Prosím o kontrolu logu
Napsal: 10 říj 2016 06:28
Logfile of random's system information tool 1.10 (written by random/random)
Run by Lenovo at 2016-10-10 07:25:44
Microsoft Windows 10 Pro
System drive C: has 353 GB (74%) free of 476 GB
Total RAM: 4007 MB (32% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:25:51, on 10.10.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0000)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe
C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
C:\Users\Lenovo\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
C:\Users\Lenovo\AppData\Roaming\Dashlane\Dashlane.exe
C:\Users\Lenovo\AppData\Roaming\Dashlane\DashlanePlugin.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Lenovo.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Dashlane BHO - {42D79B50-CC4A-4A8E-860F-BE674AF053A2} - C:\Users\Lenovo\AppData\Roaming\Dashlane\ie\Dashlanei.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Advanced SystemCare Surfing Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: Dashlane Toolbar - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\Users\Lenovo\AppData\Roaming\Dashlane\ie\KWIEBar.dll
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Lenovo\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Advanced SystemCare 9] "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto
O4 - HKCU\..\Run: [Dashlane] "C:\Users\Lenovo\AppData\Roaming\Dashlane\Dashlane.exe" autoLaunchAtStartup
O4 - HKCU\..\Run: [DashlanePlugin] "C:\Users\Lenovo\AppData\Roaming\Dashlane\DashlanePlugin.exe" ws
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Advanced SystemCare Service 9 (AdvancedSystemCareService9) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @oem14.inf,%ibm.svcDesc0%;Lenovo PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe (file missing)
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: @oem14.inf,%Lenovo.svcDesc1%;Lenovo Platform Service (LPlatSvc) - Unknown owner - C:\WINDOWS\system32\LPlatSvc.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10748 bytes
======Listing Processes======
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe"
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ad893680-65ef-4443-b4bf-afeace2c9188 -SystemEventPortName:HostProcess-ffc0345e-d181-41a0-8a2e-7a46e89c40e4 -IoCancelEventPortName:HostProcess-9a886f4d-afde-442e-b66b-7e0984cdf34b -NonStateChangingEventPortName:HostProcess-2fdb76a4-b9d9-4c6b-8ebb-1accdfab9dd8 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ee153fd3-9917-4f6c-b677-0780600d4a35 -DeviceGroupId:
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\LPlatSvc.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
sihost.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe" /STARTUP
"C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe" /Task
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
"C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Users\Lenovo\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto
"C:\Users\Lenovo\AppData\Roaming\Dashlane\Dashlane.exe" autoLaunchAtStartup
"C:\Users\Lenovo\AppData\Roaming\Dashlane\DashlanePlugin.exe" ws
"C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE" /tsr
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"fontdrvhost.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
"C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE"
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" /SkipUac
"C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe" driverbooster
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /systemstart
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe" /starttips
"C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe" /RunCurUs
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=-m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=53.0.2785.116 --handshake-handle=0x24c
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="14612.0.685062244\480981550" --mojo-application-channel-token=147B3E61BC5A15526005E2827BC6AC22 --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ClientSideDetectionModel/Model0/DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/StandardR7/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Control/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --supports-dual-gpus=false --gpu-driver-bug-workarounds=5,14,18,31,48,56 --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=9.17.10.4229 --gpu-driver-date=5-27-2015 --mojo-platform-channel-handle=1500 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Control/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --primordial-pipe-token=94D2A709BB6AD073F80C928045A7F5AF --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=AAD3559D2FBBBE0DDF2DFBDEFF36265B --mojo-application-channel-token=94D2A709BB6AD073F80C928045A7F5AF --channel="14612.3.1737454691\1391820585" --mojo-platform-channel-handle=2768 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Control/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --primordial-pipe-token=062CB643209B32AC6DF8D0CFB8640A39 --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=5960B041CF978480D7527E92F9237B53 --mojo-application-channel-token=062CB643209B32AC6DF8D0CFB8640A39 --channel="14612.4.1298793274\422149443" --mojo-platform-channel-handle=2872 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Control/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/*StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --primordial-pipe-token=AF991B99DE7E31F800B80EF89A1D1992 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=70C9F9821038E3C607267D7970DE21FC --mojo-application-channel-token=AF991B99DE7E31F800B80EF89A1D1992 --channel="14612.5.1015924555\716213045" --mojo-platform-channel-handle=5784 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Control/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/*StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --primordial-pipe-token=19B4F34D5A2C8BA0854FC6614EB79D56 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=99730A09C46EF02A1B44A222EB243FB9 --mojo-application-channel-token=19B4F34D5A2C8BA0854FC6614EB79D56 --channel="14612.6.50301317\78405713" --mojo-platform-channel-handle=5604 /prefetch:1
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\WINDOWS\system32\LPlatSvc.exe" -EM
C:\WINDOWS\splwow64.exe 8192
taskhostw.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/*EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/*GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/*PasswordSmartBubble/3-Times/*PluginPowerSaverTiny/Control/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/*StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/*TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --primordial-pipe-token=8E4CCC5E08BB8F3476E32C8177853CE3 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=3C4BD2137FA9D1E0EA45A8E0DA79D3A0 --mojo-application-channel-token=8E4CCC5E08BB8F3476E32C8177853CE3 --channel="14612.88.1942825468\756018495" --mojo-platform-channel-handle=7236 /prefetch:1
"C:\WINDOWS\system32\LPlatSvc.exe" -EM
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\WINDOWS\SysWOW64\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1431082094-2584509363-2256584928-100197_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1431082094-2584509363-2256584928-100197 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/*EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/*GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/*PasswordSmartBubble/3-Times/*PluginPowerSaverTiny/Control/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/*StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/*TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --primordial-pipe-token=A7831996E63490B1C2FA4264BA2D04CA --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=BBA66DED9EB028765DEDCD671BA5E578 --mojo-application-channel-token=A7831996E63490B1C2FA4264BA2D04CA --channel="14612.97.1039067076\1365932816" --mojo-platform-channel-handle=6852 /prefetch:1
C:\Windows\System32\smartscreen.exe -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe98_ Global\UsGthrCtrlFltPipeMssGthrPipe98 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 680 684 692 8192 688
C:\WINDOWS\system32\AUDIODG.EXE 0x58c
"C:\Users\Lenovo\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\ASC9_SkipUac_Lenovo.job - C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe /SkipUac
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\SlimDrivers Startup.job - C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe -boot
C:\WINDOWS\tasks\Uninstaller_SkipUac_Lenovo.job - C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe /UninstallExplorer
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-11-12 2472224]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{42D79B50-CC4A-4A8E-860F-BE674AF053A2}]
Dashlane BHO - C:\Users\Lenovo\AppData\Roaming\Dashlane\ie\Dashlanei.dll [2016-09-22 958848]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Surfing Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2015-07-09 682784]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440}
{669695BC-A811-4A9D-8CDF-BA8C795F261C} - Dashlane Toolbar - C:\Users\Lenovo\AppData\Roaming\Dashlane\ie\KWIEBar.dll [2016-09-22 136064]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2015-06-01 183216]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2015-06-01 411056]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2015-06-01 453552]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-09-24 36352]
"SynLenovoHelper"=C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe [2016-08-26 155240]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Lenovo\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-09-29 633024]
"Advanced SystemCare 9"=C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [2016-07-27 2023712]
"Dashlane"=C:\Users\Lenovo\AppData\Roaming\Dashlane\Dashlane.exe [2016-09-22 476544]
"DashlanePlugin"=C:\Users\Lenovo\AppData\Roaming\Dashlane\DashlanePlugin.exe [2016-09-22 535424]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"IObit Malware Fighter"=C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [2016-08-19 5989664]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-09-14 9107616]
C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2015-06-01 451584]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-10-10 07:25:45 ----D---- C:\Program Files\trend micro
