VIRY.CZ

Dobrý den, do PC jsem si natáhnul nějaký balast a zřejmě tam stále něco z něho je. V PC mám ESET smart security 10, kterým jsem to nechal projet. Poté jsem to projel ještě AntiMalware od Malwarebytes, superantispyware, Trojan Killer atd. Něco málo to našlo, ale problém zůstal stále. Jde o to, že ve správci úloh je informace o procesoru, který jede neustále na 100 procent i když není spuštěn žádný program či aplikace. Zkoušel jsem povypínat veškeré procesy, které by mohly procesor vytěžovat, ale nic nepomohlo. Další problém, který mám je, že se mi neustále pc jakoby obnovuje (něco, jako kdž se ve správci úloh ukončí proces explorer.exe a znovu se spustí). Takže všechny složky, které mám aktuálně otevřené se automaticky zavřou. Tento proces se děje tak 5x za minutu a je to velice otravné. Bohužel žádný bezpečnostní software mi nic nenajde a píše, že systém je OK. Pokoušel jsem PC projet Combofixem, ale bohužel nefunguje na Windows 10.
Proto Vás prosím o pomoc a byl bych vděčen. Jistě, mohu zformátovat disk a znovu instalovat systém, ovšem nechtějí se mi (možná z lenosti) instalovat opět všechny programy, které jsem v PC již měl.
Přikládám zde ke kontrole log z RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Samurraj at 2016-09-20 18:55:47
Microsoft Windows 10 Pro
System drive C: has 241 GB (84%) free of 286 GB
Total RAM: 8173 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:55:50, on 20.09.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Samurraj.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8381 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-c15ee4c5-94aa-4e40-ab26-bf68612939f3 -SystemEventPortName:HostProcess-a33ffe9d-d32e-4f52-aa58-51a2dd59467a -IoCancelEventPortName:HostProcess-f0923f0c-3e4a-4809-98e6-d2cc29410d0c -NonStateChangingEventPortName:HostProcess-291eb924-c6ef-4477-82e0-2f573ac86504 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:bf1d58bf-e84a-47b9-b177-d0ec389d0c78 -DeviceGroupId:WpdFsGroup
dashost.exe {2b4b2df4-6b3f-4560-bbd500209f91746b}
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"

"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
taskhostw.exe
C:\WINDOWS\system32\vssvc.exe
C:\WINDOWS\System32\svchost.exe -k swprv
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Samurraj\Downloads\RSITx64.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe7_ Global\UsGthrCtrlFltPipeMssGthrPipe7 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 636 640 648 8192 644
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK

=========Mozilla firefox=========

ProfilePath - C:\Users\Samurraj\AppData\Roaming\Mozilla\Firefox\Profiles\0wutriek.default

