VIRY.CZ

Dobrý den,

nevím, jestli jde jen o preventivku... pc se zdá pomalý.

Děkuji za kontrolu.

první část:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Mýl_a_Páť at 2016-09-20 22:18:12
Microsoft Windows 10 Home
System drive C: has 430 GB (45%) free of 953 GB
Total RAM: 8056 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:18:17, on 20.9.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0589)
Boot mode: Normal

Running processes:
C:\WINDOWS\SysWOW64\muachost.exe
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Users\Mýl_a_Páť\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera_crashreporter.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files\trend micro\Mýl_a_Páť.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_74\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_74\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [OV3_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe" /OS
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Live Update] C:\Program Files (x86)\MSI\Live Update\Live Update.exe /REMINDER
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [OV3_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe" -NoStart
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6301.0127_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6301.0127_1\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://ncode.webex.com/client/WBXclien ... atgpc1.cab
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Brother Resource manager service (brmfrsmg) - Unknown owner - C:\WINDOWS\system32\BrmfRsmg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: DbxSvc - Unknown owner - C:\WINDOWS\system32\DbxSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamingApp_Service - Micro-Star Int'l Co., Ltd. - C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI Live Update Service (MSI_LiveUpdate_Service) - Micro-Star INT'L CO., LTD. - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Wireless Controller Service - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11753 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe -first
C:\WINDOWS\system32\igfxCUIService.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-09e58570-7cec-4a07-97ee-bc41e28e1d2b -SystemEventPortName:HostProcess-b79242f4-b342-4988-a8ee-521ff4ebbc41 -IoCancelEventPortName:HostProcess-5372a96f-a7c2-4463-99be-c83de2f8e5a0 -NonStateChangingEventPortName:HostProcess-9bcc0528-d531-4cc6-ae00-3cce2cba5eaa -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:58b76772-e458-4ab6-aadc-a8c8bfe8cc4f -DeviceGroupId:WpdFsGroup
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k apphost
C:\WINDOWS\system32\svchost.exe -k iissvcs
"C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\system32\DbxSvc.exe
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem"

C:\WINDOWS\system32\BrmfRsmg.exe -service
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
dashost.exe {e95d193c-d528-4d3b-ab5b78aab72006e8}
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe"
C:\WINDOWS\system32\BrmfRsmg.exe -process -overmain -load -open
"C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe"
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
taskeng.exe {8EB34F30-B34E-4242-A1EF-6CA0357B7DC4}
sihost.exe
C:\WINDOWS\SysWOW64\muachost.exe
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -l 3 -c
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe"
C:\WINDOWS\Explorer.EXE
"C:\Users\Mýl_a_Páť\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe"
"C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe"
igfxEM.exe
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca

C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"

"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe" -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe" --type=renderer --disable-gpu-compositing --no-sandbox --enable-begin-frame-scheduling --primordial-pipe-token=1D21F871861C31DA14B148017CCD4EA7 --lang=en-US --lang=en-US --log-file="C:\Users\Mýl_a_Páť\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\debug.log" --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3604.0.1811008949\1535892503" --mojo-platform-channel-handle=1456 /prefetch:1
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\35.0.2066.92\opera_crashreporter.exe" --ran-launcher --crash-reporter-parent-id=1708
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=gpu-process --channel="1708.0.1487280433\1868704986" --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=5640 --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,30,58,68 --gpu-vendor-id=0x10de --gpu-device-id=0x1184 --gpu-driver-vendor=NVIDIA --gpu-driver-version=21.21.13.7270 --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=5640 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=5640 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="1708.2.885364594\717093587" /prefetch:673131151
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=5640 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="1708.3.1899364282\1327668097" /prefetch:673131151
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=5640 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="1708.4.965067967\1403416494" /prefetch:673131151
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=5640 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="1708.7.1741370918\722921139" /prefetch:673131151
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=5640 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="1708.9.877612713\1894298906" /prefetch:673131151
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 612 616 632 8192 620
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=renderer --alt-high-dpi-setting=144 --system-dpi-setting=144 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --crash-reporter-pid=5640 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="1708.10.381204030\125401784" /prefetch:673131151
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetServiceDss -RestrictPrivileges -AccessKey 1A3596A5-57EA-9F5D-9B1E-87E025F765D3 -Reinvoke
wmiadap.exe /F /T /R
C:\WINDOWS\system32\wbem\wmiprvse.exe

"C:\Users\Mýl_a_Páť\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player PPAPI Notifier.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_162_pepper.exe -check pepperplugin
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\MSISW_Host.job - C:\WINDOWS\SysWOW64\muachost.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_74\bin\ssv.dll [2016-03-12 462432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_74\bin\jp2ssv.dll [2016-03-12 173152]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-06-24 13885696]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2016-09-02 1841088]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-03-25 31682144]
"OneDrive"=C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-09-09 633024]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe [2016-03-03 415768]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-01-15 8619224]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]
"Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6301.0127_1\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]
"Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]
"Uninstall C:\Users\Mýl_a_Páť\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Live Update]
C:\Program Files (x86)\MSI\Live Update\Live Update.exe [2016-06-28 11340752]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe [2016-08-23 2857248]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2014-06-27 292848]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"OV3_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe [2016-03-03 40472]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2016-09-20 25382344]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29 595504]
"Live Update"=C:\Program Files (x86)\MSI\Live Update\Live Update.exe [2016-06-28 11340752]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=153