2016-10-10 07:25:44 ----D---- C:\rsit
2016-10-05 09:16:11 ----A---- C:\WINDOWS\system32\drivers\cysmb.sys
2016-10-04 08:57:16 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-10-03 07:14:11 ----A---- C:\WINDOWS\system32\drivers\aswHdsKe.sys
2016-09-30 09:09:32 ----A---- C:\WINDOWS\system32\mssrch.dll
2016-09-30 09:09:31 ----A---- C:\WINDOWS\system32\wmp.dll
2016-09-30 09:09:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-09-30 09:09:29 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-09-30 09:09:28 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-09-30 09:09:27 ----A---- C:\WINDOWS\system32\tquery.dll
2016-09-30 09:09:26 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-09-30 09:09:25 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2016-09-30 09:09:25 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-09-30 09:09:24 ----A---- C:\WINDOWS\SYSWOW64\LicenseManagerApi.dll
2016-09-30 09:09:24 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2016-09-30 09:09:24 ----A---- C:\WINDOWS\system32\nettrace.dll
2016-09-30 09:09:24 ----A---- C:\WINDOWS\system32\daxexec.dll
2016-09-30 09:09:23 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-09-30 09:09:23 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-09-30 09:09:23 ----A---- C:\WINDOWS\system32\usbmon.dll
2016-09-30 09:09:22 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2016-09-30 09:09:22 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2016-09-30 09:09:22 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2016-09-30 09:09:21 ----A---- C:\WINDOWS\SYSWOW64\TempSignedLicenseExchangeTask.dll
2016-09-30 09:09:21 ----A---- C:\WINDOWS\system32\wc_storage.dll
2016-09-30 09:09:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.CredDialogController.dll
2016-09-30 09:09:20 ----A---- C:\WINDOWS\system32\samsrv.dll
2016-09-30 09:09:20 ----A---- C:\WINDOWS\system32\ci.dll
2016-09-30 09:09:19 ----A---- C:\WINDOWS\SYSWOW64\WSManHTTPConfig.exe
2016-09-30 09:09:19 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2016-09-30 09:09:19 ----A---- C:\WINDOWS\system32\mprdim.dll
2016-09-30 09:09:19 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2016-09-30 09:09:18 ----A---- C:\WINDOWS\SYSWOW64\mfksproxy.dll
2016-09-30 09:09:18 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-09-30 09:09:18 ----A---- C:\WINDOWS\system32\hal.dll
2016-09-30 09:09:18 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2016-09-30 09:09:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2016-09-30 09:09:17 ----A---- C:\WINDOWS\system32\wkssvc.dll
2016-09-30 09:09:17 ----A---- C:\WINDOWS\system32\SessEnv.dll
2016-09-30 09:09:17 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2016-09-30 09:09:17 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-09-30 09:09:17 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-09-30 09:09:16 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2016-09-30 09:09:16 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2016-09-30 09:09:16 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-09-30 09:09:16 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-09-30 09:09:16 ----A---- C:\WINDOWS\system32\webio.dll
2016-09-30 09:09:15 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2016-09-30 09:09:15 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2016-09-30 09:09:15 ----A---- C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-09-30 09:09:15 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2016-09-30 09:09:15 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2016-09-30 09:09:15 ----A---- C:\WINDOWS\system32\drivers\wcifs.sys
2016-09-30 09:09:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2016-09-30 09:09:14 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2016-09-30 09:09:14 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-09-30 09:09:14 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-09-30 09:09:13 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-09-30 09:09:13 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-09-30 09:09:13 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll
2016-09-30 09:09:13 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-09-30 09:09:13 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-09-30 09:09:13 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-09-30 09:09:12 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2016-09-30 09:09:11 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2016-09-30 09:09:11 ----A---- C:\WINDOWS\system32\securekernel.exe
2016-09-30 09:09:11 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-09-30 09:09:11 ----A---- C:\WINDOWS\system32\profsvc.dll
2016-09-30 09:09:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2016-09-30 09:09:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2016-09-30 09:09:10 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-09-30 09:09:10 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2016-09-30 09:09:10 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2016-09-30 09:09:10 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-09-30 09:09:10 ----A---- C:\WINDOWS\system32\offlinesam.dll