prefs.js - "browser.startup.homepage" - "seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.162 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.162 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-09-05 157904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-09-05 1658160]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-01-07 508128]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [2016-07-28 1867448]
""= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.mjpg"=pvmjpgx40.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-09-20 18:55:48 ----D---- C:\Program Files\trend micro
2016-09-20 18:55:47 ----D---- C:\rsit
2016-09-20 18:52:30 ----D---- C:\FRST
2016-09-20 18:29:01 ----D---- C:\AdwCleaner
2016-09-20 18:27:58 ----D---- C:\Program Files\Common Files\DESIGNER
2016-09-19 19:49:54 ----D---- C:\Program Files\CCleaner
2016-09-19 19:33:36 ----D---- C:\Program Files (x86)\PC Tools
2016-09-19 19:23:28 ----A---- C:\WINDOWS\system32\drivers\Cat.DB
2016-09-19 19:23:24 ----A---- C:\WINDOWS\system32\drivers\PCTSD64.sys
2016-09-19 19:22:28 ----AD---- C:\ProgramData\TEMP
2016-09-19 19:22:27 ----D---- C:\ProgramData\PC Tools
2016-09-19 19:22:26 ----D---- C:\Users\Samurraj\AppData\Roaming\TestApp
2016-09-19 19:03:36 ----D---- C:\ProgramData\Malwarebytes
2016-09-19 19:00:56 ----D---- C:\Program Files (x86)\System Explorer
2016-09-16 21:07:21 ----D---- C:\Users\Samurraj\AppData\Roaming\Skype
2016-09-16 21:01:42 ----D---- C:\Program Files\Common Files\AV
2016-09-14 20:43:30 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-09-14 20:43:29 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-09-14 20:43:29 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-09-14 20:43:27 ----A---- C:\WINDOWS\system32\winhttp.dll
2016-09-14 20:43:27 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-09-14 20:43:26 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-09-14 20:43:25 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-09-14 20:43:23 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-09-14 20:43:23 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-09-14 20:43:23 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-09-14 20:43:23 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-09-14 20:43:22 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-09-14 20:43:21 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-09-14 20:43:20 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-09-14 20:43:20 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-09-14 20:43:20 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-09-14 20:43:19 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-09-14 20:43:19 ----A---- C:\WINDOWS\system32\tquery.dll
2016-09-14 20:43:19 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-09-14 20:43:18 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-09-14 20:43:18 ----A---- C:\WINDOWS\system32\WpcMon.exe
2016-09-14 20:43:18 ----A---- C:\WINDOWS\system32\combase.dll
2016-09-14 20:43:17 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-09-14 20:43:17 ----A---- C:\WINDOWS\system32\Wpc.dll
2016-09-14 20:43:16 ----A---- C:\WINDOWS\SYSWOW64\xpsservices.dll
2016-09-14 20:43:16 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-09-14 20:43:16 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-09-14 20:43:16 ----A---- C:\WINDOWS\system32\mssrch.dll
2016-09-14 20:43:16 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-09-14 20:43:15 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2016-09-14 20:43:15 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-09-14 20:43:15 ----A---- C:\WINDOWS\system32\mmcndmgr.dll
2016-09-14 20:43:14 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-09-14 20:43:14 ----A---- C:\WINDOWS\system32\OpcServices.dll
2016-09-14 20:43:14 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-14 20:43:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Phone.dll
2016-09-14 20:43:13 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-09-14 20:43:13 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2016-09-14 20:43:13 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2016-09-14 20:43:12 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2016-09-14 20:43:12 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2016-09-14 20:43:12 ----A---- C:\WINDOWS\system32\authui.dll
2016-09-14 20:43:11 ----A---- C:\WINDOWS\SYSWOW64\winipcsecproc.dll
2016-09-14 20:43:11 ----A---- C:\WINDOWS\SYSWOW64\Pimstore.dll
2016-09-14 20:43:11 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-09-14 20:43:11 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-09-14 20:43:11 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-09-14 20:43:11 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-09-14 20:43:10 ----A---- C:\WINDOWS\system32\xpsservices.dll
2016-09-14 20:43:10 ----A---- C:\WINDOWS\system32\wmdrmdev.dll
2016-09-14 20:43:10 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2016-09-14 20:43:10 ----A---- C:\WINDOWS\system32\twinapi.dll
2016-09-14 20:43:10 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2016-09-14 20:43:09 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2016-09-14 20:43:09 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-09-14 20:43:09 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2016-09-14 20:43:09 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2016-09-14 20:43:09 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2016-09-14 20:43:09 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-09-14 20:43:08 ----A---- C:\WINDOWS\SYSWOW64\winmsipc.dll
2016-09-14 20:43:08 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-09-14 20:43:08 ----A---- C:\WINDOWS\SYSWOW64\hnetcfg.dll
2016-09-14 20:43:08 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-09-14 20:43:08 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2016-09-14 20:43:08 ----A---- C:\WINDOWS\system32\cscui.dll
2016-09-14 20:43:07 ----A---- C:\WINDOWS\SYSWOW64\wmdrmdev.dll
2016-09-14 20:43:07 ----A---- C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2016-09-14 20:43:07 ----A---- C:\WINDOWS\system32\wmdrmsdk.dll
2016-09-14 20:43:07 ----A---- C:\WINDOWS\system32\rpcss.dll
2016-09-14 20:43:07 ----A---- C:\WINDOWS\system32\msdtctm.dll
2016-09-14 20:43:07 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-09-14 20:43:06 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2016-09-14 20:43:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2016-09-14 20:43:06 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2016-09-14 20:43:06 ----A---- C:\WINDOWS\system32\uDWM.dll
2016-09-14 20:43:06 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2016-09-14 20:43:06 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll
2016-09-14 20:43:06 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-09-14 20:43:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2016-09-14 20:43:05 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2016-09-14 20:43:05 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2016-09-14 20:43:05 ----A---- C:\WINDOWS\system32\wiaservc.dll
2016-09-14 20:43:05 ----A---- C:\WINDOWS\system32\SHCore.dll
2016-09-14 20:43:05 ----A---- C:\WINDOWS\system32\propsys.dll
2016-09-14 20:43:05 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-09-14 20:43:05 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-09-14 20:43:04 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2016-09-14 20:43:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2016-09-14 20:43:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2016-09-14 20:43:04 ----A---- C:\WINDOWS\SYSWOW64\wbemcomn.dll
2016-09-14 20:43:04 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-09-14 20:43:04 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-09-14 20:43:04 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2016-09-14 20:43:03 ----A---- C:\WINDOWS\SYSWOW64\wmdrmsdk.dll
2016-09-14 20:43:03 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2016-09-14 20:43:03 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-09-14 20:43:03 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-09-14 20:43:03 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-09-14 20:43:03 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-09-14 20:43:03 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-09-14 20:43:03 ----A---- C:\WINDOWS\system32\mfps.dll
2016-09-14 20:43:02 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-09-14 20:43:02 ----A---- C:\WINDOWS\SYSWOW64\upnphost.dll
2016-09-14 20:43:02 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-09-14 20:43:02 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-09-14 20:43:02 ----A---- C:\WINDOWS\system32\shsetup.dll
2016-09-14 20:43:02 ----A---- C:\WINDOWS\system32\ExecModelClient.dll
2016-09-14 20:43:02 ----A---- C:\WINDOWS\system32\dcomp.dll
2016-09-14 20:43:01 ----A---- C:\WINDOWS\SYSWOW64\XpsDocumentTargetPrint.dll
2016-09-14 20:43:01 ----A---- C:\WINDOWS\SYSWOW64\taskschd.dll
2016-09-14 20:43:01 ----A---- C:\WINDOWS\system32\SensorService.dll
2016-09-14 20:43:01 ----A---- C:\WINDOWS\system32\mssprxy.dll
2016-09-14 20:43:01 ----A---- C:\WINDOWS\system32\apprepsync.dll
2016-09-14 20:43:00 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2016-09-14 20:43:00 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2016-09-14 20:43:00 ----A---- C:\WINDOWS\system32\evr.dll
2016-09-14 20:43:00 ----A---- C:\WINDOWS\system32\ClipUp.exe
2016-09-14 20:42:59 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2016-09-14 20:42:59 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-09-14 20:42:59 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-09-14 20:42:59 ----A---- C:\WINDOWS\system32\azroleui.dll
2016-09-14 20:42:58 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2016-09-14 20:42:58 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2016-09-14 20:42:58 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-09-14 20:42:58 ----A---- C:\WINDOWS\system32\sti.dll
2016-09-14 20:42:58 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-09-14 20:42:58 ----A---- C:\WINDOWS\system32\comdlg32.dll
2016-09-14 20:42:58 ----A---- C:\WINDOWS\system32\authfwcfg.dll
2016-09-14 20:42:58 ----A---- C:\WINDOWS\system32\apprepapi.dll
2016-09-14 20:42:58 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2016-09-14 20:42:57 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2016-09-14 20:42:57 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2016-09-14 20:42:57 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-09-14 20:42:57 ----A---- C:\WINDOWS\system32\MrmIndexer.dll
2016-09-14 20:42:57 ----A---- C:\WINDOWS\system32\LegacyNetUXHost.exe
2016-09-14 20:42:57 ----A---- C:\WINDOWS\system32\easwrt.dll
2016-09-14 20:42:57 ----A---- C:\WINDOWS\system32\DictationManager.dll
2016-09-14 20:42:57 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2016-09-14 20:42:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2016-09-14 20:42:56 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-09-14 20:42:56 ----A---- C:\WINDOWS\SYSWOW64\udhisapi.dll
2016-09-14 20:42:56 ----A---- C:\WINDOWS\system32\wiarpc.dll
2016-09-14 20:42:56 ----A---- C:\WINDOWS\system32\msdt.exe
2016-09-14 20:42:56 ----A---- C:\WINDOWS\system32\edputil.dll
2016-09-14 20:42:56 ----A---- C:\WINDOWS\system32\bdechangepin.exe
2016-09-14 20:42:55 ----A---- C:\WINDOWS\SYSWOW64\WmpDui.dll
2016-09-14 20:42:55 ----A---- C:\WINDOWS\SYSWOW64\upnpcont.exe
