smphost.dll
2016-09-05 20:31:39 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2016-09-05 20:31:39 ----A---- C:\WINDOWS\SYSWOW64\DscCoreConfProv.dll
2016-09-05 20:31:39 ----A---- C:\WINDOWS\SYSWOW64\delegatorprovider.dll
2016-09-05 20:31:37 ----A---- C:\WINDOWS\system32\ProvPluginEng.dll
2016-09-05 20:31:37 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2016-09-05 20:31:37 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2016-09-05 20:31:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.UXRes.dll
2016-09-05 20:31:36 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-09-05 20:15:33 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2016-09-01 22:07:26 ----SHD---- C:\Recovery
2016-09-01 22:07:26 ----DC---- C:\WINDOWS\Panther
2016-09-01 22:04:32 ----A---- C:\WINDOWS\SYSWOW64\wmploc.DLL
2016-09-01 22:04:32 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\SYSWOW64\spwmp.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncPolicy.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\SYSWOW64\dxmasf.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\SYSWOW64\CloudBackupSettings.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\wpninprc.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\wmploc.DLL
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\wlansec.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\wlanapi.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\WiFiConfigSP.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\wfdprov.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\spwmp.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\SettingSyncPolicy.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\iesetup.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\iernonce.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\dxmasf.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\deviceassociation.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\dasHost.exe
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\das.dll
2016-09-01 22:04:32 ----A---- C:\WINDOWS\system32\CloudBackupSettings.dll
2016-09-01 22:04:30 ----A---- C:\WINDOWS\SYSWOW64\tcpipcfg.dll
2016-09-01 22:04:30 ----A---- C:\WINDOWS\SYSWOW64\sppcext.dll
2016-09-01 22:04:30 ----A---- C:\WINDOWS\SYSWOW64\sppc.dll
2016-09-01 22:04:30 ----A---- C:\WINDOWS\SYSWOW64\slcext.dll
2016-09-01 22:04:30 ----A---- C:\WINDOWS\SYSWOW64\slc.dll
2016-09-01 22:04:30 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2016-09-01 22:04:30 ----A---- C:\WINDOWS\SYSWOW64\netiougc.exe
2016-09-01 22:04:30 ----A---- C:\WINDOWS\system32\tsmf.dll
2016-09-01 22:04:30 ----A---- C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2016-09-01 22:04:30 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2016-09-01 22:04:30 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-09-01 22:04:29 ----A---- C:\WINDOWS\system32\w32time.dll
2016-09-01 22:04:29 ----A---- C:\WINDOWS\system32\uReFS.dll
2016-09-01 22:04:29 ----A---- C:\WINDOWS\system32\tcpipcfg.dll
2016-09-01 22:04:29 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-09-01 22:04:29 ----A---- C:\WINDOWS\system32\StorageUsage.dll
2016-09-01 22:04:29 ----A---- C:\WINDOWS\system32\netiougc.exe
2016-09-01 22:04:28 ----A---- C:\WINDOWS\SYSWOW64\pidgenx.dll
2016-09-01 22:04:28 ----A---- C:\WINDOWS\system32\systemreset.exe
2016-09-01 22:04:28 ----A---- C:\WINDOWS\system32\SysResetErr.exe
2016-09-01 22:04:28 ----A---- C:\WINDOWS\system32\sppcext.dll
2016-09-01 22:04:28 ----A---- C:\WINDOWS\system32\sppc.dll
2016-09-01 22:04:28 ----A---- C:\WINDOWS\system32\slcext.dll
2016-09-01 22:04:28 ----A---- C:\WINDOWS\system32\slc.dll
2016-09-01 22:04:28 ----A---- C:\WINDOWS\system32\ResetEngine.exe
2016-09-01 22:04:28 ----A---- C:\WINDOWS\system32\pidgenx.dll
2016-09-01 22:04:28 ----A---- C:\WINDOWS\system32\GenValObj.exe
2016-09-01 22:04:27 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\SYSWOW64\tsmf.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\SYSWOW64\samlib.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\SYSWOW64\offlinesam.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\SYSWOW64\mfpmp.exe
2016-09-01 22:04:27 ----A---- C:\WINDOWS\SYSWOW64\deviceassociation.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\SYSWOW64\container.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\samsrv.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\samlib.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\qmgr.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\offlinesam.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\mfpmp.exe