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=153

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"VIDC.RTV1"=rtvcvfw64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-09-20 22:18:12 ----D---- C:\rsit
2016-09-20 03:15:24 ----A---- C:\WINDOWS\system32\DbxSvc.exe
2016-09-20 03:07:38 ----A---- C:\WINDOWS\system32\drivers\dbx-dev.sys
2016-09-20 03:07:28 ----A---- C:\WINDOWS\system32\drivers\dbx-stable.sys
2016-09-20 03:07:28 ----A---- C:\WINDOWS\system32\drivers\dbx-canary.sys
2016-09-14 11:37:34 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2016-09-14 11:37:34 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2016-09-14 11:37:34 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2016-09-14 11:37:34 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2016-09-14 11:37:34 ----A---- C:\WINDOWS\system32\NvRtmpStreamer64.dll
2016-09-14 11:37:27 ----A---- C:\WINDOWS\NvContainerRecovery.bat
2016-09-14 11:37:21 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2016-09-14 11:37:21 ----A---- C:\WINDOWS\system32\nvaudcap64v.dll
2016-09-14 08:04:27 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-09-14 08:04:26 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-09-14 08:04:26 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-09-14 08:04:25 ----A---- C:\WINDOWS\system32\winhttp.dll
2016-09-14 08:04:25 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-09-14 08:04:24 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-09-14 08:04:23 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-09-14 08:04:21 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-09-14 08:04:21 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-09-14 08:04:21 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-09-14 08:04:21 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-09-14 08:04:20 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-09-14 08:04:19 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-09-14 08:04:19 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-09-14 08:04:18 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-09-14 08:04:18 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-09-14 08:04:18 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-09-14 08:04:17 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-09-14 08:04:17 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-09-14 08:04:17 ----A---- C:\WINDOWS\system32\tquery.dll
2016-09-14 08:04:16 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-09-14 08:04:16 ----A---- C:\WINDOWS\system32\WpcMon.exe
2016-09-14 08:04:16 ----A---- C:\WINDOWS\system32\combase.dll
2016-09-14 08:04:15 ----A---- C:\WINDOWS\system32\Wpc.dll
2016-09-14 08:04:15 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-09-14 08:04:14 ----A---- C:\WINDOWS\SYSWOW64\xpsservices.dll
2016-09-14 08:04:14 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-09-14 08:04:14 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-09-14 08:04:14 ----A---- C:\WINDOWS\system32\mssrch.dll
2016-09-14 08:04:13 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2016-09-14 08:04:13 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-09-14 08:04:13 ----A---- C:\WINDOWS\system32\mmcndmgr.dll
2016-09-14 08:04:12 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-09-14 08:04:12 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-14 08:04:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Phone.dll
2016-09-14 08:04:11 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-09-14 08:04:11 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2016-09-14 08:04:11 ----A---- C:\WINDOWS\system32\OpcServices.dll
2016-09-14 08:04:10 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2016-09-14 08:04:10 ----A---- C:\WINDOWS\system32\authui.dll
2016-09-14 08:04:09 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2016-09-14 08:04:09 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2016-09-14 08:04:09 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-09-14 08:04:09 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-09-14 08:04:08 ----A---- C:\WINDOWS\SYSWOW64\winipcsecproc.dll
2016-09-14 08:04:08 ----A---- C:\WINDOWS\SYSWOW64\Pimstore.dll
2016-09-14 08:04:08 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-09-14 08:04:08 ----A---- C:\WINDOWS\system32\wmdrmdev.dll
2016-09-14 08:04:08 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-09-14 08:04:07 ----A---- C:\WINDOWS\system32\xpsservices.dll
2016-09-14 08:04:07 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2016-09-14 08:04:07 ----A---- C:\WINDOWS\system32\twinapi.dll
2016-09-14 08:04:07 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2016-09-14 08:04:06 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2016-09-14 08:04:06 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-09-14 08:04:06 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2016-09-14 08:04:06 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2016-09-14 08:04:06 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2016-09-14 08:04:06 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-09-14 08:04:05 ----A---- C:\WINDOWS\SYSWOW64\winmsipc.dll
2016-09-14 08:04:05 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-09-14 08:04:05 ----A---- C:\WINDOWS\SYSWOW64\hnetcfg.dll
2016-09-14 08:04:05 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-09-14 08:04:05 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2016-09-14 08:04:04 ----A---- C:\WINDOWS\system32\wmdrmsdk.dll
2016-09-14 08:04:04 ----A---- C:\WINDOWS\system32\rpcss.dll
2016-09-14 08:04:04 ----A---- C:\WINDOWS\system32\msdtctm.dll
2016-09-14 08:04:04 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-09-14 08:04:03 ----A---- C:\WINDOWS\SYSWOW64\wmdrmdev.dll
2016-09-14 08:04:03 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2016-09-14 08:04:03 ----A---- C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2016-09-14 08:04:03 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2016-09-14 08:04:03 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-09-14 08:04:02 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2016-09-14 08:04:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2016-09-14 08:04:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2016-09-14 08:04:02 ----A---- C:\WINDOWS\system32\uDWM.dll
2016-09-14 08:04:02 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll
2016-09-14 08:04:01 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2016-09-14 08:04:01 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2016-09-14 08:04:01 ----A---- C:\WINDOWS\system32\wiaservc.dll
2016-09-14 08:04:01 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-09-14 08:04:01 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-09-14 08:04:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2016-09-14 08:04:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2016-09-14 08:04:00 ----A---- C:\WINDOWS\SYSWOW64\wbemcomn.dll
2016-09-14 08:04:00 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-09-14 08:04:00 ----A---- C:\WINDOWS\system32\SHCore.dll
2016-09-14 08:04:00 ----A---- C:\WINDOWS\system32\propsys.dll
2016-09-14 08:03:59 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2016-09-14 08:03:59 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-09-14 08:03:59 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-09-14 08:03:59 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2016-09-14 08:03:58 ----A---- C:\WINDOWS\SYSWOW64\wmdrmsdk.dll
2016-09-14 08:03:58 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2016-09-14 08:03:58 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-09-14 08:03:58 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-09-14 08:03:58 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-09-14 08:03:58 ----A---- C:\WINDOWS\system32\mfps.dll
2016-09-14 08:03:57 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-09-14 08:03:57 ----A---- C:\WINDOWS\SYSWOW64\upnphost.dll
2016-09-14 08:03:57 ----A---- C:\WINDOWS\system32\shsetup.dll
2016-09-14 08:03:57 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-09-14 08:03:57 ----A---- C:\WINDOWS\system32\ExecModelClient.dll
2016-09-14 08:03:57 ----A---- C:\WINDOWS\system32\dcomp.dll
2016-09-14 08:03:56 ----A---- C:\WINDOWS\SYSWOW64\XpsDocumentTargetPrint.dll
2016-09-14 08:03:56 ----A---- C:\WINDOWS\SYSWOW64\taskschd.dll
2016-09-14 08:03:56 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-09-14 08:03:56 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-09-14 08:03:56 ----A---- C:\WINDOWS\system32\SensorService.dll
2016-09-14 08:03:56 ----A---- C:\WINDOWS\system32\mssprxy.dll
2016-09-14 08:03:56 ----A---- C:\WINDOWS\system32\apprepsync.dll
2016-09-14 08:03:55 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2016-09-14 08:03:55 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2016-09-14 08:03:55 ----A---- C:\WINDOWS\system32\evr.dll
2016-09-14 08:03:55 ----A---- C:\WINDOWS\system32\ClipUp.exe
2016-09-14 08:03:54 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-09-14 08:03:54 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-09-14 08:03:53 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2016-09-14 08:03:53 ----A---- C:\WINDOWS\system32\sti.dll
2016-09-14 08:03:53 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-09-14 08:03:53 ----A---- C:\WINDOWS\system32\azroleui.dll
2016-09-14 08:03:52 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2016-09-14 08:03:52 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-09-14 08:03:52 ----A---- C:\WINDOWS\system32\comdlg32.dll
2016-09-14 08:03:52 ----A---- C:\WINDOWS\system32\authfwcfg.dll
2016-09-14 08:03:52 ----A---- C:\WINDOWS\system32\apprepapi.dll
2016-09-14 08:03:52 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2016-09-14 08:03:51 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2016-09-14 08:03:51 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2016-09-14 08:03:51 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2016-09-14 08:03:51 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-09-14 08:03:51 ----A---- C:\WINDOWS\system32\easwrt.dll
2016-09-14 08:03:51 ----A---- C:\WINDOWS\system32\DictationManager.dll
2016-09-14 08:03:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2016-09-14 08:03:50 ----A---- C:\WINDOWS\system32\wiarpc.dll
2016-09-14 08:03:50 ----A---- C:\WINDOWS\system32\MrmIndexer.dll
2016-09-14 08:03:50 ----A---- C:\WINDOWS\system32\LegacyNetUXHost.exe
2016-09-14 08:03:50 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2016-09-14 08:03:49 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-09-14 08:03:49 ----A---- C:\WINDOWS\SYSWOW64\udhisapi.dll
2016-09-14 08:03:49 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-09-14 08:03:49 ----A---- C:\WINDOWS\system32\msi.dll
2016-09-14 08:03:49 ----A---- C:\WINDOWS\system32\msdt.exe
2016-09-14 08:03:49 ----A---- C:\WINDOWS\system32\edputil.dll
2016-09-14 08:03:49 ----A---- C:\WINDOWS\system32\DiagCpl.dll
2016-09-14 08:03:48 ----A---- C:\WINDOWS\SYSWOW64\WmpDui.dll
2016-09-14 08:03:48 ----A---- C:\WINDOWS\SYSWOW64\upnpcont.exe
2016-09-14 08:03:48 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2016-09-14 08:03:48 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2016-09-14 08:03:48 ----A---- C:\WINDOWS\system32\SmartCardSimulator.dll
2016-09-14 08:03:48 ----A---- C:\WINDOWS\system32\pngfilt.dll