2016-09-14 20:42:55 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-09-14 20:42:55 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2016-09-14 20:42:55 ----A---- C:\WINDOWS\system32\SmartCardSimulator.dll
2016-09-14 20:42:55 ----A---- C:\WINDOWS\system32\msi.dll
2016-09-14 20:42:55 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-09-14 20:42:55 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2016-09-14 20:42:55 ----A---- C:\WINDOWS\system32\DiagCpl.dll
2016-09-14 20:42:54 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-09-14 20:42:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.ps.dll
2016-09-14 20:42:54 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-09-14 20:42:54 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2016-09-14 20:42:54 ----A---- C:\WINDOWS\system32\pngfilt.dll
2016-09-14 20:42:54 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-09-14 20:42:54 ----A---- C:\WINDOWS\system32\fwcfg.dll
2016-09-14 20:42:54 ----A---- C:\WINDOWS\system32\drivers\HdAudio.sys
2016-09-14 20:42:53 ----A---- C:\WINDOWS\SYSWOW64\sti.dll
2016-09-14 20:42:53 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-09-14 20:42:53 ----A---- C:\WINDOWS\system32\prnntfy.dll
2016-09-14 20:42:53 ----A---- C:\WINDOWS\system32\CheckNetIsolation.exe
2016-09-14 20:42:53 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-09-14 20:42:51 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2016-09-14 20:42:51 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2016-09-14 20:42:50 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-09-14 20:42:49 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2016-09-14 20:42:49 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-09-14 20:42:48 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-09-14 20:42:48 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2016-09-14 20:42:48 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2016-09-14 20:42:48 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-09-14 20:42:48 ----A---- C:\WINDOWS\system32\InputService.dll
2016-09-14 20:42:47 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2016-09-14 20:42:47 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2016-09-14 20:42:47 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-09-14 20:42:47 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2016-09-14 20:42:47 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-09-14 20:42:47 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-09-14 20:42:47 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2016-09-14 20:42:46 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll
2016-09-14 20:42:46 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-09-14 20:42:46 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-09-14 20:42:46 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-09-14 20:42:46 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2016-09-14 20:42:45 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2016-09-14 20:42:45 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2016-09-14 20:42:45 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2016-09-14 20:42:45 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2016-09-14 20:42:45 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-09-14 20:42:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2016-09-14 20:42:44 ----A---- C:\WINDOWS\system32\wwanconn.dll
2016-09-14 20:42:44 ----A---- C:\WINDOWS\system32\rdpcore.dll
2016-09-14 20:42:44 ----A---- C:\WINDOWS\system32\MSAJApi.dll
2016-09-14 20:42:44 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-09-14 20:42:44 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2016-09-14 20:42:43 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-09-14 20:42:43 ----A---- C:\WINDOWS\SYSWOW64\wdc.dll
2016-09-14 20:42:43 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2016-09-14 20:42:43 ----A---- C:\WINDOWS\SYSWOW64\Geolocation.dll
2016-09-14 20:42:43 ----A---- C:\WINDOWS\system32\wpnapps.dll
2016-09-14 20:42:43 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2016-09-14 20:42:43 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2016-09-14 20:42:43 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-09-14 20:42:42 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-09-14 20:42:42 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2016-09-14 20:42:42 ----A---- C:\WINDOWS\system32\mf.dll
2016-09-14 20:42:42 ----A---- C:\WINDOWS\system32\das.dll
2016-09-14 20:42:40 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2016-09-14 20:42:40 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-09-14 20:42:40 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2016-09-14 20:42:40 ----A---- C:\WINDOWS\system32\printfilterpipelinesvc.exe
2016-09-14 20:42:40 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-09-14 20:42:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2016-09-14 20:42:39 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2016-09-14 20:42:39 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-09-14 20:42:39 ----A---- C:\WINDOWS\SYSWOW64\shsetup.dll
2016-09-14 20:42:39 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2016-09-14 20:42:39 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-09-14 20:42:38 ----A---- C:\WINDOWS\SYSWOW64\winipcsecproc_ssp.dll
2016-09-14 20:42:38 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2016-09-14 20:42:38 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2016-09-14 20:42:38 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-09-14 20:42:38 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-09-14 20:42:38 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-09-14 20:42:38 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-09-14 20:42:38 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2016-09-14 20:42:37 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2016-09-14 20:42:37 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-09-14 20:42:37 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2016-09-14 20:42:37 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-09-14 20:42:37 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-09-14 20:42:37 ----A---- C:\WINDOWS\system32\localspl.dll
2016-09-14 20:42:37 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-09-14 20:42:37 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2016-09-14 20:42:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2016-09-14 20:42:36 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2016-09-14 20:42:36 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2016-09-14 20:42:36 ----A---- C:\WINDOWS\system32\wpncore.dll
2016-09-14 20:42:36 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-09-14 20:42:36 ----A---- C:\WINDOWS\system32\wifitask.exe
2016-09-14 20:42:36 ----A---- C:\WINDOWS\system32\rasgcw.dll
2016-09-14 20:42:35 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2016-09-14 20:42:35 ----A---- C:\WINDOWS\system32\wwanmm.dll
2016-09-14 20:42:35 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-09-14 20:42:35 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-09-14 20:42:35 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2016-09-14 20:42:34 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-09-14 20:42:34 ----A---- C:\WINDOWS\system32\XboxNetApiSvc.dll
2016-09-14 20:42:34 ----A---- C:\WINDOWS\system32\werconcpl.dll
2016-09-14 20:42:34 ----A---- C:\WINDOWS\system32\netlogon.dll
2016-09-14 20:42:34 ----A---- C:\WINDOWS\system32\netcenter.dll
2016-09-14 20:42:33 ----A---- C:\WINDOWS\SYSWOW64\WsmWmiPl.dll
2016-09-14 20:42:33 ----A---- C:\WINDOWS\SYSWOW64\syncutil.dll
2016-09-14 20:42:33 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2016-09-14 20:42:33 ----A---- C:\WINDOWS\SYSWOW64\duser.dll
2016-09-14 20:42:33 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-14 20:42:33 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2016-09-14 20:42:33 ----A---- C:\WINDOWS\system32\RADCUI.dll
2016-09-14 20:42:33 ----A---- C:\WINDOWS\system32\mscms.dll
2016-09-14 20:42:33 ----A---- C:\WINDOWS\system32\dot3ui.dll
2016-09-14 20:42:33 ----A---- C:\WINDOWS\system32\deviceassociation.dll
2016-09-14 20:42:32 ----A---- C:\WINDOWS\SYSWOW64\wsmprovhost.exe
2016-09-14 20:42:32 ----A---- C:\WINDOWS\SYSWOW64\WsmAuto.dll
2016-09-14 20:42:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-14 20:42:32 ----A---- C:\WINDOWS\SYSWOW64\vsstrace.dll
2016-09-14 20:42:32 ----A---- C:\WINDOWS\SYSWOW64\SyncController.dll
2016-09-14 20:42:32 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2016-09-14 20:42:32 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2016-09-14 20:42:32 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-09-14 20:42:32 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2016-09-14 20:42:31 ----A---- C:\WINDOWS\SYSWOW64\WsmAgent.dll
2016-09-14 20:42:31 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2016-09-14 20:42:31 ----A---- C:\WINDOWS\SYSWOW64\deviceassociation.dll
2016-09-14 20:42:31 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2016-09-14 20:42:31 ----A---- C:\WINDOWS\system32\wificonnapi.dll
2016-09-14 20:42:31 ----A---- C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2016-09-14 20:42:29 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2016-09-14 20:42:29 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2016-09-14 20:42:29 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2016-09-14 20:42:29 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2016-09-14 20:42:29 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2016-09-14 20:42:29 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-09-14 20:42:29 ----A---- C:\WINDOWS\system32\sppsvc.exe
2016-09-14 20:42:28 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-09-14 20:42:28 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-09-14 20:42:28 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2016-09-14 20:42:27 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-09-14 20:42:27 ----A---- C:\WINDOWS\system32\shell32.dll
2016-09-14 20:42:26 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-09-14 20:42:26 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-09-14 20:42:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-09-14 20:42:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-09-14 20:42:25 ----A---- C:\WINDOWS\system32\wininet.dll
2016-09-14 20:42:24 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2016-09-14 20:42:24 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2016-09-14 20:42:24 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-09-14 20:42:24 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-09-14 20:42:23 ----A---- C:\WINDOWS\SYSWOW64\mmcndmgr.dll
2016-09-14 20:42:23 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-09-14 20:42:23 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-09-14 20:42:22 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2016-09-14 20:42:22 ----A---- C:\WINDOWS\SYSWOW64\mmc.exe
2016-09-14 20:42:22 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2016-09-14 20:42:22 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-09-14 20:42:22 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-09-14 20:42:21 ----A---- C:\WINDOWS\SYSWOW64\srmclient.dll
2016-09-14 20:42:21 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2016-09-14 20:42:21 ----A---- C:\WINDOWS\system32\webservices.dll