2016-09-30 09:09:09 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-09-30 09:09:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.FaceAnalysis.dll
2016-09-30 09:09:06 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-09-30 09:09:06 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2016-09-30 09:09:05 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2016-09-30 09:09:05 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-09-30 09:09:05 ----A---- C:\WINDOWS\system32\efswrt.dll
2016-09-30 09:09:05 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2016-09-30 09:09:04 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2016-09-30 09:09:04 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2016-09-30 09:09:04 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-09-30 09:09:04 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-09-30 09:09:04 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-09-30 09:09:04 ----A---- C:\WINDOWS\system32\lsm.dll
2016-09-30 09:09:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2016-09-30 09:09:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.LowLevel.dll
2016-09-30 09:09:03 ----A---- C:\WINDOWS\system32\mssprxy.dll
2016-09-30 09:09:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2016-09-30 09:09:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.3D.dll
2016-09-30 09:09:02 ----A---- C:\WINDOWS\system32\Windows.Perception.Stub.dll
2016-09-30 09:09:02 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-09-30 09:09:02 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2016-09-30 09:09:02 ----A---- C:\WINDOWS\system32\FrameServer.dll
2016-09-30 09:09:01 ----A---- C:\WINDOWS\system32\tspubwmi.dll
2016-09-30 09:09:01 ----A---- C:\WINDOWS\system32\puiobj.dll
2016-09-30 09:09:01 ----A---- C:\WINDOWS\system32\netshell.dll
2016-09-30 09:09:01 ----A---- C:\WINDOWS\system32\CastLaunch.dll
2016-09-30 09:09:00 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-09-30 09:09:00 ----A---- C:\WINDOWS\SYSWOW64\imapi2.dll
2016-09-30 09:09:00 ----A---- C:\WINDOWS\SYSWOW64\credprovslegacy.dll
2016-09-30 09:09:00 ----A---- C:\WINDOWS\system32\Windows.Devices.Printers.dll
2016-09-30 09:09:00 ----A---- C:\WINDOWS\system32\NetworkUXBroker.dll
2016-09-30 09:09:00 ----A---- C:\WINDOWS\system32\fhcfg.dll
2016-09-30 09:09:00 ----A---- C:\WINDOWS\system32\credprovslegacy.dll
2016-09-30 09:08:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-09-30 09:08:59 ----A---- C:\WINDOWS\SYSWOW64\findnetprinters.dll
2016-09-30 09:08:59 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2016-09-30 09:08:58 ----A---- C:\WINDOWS\system32\aadtb.dll
2016-09-30 09:08:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.UXRes.dll
2016-09-30 09:08:57 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2016-09-30 09:08:57 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2016-09-30 09:08:55 ----A---- C:\WINDOWS\system32\sppsvc.exe
2016-09-30 09:08:53 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2016-09-30 09:08:52 ----A---- C:\WINDOWS\system32\sppobjs.dll
2016-09-30 09:08:51 ----A---- C:\WINDOWS\system32\ClipUp.exe
2016-09-30 09:08:50 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-09-30 09:08:49 ----A---- C:\WINDOWS\system32\cdp.dll
2016-09-30 09:08:48 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-09-30 09:08:47 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-09-30 09:08:47 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-09-30 09:08:47 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2016-09-30 09:08:45 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2016-09-30 09:08:45 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2016-09-30 09:08:44 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-09-30 09:08:44 ----A---- C:\WINDOWS\system32\wsp_sr.dll
2016-09-30 09:08:44 ----A---- C:\WINDOWS\system32\wsp_health.dll
2016-09-30 09:08:44 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-09-30 09:08:43 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-09-30 09:08:43 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2016-09-30 09:08:43 ----A---- C:\WINDOWS\system32\sppwinob.dll
2016-09-30 09:08:43 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2016-09-30 09:08:42 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-09-30 09:08:42 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-09-30 09:08:42 ----A---- C:\WINDOWS\system32\tdh.dll
2016-09-30 09:08:41 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-09-30 09:08:40 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-09-30 09:08:40 ----A---- C:\WINDOWS\system32\gpsvc.dll
2016-09-30 09:08:40 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-09-30 09:08:39 ----A---- C:\WINDOWS\system32\SensorService.dll
2016-09-30 09:08:39 ----A---- C:\WINDOWS\system32\cdpsvc.dll
2016-09-30 09:08:39 ----A---- C:\WINDOWS\system32\bdesvc.dll
2016-09-30 09:08:39 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-09-30 09:08:38 ----A---- C:\WINDOWS\system32\devinv.dll
2016-09-30 09:08:38 ----A---- C:\WINDOWS\system32\cdpusersvc.dll
2016-09-30 09:08:37 ----A---- C:\WINDOWS\system32\NotificationController.dll