2016-09-14 08:03:48 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-09-14 08:03:48 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2016-09-14 08:03:48 ----A---- C:\WINDOWS\system32\fwcfg.dll
2016-09-14 08:03:47 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-09-14 08:03:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.ps.dll
2016-09-14 08:03:47 ----A---- C:\WINDOWS\SYSWOW64\sti.dll
2016-09-14 08:03:47 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-09-14 08:03:47 ----A---- C:\WINDOWS\system32\prnntfy.dll
2016-09-14 08:03:47 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-09-14 08:03:47 ----A---- C:\WINDOWS\system32\CheckNetIsolation.exe
2016-09-14 08:03:47 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-09-14 08:03:46 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-09-14 08:03:44 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2016-09-14 08:03:44 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2016-09-14 08:03:43 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2016-09-14 08:03:43 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-09-14 08:03:42 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-09-14 08:03:42 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2016-09-14 08:03:42 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-09-14 08:03:42 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-09-14 08:03:41 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2016-09-14 08:03:41 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2016-09-14 08:03:41 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2016-09-14 08:03:41 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2016-09-14 08:03:41 ----A---- C:\WINDOWS\system32\InputService.dll
2016-09-14 08:03:40 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll
2016-09-14 08:03:40 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2016-09-14 08:03:40 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-09-14 08:03:40 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-09-14 08:03:40 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-09-14 08:03:40 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-09-14 08:03:39 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-09-14 08:03:39 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-09-14 08:03:39 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2016-09-14 08:03:39 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-09-14 08:03:38 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2016-09-14 08:03:38 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2016-09-14 08:03:38 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2016-09-14 08:03:38 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2016-09-14 08:03:38 ----A---- C:\WINDOWS\system32\MSAJApi.dll
2016-09-14 08:03:38 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-09-14 08:03:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2016-09-14 08:03:37 ----A---- C:\WINDOWS\SYSWOW64\wdc.dll
2016-09-14 08:03:37 ----A---- C:\WINDOWS\system32\wwanconn.dll
2016-09-14 08:03:37 ----A---- C:\WINDOWS\system32\wpnapps.dll
2016-09-14 08:03:37 ----A---- C:\WINDOWS\system32\rdpcore.dll
2016-09-14 08:03:37 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2016-09-14 08:03:36 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-09-14 08:03:36 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2016-09-14 08:03:36 ----A---- C:\WINDOWS\SYSWOW64\Geolocation.dll
2016-09-14 08:03:36 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2016-09-14 08:03:36 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2016-09-14 08:03:36 ----A---- C:\WINDOWS\system32\das.dll
2016-09-14 08:03:36 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-09-14 08:03:35 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-09-14 08:03:35 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2016-09-14 08:03:35 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-09-14 08:03:35 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2016-09-14 08:03:35 ----A---- C:\WINDOWS\system32\mf.dll
2016-09-14 08:03:35 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-09-14 08:03:34 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2016-09-14 08:03:34 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-09-14 08:03:34 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2016-09-14 08:03:34 ----A---- C:\WINDOWS\system32\printfilterpipelinesvc.exe
2016-09-14 08:03:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2016-09-14 08:03:33 ----A---- C:\WINDOWS\SYSWOW64\shsetup.dll
2016-09-14 08:03:33 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2016-09-14 08:03:33 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-09-14 08:03:33 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-09-14 08:03:33 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2016-09-14 08:03:32 ----A---- C:\WINDOWS\SYSWOW64\winipcsecproc_ssp.dll
2016-09-14 08:03:32 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2016-09-14 08:03:32 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-09-14 08:03:32 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2016-09-14 08:03:32 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2016-09-14 08:03:32 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-09-14 08:03:32 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-09-14 08:03:32 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-09-14 08:03:32 ----A---- C:\WINDOWS\system32\localspl.dll
2016-09-14 08:03:31 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2016-09-14 08:03:31 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-09-14 08:03:31 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-09-14 08:03:31 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-09-14 08:03:31 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2016-09-14 08:03:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2016-09-14 08:03:30 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2016-09-14 08:03:30 ----A---- C:\WINDOWS\system32\wpncore.dll
2016-09-14 08:03:30 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-09-14 08:03:30 ----A---- C:\WINDOWS\system32\wifitask.exe
2016-09-14 08:03:30 ----A---- C:\WINDOWS\system32\rasgcw.dll
2016-09-14 08:03:29 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2016-09-14 08:03:29 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2016-09-14 08:03:29 ----A---- C:\WINDOWS\system32\wwanmm.dll
2016-09-14 08:03:29 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-09-14 08:03:29 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-09-14 08:03:29 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2016-09-14 08:03:28 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-09-14 08:03:28 ----A---- C:\WINDOWS\system32\XboxNetApiSvc.dll
2016-09-14 08:03:28 ----A---- C:\WINDOWS\system32\werconcpl.dll
2016-09-14 08:03:28 ----A---- C:\WINDOWS\system32\netlogon.dll
2016-09-14 08:03:28 ----A---- C:\WINDOWS\system32\netcenter.dll
2016-09-14 08:03:27 ----A---- C:\WINDOWS\SYSWOW64\WsmWmiPl.dll
2016-09-14 08:03:27 ----A---- C:\WINDOWS\SYSWOW64\syncutil.dll
2016-09-14 08:03:27 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2016-09-14 08:03:27 ----A---- C:\WINDOWS\SYSWOW64\duser.dll
2016-09-14 08:03:27 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-14 08:03:27 ----A---- C:\WINDOWS\system32\RADCUI.dll
2016-09-14 08:03:27 ----A---- C:\WINDOWS\system32\mscms.dll
2016-09-14 08:03:27 ----A---- C:\WINDOWS\system32\dot3ui.dll
2016-09-14 08:03:27 ----A---- C:\WINDOWS\system32\deviceassociation.dll
2016-09-14 08:03:26 ----A---- C:\WINDOWS\SYSWOW64\WsmAuto.dll
2016-09-14 08:03:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-14 08:03:26 ----A---- C:\WINDOWS\SYSWOW64\vsstrace.dll
2016-09-14 08:03:26 ----A---- C:\WINDOWS\SYSWOW64\SyncController.dll
2016-09-14 08:03:26 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2016-09-14 08:03:26 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-09-14 08:03:26 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2016-09-14 08:03:26 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2016-09-14 08:03:25 ----A---- C:\WINDOWS\SYSWOW64\wsmprovhost.exe
2016-09-14 08:03:25 ----A---- C:\WINDOWS\SYSWOW64\WsmAgent.dll
2016-09-14 08:03:25 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2016-09-14 08:03:25 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2016-09-14 08:03:25 ----A---- C:\WINDOWS\SYSWOW64\deviceassociation.dll
2016-09-14 08:03:25 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2016-09-14 08:03:25 ----A---- C:\WINDOWS\system32\wificonnapi.dll
2016-09-14 08:03:25 ----A---- C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2016-09-14 08:03:23 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2016-09-14 08:03:23 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2016-09-14 08:03:23 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2016-09-14 08:03:23 ----A---- C:\WINDOWS\system32\sppsvc.exe
2016-09-14 08:03:22 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2016-09-14 08:03:22 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-09-14 08:03:22 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2016-09-14 08:03:22 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-09-14 08:03:21 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-09-14 08:03:21 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-09-14 08:03:21 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2016-09-14 08:03:20 ----A---- C:\WINDOWS\system32\shell32.dll
2016-09-14 08:03:20 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-09-14 08:03:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-09-14 08:03:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-09-14 08:03:19 ----A---- C:\WINDOWS\system32\wininet.dll
2016-09-14 08:03:19 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-09-14 08:03:18 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2016-09-14 08:03:18 ----A---- C:\WINDOWS\SYSWOW64\mmcndmgr.dll
2016-09-14 08:03:18 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2016-09-14 08:03:18 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-09-14 08:03:18 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-09-14 08:03:17 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-09-14 08:03:17 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-09-14 08:03:16 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2016-09-14 08:03:16 ----A---- C:\WINDOWS\SYSWOW64\mmc.exe
2016-09-14 08:03:16 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2016-09-14 08:03:16 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-09-14 08:03:16 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-09-14 08:03:15 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2016-09-14 08:03:15 ----A---- C:\WINDOWS\system32\webservices.dll
2016-09-14 08:03:15 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2016-09-14 08:03:15 ----A---- C:\WINDOWS\system32\ole32.dll
2016-09-14 08:03:14 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-09-14 08:03:14 ----A---- C:\WINDOWS\SYSWOW64\MsSpellCheckingFacility.dll
2016-09-14 08:03:14 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-09-14 08:03:14 ----A---- C:\WINDOWS\system32\winresume.exe
2016-09-14 08:03:13 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2016-09-14 08:03:13 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-09-14 08:03:13 ----A---- C:\WINDOWS\SYSWOW64\PhoneOm.dll
2016-09-14 08:03:13 ----A---- C:\WINDOWS\system32\winload.exe