2016-09-14 20:42:21 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2016-09-14 20:42:21 ----A---- C:\WINDOWS\system32\ole32.dll
2016-09-14 20:42:20 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-09-14 20:42:20 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-09-14 20:42:20 ----A---- C:\WINDOWS\SYSWOW64\MsSpellCheckingFacility.dll
2016-09-14 20:42:20 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-09-14 20:42:20 ----A---- C:\WINDOWS\system32\winresume.exe
2016-09-14 20:42:19 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2016-09-14 20:42:19 ----A---- C:\WINDOWS\SYSWOW64\PhoneOm.dll
2016-09-14 20:42:18 ----A---- C:\WINDOWS\SYSWOW64\MSAJApi.dll
2016-09-14 20:42:18 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2016-09-14 20:42:18 ----A---- C:\WINDOWS\system32\winload.exe
2016-09-14 20:42:18 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-09-14 20:42:18 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-09-14 20:42:18 ----A---- C:\WINDOWS\system32\ntshrui.dll
2016-09-14 20:42:17 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2016-09-14 20:42:17 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2016-09-14 20:42:17 ----A---- C:\WINDOWS\system32\srmclient.dll
2016-09-14 20:42:15 ----A---- C:\WINDOWS\SYSWOW64\mscms.dll
2016-09-14 20:42:15 ----A---- C:\WINDOWS\SYSWOW64\filemgmt.dll
2016-09-14 20:42:15 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-09-14 20:42:15 ----A---- C:\WINDOWS\system32\nettrace.dll
2016-09-14 20:42:15 ----A---- C:\WINDOWS\system32\comuid.dll
2016-09-14 20:42:14 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2016-09-14 20:42:14 ----A---- C:\WINDOWS\system32\wbemcomn.dll
2016-09-14 20:42:14 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2016-09-14 20:42:14 ----A---- C:\WINDOWS\system32\quartz.dll
2016-09-14 20:42:14 ----A---- C:\WINDOWS\system32\msxml3.dll
2016-09-14 20:42:14 ----A---- C:\WINDOWS\system32\mstsc.exe
2016-09-14 20:42:14 ----A---- C:\WINDOWS\system32\drivers\ufxsynopsys.sys
2016-09-14 20:42:13 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2016-09-14 20:42:13 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2016-09-14 20:42:13 ----A---- C:\WINDOWS\SYSWOW64\PeerDistSh.dll
2016-09-14 20:42:13 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-09-14 20:42:13 ----A---- C:\WINDOWS\system32\WlanMM.dll
2016-09-14 20:42:13 ----A---- C:\WINDOWS\system32\sspicli.dll
2016-09-14 20:42:13 ----A---- C:\WINDOWS\system32\PeerDistSh.dll
2016-09-14 20:42:13 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-09-14 20:42:12 ----A---- C:\WINDOWS\SYSWOW64\cryptui.dll
2016-09-14 20:42:12 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2016-09-14 20:42:12 ----A---- C:\WINDOWS\system32\usocore.dll
2016-09-14 20:42:12 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2016-09-14 20:42:12 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2016-09-14 20:42:12 ----A---- C:\WINDOWS\system32\lsass.exe
2016-09-14 20:42:11 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2016-09-14 20:42:11 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2016-09-14 20:42:11 ----A---- C:\WINDOWS\SYSWOW64\cic.dll
2016-09-14 20:42:11 ----A---- C:\WINDOWS\system32\winipcsecproc_ssp.dll
2016-09-14 20:42:11 ----A---- C:\WINDOWS\system32\srmscan.dll
2016-09-14 20:42:11 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2016-09-14 20:42:11 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2016-09-14 20:42:10 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2016-09-14 20:42:10 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2016-09-14 20:42:10 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2016-09-14 20:42:10 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-09-14 20:42:10 ----A---- C:\WINDOWS\SYSWOW64\azroleui.dll
2016-09-14 20:42:10 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-09-14 20:42:10 ----A---- C:\WINDOWS\system32\AppxApplicabilityEngine.dll
2016-09-14 20:42:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.LowLevel.dll
2016-09-14 20:42:09 ----A---- C:\WINDOWS\SYSWOW64\mmcshext.dll
2016-09-14 20:42:09 ----A---- C:\WINDOWS\SYSWOW64\mmcbase.dll
2016-09-14 20:42:09 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2016-09-14 20:42:09 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2016-09-14 20:42:09 ----A---- C:\WINDOWS\system32\spcompat.dll
2016-09-14 20:42:09 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2016-09-14 20:42:09 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2016-09-14 20:42:09 ----A---- C:\WINDOWS\system32\azroles.dll
2016-09-14 20:42:08 ----A---- C:\WINDOWS\SYSWOW64\pla.dll
2016-09-14 20:42:08 ----A---- C:\WINDOWS\system32\wdc.dll
2016-09-14 20:42:08 ----A---- C:\WINDOWS\system32\wcncsvc.dll
2016-09-14 20:42:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Cortana.ProxyStub.dll
2016-09-14 20:42:06 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2016-09-14 20:42:06 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2016-09-14 20:42:06 ----A---- C:\WINDOWS\system32\WsmAuto.dll
2016-09-14 20:42:06 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2016-09-14 20:42:06 ----A---- C:\WINDOWS\system32\SettingsHandlers_Geolocation.dll
2016-09-14 20:42:06 ----A---- C:\WINDOWS\system32\ieui.dll
2016-09-14 20:42:06 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-09-14 20:42:05 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2016-09-14 20:42:05 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2016-09-14 20:42:05 ----A---- C:\WINDOWS\SYSWOW64\fwcfg.dll
2016-09-14 20:42:05 ----A---- C:\WINDOWS\system32\Windows.Storage.Search.dll
2016-09-14 20:42:05 ----A---- C:\WINDOWS\system32\WcnApi.dll
2016-09-14 20:42:05 ----A---- C:\WINDOWS\system32\WalletService.dll
2016-09-14 20:42:05 ----A---- C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-09-14 20:42:05 ----A---- C:\WINDOWS\system32\drivers\MTConfig.sys
2016-09-14 20:42:05 ----A---- C:\WINDOWS\system32\CPFilters.dll
2016-09-14 20:42:05 ----A---- C:\WINDOWS\system32\AdmTmpl.dll
2016-09-14 20:42:04 ----A---- C:\WINDOWS\SYSWOW64\gpprefcl.dll
2016-09-14 20:42:04 ----A---- C:\WINDOWS\SYSWOW64\gpedit.dll
2016-09-14 20:42:04 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2016-09-14 20:42:04 ----A---- C:\WINDOWS\SYSWOW64\AdmTmpl.dll
2016-09-14 20:42:04 ----A---- C:\WINDOWS\system32\WmpDui.dll
2016-09-14 20:42:04 ----A---- C:\WINDOWS\system32\GamePanel.exe
2016-09-14 20:42:04 ----A---- C:\WINDOWS\system32\fdWCN.dll
2016-09-14 20:42:04 ----A---- C:\WINDOWS\system32\efswrt.dll
2016-09-14 20:42:03 ----A---- C:\WINDOWS\SYSWOW64\VoipRT.dll
2016-09-14 20:42:03 ----A---- C:\WINDOWS\SYSWOW64\SmartcardCredentialProvider.dll
2016-09-14 20:42:03 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2016-09-14 20:42:03 ----A---- C:\WINDOWS\SYSWOW64\oemlicense.dll
2016-09-14 20:42:03 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-09-14 20:42:03 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2016-09-14 20:42:03 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-09-14 20:42:02 ----A---- C:\WINDOWS\SYSWOW64\WlanMM.dll
2016-09-14 20:42:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.Search.dll
2016-09-14 20:42:02 ----A---- C:\WINDOWS\SYSWOW64\authfwcfg.dll
2016-09-14 20:42:02 ----A---- C:\WINDOWS\system32\wlanui.dll
2016-09-14 20:42:02 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-09-14 20:42:02 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-09-14 20:42:01 ----A---- C:\WINDOWS\SYSWOW64\WLanConn.dll
2016-09-14 20:42:01 ----A---- C:\WINDOWS\SYSWOW64\MrmIndexer.dll
2016-09-14 20:42:01 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2016-09-14 20:42:01 ----A---- C:\WINDOWS\SYSWOW64\certmgr.dll
2016-09-14 20:42:01 ----A---- C:\WINDOWS\system32\wsmprovhost.exe
2016-09-14 20:42:01 ----A---- C:\WINDOWS\system32\WLanConn.dll
2016-09-14 20:42:01 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-09-14 20:42:01 ----A---- C:\WINDOWS\system32\dafWCN.dll
2016-09-14 20:42:01 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-09-14 20:42:01 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-09-14 20:42:00 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2016-09-14 20:42:00 ----A---- C:\WINDOWS\SYSWOW64\msobjs.dll
2016-09-14 20:42:00 ----A---- C:\WINDOWS\SYSWOW64\licensingdiag.exe
2016-09-14 20:42:00 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2016-09-14 20:42:00 ----A---- C:\WINDOWS\system32\WsmAgent.dll
2016-09-14 20:42:00 ----A---- C:\WINDOWS\system32\Windows.Graphics.dll
2016-09-14 20:42:00 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2016-09-14 20:42:00 ----A---- C:\WINDOWS\system32\IconCodecService.dll
2016-09-14 20:42:00 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2016-09-14 20:41:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.AllJoyn.dll
2016-09-14 20:41:59 ----A---- C:\WINDOWS\SYSWOW64\CheckNetIsolation.exe
2016-09-14 20:41:59 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2016-09-14 20:41:59 ----A---- C:\WINDOWS\system32\odbcconf.dll
2016-09-14 20:41:59 ----A---- C:\WINDOWS\system32\dialserver.dll
2016-09-14 20:41:59 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2016-09-14 20:41:57 ----A---- C:\WINDOWS\system32\NMAA.dll
2016-09-14 20:41:57 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-09-14 20:41:57 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2016-09-14 20:41:57 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2016-09-14 20:41:57 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2016-09-14 20:41:56 ----A---- C:\WINDOWS\system32\mos.dll
2016-09-14 20:41:56 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-09-14 20:41:56 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-09-14 20:41:54 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-09-14 20:41:53 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-09-14 20:41:53 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-09-14 20:41:52 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-09-14 20:41:52 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2016-09-14 20:41:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-09-14 20:41:51 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2016-09-14 20:41:51 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2016-09-14 20:41:51 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-09-14 20:41:51 ----A---- C:\WINDOWS\system32\rasapi32.dll
2016-09-14 20:41:50 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2016-09-14 20:41:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-09-14 20:41:50 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-09-14 20:41:50 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2016-09-14 20:41:49 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2016-09-14 20:41:49 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-09-14 20:41:49 ----A---- C:\WINDOWS\system32\storagewmi.dll
2016-09-14 20:41:49 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-09-14 20:41:49 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-09-14 20:41:48 ----A---- C:\WINDOWS\system32\VSSVC.exe
2016-09-14 20:41:48 ----A---- C:\WINDOWS\system32\qmgr.dll
2016-09-14 20:41:48 ----A---- C:\WINDOWS\system32\msctf.dll
2016-09-14 20:41:48 ----A---- C:\WINDOWS\system32\MosStorage.dll
2016-09-14 20:41:48 ----A---- C:\WINDOWS\system32\moshostcore.dll
2016-09-14 20:41:48 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2016-09-14 20:41:48 ----A---- C:\WINDOWS\system32\moshost.dll