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\dafpos.dll
2016-09-01 22:04:27 ----A---- C:\WINDOWS\system32\container.dll
2016-09-01 22:02:46 ----A---- C:\WINDOWS\SYSWOW64\wevtapi.dll
2016-09-01 22:02:46 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2016-09-01 22:02:46 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2016-09-01 22:02:46 ----A---- C:\WINDOWS\system32\wevtapi.dll
2016-09-01 22:02:46 ----A---- C:\WINDOWS\system32\user32.dll
2016-09-01 22:02:46 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2016-09-01 22:02:46 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2016-09-01 22:02:10 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2016-09-01 22:02:10 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2016-09-01 22:02:10 ----A---- C:\WINDOWS\system32\prm0009.dll
2016-09-01 22:02:10 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2016-09-01 22:02:10 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2016-09-01 22:01:24 ----D---- C:\WINDOWS\system32\Microsoft
2016-09-01 21:59:04 ----D---- C:\WINDOWS\SYSWOW64\BestPractices
2016-09-01 21:59:04 ----D---- C:\WINDOWS\system32\msmq
2016-09-01 21:59:04 ----D---- C:\WINDOWS\system32\BestPractices
2016-09-01 21:59:04 ----D---- C:\Program Files\Reference Assemblies
2016-09-01 21:59:04 ----D---- C:\Program Files\MSBuild
2016-09-01 21:59:04 ----D---- C:\Program Files (x86)\Reference Assemblies
2016-09-01 21:59:04 ----D---- C:\Program Files (x86)\MSBuild
2016-09-01 21:59:04 ----D---- C:\inetpub
2016-09-01 21:58:43 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2016-09-01 21:58:43 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2016-09-01 21:58:43 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-09-01 21:58:41 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2016-09-01 21:58:41 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-09-01 21:58:41 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-09-01 21:58:31 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2016-09-01 21:29:00 ----D---- C:\ProgramData\Microsoft OneDrive
2016-09-01 21:27:31 ----D---- C:\ProgramData\USOShared
2016-09-01 21:16:07 ----ASH---- C:\hiberfil.sys
2016-09-01 21:13:16 ----D---- C:\Program Files\Common Files\SpeechEngines
2016-09-01 21:12:23 ----SD---- C:\Users\mifo\AppData\Roaming\Microsoft
2016-09-01 21:12:03 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-09-01 21:11:58 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2016-09-01 21:10:54 ----D---- C:\Program Files\Synaptics
2016-09-01 21:10:50 ----D---- C:\ProgramData\NVIDIA
2016-09-01 21:10:49 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2016-09-01 21:10:49 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2016-09-01 21:10:49 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2016-09-01 21:10:49 ----A---- C:\WINDOWS\system32\nvshext.dll
2016-09-01 21:10:49 ----A---- C:\WINDOWS\system32\nvmctray.dll
2016-09-01 21:10:49 ----A---- C:\WINDOWS\system32\nvcpl.dll
2016-09-01 21:10:49 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2016-09-01 21:10:49 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2016-09-01 21:10:48 ----HD---- C:\Program Files (x86)\Uninstall Information
2016-09-01 21:10:42 ----D---- C:\ProgramData\NVIDIA Corporation
2016-09-01 21:10:36 ----D---- C:\Program Files\NVIDIA Corporation
2016-09-01 21:10:34 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2016-09-01 21:10:33 ----AS---- C:\WINDOWS\bootstat.dat
2016-09-01 21:08:29 ----D---- C:\WINDOWS\system32\DAX2
2016-09-01 21:08:22 ----D---- C:\Program Files\Realtek
2016-09-01 21:08:21 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2016-09-01 21:07:55 ----D---- C:\WINDOWS\Prefetch
2016-09-01 21:07:54 ----D---- C:\WINDOWS\system32\SleepStudy
2016-09-01 21:07:54 ----D---- C:\WINDOWS\ServiceProfiles
2016-09-01 21:07:52 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2016-08-30 02:56:41 ----D---- C:\ProgramData\CLM
2016-08-30 02:38:25 ----AD---- C:\ProgramData\TEMP
2016-08-30 02:38:20 ----A---- C:\WINDOWS\SYSWOW64\MSSTDFMT.DLL
2016-08-30 02:38:20 ----A---- C:\WINDOWS\SYSWOW64\IJL_11.DLL
2016-08-29 22:58:04 ----A---- C:\WINDOWS\system32\nvhdap64.dll
2016-08-29 22:58:04 ----A---- C:\WINDOWS\system32\nvhdagenco6420103.dll
2016-08-29 22:58:04 ----A---- C:\WINDOWS\system32\drivers\nvhda64v.sys