2016-09-30 09:08:37 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-09-30 09:08:36 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-09-30 09:08:36 ----A---- C:\WINDOWS\system32\SpaceControl.dll
2016-09-30 09:08:36 ----A---- C:\WINDOWS\system32\SpaceAgent.exe
2016-09-30 09:08:36 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-09-30 09:08:36 ----A---- C:\WINDOWS\system32\localspl.dll
2016-09-30 09:08:35 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2016-09-30 09:08:35 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-09-30 09:08:35 ----A---- C:\WINDOWS\system32\pwcreator.exe
2016-09-30 09:08:35 ----A---- C:\WINDOWS\system32\manage-bde.exe
2016-09-30 09:08:34 ----A---- C:\WINDOWS\system32\sppcext.dll
2016-09-30 09:08:34 ----A---- C:\WINDOWS\system32\pdh.dll
2016-09-30 09:08:34 ----A---- C:\WINDOWS\system32\discan.dll
2016-09-30 09:08:34 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2016-09-30 09:08:33 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2016-09-30 09:08:33 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-09-30 09:08:33 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-09-30 09:08:33 ----A---- C:\WINDOWS\system32\ReAgent.dll
2016-09-30 09:08:33 ----A---- C:\WINDOWS\system32\icsvc.dll
2016-09-30 09:08:33 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-09-30 09:08:32 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-09-30 09:08:32 ----A---- C:\WINDOWS\system32\systemreset.exe
2016-09-30 09:08:32 ----A---- C:\WINDOWS\system32\ShareHost.dll
2016-09-30 09:08:32 ----A---- C:\WINDOWS\system32\NfcRadioMedia.dll
2016-09-30 09:08:32 ----A---- C:\WINDOWS\system32\AppContracts.dll
2016-09-30 09:08:32 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-09-30 09:08:31 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2016-09-30 09:08:31 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2016-09-30 09:08:31 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-09-30 09:08:31 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-09-30 09:08:31 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-30 09:08:30 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2016-09-30 09:08:30 ----A---- C:\WINDOWS\system32\Windows.Gaming.Input.dll
2016-09-30 09:08:30 ----A---- C:\WINDOWS\system32\Sens.dll
2016-09-30 09:08:30 ----A---- C:\WINDOWS\system32\fveui.dll
2016-09-30 09:08:30 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2016-09-30 09:08:29 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2016-09-30 09:08:29 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-09-30 09:08:29 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2016-09-30 09:08:29 ----A---- C:\WINDOWS\splwow64.exe
2016-09-30 09:08:28 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-09-30 09:08:28 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2016-09-30 09:08:28 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-09-30 09:08:28 ----A---- C:\WINDOWS\system32\bdeui.dll
2016-09-30 09:08:27 ----A---- C:\WINDOWS\SYSWOW64\wlancfg.dll
2016-09-30 09:08:27 ----A---- C:\WINDOWS\system32\fvenotify.exe
2016-09-30 09:08:26 ----A---- C:\WINDOWS\SYSWOW64\offlinesam.dll
2016-09-30 09:08:26 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2016-09-30 09:08:26 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-09-30 09:08:26 ----A---- C:\WINDOWS\system32\resutils.dll
2016-09-30 09:08:25 ----A---- C:\WINDOWS\SYSWOW64\CryptoWinRT.dll
2016-09-30 09:08:25 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2016-09-30 09:08:25 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2016-09-30 09:08:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2016-09-30 09:08:24 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-09-30 09:08:23 ----A---- C:\WINDOWS\SYSWOW64\sppcext.dll
2016-09-30 09:08:23 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2016-09-30 09:08:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2016-09-30 09:08:22 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-09-30 09:08:22 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-09-30 09:08:22 ----A---- C:\WINDOWS\system32\credprovhost.dll
2016-09-30 09:08:22 ----A---- C:\WINDOWS\system32\clusapi.dll
2016-09-30 09:08:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-09-30 09:08:21 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2016-09-30 09:08:21 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-09-30 09:08:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-09-30 09:08:20 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2016-09-30 09:08:20 ----A---- C:\WINDOWS\SYSWOW64\BcastDVRHelper.dll
2016-09-30 09:08:20 ----A---- C:\WINDOWS\system32\Windows.Media.Ocr.dll
2016-09-30 09:08:20 ----A---- C:\WINDOWS\system32\Windows.Devices.Radios.dll
2016-09-30 09:08:20 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2016-09-30 09:08:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Perception.Stub.dll
2016-09-30 09:08:19 ----A---- C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2016-09-30 09:08:19 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2016-09-30 09:08:19 ----A---- C:\WINDOWS\system32\PrintWSDAHost.dll
2016-09-30 09:08:18 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2016-09-30 09:08:18 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-09-30 09:08:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Diagnostics.dll