2016-09-14 20:41:48 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2016-09-14 20:41:48 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2016-09-14 20:41:48 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2016-09-14 20:41:47 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2016-09-14 20:41:47 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2016-09-14 20:41:47 ----A---- C:\WINDOWS\system32\PhoneService.dll
2016-09-14 20:41:47 ----A---- C:\WINDOWS\system32\oleaut32.dll
2016-09-14 20:41:47 ----A---- C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2016-09-14 20:41:47 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-09-14 20:41:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-09-14 20:41:46 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2016-09-14 20:41:46 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-09-14 20:41:46 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2016-09-14 20:41:46 ----A---- C:\WINDOWS\system32\vssapi.dll
2016-09-14 20:41:46 ----A---- C:\WINDOWS\system32\diagperf.dll
2016-09-14 20:41:45 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-09-14 20:41:45 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-09-14 20:41:45 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2016-09-14 20:41:45 ----A---- C:\WINDOWS\system32\wmpmde.dll
2016-09-14 20:41:45 ----A---- C:\WINDOWS\system32\usercpl.dll
2016-09-14 20:41:45 ----A---- C:\WINDOWS\system32\termsrv.dll
2016-09-14 20:41:45 ----A---- C:\WINDOWS\system32\pnidui.dll
2016-09-14 20:41:45 ----A---- C:\WINDOWS\system32\PhoneOm.dll
2016-09-14 20:41:45 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-09-14 20:41:45 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-09-14 20:41:44 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2016-09-14 20:41:44 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2016-09-14 20:41:44 ----A---- C:\WINDOWS\system32\wlidprov.dll
2016-09-14 20:41:44 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2016-09-14 20:41:44 ----A---- C:\WINDOWS\system32\d3d9.dll
2016-09-14 20:41:44 ----A---- C:\WINDOWS\system32\clusapi.dll
2016-09-14 20:41:44 ----A---- C:\WINDOWS\system32\BCP47Langs.dll
2016-09-14 20:41:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2016-09-14 20:41:43 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-09-14 20:41:43 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-09-14 20:41:43 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-09-14 20:41:43 ----A---- C:\WINDOWS\system32\hnetcfg.dll
2016-09-14 20:41:43 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-09-14 20:41:43 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2016-09-14 20:41:42 ----A---- C:\WINDOWS\system32\wsp_health.dll
2016-09-14 20:41:42 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2016-09-14 20:41:42 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-09-14 20:41:42 ----A---- C:\WINDOWS\system32\swprv.dll
2016-09-14 20:41:42 ----A---- C:\WINDOWS\system32\mprddm.dll
2016-09-14 20:41:42 ----A---- C:\WINDOWS\system32\D3D12.dll
2016-09-14 20:41:41 ----A---- C:\WINDOWS\SYSWOW64\BCP47Langs.dll
2016-09-14 20:41:40 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-09-14 20:41:40 ----A---- C:\WINDOWS\system32\vds.exe
2016-09-14 20:41:40 ----A---- C:\WINDOWS\system32\defragsvc.dll
2016-09-14 20:41:39 ----A---- C:\WINDOWS\system32\mispace.dll
2016-09-14 20:41:38 ----A---- C:\WINDOWS\system32\sdengin2.dll
2016-09-14 20:41:38 ----A---- C:\WINDOWS\system32\resutils.dll
2016-09-14 20:41:38 ----A---- C:\WINDOWS\system32\apphelp.dll
2016-09-14 20:41:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2016-09-14 20:41:37 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2016-09-14 20:41:37 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-09-14 20:41:37 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-09-14 20:41:36 ----A---- C:\WINDOWS\SYSWOW64\comuid.dll
2016-09-14 20:41:36 ----A---- C:\WINDOWS\SYSWOW64\certca.dll
2016-09-14 20:41:36 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-09-14 20:41:35 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2016-09-14 20:41:35 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-09-14 20:41:35 ----A---- C:\WINDOWS\system32\kernel32.dll
2016-09-14 20:41:35 ----A---- C:\WINDOWS\system32\eappcfg.dll
2016-09-14 20:41:35 ----A---- C:\WINDOWS\system32\DMRServer.dll
2016-09-14 20:41:35 ----A---- C:\WINDOWS\system32\APHostService.dll
2016-09-14 20:41:34 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2016-09-14 20:41:34 ----A---- C:\WINDOWS\system32\icsvc.dll
2016-09-14 20:41:33 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-09-14 20:41:33 ----A---- C:\WINDOWS\system32\wbengine.exe
2016-09-14 20:41:33 ----A---- C:\WINDOWS\system32\upnphost.dll
2016-09-14 20:41:33 ----A---- C:\WINDOWS\system32\tdh.dll
2016-09-14 20:41:33 ----A---- C:\WINDOWS\system32\pcasvc.dll
2016-09-14 20:41:33 ----A---- C:\WINDOWS\system32\netman.dll
2016-09-14 20:41:33 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-09-14 20:41:32 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-09-14 20:41:32 ----A---- C:\WINDOWS\system32\wusa.exe
2016-09-14 20:41:32 ----A---- C:\WINDOWS\system32\setupapi.dll
2016-09-14 20:41:32 ----A---- C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-09-14 20:41:32 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-09-14 20:41:32 ----A---- C:\WINDOWS\system32\csrsrv.dll
2016-09-14 20:41:31 ----A---- C:\WINDOWS\system32\netcfgx.dll
2016-09-14 20:41:31 ----A---- C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2016-09-14 20:41:31 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2016-09-14 20:41:31 ----A---- C:\WINDOWS\system32\drvstore.dll
2016-09-14 20:41:30 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-09-14 20:41:30 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-09-14 20:41:30 ----A---- C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2016-09-14 20:41:30 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2016-09-14 20:41:29 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2016-09-14 20:41:29 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2016-09-14 20:41:29 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-09-14 20:41:29 ----A---- C:\WINDOWS\system32\wimserv.exe
2016-09-14 20:41:29 ----A---- C:\WINDOWS\system32\MicrosoftAccountCloudAP.dll
2016-09-14 20:41:29 ----A---- C:\WINDOWS\system32\fdProxy.dll
2016-09-14 20:41:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2016-09-14 20:41:28 ----A---- C:\WINDOWS\SYSWOW64\usbceip.dll
2016-09-14 20:41:28 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-09-14 20:41:28 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-09-14 20:41:28 ----A---- C:\WINDOWS\system32\WindowsCodecsExt.dll
2016-09-14 20:41:28 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-09-14 20:41:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2016-09-14 20:41:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-09-14 20:41:27 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2016-09-14 20:41:27 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-09-14 20:41:27 ----A---- C:\WINDOWS\system32\upnpcont.exe
2016-09-14 20:41:27 ----A---- C:\WINDOWS\system32\udhisapi.dll
2016-09-14 20:41:26 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2016-09-14 20:41:26 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2016-09-14 20:41:26 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-09-14 20:41:26 ----A---- C:\WINDOWS\system32\mcbuilder.exe
2016-09-14 20:41:26 ----A---- C:\WINDOWS\system32\duser.dll
2016-09-14 20:41:26 ----A---- C:\WINDOWS\system32\dui70.dll
2016-09-14 20:41:26 ----A---- C:\WINDOWS\system32\autochk.exe
2016-09-14 20:41:25 ----A---- C:\WINDOWS\system32\VoipRT.dll
2016-09-14 20:41:25 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2016-09-14 20:41:25 ----A---- C:\WINDOWS\system32\netplwiz.dll
2016-09-14 20:41:25 ----A---- C:\WINDOWS\system32\adtschema.dll
2016-09-14 20:41:24 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2016-09-14 20:41:23 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2016-09-14 20:41:23 ----A---- C:\WINDOWS\system32\pla.dll
2016-09-14 20:41:23 ----A---- C:\WINDOWS\system32\netshell.dll
2016-09-14 20:41:22 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2016-09-14 20:41:20 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2016-09-14 20:41:20 ----A---- C:\WINDOWS\system32\scapi.dll
2016-09-14 20:41:20 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2016-09-14 20:41:19 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-09-14 20:41:19 ----A---- C:\WINDOWS\system32\StikyNot.exe
2016-09-14 20:41:19 ----A---- C:\WINDOWS\system32\eapphost.dll
2016-09-14 20:41:19 ----A---- C:\WINDOWS\system32\dlnashext.dll
2016-09-14 20:41:18 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2016-09-14 20:41:18 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-09-14 20:41:17 ----A---- C:\WINDOWS\SYSWOW64\srpapi.dll
2016-09-14 20:41:17 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2016-09-14 20:41:17 ----A---- C:\WINDOWS\system32\vdsutil.dll
2016-09-14 20:41:17 ----A---- C:\WINDOWS\system32\aitstatic.exe
2016-09-14 20:41:16 ----A---- C:\WINDOWS\system32\themeui.dll
2016-09-14 20:41:16 ----A---- C:\WINDOWS\system32\syncutil.dll
2016-09-14 20:41:16 ----A---- C:\WINDOWS\system32\eapsvc.dll
2016-09-14 20:41:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-09-14 20:41:15 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-09-14 20:41:15 ----A---- C:\WINDOWS\system32\vss_ps.dll
2016-09-14 20:41:15 ----A---- C:\WINDOWS\system32\configurationclient.dll
2016-09-14 20:41:14 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2016-09-14 20:41:14 ----A---- C:\WINDOWS\system32\vsstrace.dll
2016-09-14 20:41:13 ----A---- C:\WINDOWS\system32\msobjs.dll
2016-09-14 20:41:13 ----A---- C:\WINDOWS\system32\ipsecsnp.dll
2016-09-14 20:41:13 ----A---- C:\WINDOWS\system32\fhcfg.dll
2016-09-14 20:41:13 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-09-14 20:41:12 ----A---- C:\WINDOWS\SYSWOW64\dot3ui.dll
2016-09-14 20:41:12 ----A---- C:\WINDOWS\SYSWOW64\azroles.dll
2016-09-14 20:41:12 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-09-14 20:41:12 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2016-09-14 20:41:11 ----A---- C:\WINDOWS\system32\SyncController.dll
2016-09-14 20:41:11 ----A---- C:\WINDOWS\system32\fhsvc.dll
2016-09-14 20:41:11 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-09-14 20:41:11 ----A---- C:\WINDOWS\system32\aadtb.dll
2016-09-14 20:41:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2016-09-14 20:41:10 ----A---- C:\WINDOWS\SYSWOW64\AppLockerCSP.dll
2016-09-14 20:41:10 ----A---- C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2016-09-14 20:41:10 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2016-09-14 20:41:10 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2016-09-14 20:41:10 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2016-09-14 20:41:07 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2016-09-14 20:41:07 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2016-09-14 20:41:06 ----A---- C:\WINDOWS\SYSWOW64\IdCtrls.dll
2016-09-14 20:41:06 ----A---- C:\WINDOWS\system32\winsrv.dll
2016-09-14 20:41:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-09-14 20:41:03 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-09-14 20:40:58 ----A---- C:\WINDOWS\system32\wmp.dll