2016-09-14 08:03:13 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-09-14 08:03:13 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-09-14 08:03:12 ----A---- C:\WINDOWS\SYSWOW64\MSAJApi.dll
2016-09-14 08:03:12 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2016-09-14 08:03:12 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2016-09-14 08:03:12 ----A---- C:\WINDOWS\system32\ntshrui.dll
2016-09-14 08:03:11 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2016-09-14 08:03:11 ----A---- C:\WINDOWS\SYSWOW64\filemgmt.dll
2016-09-14 08:03:11 ----A---- C:\WINDOWS\system32\nettrace.dll
2016-09-14 08:03:10 ----A---- C:\WINDOWS\SYSWOW64\mscms.dll
2016-09-14 08:03:10 ----A---- C:\WINDOWS\system32\wbemcomn.dll
2016-09-14 08:03:10 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-09-14 08:03:10 ----A---- C:\WINDOWS\system32\msxml3.dll
2016-09-14 08:03:10 ----A---- C:\WINDOWS\system32\drivers\ufxsynopsys.sys
2016-09-14 08:03:10 ----A---- C:\WINDOWS\system32\comuid.dll
2016-09-14 08:03:09 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2016-09-14 08:03:09 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2016-09-14 08:03:09 ----A---- C:\WINDOWS\system32\WlanMM.dll
2016-09-14 08:03:09 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2016-09-14 08:03:09 ----A---- C:\WINDOWS\system32\quartz.dll
2016-09-14 08:03:09 ----A---- C:\WINDOWS\system32\mstsc.exe
2016-09-14 08:03:08 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2016-09-14 08:03:08 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-09-14 08:03:08 ----A---- C:\WINDOWS\system32\sspicli.dll
2016-09-14 08:03:08 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2016-09-14 08:03:08 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-09-14 08:03:07 ----A---- C:\WINDOWS\SYSWOW64\cryptui.dll
2016-09-14 08:03:07 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2016-09-14 08:03:07 ----A---- C:\WINDOWS\system32\winipcsecproc_ssp.dll
2016-09-14 08:03:07 ----A---- C:\WINDOWS\system32\usocore.dll
2016-09-14 08:03:07 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2016-09-14 08:03:07 ----A---- C:\WINDOWS\system32\lsass.exe
2016-09-14 08:03:06 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2016-09-14 08:03:06 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2016-09-14 08:03:06 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2016-09-14 08:03:06 ----A---- C:\WINDOWS\SYSWOW64\cic.dll
2016-09-14 08:03:06 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-09-14 08:03:06 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2016-09-14 08:03:06 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2016-09-14 08:03:05 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2016-09-14 08:03:05 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2016-09-14 08:03:05 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-09-14 08:03:05 ----A---- C:\WINDOWS\SYSWOW64\azroleui.dll
2016-09-14 08:03:05 ----A---- C:\WINDOWS\system32\AppxApplicabilityEngine.dll
2016-09-14 08:03:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.LowLevel.dll
2016-09-14 08:03:04 ----A---- C:\WINDOWS\SYSWOW64\mmcbase.dll
2016-09-14 08:03:04 ----A---- C:\WINDOWS\system32\spcompat.dll
2016-09-14 08:03:04 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2016-09-14 08:03:04 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2016-09-14 08:03:04 ----A---- C:\WINDOWS\system32\azroles.dll
2016-09-14 08:03:03 ----A---- C:\WINDOWS\SYSWOW64\pla.dll
2016-09-14 08:03:03 ----A---- C:\WINDOWS\SYSWOW64\mmcshext.dll
2016-09-14 08:03:03 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2016-09-14 08:03:03 ----A---- C:\WINDOWS\system32\wdc.dll
2016-09-14 08:03:03 ----A---- C:\WINDOWS\system32\wcncsvc.dll
2016-09-14 08:03:03 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2016-09-14 08:03:01 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2016-09-14 08:03:01 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2016-09-14 08:03:01 ----A---- C:\WINDOWS\system32\SettingsHandlers_Geolocation.dll
2016-09-14 08:03:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Cortana.ProxyStub.dll
2016-09-14 08:03:00 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2016-09-14 08:03:00 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2016-09-14 08:03:00 ----A---- C:\WINDOWS\system32\WsmAuto.dll
2016-09-14 08:03:00 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2016-09-14 08:03:00 ----A---- C:\WINDOWS\system32\ieui.dll
2016-09-14 08:03:00 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-09-14 08:02:59 ----A---- C:\WINDOWS\SYSWOW64\gpedit.dll
2016-09-14 08:02:59 ----A---- C:\WINDOWS\SYSWOW64\fwcfg.dll
2016-09-14 08:02:59 ----A---- C:\WINDOWS\system32\WmpDui.dll
2016-09-14 08:02:59 ----A---- C:\WINDOWS\system32\Windows.Storage.Search.dll
2016-09-14 08:02:59 ----A---- C:\WINDOWS\system32\WcnApi.dll
2016-09-14 08:02:59 ----A---- C:\WINDOWS\system32\WalletService.dll
2016-09-14 08:02:59 ----A---- C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-09-14 08:02:59 ----A---- C:\WINDOWS\system32\efswrt.dll
2016-09-14 08:02:59 ----A---- C:\WINDOWS\system32\drivers\MTConfig.sys
2016-09-14 08:02:59 ----A---- C:\WINDOWS\system32\CPFilters.dll
2016-09-14 08:02:58 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2016-09-14 08:02:58 ----A---- C:\WINDOWS\SYSWOW64\oemlicense.dll
2016-09-14 08:02:58 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-09-14 08:02:58 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2016-09-14 08:02:58 ----A---- C:\WINDOWS\system32\GamePanel.exe
2016-09-14 08:02:58 ----A---- C:\WINDOWS\system32\fdWCN.dll
2016-09-14 08:02:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.Search.dll
2016-09-14 08:02:57 ----A---- C:\WINDOWS\SYSWOW64\VoipRT.dll
2016-09-14 08:02:57 ----A---- C:\WINDOWS\SYSWOW64\SmartcardCredentialProvider.dll
2016-09-14 08:02:57 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2016-09-14 08:02:57 ----A---- C:\WINDOWS\system32\wlanui.dll
2016-09-14 08:02:57 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-09-14 08:02:57 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-09-14 08:02:57 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-09-14 08:02:56 ----A---- C:\WINDOWS\SYSWOW64\WlanMM.dll
2016-09-14 08:02:56 ----A---- C:\WINDOWS\SYSWOW64\MrmIndexer.dll
2016-09-14 08:02:56 ----A---- C:\WINDOWS\SYSWOW64\certmgr.dll
2016-09-14 08:02:56 ----A---- C:\WINDOWS\SYSWOW64\authfwcfg.dll
2016-09-14 08:02:56 ----A---- C:\WINDOWS\system32\WLanConn.dll
2016-09-14 08:02:56 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-09-14 08:02:55 ----A---- C:\WINDOWS\SYSWOW64\WLanConn.dll
2016-09-14 08:02:55 ----A---- C:\WINDOWS\SYSWOW64\msobjs.dll
2016-09-14 08:02:55 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2016-09-14 08:02:55 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2016-09-14 08:02:55 ----A---- C:\WINDOWS\system32\wsmprovhost.exe
2016-09-14 08:02:55 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-09-14 08:02:55 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2016-09-14 08:02:55 ----A---- C:\WINDOWS\system32\dafWCN.dll
2016-09-14 08:02:55 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-09-14 08:02:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.AllJoyn.dll
2016-09-14 08:02:54 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2016-09-14 08:02:54 ----A---- C:\WINDOWS\SYSWOW64\licensingdiag.exe
2016-09-14 08:02:54 ----A---- C:\WINDOWS\SYSWOW64\CheckNetIsolation.exe
2016-09-14 08:02:54 ----A---- C:\WINDOWS\system32\WsmAgent.dll
2016-09-14 08:02:54 ----A---- C:\WINDOWS\system32\Windows.Graphics.dll
2016-09-14 08:02:54 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2016-09-14 08:02:54 ----A---- C:\WINDOWS\system32\IconCodecService.dll
2016-09-14 08:02:54 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2016-09-14 08:02:54 ----A---- C:\WINDOWS\system32\dialserver.dll
2016-09-14 08:02:54 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2016-09-14 08:02:53 ----A---- C:\WINDOWS\system32\odbcconf.dll
2016-09-14 08:02:52 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-09-14 08:02:52 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2016-09-14 08:02:51 ----A---- C:\WINDOWS\system32\NMAA.dll
2016-09-14 08:02:51 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2016-09-14 08:02:51 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2016-09-14 08:02:51 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-09-14 08:02:51 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-09-14 08:02:50 ----A---- C:\WINDOWS\system32\mos.dll
2016-09-14 08:02:49 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-09-14 08:02:48 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-09-14 08:02:48 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-09-14 08:02:48 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2016-09-14 08:02:47 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-09-14 08:02:47 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2016-09-14 08:02:47 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-09-14 08:02:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-09-14 08:02:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-09-14 08:02:46 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-09-14 08:02:46 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2016-09-14 08:02:46 ----A---- C:\WINDOWS\system32\rasapi32.dll
2016-09-14 08:02:46 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2016-09-14 08:02:45 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2016-09-14 08:02:45 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2016-09-14 08:02:45 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-09-14 08:02:45 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-09-14 08:02:45 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-09-14 08:02:44 ----A---- C:\WINDOWS\system32\storagewmi.dll
2016-09-14 08:02:44 ----A---- C:\WINDOWS\system32\qmgr.dll
2016-09-14 08:02:44 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2016-09-14 08:02:44 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2016-09-14 08:02:43 ----A---- C:\WINDOWS\system32\VSSVC.exe
2016-09-14 08:02:43 ----A---- C:\WINDOWS\system32\oleaut32.dll
2016-09-14 08:02:43 ----A---- C:\WINDOWS\system32\msctf.dll
2016-09-14 08:02:43 ----A---- C:\WINDOWS\system32\MosStorage.dll
2016-09-14 08:02:43 ----A---- C:\WINDOWS\system32\moshostcore.dll
2016-09-14 08:02:43 ----A---- C:\WINDOWS\system32\moshost.dll
2016-09-14 08:02:43 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2016-09-14 08:02:43 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2016-09-14 08:02:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-09-14 08:02:42 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2016-09-14 08:02:42 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2016-09-14 08:02:42 ----A---- C:\WINDOWS\system32\PhoneService.dll
2016-09-14 08:02:42 ----A---- C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2016-09-14 08:02:42 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-09-14 08:02:42 ----A---- C:\WINDOWS\system32\diagperf.dll
2016-09-14 08:02:41 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2016-09-14 08:02:41 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-09-14 08:02:41 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2016-09-14 08:02:41 ----A---- C:\WINDOWS\system32\vssapi.dll
2016-09-14 08:02:40 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-09-14 08:02:40 ----A---- C:\WINDOWS\system32\wmpmde.dll