2016-09-30 09:08:17 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2016-09-30 09:08:17 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-09-30 09:08:16 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2016-09-30 09:08:16 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2016-09-30 09:08:16 ----A---- C:\WINDOWS\system32\ffbroker.dll
2016-09-30 09:08:15 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2016-09-30 09:08:06 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-09-30 09:08:04 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-09-30 09:08:02 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-09-30 09:08:00 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-09-30 09:07:56 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-09-30 09:07:55 ----A---- C:\WINDOWS\system32\twinui.dll
2016-09-30 09:07:51 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2016-09-30 09:07:50 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-09-30 09:07:49 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-09-30 09:07:48 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-09-30 09:07:48 ----A---- C:\WINDOWS\system32\spaceman.exe
2016-09-30 09:07:48 ----A---- C:\WINDOWS\system32\mispace.dll
2016-09-30 09:07:48 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-09-30 09:07:47 ----A---- C:\WINDOWS\SYSWOW64\MSAC3ENC.DLL
2016-09-30 09:07:47 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-09-30 09:07:46 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2016-09-30 09:07:46 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2016-09-30 09:07:46 ----A---- C:\WINDOWS\system32\storagewmi.dll
2016-09-30 09:07:45 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-09-30 09:07:45 ----A---- C:\WINDOWS\system32\wininet.dll
2016-09-30 09:07:45 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-09-30 09:07:45 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-09-30 09:07:44 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-09-30 09:07:44 ----A---- C:\WINDOWS\system32\dsregcmd.exe
2016-09-30 09:07:44 ----A---- C:\WINDOWS\explorer.exe
2016-09-30 09:07:43 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2016-09-30 09:07:43 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-09-30 09:07:42 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-09-30 09:07:42 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-09-30 09:07:41 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-09-30 09:07:41 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-09-30 09:07:41 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-09-30 09:07:40 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-09-30 09:07:40 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-09-30 09:07:40 ----A---- C:\WINDOWS\system32\qmgr.dll
2016-09-30 09:07:39 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-09-30 09:07:39 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-09-30 09:07:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-09-30 09:07:38 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2016-09-30 09:07:38 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-09-30 09:07:38 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-09-30 09:07:37 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2016-09-30 09:07:37 ----A---- C:\WINDOWS\system32\rascustom.dll
2016-09-30 09:07:37 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2016-09-30 09:07:36 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-09-30 09:07:36 ----A---- C:\WINDOWS\system32\mfksproxy.dll
2016-09-30 09:07:36 ----A---- C:\WINDOWS\system32\fveapibase.dll
2016-09-30 09:07:36 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2016-09-30 09:07:36 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-09-30 09:07:36 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-09-30 09:07:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-09-30 09:07:35 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-09-30 09:07:35 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-09-30 09:07:35 ----A---- C:\WINDOWS\system32\uReFS.dll
2016-09-30 09:07:35 ----A---- C:\WINDOWS\system32\dnsapi.dll
2016-09-30 09:07:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2016-09-30 09:07:34 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2016-09-30 09:07:34 ----A---- C:\WINDOWS\system32\WSManHTTPConfig.exe
2016-09-30 09:07:34 ----A---- C:\WINDOWS\system32\wintrust.dll
2016-09-30 09:07:34 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2016-09-30 09:07:34 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-09-30 09:07:34 ----A---- C:\WINDOWS\system32\RMapi.dll
2016-09-30 09:07:33 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-09-30 09:07:33 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-09-30 09:07:33 ----A---- C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-09-30 09:07:33 ----A---- C:\WINDOWS\system32\mprapi.dll
2016-09-30 09:07:33 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-09-30 09:07:33 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2016-09-30 09:07:32 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-09-30 09:07:32 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-09-30 09:07:32 ----A---- C:\WINDOWS\system32\LsaIso.exe