======List of files/folders modified in the last 1 month======

2016-09-20 16:09:23 ----RD---- C:\Program Files
2016-09-20 16:08:58 ----D---- C:\WINDOWS\Temp
2016-09-20 16:08:02 ----D---- C:\ProgramData\ProductData
2016-09-19 23:52:42 ----D---- C:\WINDOWS\system32\sru
2016-09-19 21:23:04 ----RD---- C:\WINDOWS\Microsoft.NET
2016-09-19 17:05:59 ----D---- C:\WINDOWS\system32\Tasks
2016-09-19 01:35:20 ----D---- C:\WINDOWS\SysWOW64
2016-09-19 01:35:02 ----D---- C:\WINDOWS\system32\Macromed
2016-09-19 01:34:47 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2016-09-19 00:17:03 ----RD---- C:\WINDOWS\assembly
2016-09-19 00:16:51 ----D---- C:\WINDOWS\system32\config
2016-09-19 00:11:35 ----D---- C:\WINDOWS\System32
2016-09-19 00:09:31 ----D---- C:\WINDOWS\INF
2016-09-19 00:06:25 ----D---- C:\WINDOWS\AppReadiness
2016-09-19 00:06:17 ----D---- C:\WINDOWS\WinSxS
2016-09-19 00:05:51 ----SHD---- C:\Boot
2016-09-19 00:04:53 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2016-09-19 00:04:53 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-09-19 00:04:50 ----SD---- C:\WINDOWS\system32\F12
2016-09-19 00:04:50 ----SD---- C:\WINDOWS\system32\dsc
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\zh-TW
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\zh-HK
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\zh-CN
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\uk-UA
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\tr-TR
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\th-TH
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\sv-SE
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\sl-SI
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\sk-SK
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\ru-RU
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\ro-RO
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\pt-PT
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\pt-BR
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\pl-PL
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\oobe
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\nl-NL
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\nb-NO
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\lv-LV
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\lt-LT
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\ko-KR
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\ja-jp
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\it-IT
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\hu-HU
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\hr-HR
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\he-IL
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\fr-FR
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\fr-CA
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\fi-FI
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\et-EE
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\es-MX
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\es-ES
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\en-US
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\en-GB
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\el-GR
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\drivers
2016-09-19 00:04:50 ----D---- C:\WINDOWS\system32\Dism
2016-09-19 00:04:49 ----D---- C:\WINDOWS\system32\de-DE
2016-09-19 00:04:49 ----D---- C:\WINDOWS\system32\da-DK
2016-09-19 00:04:49 ----D---- C:\WINDOWS\system32\cs-CZ
2016-09-19 00:04:49 ----D---- C:\WINDOWS\system32\Boot