2016-09-14 08:02:40 ----A---- C:\WINDOWS\system32\usercpl.dll
2016-09-14 08:02:40 ----A---- C:\WINDOWS\system32\termsrv.dll
2016-09-14 08:02:40 ----A---- C:\WINDOWS\system32\pnidui.dll
2016-09-14 08:02:40 ----A---- C:\WINDOWS\system32\PhoneOm.dll
2016-09-14 08:02:40 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-09-14 08:02:40 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-09-14 08:02:39 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2016-09-14 08:02:39 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-09-14 08:02:39 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2016-09-14 08:02:39 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2016-09-14 08:02:39 ----A---- C:\WINDOWS\system32\wlidprov.dll
2016-09-14 08:02:39 ----A---- C:\WINDOWS\system32\d3d9.dll
2016-09-14 08:02:38 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2016-09-14 08:02:38 ----A---- C:\WINDOWS\system32\hnetcfg.dll
2016-09-14 08:02:38 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2016-09-14 08:02:38 ----A---- C:\WINDOWS\system32\clusapi.dll
2016-09-14 08:02:38 ----A---- C:\WINDOWS\system32\BCP47Langs.dll
2016-09-14 08:02:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2016-09-14 08:02:37 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-09-14 08:02:37 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2016-09-14 08:02:37 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-09-14 08:02:37 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-09-14 08:02:37 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-09-14 08:02:37 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-09-14 08:02:37 ----A---- C:\WINDOWS\system32\D3D12.dll
2016-09-14 08:02:36 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-09-14 08:02:36 ----A---- C:\WINDOWS\SYSWOW64\BCP47Langs.dll
2016-09-14 08:02:36 ----A---- C:\WINDOWS\system32\wsp_health.dll
2016-09-14 08:02:36 ----A---- C:\WINDOWS\system32\vds.exe
2016-09-14 08:02:36 ----A---- C:\WINDOWS\system32\swprv.dll
2016-09-14 08:02:36 ----A---- C:\WINDOWS\system32\mprddm.dll
2016-09-14 08:02:36 ----A---- C:\WINDOWS\system32\defragsvc.dll
2016-09-14 08:02:35 ----A---- C:\WINDOWS\system32\sdengin2.dll
2016-09-14 08:02:35 ----A---- C:\WINDOWS\system32\resutils.dll
2016-09-14 08:02:35 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-09-14 08:02:35 ----A---- C:\WINDOWS\system32\mispace.dll
2016-09-14 08:02:35 ----A---- C:\WINDOWS\system32\apphelp.dll
2016-09-14 08:02:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2016-09-14 08:02:34 ----A---- C:\WINDOWS\SYSWOW64\comuid.dll
2016-09-14 08:02:34 ----A---- C:\WINDOWS\SYSWOW64\certca.dll
2016-09-14 08:02:34 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-09-14 08:02:34 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2016-09-14 08:02:34 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-09-14 08:02:33 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2016-09-14 08:02:33 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2016-09-14 08:02:33 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-09-14 08:02:33 ----A---- C:\WINDOWS\system32\kernel32.dll
2016-09-14 08:02:33 ----A---- C:\WINDOWS\system32\eappcfg.dll
2016-09-14 08:02:33 ----A---- C:\WINDOWS\system32\DMRServer.dll
2016-09-14 08:02:33 ----A---- C:\WINDOWS\system32\APHostService.dll
2016-09-14 08:02:32 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-09-14 08:02:32 ----A---- C:\WINDOWS\system32\wbengine.exe
2016-09-14 08:02:32 ----A---- C:\WINDOWS\system32\upnphost.dll
2016-09-14 08:02:32 ----A---- C:\WINDOWS\system32\tdh.dll
2016-09-14 08:02:32 ----A---- C:\WINDOWS\system32\pcasvc.dll
2016-09-14 08:02:32 ----A---- C:\WINDOWS\system32\netman.dll
2016-09-14 08:02:32 ----A---- C:\WINDOWS\system32\icsvc.dll
2016-09-14 08:02:32 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-09-14 08:02:31 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-09-14 08:02:31 ----A---- C:\WINDOWS\system32\wusa.exe
2016-09-14 08:02:31 ----A---- C:\WINDOWS\system32\setupapi.dll
2016-09-14 08:02:31 ----A---- C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-09-14 08:02:31 ----A---- C:\WINDOWS\system32\netcfgx.dll
2016-09-14 08:02:31 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-09-14 08:02:31 ----A---- C:\WINDOWS\system32\csrsrv.dll
2016-09-14 08:02:30 ----A---- C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2016-09-14 08:02:30 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2016-09-14 08:02:30 ----A---- C:\WINDOWS\system32\drvstore.dll
2016-09-14 08:02:29 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2016-09-14 08:02:29 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-09-14 08:02:29 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-09-14 08:02:29 ----A---- C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2016-09-14 08:02:29 ----A---- C:\WINDOWS\system32\MicrosoftAccountCloudAP.dll
2016-09-14 08:02:29 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2016-09-14 08:02:28 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2016-09-14 08:02:28 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-09-14 08:02:28 ----A---- C:\WINDOWS\system32\wimserv.exe
2016-09-14 08:02:28 ----A---- C:\WINDOWS\system32\fdProxy.dll
2016-09-14 08:02:27 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-09-14 08:02:27 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-09-14 08:02:27 ----A---- C:\WINDOWS\system32\WindowsCodecsExt.dll
2016-09-14 08:02:27 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-09-14 08:02:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2016-09-14 08:02:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2016-09-14 08:02:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-09-14 08:02:26 ----A---- C:\WINDOWS\SYSWOW64\usbceip.dll
2016-09-14 08:02:26 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2016-09-14 08:02:26 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-09-14 08:02:26 ----A---- C:\WINDOWS\system32\upnpcont.exe
2016-09-14 08:02:26 ----A---- C:\WINDOWS\system32\udhisapi.dll
2016-09-14 08:02:25 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2016-09-14 08:02:25 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2016-09-14 08:02:25 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-09-14 08:02:25 ----A---- C:\WINDOWS\system32\mcbuilder.exe
2016-09-14 08:02:25 ----A---- C:\WINDOWS\system32\duser.dll
2016-09-14 08:02:25 ----A---- C:\WINDOWS\system32\dui70.dll
2016-09-14 08:02:25 ----A---- C:\WINDOWS\system32\autochk.exe
2016-09-14 08:02:24 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2016-09-14 08:02:24 ----A---- C:\WINDOWS\system32\VoipRT.dll
2016-09-14 08:02:24 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2016-09-14 08:02:24 ----A---- C:\WINDOWS\system32\netshell.dll
2016-09-14 08:02:24 ----A---- C:\WINDOWS\system32\netplwiz.dll
2016-09-14 08:02:24 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2016-09-14 08:02:24 ----A---- C:\WINDOWS\system32\adtschema.dll
2016-09-14 08:02:23 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2016-09-14 08:02:23 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2016-09-14 08:02:23 ----A---- C:\WINDOWS\system32\pla.dll
2016-09-14 08:02:23 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2016-09-14 08:02:22 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2016-09-14 08:02:22 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-09-14 08:02:22 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-09-14 08:02:22 ----A---- C:\WINDOWS\system32\StikyNot.exe
2016-09-14 08:02:22 ----A---- C:\WINDOWS\system32\scapi.dll
2016-09-14 08:02:22 ----A---- C:\WINDOWS\system32\eapphost.dll
2016-09-14 08:02:22 ----A---- C:\WINDOWS\system32\dlnashext.dll
2016-09-14 08:02:21 ----A---- C:\WINDOWS\SYSWOW64\srpapi.dll
2016-09-14 08:02:21 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2016-09-14 08:02:21 ----A---- C:\WINDOWS\system32\vdsutil.dll
2016-09-14 08:02:21 ----A---- C:\WINDOWS\system32\aitstatic.exe
2016-09-14 08:02:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-09-14 08:02:20 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2016-09-14 08:02:20 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-09-14 08:02:20 ----A---- C:\WINDOWS\system32\vss_ps.dll
2016-09-14 08:02:20 ----A---- C:\WINDOWS\system32\themeui.dll
2016-09-14 08:02:20 ----A---- C:\WINDOWS\system32\syncutil.dll
2016-09-14 08:02:20 ----A---- C:\WINDOWS\system32\eapsvc.dll
2016-09-14 08:02:20 ----A---- C:\WINDOWS\system32\configurationclient.dll
2016-09-14 08:02:19 ----A---- C:\WINDOWS\SYSWOW64\azroles.dll
2016-09-14 08:02:19 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-09-14 08:02:19 ----A---- C:\WINDOWS\system32\vsstrace.dll
2016-09-14 08:02:19 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2016-09-14 08:02:19 ----A---- C:\WINDOWS\system32\msobjs.dll
2016-09-14 08:02:19 ----A---- C:\WINDOWS\system32\ipsecsnp.dll
2016-09-14 08:02:19 ----A---- C:\WINDOWS\system32\fhcfg.dll
2016-09-14 08:02:19 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-09-14 08:02:18 ----A---- C:\WINDOWS\SYSWOW64\dot3ui.dll
2016-09-14 08:02:18 ----A---- C:\WINDOWS\SYSWOW64\AppLockerCSP.dll
2016-09-14 08:02:18 ----A---- C:\WINDOWS\system32\SyncController.dll
2016-09-14 08:02:18 ----A---- C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2016-09-14 08:02:18 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2016-09-14 08:02:18 ----A---- C:\WINDOWS\system32\fhsvc.dll
2016-09-14 08:02:18 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2016-09-14 08:02:18 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-09-14 08:02:18 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2016-09-14 08:02:18 ----A---- C:\WINDOWS\system32\aadtb.dll
2016-09-14 08:02:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2016-09-14 08:02:17 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2016-09-14 08:02:17 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2016-09-14 08:02:16 ----A---- C:\WINDOWS\SYSWOW64\IdCtrls.dll
2016-09-14 08:02:16 ----A---- C:\WINDOWS\system32\winsrv.dll
2016-09-14 08:02:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-09-14 08:02:15 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-09-14 08:02:13 ----A---- C:\WINDOWS\system32\wmp.dll
2016-09-14 08:02:12 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-09-14 08:02:10 ----A---- C:\WINDOWS\system32\twinui.dll
2016-09-14 08:02:07 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-09-14 08:02:07 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-09-14 08:02:06 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-09-14 08:02:05 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-09-14 08:02:05 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-09-14 08:02:05 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-09-14 08:02:05 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-09-14 08:02:04 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-09-14 08:02:04 ----A---- C:\WINDOWS\system32\drivers\ClipSp.sys
2016-09-14 08:02:03 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsRaw.dll
2016-09-14 08:02:02 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-09-14 08:02:02 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-09-14 08:02:01 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2016-09-14 08:02:01 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-09-14 08:02:01 ----A---- C:\WINDOWS\explorer.exe