2016-09-14 20:40:57 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-09-14 20:40:55 ----A---- C:\WINDOWS\system32\twinui.dll
2016-09-14 20:40:54 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-09-14 20:40:54 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-09-14 20:40:54 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-09-14 20:40:52 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-09-14 20:40:52 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-09-14 20:40:52 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-09-14 20:40:51 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-09-14 20:40:51 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-09-14 20:40:51 ----A---- C:\WINDOWS\system32\drivers\ClipSp.sys
2016-09-14 20:40:49 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsRaw.dll
2016-09-14 20:40:48 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-09-14 20:40:48 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-09-14 20:40:47 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-09-14 20:40:47 ----A---- C:\WINDOWS\system32\PeerDistSvc.dll
2016-09-14 20:40:47 ----A---- C:\WINDOWS\explorer.exe
2016-09-14 20:40:46 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2016-09-14 20:40:46 ----A---- C:\WINDOWS\system32\mmc.exe
2016-09-14 20:40:45 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2016-09-14 20:40:45 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-09-14 20:40:45 ----A---- C:\WINDOWS\system32\winmde.dll
2016-09-14 20:40:45 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-09-14 20:40:45 ----A---- C:\WINDOWS\system32\Pimstore.dll
2016-09-14 20:40:44 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-09-14 20:40:44 ----A---- C:\WINDOWS\system32\winipcsecproc.dll
2016-09-14 20:40:44 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-09-14 20:40:44 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-09-14 20:40:44 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-09-14 20:40:43 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2016-09-14 20:40:43 ----A---- C:\WINDOWS\system32\UserDataService.dll
2016-09-14 20:40:43 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2016-09-14 20:40:43 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-09-14 20:40:42 ----A---- C:\WINDOWS\system32\WindowsCodecsRaw.dll
2016-09-14 20:40:41 ----A---- C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-09-14 20:40:41 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-09-14 20:40:40 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2016-09-14 20:40:40 ----A---- C:\WINDOWS\system32\winmsipc.dll
2016-09-14 20:40:40 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-09-14 20:40:40 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-09-14 20:40:40 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-09-14 20:40:39 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-09-14 20:40:39 ----A---- C:\WINDOWS\system32\gameux.dll
2016-09-14 20:40:39 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-09-14 20:40:38 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2016-09-14 20:40:38 ----A---- C:\WINDOWS\system32\WSShared.dll
2016-09-14 20:40:38 ----A---- C:\WINDOWS\system32\Geolocation.dll
2016-09-14 20:40:37 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2016-09-14 20:40:37 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-09-14 20:40:37 ----A---- C:\WINDOWS\system32\w32time.dll
2016-09-14 20:40:37 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2016-09-14 20:40:36 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-09-14 20:40:36 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2016-09-14 20:40:36 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-09-14 20:40:36 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-09-14 20:40:36 ----A---- C:\WINDOWS\system32\ShareHost.dll
2016-09-14 20:40:36 ----A---- C:\WINDOWS\system32\hgcpl.dll
2016-09-14 20:40:36 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-09-14 20:40:36 ----A---- C:\WINDOWS\system32\certca.dll
2016-09-14 20:40:35 ----A---- C:\WINDOWS\SYSWOW64\wmploc.DLL
2016-09-14 20:40:35 ----A---- C:\WINDOWS\system32\wmploc.DLL
2016-09-14 20:40:35 ----A---- C:\WINDOWS\system32\wmpeffects.dll
2016-09-14 20:40:35 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-09-14 20:40:35 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-09-14 20:40:34 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2016-09-14 20:40:34 ----A---- C:\WINDOWS\system32\SecureTimeAggregator.dll
2016-09-14 20:40:34 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2016-09-14 20:40:34 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-09-14 20:40:33 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2016-09-14 20:40:33 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-09-14 20:40:33 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-09-14 20:40:33 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-09-14 20:40:33 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-09-14 20:40:32 ----A---- C:\WINDOWS\SYSWOW64\wmpeffects.dll
2016-09-14 20:40:32 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-09-14 20:40:32 ----A---- C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-09-14 20:40:32 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-09-14 20:40:32 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-09-14 20:40:32 ----A---- C:\WINDOWS\system32\pmcsnap.dll
2016-09-14 20:40:32 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-09-14 20:40:32 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2016-09-14 20:40:31 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-09-14 20:40:31 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-09-14 20:40:31 ----A---- C:\WINDOWS\system32\sppcext.dll
2016-09-14 20:40:31 ----A---- C:\WINDOWS\system32\filemgmt.dll
2016-09-14 20:40:31 ----A---- C:\WINDOWS\system32\cryptui.dll
2016-09-14 20:40:30 ----A---- C:\WINDOWS\system32\WSService.dll
2016-09-14 20:40:30 ----A---- C:\WINDOWS\system32\sppobjs.dll
2016-09-14 20:40:30 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-09-14 20:40:30 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2016-09-14 20:40:30 ----A---- C:\WINDOWS\system32\dbgeng.dll
2016-09-14 20:40:29 ----A---- C:\WINDOWS\system32\winipcfile.dll
2016-09-14 20:40:29 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-09-14 20:40:29 ----A---- C:\WINDOWS\system32\hal.dll
2016-09-14 20:40:29 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2016-09-14 20:40:29 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-09-14 20:40:29 ----A---- C:\WINDOWS\system32\AudioEng.dll
2016-09-14 20:40:28 ----A---- C:\WINDOWS\system32\SRH.dll
2016-09-14 20:40:28 ----A---- C:\WINDOWS\system32\mmcshext.dll
2016-09-14 20:40:28 ----A---- C:\WINDOWS\system32\mmcbase.dll
2016-09-14 20:40:28 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2016-09-14 20:40:27 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2016-09-14 20:40:27 ----A---- C:\WINDOWS\system32\themecpl.dll
2016-09-14 20:40:27 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2016-09-14 20:40:27 ----A---- C:\WINDOWS\system32\sppwinob.dll
2016-09-14 20:40:27 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2016-09-14 20:40:26 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-09-14 20:40:26 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2016-09-14 20:40:26 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-09-14 20:40:26 ----A---- C:\WINDOWS\system32\mprdim.dll
2016-09-14 20:40:26 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2016-09-14 20:40:26 ----A---- C:\WINDOWS\system32\ApplicationFrame.dll
2016-09-14 20:40:25 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsExt.dll
2016-09-14 20:40:25 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-09-14 20:40:25 ----A---- C:\WINDOWS\SYSWOW64\prnntfy.dll
2016-09-14 20:40:25 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-09-14 20:40:25 ----A---- C:\WINDOWS\system32\PeerDist.dll
2016-09-14 20:40:25 ----A---- C:\WINDOWS\system32\gpedit.dll
2016-09-14 20:40:25 ----A---- C:\WINDOWS\system32\DbgModel.dll
2016-09-14 20:40:24 ----A---- C:\WINDOWS\SYSWOW64\PeerDist.dll
2016-09-14 20:40:24 ----A---- C:\WINDOWS\SYSWOW64\DbgModel.dll
2016-09-14 20:40:24 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-09-14 20:40:24 ----A---- C:\WINDOWS\system32\cic.dll
2016-09-14 20:40:23 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-09-14 20:40:23 ----A---- C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2016-09-14 20:40:23 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2016-09-14 20:40:23 ----A---- C:\WINDOWS\system32\certcli.dll
2016-09-14 20:40:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-09-14 20:40:22 ----A---- C:\WINDOWS\SYSWOW64\PhotoScreensaver.scr
2016-09-14 20:40:22 ----A---- C:\WINDOWS\system32\usermgr.dll
2016-09-14 20:40:22 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2016-09-14 20:40:22 ----A---- C:\WINDOWS\system32\PhotoScreensaver.scr
2016-09-14 20:40:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2016-09-14 20:40:21 ----A---- C:\WINDOWS\system32\oemlicense.dll
2016-09-14 20:40:21 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2016-09-14 20:40:21 ----A---- C:\WINDOWS\system32\Display.dll
2016-09-14 20:40:20 ----A---- C:\WINDOWS\system32\zipfldr.dll
2016-09-14 20:40:20 ----A---- C:\WINDOWS\system32\mspaint.exe
2016-09-14 20:40:20 ----A---- C:\WINDOWS\system32\dbghelp.dll
2016-09-14 20:40:19 ----A---- C:\WINDOWS\system32\WUDFx.dll
2016-09-14 20:40:19 ----A---- C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2016-09-14 20:40:18 ----A---- C:\WINDOWS\SYSWOW64\WSSync.dll
2016-09-14 20:40:18 ----A---- C:\WINDOWS\system32\WSSync.dll
2016-09-14 20:40:18 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2016-09-14 20:40:18 ----A---- C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-09-14 20:40:18 ----A---- C:\WINDOWS\system32\FingerprintEnrollment.dll
2016-09-14 20:40:18 ----A---- C:\WINDOWS\system32\credprovs.dll
2016-09-14 20:40:17 ----A---- C:\WINDOWS\system32\PeerDistCleaner.dll
2016-09-14 20:40:17 ----A---- C:\WINDOWS\system32\licensingdiag.exe
2016-09-14 20:40:17 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-09-14 20:40:16 ----A---- C:\WINDOWS\system32\sppinst.dll
2016-09-14 20:40:16 ----A---- C:\WINDOWS\system32\SettingMonitor.dll
2016-09-14 20:40:16 ----A---- C:\WINDOWS\system32\mqsnap.dll
2016-09-14 20:40:16 ----A---- C:\WINDOWS\system32\ImplatSetup.dll
2016-09-14 20:40:15 ----A---- C:\WINDOWS\SYSWOW64\DictationManager.dll
2016-09-14 20:40:15 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2016-09-12 19:35:14 ----A---- C:\WINDOWS\system32\drivers\ESETCleanersDriver.sys
2016-09-12 19:30:18 ----D---- C:\Users\Samurraj\AppData\Roaming\ESET
2016-09-12 19:26:03 ----D---- C:\ProgramData\ESET
2016-09-12 19:26:03 ----D---- C:\Program Files\ESET
2016-09-08 13:54:36 ----A---- C:\WINDOWS\SYSWOW64\EasyRedirectOff.ini
2016-09-08 13:54:36 ----A---- C:\WINDOWS\system32\EasyRedirectOff.ini
2016-09-08 13:54:33 ----D---- C:\Users\Samurraj\AppData\Roaming\Easy-Hide-IP VPN
2016-09-08 13:52:23 ----A---- C:\WINDOWS\system32\EasyRedirect64.dll
2016-09-08 13:52:21 ----A---- C:\WINDOWS\SYSWOW64\EasyRedirect.dll
2016-09-03 22:07:07 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2016-08-28 08:36:40 ----A---- C:\WINDOWS\system32\drivers\ekbdflt.sys
2016-08-25 21:27:26 ----A---- C:\WINDOWS\SYSWOW64\networkdlllsp.dll
2016-08-21 19:44:21 ----D---- C:\Sdílení