2016-09-19 00:04:49 ----D---- C:\WINDOWS\system32\bg-BG
2016-09-19 00:04:49 ----D---- C:\WINDOWS\system32\ar-SA
2016-09-19 00:04:49 ----D---- C:\WINDOWS\system32\appraiser
2016-09-19 00:04:48 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-09-19 00:04:48 ----D---- C:\WINDOWS\ShellExperiences
2016-09-19 00:04:48 ----D---- C:\WINDOWS\Provisioning
2016-09-19 00:04:47 ----RD---- C:\Program Files\Windows Defender
2016-09-19 00:04:47 ----D---- C:\WINDOWS\AppPatch
2016-09-19 00:04:47 ----D---- C:\Program Files\Windows Media Player
2016-09-19 00:04:47 ----D---- C:\Program Files\Windows Mail
2016-09-19 00:04:47 ----D---- C:\Program Files\Internet Explorer
2016-09-19 00:04:47 ----D---- C:\Program Files (x86)\Windows Mail
2016-09-19 00:04:47 ----D---- C:\Program Files (x86)\Windows Defender
2016-09-19 00:04:47 ----D---- C:\Program Files (x86)\Internet Explorer
2016-09-19 00:04:45 ----D---- C:\WINDOWS\system32\DriverStore
2016-09-18 23:09:16 ----SHD---- C:\WINDOWS\Installer
2016-09-18 23:07:46 ----D---- C:\ProgramData\Microsoft Help
2016-09-18 23:05:50 ----D---- C:\WINDOWS\CbsTemp
2016-09-18 01:08:25 ----AD---- C:\Program Files (x86)\Opera
2016-09-17 02:51:30 ----D---- C:\WINDOWS\system32\catroot2
2016-09-17 02:44:30 ----D---- C:\WINDOWS\system32\MRT
2016-09-17 02:36:21 ----AC---- C:\WINDOWS\system32\MRT.exe
2016-09-17 02:33:17 ----D---- C:\Windows
2016-09-17 02:31:57 ----SHD---- C:\System Volume Information
2016-09-16 00:47:46 ----HD---- C:\Program Files\WindowsApps
2016-09-07 18:32:38 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-09-07 04:55:09 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-09-06 19:45:43 ----HD---- C:\ProgramData
2016-09-06 17:42:44 ----D---- C:\WINDOWS\rescache
2016-09-06 17:08:10 ----D---- C:\WINDOWS\debug
2016-09-06 16:58:30 ----D---- C:\WINDOWS\system32\WDI
2016-09-05 21:26:08 ----D---- C:\Program Files (x86)\Steam
2016-09-05 21:02:10 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-09-05 21:02:10 ----D---- C:\WINDOWS\system32\wbem
2016-09-05 21:02:10 ----D---- C:\WINDOWS\system32\migration
2016-09-05 20:35:18 ----D---- C:\temp
2016-09-05 20:34:41 ----D---- C:\ProgramData\Package Cache
2016-09-05 20:34:17 ----RD---- C:\Program Files (x86)
2016-09-05 20:29:56 ----D---- C:\WINDOWS\system32\CatRoot
2016-09-05 20:15:33 ----A---- C:\WINDOWS\system32\nvaudcap64v.dll
2016-09-05 19:10:52 ----D---- C:\WINDOWS\Logs
2016-09-05 19:08:26 ----D---- C:\WINDOWS\system32\restore
2016-09-02 04:58:59 ----D---- C:\WINDOWS\appcompat
2016-09-01 22:04:56 ----D---- C:\Program Files (x86)\Windows Media Player
2016-09-01 22:02:14 ----D---- C:\WINDOWS\OCR
2016-09-01 21:59:04 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2016-09-01 21:59:04 ----D---- C:\WINDOWS\system32\inetsrv
2016-09-01 21:59:01 ----A---- C:\WINDOWS\SYSWOW64\mqsnap.dll
2016-09-01 21:59:01 ----A---- C:\WINDOWS\SYSWOW64\mqcertui.dll
2016-09-01 21:59:01 ----A---- C:\WINDOWS\system32\wamregps.dll
2016-09-01 21:59:01 ----A---- C:\WINDOWS\system32\iisRtl.dll
2016-09-01 21:59:01 ----A---- C:\WINDOWS\system32\iisrstap.dll
2016-09-01 21:59:01 ----A---- C:\WINDOWS\system32\iisreset.exe
2016-09-01 21:59:01 ----A---- C:\WINDOWS\system32\cngkeyhelper.dll
2016-09-01 21:59:01 ----A---- C:\WINDOWS\system32\ahadmin.dll
2016-09-01 21:59:01 ----A---- C:\WINDOWS\system32\admwprox.dll
2016-09-01 21:59:00 ----A---- C:\WINDOWS\SYSWOW64\wamregps.dll
2016-09-01 21:59:00 ----A---- C:\WINDOWS\SYSWOW64\mqoa.dll
2016-09-01 21:59:00 ----A---- C:\WINDOWS\SYSWOW64\iisRtl.dll
2016-09-01 21:59:00 ----A---- C:\WINDOWS\SYSWOW64\iisrstap.dll