2016-09-14 08:02:00 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2016-09-14 08:02:00 ----A---- C:\WINDOWS\system32\winmde.dll
2016-09-14 08:02:00 ----A---- C:\WINDOWS\system32\Pimstore.dll
2016-09-14 08:02:00 ----A---- C:\WINDOWS\system32\mmc.exe
2016-09-14 08:01:59 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-09-14 08:01:59 ----A---- C:\WINDOWS\system32\winipcsecproc.dll
2016-09-14 08:01:59 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-09-14 08:01:59 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-09-14 08:01:59 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-09-14 08:01:58 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-09-14 08:01:58 ----A---- C:\WINDOWS\system32\UserDataService.dll
2016-09-14 08:01:58 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-09-14 08:01:58 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2016-09-14 08:01:58 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-09-14 08:01:57 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2016-09-14 08:01:57 ----A---- C:\WINDOWS\system32\WindowsCodecsRaw.dll
2016-09-14 08:01:56 ----A---- C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-09-14 08:01:56 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-09-14 08:01:56 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-09-14 08:01:55 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2016-09-14 08:01:55 ----A---- C:\WINDOWS\system32\winmsipc.dll
2016-09-14 08:01:55 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-09-14 08:01:55 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-09-14 08:01:54 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-09-14 08:01:54 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-09-14 08:01:53 ----A---- C:\WINDOWS\system32\WSShared.dll
2016-09-14 08:01:53 ----A---- C:\WINDOWS\system32\Geolocation.dll
2016-09-14 08:01:53 ----A---- C:\WINDOWS\system32\gameux.dll
2016-09-14 08:01:52 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2016-09-14 08:01:52 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-09-14 08:01:52 ----A---- C:\WINDOWS\system32\w32time.dll
2016-09-14 08:01:52 ----A---- C:\WINDOWS\system32\mqqm.dll
2016-09-14 08:01:51 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2016-09-14 08:01:51 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2016-09-14 08:01:51 ----A---- C:\WINDOWS\system32\ShareHost.dll
2016-09-14 08:01:51 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2016-09-14 08:01:51 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-09-14 08:01:51 ----A---- C:\WINDOWS\system32\certca.dll
2016-09-14 08:01:50 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-09-14 08:01:50 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-09-14 08:01:50 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-09-14 08:01:50 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-09-14 08:01:50 ----A---- C:\WINDOWS\system32\hgcpl.dll
2016-09-14 08:01:49 ----A---- C:\WINDOWS\SYSWOW64\wmploc.DLL
2016-09-14 08:01:49 ----A---- C:\WINDOWS\system32\wmploc.DLL
2016-09-14 08:01:49 ----A---- C:\WINDOWS\system32\wmpeffects.dll
2016-09-14 08:01:49 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2016-09-14 08:01:49 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-09-14 08:01:48 ----A---- C:\WINDOWS\system32\SecureTimeAggregator.dll
2016-09-14 08:01:48 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-09-14 08:01:48 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2016-09-14 08:01:48 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-09-14 08:01:48 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-09-14 08:01:47 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-09-14 08:01:47 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2016-09-14 08:01:47 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-09-14 08:01:47 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-09-14 08:01:46 ----A---- C:\WINDOWS\SYSWOW64\wmpeffects.dll
2016-09-14 08:01:46 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-09-14 08:01:46 ----A---- C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-09-14 08:01:46 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-09-14 08:01:46 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-09-14 08:01:46 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-09-14 08:01:46 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2016-09-14 08:01:45 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-09-14 08:01:45 ----A---- C:\WINDOWS\system32\sppobjs.dll
2016-09-14 08:01:45 ----A---- C:\WINDOWS\system32\sppcext.dll
2016-09-14 08:01:45 ----A---- C:\WINDOWS\system32\filemgmt.dll
2016-09-14 08:01:45 ----A---- C:\WINDOWS\system32\cryptui.dll
2016-09-14 08:01:44 ----A---- C:\WINDOWS\system32\WSService.dll
2016-09-14 08:01:44 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-09-14 08:01:44 ----A---- C:\WINDOWS\system32\hal.dll
2016-09-14 08:01:44 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-09-14 08:01:44 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2016-09-14 08:01:44 ----A---- C:\WINDOWS\system32\dbgeng.dll
2016-09-14 08:01:44 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-09-14 08:01:44 ----A---- C:\WINDOWS\system32\AudioEng.dll
2016-09-14 08:01:43 ----A---- C:\WINDOWS\system32\winipcfile.dll
2016-09-14 08:01:43 ----A---- C:\WINDOWS\system32\themecpl.dll
2016-09-14 08:01:43 ----A---- C:\WINDOWS\system32\SRH.dll
2016-09-14 08:01:43 ----A---- C:\WINDOWS\system32\mmcshext.dll
2016-09-14 08:01:43 ----A---- C:\WINDOWS\system32\mmcbase.dll
2016-09-14 08:01:43 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2016-09-14 08:01:43 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2016-09-14 08:01:43 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2016-09-14 08:01:42 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2016-09-14 08:01:42 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-09-14 08:01:42 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2016-09-14 08:01:42 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2016-09-14 08:01:42 ----A---- C:\WINDOWS\system32\sppwinob.dll
2016-09-14 08:01:42 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2016-09-14 08:01:42 ----A---- C:\WINDOWS\system32\ApplicationFrame.dll
2016-09-14 08:01:41 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsExt.dll
2016-09-14 08:01:41 ----A---- C:\WINDOWS\SYSWOW64\prnntfy.dll
2016-09-14 08:01:41 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-09-14 08:01:41 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-09-14 08:01:41 ----A---- C:\WINDOWS\system32\mprdim.dll
2016-09-14 08:01:41 ----A---- C:\WINDOWS\system32\DbgModel.dll
2016-09-14 08:01:40 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-09-14 08:01:40 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-09-14 08:01:40 ----A---- C:\WINDOWS\SYSWOW64\DbgModel.dll
2016-09-14 08:01:40 ----A---- C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2016-09-14 08:01:40 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-09-14 08:01:40 ----A---- C:\WINDOWS\system32\gpedit.dll
2016-09-14 08:01:40 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2016-09-14 08:01:40 ----A---- C:\WINDOWS\system32\cic.dll
2016-09-14 08:01:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-09-14 08:01:39 ----A---- C:\WINDOWS\SYSWOW64\PhotoScreensaver.scr
2016-09-14 08:01:39 ----A---- C:\WINDOWS\system32\usermgr.dll
2016-09-14 08:01:39 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2016-09-14 08:01:39 ----A---- C:\WINDOWS\system32\PhotoScreensaver.scr
2016-09-14 08:01:39 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2016-09-14 08:01:39 ----A---- C:\WINDOWS\system32\certcli.dll
2016-09-14 08:01:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2016-09-14 08:01:38 ----A---- C:\WINDOWS\system32\zipfldr.dll
2016-09-14 08:01:38 ----A---- C:\WINDOWS\system32\oemlicense.dll
2016-09-14 08:01:38 ----A---- C:\WINDOWS\system32\Display.dll
2016-09-14 08:01:37 ----A---- C:\WINDOWS\system32\WUDFx.dll
2016-09-14 08:01:37 ----A---- C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2016-09-14 08:01:37 ----A---- C:\WINDOWS\system32\mspaint.exe
2016-09-14 08:01:37 ----A---- C:\WINDOWS\system32\dbghelp.dll
2016-09-14 08:01:36 ----A---- C:\WINDOWS\SYSWOW64\WSSync.dll
2016-09-14 08:01:36 ----A---- C:\WINDOWS\system32\WSSync.dll
2016-09-14 08:01:36 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2016-09-14 08:01:36 ----A---- C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-09-14 08:01:36 ----A---- C:\WINDOWS\system32\FingerprintEnrollment.dll
2016-09-14 08:01:36 ----A---- C:\WINDOWS\system32\credprovs.dll
2016-09-14 08:01:35 ----A---- C:\WINDOWS\system32\SettingMonitor.dll
2016-09-14 08:01:35 ----A---- C:\WINDOWS\system32\licensingdiag.exe
2016-09-14 08:01:35 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-09-14 08:01:34 ----A---- C:\WINDOWS\system32\sppinst.dll
2016-09-14 08:01:34 ----A---- C:\WINDOWS\system32\mqsnap.dll
2016-09-14 08:01:34 ----A---- C:\WINDOWS\system32\ImplatSetup.dll
2016-09-14 08:01:33 ----A---- C:\WINDOWS\SYSWOW64\DictationManager.dll
2016-09-14 08:01:33 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2016-08-30 22:00:18 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2016-08-30 21:59:49 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo.exe
2016-08-30 21:59:49 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1.dll
2016-08-30 21:59:49 ----A---- C:\WINDOWS\system32\vulkaninfo.exe
2016-08-30 21:59:49 ----A---- C:\WINDOWS\system32\vulkan-1.dll
2016-08-30 21:57:55 ----A---- C:\WINDOWS\system32\nvhdap64.dll
2016-08-30 21:57:53 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2016-08-30 21:57:53 ----A---- C:\WINDOWS\SYSWOW64\nvptxJitCompiler.dll
2016-08-30 21:57:53 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2016-08-30 21:57:53 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2016-08-30 21:57:53 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2016-08-30 21:57:53 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2016-08-30 21:57:53 ----A---- C:\WINDOWS\system32\nvptxJitCompiler.dll
2016-08-30 21:57:53 ----A---- C:\WINDOWS\system32\nvopencl.dll
2016-08-30 21:57:53 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2016-08-30 21:57:53 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\SYSWOW64\nvfatbinaryLoader.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFTH264.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\SYSWOW64\nvDecMFTMjpeg.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\system32\nvinitx.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\system32\nvfatbinaryLoader.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\system32\nvEncMFTH264.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\system32\nvdispgenco6437270.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\system32\nvdispco6437270.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2016-08-30 21:57:52 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2016-08-30 21:57:51 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2016-08-30 21:57:51 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2016-08-30 21:57:51 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2016-08-30 21:57:51 ----A---- C:\WINDOWS\system32\nvcuda.dll
2016-08-30 21:57:48 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2016-08-30 21:57:48 ----A---- C:\WINDOWS\system32\nvcompiler.dll