======List of files/folders modified in the last 1 month======

2016-09-20 18:55:48 ----RD---- C:\Program Files
2016-09-20 18:53:26 ----D---- C:\WINDOWS\Prefetch
2016-09-20 18:53:26 ----D---- C:\Windows
2016-09-20 18:47:57 ----D---- C:\WINDOWS\Temp
2016-09-20 18:40:08 ----HD---- C:\ProgramData
2016-09-20 18:39:53 ----SHD---- C:\System Volume Information
2016-09-20 18:36:48 ----D---- C:\WINDOWS\System32
2016-09-20 18:36:48 ----D---- C:\WINDOWS\INF
2016-09-20 18:36:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-09-20 18:33:15 ----D---- C:\WINDOWS\AppReadiness
2016-09-20 18:33:14 ----HD---- C:\Program Files\WindowsApps
2016-09-20 18:32:24 ----D---- C:\WINDOWS\system32\sru
2016-09-20 18:28:09 ----SHDC---- C:\WINDOWS\Installer
2016-09-20 18:28:09 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft
2016-09-20 18:28:02 ----D---- C:\WINDOWS\Microsoft.NET
2016-09-20 18:27:58 ----D---- C:\Program Files\Common Files
2016-09-20 18:27:58 ----AD---- C:\Program Files\Common Files\microsoft shared
2016-09-20 18:27:25 ----AD---- C:\Program Files\Microsoft Office
2016-09-20 18:27:03 ----D---- C:\WINDOWS\system32\catroot2
2016-09-20 14:59:45 ----D---- C:\WINDOWS\SoftwareDistribution
2016-09-19 20:35:01 ----D---- C:\WINDOWS\system32\drivers
2016-09-19 20:16:27 ----D---- C:\WINDOWS\system32\config
2016-09-19 19:58:25 ----D---- C:\WINDOWS\debug
2016-09-19 19:56:49 ----RD---- C:\Program Files (x86)
2016-09-19 19:55:11 ----D---- C:\WINDOWS\system32\Macromed
2016-09-19 19:55:07 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2016-09-19 19:49:56 ----D---- C:\WINDOWS\system32\Tasks
2016-09-19 19:23:23 ----D---- C:\Program Files (x86)\Common Files
2016-09-18 04:21:12 ----D---- C:\WINDOWS\rescache
2016-09-17 14:39:46 ----D---- C:\WINDOWS\system32\DriverStore
2016-09-17 14:39:32 ----D---- C:\WINDOWS\WinSxS
2016-09-17 14:09:16 ----D---- C:\WINDOWS\Tasks
2016-09-17 14:09:02 ----SD---- C:\ProgramData\Microsoft
2016-09-16 23:16:59 ----D---- C:\WINDOWS\Migration
2016-09-16 22:10:11 ----D---- C:\WINDOWS\system32\drivers\etc
2016-09-16 22:07:28 ----D---- C:\WINDOWS\SysWOW64
2016-09-16 21:53:42 ----D---- C:\Users\Samurraj\AppData\Roaming\uTorrent
2016-09-16 20:55:35 ----D---- C:\Users\Samurraj\AppData\Roaming\vlc
2016-09-16 19:36:17 ----SHD---- C:\Boot
2016-09-15 21:24:15 ----SD---- C:\WINDOWS\SYSWOW64\F12
2016-09-15 21:24:15 ----D---- C:\WINDOWS\SYSWOW64\wbem
2016-09-15 21:24:15 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-09-15 21:24:15 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-09-15 21:24:14 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-09-15 21:24:14 ----D---- C:\WINDOWS\SYSWOW64\AdvancedInstallers
2016-09-15 21:24:10 ----SD---- C:\WINDOWS\system32\F12
2016-09-15 21:24:10 ----D---- C:\WINDOWS\system32\wbem
2016-09-15 21:24:10 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-09-15 21:24:10 ----D---- C:\WINDOWS\system32\setup
2016-09-15 21:24:10 ----D---- C:\WINDOWS\system32\oobe
2016-09-15 21:24:10 ----D---- C:\WINDOWS\system32\migwiz
2016-09-15 21:24:10 ----D---- C:\WINDOWS\system32\migration
2016-09-15 21:24:10 ----D---- C:\WINDOWS\system32\Dism
2016-09-15 21:24:10 ----D---- C:\WINDOWS\system32\cs-CZ
2016-09-15 21:24:10 ----D---- C:\WINDOWS\system32\Boot
2016-09-15 21:24:10 ----D---- C:\WINDOWS\system32\AdvancedInstallers
2016-09-15 21:24:05 ----RD---- C:\WINDOWS\PrintDialog
2016-09-15 21:24:04 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-09-15 21:24:04 ----RD---- C:\WINDOWS\DevicesFlow
2016-09-15 21:24:04 ----D---- C:\WINDOWS\AppPatch
2016-09-15 21:24:04 ----D---- C:\Program Files\Windows Photo Viewer
2016-09-15 21:24:04 ----D---- C:\Program Files\Windows Media Player
2016-09-15 21:24:04 ----D---- C:\Program Files\Windows Mail
2016-09-15 21:24:04 ----D---- C:\Program Files\Windows Defender
2016-09-15 21:24:04 ----D---- C:\Program Files\Internet Explorer
2016-09-15 21:24:04 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2016-09-15 21:24:04 ----D---- C:\Program Files (x86)\Windows Mail
2016-09-15 21:24:04 ----D---- C:\Program Files (x86)\Windows Defender
2016-09-15 21:24:04 ----D---- C:\Program Files (x86)\Internet Explorer
2016-09-15 20:20:34 ----D---- C:\WINDOWS\CbsTemp
2016-09-15 20:17:16 ----D---- C:\WINDOWS\system32\appraiser
2016-09-15 20:16:40 ----D---- C:\WINDOWS\system32\MRT
2016-09-15 20:15:13 ----AC---- C:\WINDOWS\system32\MRT.exe
2016-09-13 20:03:10 ----A---- C:\WINDOWS\SYSWOW64\mqsnap.dll
2016-09-13 20:03:10 ----A---- C:\WINDOWS\SYSWOW64\mqcertui.dll
2016-09-13 20:03:10 ----A---- C:\WINDOWS\system32\mqcertui.dll
2016-09-12 14:21:32 ----D---- C:\WINDOWS\system32\NDF
2016-09-07 08:04:35 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2016-09-07 03:00:59 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-08-30 14:08:35 ----DC---- C:\WINDOWS\Panther
2016-08-28 09:23:35 ----D---- C:\WINDOWS\system32\restore
2016-08-24 18:12:32 ----SD---- C:\Users\Samurraj\AppData\Roaming\Microsoft
2016-08-23 05:30:25 ----D---- C:\WINDOWS\system32\en-US
2016-08-22 16:59:43 ----D---- C:\WINDOWS\system32\LogFiles