2016-09-01 21:59:00 ----A---- C:\WINDOWS\SYSWOW64\iisreset.exe
2016-09-01 21:59:00 ----A---- C:\WINDOWS\SYSWOW64\cngkeyhelper.dll
2016-09-01 21:59:00 ----A---- C:\WINDOWS\SYSWOW64\ahadmin.dll
2016-09-01 21:59:00 ----A---- C:\WINDOWS\SYSWOW64\admwprox.dll
2016-09-01 21:59:00 ----A---- C:\WINDOWS\system32\mqutil.dll
2016-09-01 21:59:00 ----A---- C:\WINDOWS\system32\mqrt.dll
2016-09-01 21:59:00 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2016-09-01 21:58:59 ----A---- C:\WINDOWS\system32\mqsnap.dll
2016-09-01 21:58:59 ----A---- C:\WINDOWS\system32\mqcertui.dll
2016-09-01 21:58:58 ----A---- C:\WINDOWS\SYSWOW64\mqutil.dll
2016-09-01 21:58:58 ----A---- C:\WINDOWS\SYSWOW64\mqrt.dll
2016-09-01 21:58:58 ----A---- C:\WINDOWS\system32\mqqm.dll
2016-09-01 21:58:58 ----A---- C:\WINDOWS\system32\mqoa.dll
2016-09-01 21:58:57 ----A---- C:\WINDOWS\system32\mqsvc.exe
2016-09-01 21:58:57 ----A---- C:\WINDOWS\system32\mqbkup.exe
2016-09-01 21:27:31 ----D---- C:\ProgramData\USOPrivate
2016-09-01 21:25:30 ----D---- C:\WINDOWS\SoftwareDistribution
2016-09-01 21:24:13 ----D---- C:\WINDOWS\Registration
2016-09-01 21:24:03 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2016-09-01 21:24:02 ----D---- C:\WINDOWS\system32\WinBioDatabase
2016-09-01 21:18:25 ----D---- C:\WINDOWS\system32\LogFiles
2016-09-01 21:18:18 ----D---- C:\WINDOWS\Tasks
2016-09-01 21:17:26 ----SD---- C:\ProgramData\Microsoft
2016-09-01 21:17:24 ----RSD---- C:\WINDOWS\Media
2016-09-01 21:17:23 ----RSD---- C:\WINDOWS\Fonts
2016-09-01 21:17:22 ----D---- C:\WINDOWS\system32\drivers\etc
2016-09-01 21:15:48 ----D---- C:\WINDOWS\SYSWOW64\drivers
2016-09-01 21:15:47 ----D---- C:\WINDOWS\system32\CodeIntegrity
2016-09-01 21:15:47 ----D---- C:\WINDOWS\ShellNew
2016-09-01 21:13:40 ----D---- C:\WINDOWS\SYSWOW64\xlive
2016-09-01 21:13:39 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2016-09-01 21:13:39 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-09-01 21:13:38 ----D---- C:\WINDOWS\SYSWOW64\IME
2016-09-01 21:13:38 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-09-01 21:13:36 ----D---- C:\WINDOWS\system32\SPReview
2016-09-01 21:13:36 ----D---- C:\WINDOWS\system32\spool
2016-09-01 21:13:35 ----D---- C:\WINDOWS\system32\slmgr
2016-09-01 21:13:35 ----D---- C:\WINDOWS\system32\NDF
2016-09-01 21:13:35 ----D---- C:\WINDOWS\system32\IME
2016-09-01 21:13:35 ----D---- C:\WINDOWS\system32\EventProviders
2016-09-01 21:13:34 ----D---- C:\WINDOWS\system32\drivers\en-US
2016-09-01 21:13:23 ----D---- C:\WINDOWS\schemas
2016-09-01 21:13:22 ----D---- C:\WINDOWS\LiveKernelReports
2016-09-01 21:13:20 ----D---- C:\WINDOWS\ehome
2016-09-01 21:13:19 ----RD---- C:\Users
2016-09-01 21:13:19 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft
2016-09-01 21:13:17 ----SHD---- C:\Program Files\Windows Sidebar
2016-09-01 21:13:17 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2016-09-01 21:13:17 ----D---- C:\Program Files (x86)\Common Files
2016-09-01 21:13:17 ----AD---- C:\Program Files (x86)\Microsoft.NET
2016-09-01 21:13:16 ----D---- C:\Program Files\Microsoft.NET
2016-09-01 21:13:16 ----D---- C:\Program Files\Microsoft Games
2016-09-01 21:13:16 ----D---- C:\Program Files\Common Files
2016-09-01 21:13:16 ----AD---- C:\Program Files\Common Files\microsoft shared
2016-09-01 21:13:05 ----D---- C:\WINDOWS\system32\Recovery
2016-09-01 21:11:47 ----D---- C:\WINDOWS\system32\Sysprep
2016-09-01 21:11:11 ----RD---- C:\WINDOWS\PrintDialog
2016-09-01 21:11:11 ----RD---- C:\WINDOWS\MiracastView
2016-09-01 21:10:49 ----D---- C:\WINDOWS\Help
2016-09-01 20:53:18 ----RASH---- C:\BOOTSECT.BAK