druhá část:
======List of files/folders modified in the last 1 month======

2016-09-20 22:18:16 ----D---- C:\Program Files\trend micro
2016-09-20 22:18:11 ----AD---- C:\Program Files (x86)\Opera
2016-09-20 22:17:00 ----D---- C:\WINDOWS\Temp
2016-09-20 22:15:50 ----D---- C:\WINDOWS\Prefetch
2016-09-20 22:14:33 ----D---- C:\ProgramData\NVIDIA
2016-09-20 22:13:58 ----D---- C:\WINDOWS\System32
2016-09-20 22:13:58 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-09-20 22:10:12 ----D---- C:\WINDOWS\system32\sru
2016-09-20 20:26:18 ----D---- C:\WINDOWS\INF
2016-09-20 20:26:18 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-09-20 09:58:35 ----D---- C:\WINDOWS\Microsoft.NET
2016-09-20 09:08:35 ----D---- C:\Program Files (x86)\Dropbox
2016-09-20 09:08:24 ----D---- C:\WINDOWS\system32\drivers
2016-09-20 09:02:42 ----D---- C:\WINDOWS\AppReadiness
2016-09-20 09:02:40 ----HD---- C:\Program Files\WindowsApps
2016-09-19 08:55:03 ----SHD---- C:\System Volume Information
2016-09-18 20:38:48 ----D---- C:\Users\Mýl_a_Páť\AppData\Roaming\vlc
2016-09-18 20:36:49 ----D---- C:\Users\Mýl_a_Páť\AppData\Roaming\BSplayer
2016-09-16 10:16:52 ----D---- C:\WINDOWS\rescache
2016-09-16 09:16:06 ----D---- C:\WINDOWS\system32\config
2016-09-15 20:59:13 ----SHDC---- C:\WINDOWS\Installer
2016-09-15 20:59:13 ----SHD---- C:\Config.Msi
2016-09-15 20:59:13 ----D---- C:\WINDOWS\system32\Tasks
2016-09-15 09:03:56 ----D---- C:\WINDOWS\system32\DriverStore
2016-09-15 09:03:41 ----D---- C:\WINDOWS\WinSxS
2016-09-15 08:58:58 ----D---- C:\WINDOWS\system32\catroot2
2016-09-15 08:50:50 ----D---- C:\WINDOWS\CbsTemp
2016-09-15 08:50:49 ----D---- C:\WINDOWS\system32\appraiser
2016-09-15 08:16:00 ----AD---- C:\Program Files\Microsoft Silverlight
2016-09-15 08:15:59 ----AD---- C:\Program Files (x86)\Microsoft Silverlight
2016-09-15 08:15:56 ----D---- C:\WINDOWS\SysWOW64
2016-09-15 00:37:14 ----D---- C:\WINDOWS\SYSWOW64\wbem
2016-09-15 00:37:14 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-09-15 00:37:13 ----SD---- C:\WINDOWS\SYSWOW64\F12
2016-09-15 00:37:13 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-09-15 00:37:13 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-09-15 00:37:13 ----D---- C:\WINDOWS\SYSWOW64\AdvancedInstallers
2016-09-15 00:36:53 ----D---- C:\WINDOWS\system32\wbem
2016-09-15 00:36:52 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-09-15 00:36:52 ----D---- C:\WINDOWS\system32\setup
2016-09-15 00:36:52 ----D---- C:\WINDOWS\system32\oobe
2016-09-15 00:36:51 ----D---- C:\WINDOWS\system32\migwiz
2016-09-15 00:36:51 ----D---- C:\WINDOWS\system32\migration
2016-09-15 00:36:50 ----SD---- C:\WINDOWS\system32\F12
2016-09-15 00:36:50 ----D---- C:\WINDOWS\system32\Dism
2016-09-15 00:36:50 ----D---- C:\WINDOWS\system32\cs-CZ
2016-09-15 00:36:50 ----D---- C:\WINDOWS\system32\Boot
2016-09-15 00:36:50 ----D---- C:\WINDOWS\system32\AdvancedInstallers
2016-09-15 00:36:22 ----RD---- C:\WINDOWS\PrintDialog
2016-09-15 00:36:19 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-09-15 00:36:19 ----RD---- C:\WINDOWS\DevicesFlow
2016-09-15 00:36:18 ----D---- C:\WINDOWS\AppPatch
2016-09-15 00:36:18 ----D---- C:\Windows
2016-09-15 00:36:18 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2016-09-15 00:36:18 ----D---- C:\Program Files (x86)\Windows Mail
2016-09-15 00:36:18 ----D---- C:\Program Files (x86)\Windows Defender
2016-09-15 00:36:18 ----D---- C:\Program Files (x86)\Internet Explorer
2016-09-15 00:36:17 ----D---- C:\Program Files\Windows Photo Viewer
2016-09-15 00:36:17 ----D---- C:\Program Files\Windows Media Player
2016-09-15 00:36:17 ----D---- C:\Program Files\Windows Mail
2016-09-15 00:36:17 ----D---- C:\Program Files\Windows Defender
2016-09-15 00:36:17 ----D---- C:\Program Files\Internet Explorer
2016-09-14 11:37:51 ----D---- C:\ProgramData\NVIDIA Corporation
2016-09-14 11:37:34 ----D---- C:\Program Files\NVIDIA Corporation
2016-09-14 11:37:29 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2016-09-14 09:15:34 ----RD---- C:\Program Files
2016-09-14 09:14:46 ----D---- C:\WINDOWS\system32\MRT
2016-09-14 09:12:37 ----AC---- C:\WINDOWS\system32\MRT.exe
2016-09-14 09:09:18 ----D---- C:\WINDOWS\system32\Macromed
2016-09-14 09:09:16 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2016-09-11 22:29:10 ----D---- C:\Program Files (x86)\Steam
2016-09-07 08:04:35 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2016-09-07 03:00:59 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-08-30 22:00:07 ----D---- C:\Program Files (x86)\VulkanRT
2016-08-26 01:27:49 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2016-08-26 01:27:49 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2016-08-26 01:27:49 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2016-08-26 01:27:49 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2016-08-26 01:27:49 ----A---- C:\WINDOWS\system32\nvhdagenco6420103.dll
2016-08-26 01:27:49 ----A---- C:\WINDOWS\system32\nvapi64.dll
2016-08-25 23:12:08 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2016-08-25 23:12:08 ----A---- C:\WINDOWS\system32\nvcpl.dll
2016-08-25 23:12:07 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2016-08-25 23:12:07 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2016-08-25 23:12:07 ----A---- C:\WINDOWS\system32\nvshext.dll
2016-08-25 23:12:07 ----A---- C:\WINDOWS\system32\nvmctray.dll
2016-08-25 23:12:07 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2016-08-25 23:12:07 ----A---- C:\WINDOWS\system32\nv3dappshext.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2016-04-23 87552]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-12-19 7858088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 IntcDAud;@oem18.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-10-28 474376]
R3 MEIx64;@oem24.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-01-11 64624]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-12-15 175616]
R3 NVHDA;@oem48.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2016-08-26 223304]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2016-08-27 14216760]
R3 nvvad_WaveExtensible;@oem51.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2016-09-02 46016]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-10-30 589824]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BrUsbScn;@oem7.inf,%BrUsbScn.SvcDesc%;Brother MFC USB Scanner driver; C:\WINDOWS\System32\Drivers\BrUsbScn.sys [2015-09-09 14336]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-12-15 117248]
S3 dbx;dbx; C:\WINDOWS\system32\DRIVERS\dbx.sys []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2014-11-22 25640]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 NTIOLib_MB;NTIOLib_MB; \??\C:\Program Files (x86)\MSI\MSI Gaming APP\Lib\NTIOLib_X64.sys [2014-03-13 13808]
S3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-09-02 27584]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 trufos;trufos; C:\WINDOWS\system32\drivers\trufos.sys [2016-03-28 350160]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2016-04-23 63488]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2016-05-28 258912]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2016-09-07 131424]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-09-08 82128]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 brmfrsmg;Brother Resource manager service; C:\WINDOWS\system32\BrmfRsmg.exe [2015-09-09 52736]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DbxSvc;DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [2016-09-20 42792]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 GamingApp_Service;GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [2015-09-03 34984]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-12-19 373160]
R2 MSI_LiveUpdate_Service;MSI Live Update Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2016-06-28 2247120]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-12-15 26624]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-09-02 457152]
R2 NVIDIA Wireless Controller Service;NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [2016-09-02 1163712]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2016-08-25 1362368]
R2 OneSyncSvc_3b336;Hostitel synchronizace_3b336; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe [2016-08-25 426040]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-02-14 143144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_1ae6153e;Hostitel synchronizace_1ae6153e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_34814;Hostitel synchronizace_34814; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_392c9ec4;Hostitel synchronizace_392c9ec4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-14 270016]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-12-19 300968]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-02-14 143144]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06 144200]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2013-01-02 171632]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_1ae6153e;Služba zasílání zpráv_1ae6153e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_34814;Služba zasílání zpráv_34814; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_392c9ec4;Služba zasílání zpráv_392c9ec4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b336;Služba zasílání zpráv_3b336; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-09-02 457152]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2016-04-02 2119688]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_1ae6153e;Data kontaktů_1ae6153e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_34814;Data kontaktů_34814; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_392c9ec4;Data kontaktů_392c9ec4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_3b336;Data kontaktů_3b336; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2016-09-07 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-08-23 1465120]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 UnistoreSvc_1ae6153e;Úložiště uživatelských dat_1ae6153e; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-10-30 51376]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