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\WINDOWS\system32\DRIVERS\edevmon.sys [2016-08-08 209544]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2016-08-08 227456]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2016-08-08 176288]
R1 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2016-08-08 76456]
R1 epfwwfp;epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [2016-08-08 91816]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2016-07-29 87552]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 ekbdflt;ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [2016-08-08 48776]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 MEIx64;@oem11.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;@oem14.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2016-06-10 222864]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2016-06-10 11235976]
R3 rt640x64;@oem4.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2016-03-20 935168]
R3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2015-10-30 46080]
S0 eelam;eelam; C:\WINDOWS\system32\DRIVERS\eelam.sys [2016-06-28 15488]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2016-04-27 117248]
S3 ESETCleanersDriver;ESET Cleaner Service; \??\C:\WINDOWS\system32\Drivers\ESETCleanersDriver.sys [2016-09-12 181160]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 tap0901;@oem19.inf,%DeviceDescription%;TAP-Windows Adapter V9; C:\WINDOWS\System32\drivers\tap0901.sys [2016-04-21 27136]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2016-07-29 63488]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2016-07-29 258912]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2016-09-07 131424]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-10-30 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-10-30 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-10-30 27488]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2016-07-29 67072]
S3 vhf;@%SystemRoot%\system32\drivers\vhf.sys,-100; C:\WINDOWS\System32\drivers\vhf.sys [2015-10-30 31744]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-09-08 82128]
R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016-08-22 2159320]
R2 ClickToRunSvc;Microsoft Office Click-to-Run Service; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2016-09-05 2980032]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2016-08-05 2816032]
R2 OneSyncSvc_4c3e2;Hostitel synchronizace_4c3e2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 PimIndexMaintenanceSvc_4c3e2;Data kontaktů_4c3e2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 UnistoreSvc_4c3e2;Úložiště uživatelských dat_4c3e2; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 UserDataSvc_4c3e2;Přístup k uživatelským datům_4c3e2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-11-05 938616]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_38eb4;Hostitel synchronizace_38eb4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_5a760;Hostitel synchronizace_5a760; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_38eb4;Služba zasílání zpráv_38eb4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4c3e2;Služba zasílání zpráv_4c3e2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2016-09-05 251096]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_38eb4;Data kontaktů_38eb4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2016-09-07 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 UnistoreSvc_38eb4;Úložiště uživatelských dat_38eb4; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 UserDataSvc_38eb4;Přístup k uživatelským datům_38eb4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v6.020 - Log soubor vytvořen 20/09/2016 na 20:01:52
# Aktualizováno dne 14/09/2016 z ToolsLib
# Databáze : 2016-09-20.3 [Server]
# Operační systém : Windows 10 Pro (X64)
# Uživatelské jméno : Samurraj - DESKTOP-TECFJUI
# Beží od : C:\Users\Samurraj\Downloads\adwcleaner_6.020.exe
# Mod: Čištění
# Podpora : https://toolslib.net/forum



***** [ Služby ] *****



***** [ Adresáře ] *****



***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupce ] *****



***** [ Plánovač úloh ] *****



***** [ Registry ] *****



***** [ Prohlížeče ] *****

[-] Firefox nastavení vyčištěno:"network.hxxp.request.max-start-delay" - 0
[-] Firefox nastavení vyčištěno:"network.hxxp.request.max-start-delay" - 0


*************************

:: "Tracing" klíč smazán
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [956 Bajtů] - [20/09/2016 18:30:52]
C:\AdwCleaner\AdwCleaner[S0].txt - [1640 Bajtů] - [20/09/2016 18:30:20]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1103 Bajtů] ##########

Jinak po tom ADWcleaner přestalo blbnout to neustálé vypínání složek. Ale procesor stále jede na 100pro

Teď dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

Nemohu sem vložit prostý text, jelikož přesahuje 10000 znaků, tak přikládám textový soubor z logem.

Omlouvám se, ale textový dokument to nebere a počet znaků také ne, proto přikládám oba soubory v raru.

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM-x32\...\Run: [] => [X]
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
C:\WINDOWS\system32\ApnDatabase.xml
C:\Users\Samurraj\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Users\Samurraj\AppData\Local\Temp
End

Text vložen do nového textového dokumentu, co dál?

Já to nedokočil, omlouvám se.

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 21-09-2016
Ran by Samurraj (21-09-2016 19:25:53) Run:1
Running from C:\Users\Samurraj\Desktop
Loaded Profiles: Samurraj (Available Profiles: Samurraj)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKLM-x32\...\Run: [] => [X]
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
C:\WINDOWS\system32\ApnDatabase.xml
C:\Users\Samurraj\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Users\Samurraj\AppData\Local\Temp
End


*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
Could not move "C:\WINDOWS\system32\ApnDatabase.xml" => Scheduled to move on reboot.
C:\Users\Samurraj\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully

"C:\Users\Samurraj\AppData\Local\Temp" folder move:

Could not move "C:\Users\Samurraj\AppData\Local\Temp" => Scheduled to move on reboot.


Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 21-09-2016 19:27:16)

C:\WINDOWS\system32\ApnDatabase.xml => Is moved successfully
C:\Users\Samurraj\AppData\Local\Temp => moved successfully

==== End of Fixlog 19:27:18 ====

Smazáno. Nastala nějaká změna?

Když otevřu správce úloh u procesoru je stále využití 100 procent, paměť 18 procent, disk 0 procent, síť 0 procent
Je zajímavé, že nejvíce "žere" firefox. Přes 70 procent, zbytek nějaké ostatní služby, které mi jsou neznámé.

OK. Udělejte ještě kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 21.09.2016
Čas skenování: 20:44
Protokol: mbam.txt
Správce: Ano

Verze: 2.2.1.1043
Databáze malwaru: v2016.09.21.10
Databáze rootkitů: v2016.08.15.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Zapnuto

OS: Windows 10
CPU: x64
Souborový systém: NTFS
Uživatel: Samurraj

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 311115
Uplynulý čas: 2 min, 51 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)