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [2015-07-14 72400]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\WINDOWS\system32\drivers\iorate.sys [2016-07-16 45920]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2015-07-14 255240]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2015-07-14 178520]
R1 EpfwLWF;@oem71.inf,%EpfwLWF_Desc%;Epfw NDIS LightWeight Filter; C:\WINDOWS\system32\DRIVERS\EpfwLWF.sys [2015-07-14 53360]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2016-07-16 88576]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2016-07-16 8192]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-09-09 26528]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2016-07-16 70144]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2015-07-14 231520]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2016-07-16 48128]
R2 rimspci;rimspci; C:\WINDOWS\System32\drivers\rimspe64.sys [2015-09-10 73216]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2016-07-16 78336]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athw8x.sys [2016-07-16 4233728]
R3 Btcsrusb;@oem20.inf,%SvcDesc%;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2016-06-14 53776]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2016-06-14 5085952]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2016-09-01 175616]
R3 NVHDA;@oem75.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2016-08-29 240704]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvszcwu.inf_amd64_996c54e662217ec3\nvlddmkm.sys [2016-08-03 13746240]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-06-03 19600]
R3 nvvad_WaveExtensible;@oem0.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2016-09-05 56384]
R3 risdxc;risdxc; C:\WINDOWS\System32\drivers\risdxc64.sys [2016-06-14 106496]
R3 rt640x64;@oem12.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2016-06-14 936192]
R3 SFEP;@oem44.inf,%SvcDesc%;Sony Firmware Extension Parser; C:\WINDOWS\System32\drivers\SFEP.sys [2007-08-03 11392]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-08-21 44192]
R3 SynTP;@oem69.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-08-21 630944]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2016-07-16 105824]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2016-07-16 101216]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2016-07-16 58720]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2016-07-16 61792]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2016-07-16 88416]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2016-07-16 32096]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2016-07-16 9728]
S3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2015-12-06 609992]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2016-07-16 38912]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2016-07-16 117248]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2016-07-16 20480]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2016-07-16 50016]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2016-08-06 73568]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2016-07-16 81408]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2016-07-16 176384]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2016-07-16 526176]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2016-07-16 120320]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2016-07-16 842584]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2016-07-16 108896]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2016-07-16 928608]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\WINDOWS\System32\drivers\scmdisk0101.sys [2016-07-16 123904]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2016-07-16 95744]
S3 UcmTcpciCx0101;UCM-TCPCI KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmTcpciCx.sys [2016-07-16 108544]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2016-07-16 50688]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2016-07-16 45568]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2016-07-16 263008]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2016-07-16 96608]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2016-07-16 137056]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdvancedSystemCareService9;Advanced SystemCare Service 9; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [2015-11-04 827680]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 CDPUserSvc_3df51;CDPUserSvc_3df51; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2015-07-08 1353720]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-06-03 1152656]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-10-09 2934048]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2016-09-01 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-07-16 136360]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-07-16 136360]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-06-03 1893008]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-06-03 23007376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2016-08-01 1365048]
R2 OneSyncSvc_3df51;Sync Host_3df51; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe [2016-08-01 424384]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-08-21 247968]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 PimIndexMaintenanceSvc_3df51;Kontaktné údaje_3df51; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-07-16 136360]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-19 270016]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-07-16 52920]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2016-07-16 93184]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2016-05-25 43696]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 MessagingService_3df51;MessagingService_3df51; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-01-25 178760]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2016-09-07 1312768]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-06-15 1518672]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2016-07-16 287744]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]

-----------------EOF-----------------

Zdravím, nic špatného tam nevidím jen bych se zbavil všeho software od IObit.

Dakujem. A mal som tam pred nedávnom pár keylogerov, neostalo nič po nich?

Nic nevidím, ale můžem mrknout hlouběji.


Spusť skener Cure It podle TOHOTO návodu

po skončení skenu mi sem nakopíruj výsledky - stačí konec logu se souhrnem.

(Upozornění je úchylně pomalý a je zapotřebí ho sledovat občas se na něco ptá)

Total 21538572323 bytes in 32633 files scanned (42998 objects)
Total 32581 files (42943 objects) are clean
Total 14 files are infected
Total 41 files are raised error condition
Scan time is 00:07:32.043

dal som druhý sken, v prvom som niečo nechtiac vyliečil v druhom bolo 8 infikovaných, všetko iobit

Bezva a jak se PC chová ?

Chová sa výborne a zatial nesekol Dakujem

Není zač a