Zdravím, stáhni a spusť AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem jej spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po dokončení skenu klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zkopíruj Report.


Pak použij Mbam z mého podpisu a dej mi sem z něj log po smazání nepořádku.

# AdwCleaner v6.020 - Log soubor vytvořen 21/09/2016 na 18:45:29
# Aktualizováno dne 14/09/2016 z ToolsLib
# Databáze : 2016-09-21.1 [Server]
# Operační systém : Windows 10 Home (X64)
# Uživatelské jméno : Mýl_a_Páť - MÝL_A_PÁŤ-PC
# Beží od : C:\Users\Mýl_a_Páť\Downloads\adwcleaner_6.020.exe
# Mod: Čištění
# Podpora : https://toolslib.net/forum



***** [ Služby ] *****



***** [ Adresáře ] *****

[-] Adresář smazán:C:\Users\Mýl_a_Páť\AppData\Local\VirtualStore\ProgramData\Application Data\tencent
[#] Adresář nelze smazat:C:\Users\Mýl_a_Páť\AppData\Local\VirtualStore\ProgramData\Application Data\Tencent
[-] Adresář smazán:C:\Users\Mýl_a_Páť\AppData\Local\VirtualStore\Program Files (x86)\tencent
[#] Adresář nelze smazat:C:\Users\Mýl_a_Páť\AppData\Local\VirtualStore\Program Files (x86)\Tencent
[-] Adresář smazán:C:\ProgramData\Application Data\tencent
[#] Adresář nelze smazat:C:\ProgramData\Application Data\Tencent


***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupce ] *****



***** [ Plánovač úloh ] *****



***** [ Registry ] *****

[-] Klíč smazán:HKU\S-1-5-21-3706085598-1878046974-4067092362-1000\Software\Conduit
[#] Klíč smazán po restartování:HKCU\Software\Conduit
[-] Klíč smazán:HKLM\SOFTWARE\Conduit
[#] Klíč smazán po restartování:[x64] HKCU\Software\Conduit


***** [ Prohlížeče ] *****



*************************

:: "Tracing" klíč smazán
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [1642 Bajtů] - [29/01/2016 19:31:44]
C:\AdwCleaner\AdwCleaner[C2].txt - [1688 Bajtů] - [21/09/2016 18:45:29]
C:\AdwCleaner\AdwCleaner[S1].txt - [1440 Bajtů] - [29/01/2016 19:29:24]
C:\AdwCleaner\AdwCleaner[S2].txt - [2173 Bajtů] - [21/09/2016 18:44:10]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1910 Bajtů] ##########

Jakmile skončí scan Malwarebytes, tak postnu výsledky.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 22.9.2016
Čas skenování: 0:49
Protokol: výsledky.txt
Správce: Ano

Verze: 2.2.1.1043
Databáze malwaru: v2016.09.21.12
Databáze rootkitů: v2016.08.15.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 10
CPU: x64
Souborový systém: NTFS
Uživatel: Mýl_a_Páť

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 681795
Uplynulý čas: 2 hod, 14 min, 22 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Mbam odinstaluj a ještě pro jistotu spusť skener Cure It podle TOHOTO návodu

po skončení skenu mi sem nakopíruj výsledky - stačí konec logu se souhrnem.

(Upozornění je úchylně pomalý a je zapotřebí ho sledovat občas se na něco ptá)

Log file locked by another application: C:\Users\Mýl_a_Páť\Doctor Web\cureit.log
=============================================================================
Dr.Web Scanner SE for Windows v9.1.3.11270
(c) Doctor Web, Ltd., 1992-2013
Scan session started 2016/09/24 00:27:26
Module location : c:\users\mýl_a_páť\appdata\local\temp\91AC9518-27521E72-1EFF6C4A-57981F00\
=============================================================================

OPTION [Automatic Apply Actions] NO
OPTION [Turn Off Computer After Scan] NO
OPTION [Use Sound Alerts] NO

OPTION [Block Network] NO
OPTION [Protect Process] NO
OPTION [Protect Raw Disk] NO

Time from server is: 2016-09-24 01:27:35
Using language: "English"
OPTION [Automatic Apply Actions] YES

OPTION [Automatic Apply Actions] NO

Change language: "Czech (Český)"
Available instances: 10
Instances used: 10
Platform: Windows 10 Starter x64/WOW (Build 14393)
API Version: 2.2
Scanning Engine version: 11.1.2.8300
Virus Finding Engine version: 7.0.23.8290

.
.
.

Total 688158476119 bytes in 431535 files scanned (806473 objects)
Total 431392 files (806326 objects) are clean
There are no infected objects detected
Total 146 files are raised error condition
Scan time is 02:45:09.872

Bezva a jak se PC chová ?

Myslím, že vše je ok. To zpomalení, které jsem pozoroval, pravděpodobně souviselo s nějakou aktualizací.

Děkuji za pomoc.

Není zač a