2016-09-30 09:07:32 ----A---- C:\WINDOWS\system32\drivers\cmimcext.sys
2016-09-30 09:07:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2016-09-30 09:07:31 ----A---- C:\WINDOWS\SYSWOW64\biwinrt.dll
2016-09-30 09:07:31 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2016-09-30 09:07:31 ----A---- C:\WINDOWS\system32\drivers\http.sys
2016-09-30 09:07:30 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-09-30 09:07:30 ----A---- C:\WINDOWS\SYSWOW64\tsmf.dll
2016-09-30 09:07:30 ----A---- C:\WINDOWS\system32\wpnapps.dll
2016-09-30 09:07:30 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-09-30 09:07:30 ----A---- C:\WINDOWS\system32\apprepsync.dll
2016-09-30 09:07:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-09-30 09:07:29 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-09-30 09:07:29 ----A---- C:\WINDOWS\system32\nltest.exe
2016-09-30 09:07:28 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-09-30 09:07:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2016-09-30 09:07:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2016-09-30 09:07:28 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2016-09-30 09:07:28 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-09-30 09:07:27 ----A---- C:\WINDOWS\system32\ieproxy.dll
2016-09-30 09:07:27 ----A---- C:\WINDOWS\system32\devenum.dll
2016-09-30 09:07:27 ----A---- C:\WINDOWS\system32\DataExchange.dll
2016-09-30 09:07:27 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2016-09-30 09:07:26 ----A---- C:\WINDOWS\system32\usermgr.dll
2016-09-30 09:07:26 ----A---- C:\WINDOWS\system32\RelPost.exe
2016-09-30 09:07:26 ----A---- C:\WINDOWS\system32\rasmans.dll
2016-09-30 09:07:26 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-09-30 09:07:25 ----A---- C:\WINDOWS\SYSWOW64\DataExchange.dll
2016-09-30 09:07:25 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-09-30 09:07:25 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2016-09-30 09:07:25 ----A---- C:\WINDOWS\system32\apprepapi.dll
2016-09-30 09:07:24 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2016-09-30 09:07:24 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-09-30 09:07:24 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2016-09-30 09:07:24 ----A---- C:\WINDOWS\system32\drivers\winhvr.sys
2016-09-30 09:07:24 ----A---- C:\WINDOWS\system32\BackgroundMediaPolicy.dll
2016-09-30 09:07:23 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2016-09-30 09:07:23 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2016-09-30 09:07:23 ----A---- C:\WINDOWS\system32\setupugc.exe
2016-09-30 09:07:23 ----A---- C:\WINDOWS\system32\OneBackupHandler.dll
2016-09-30 09:07:23 ----A---- C:\WINDOWS\system32\Family.SyncEngine.dll
2016-09-30 09:07:22 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2016-09-30 09:07:22 ----A---- C:\WINDOWS\system32\Windows.Devices.Perception.dll
2016-09-30 09:07:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-09-30 09:07:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-09-30 09:07:21 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-09-30 09:07:21 ----A---- C:\WINDOWS\system32\fveprompt.exe
2016-09-30 09:07:21 ----A---- C:\WINDOWS\system32\baaupdate.exe
2016-09-30 09:07:21 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-09-30 09:07:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.PointOfService.dll
2016-09-30 09:07:20 ----A---- C:\WINDOWS\SYSWOW64\dsreg.dll
2016-09-30 09:07:20 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2016-09-30 09:07:20 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2016-09-30 09:07:20 ----A---- C:\WINDOWS\system32\easwrt.dll
2016-09-30 09:07:20 ----A---- C:\WINDOWS\system32\CryptoWinRT.dll
2016-09-30 09:07:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-09-30 09:07:19 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.dll
2016-09-30 09:07:19 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-09-30 09:07:19 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-09-30 09:07:19 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2016-09-30 09:07:18 ----A---- C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-09-30 09:07:18 ----A---- C:\WINDOWS\system32\bootux.dll
2016-09-30 09:07:18 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2016-09-30 09:07:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2016-09-30 09:07:17 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-09-30 09:07:17 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-09-30 09:07:17 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2016-09-30 09:07:17 ----A---- C:\WINDOWS\system32\dsreg.dll
2016-09-30 09:07:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SmartCards.dll
2016-09-30 09:07:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.dll
2016-09-30 09:07:16 ----A---- C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2016-09-30 09:07:16 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2016-09-30 09:07:16 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-09-30 09:07:15 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2016-09-30 09:07:15 ----A---- C:\WINDOWS\SYSWOW64\ngccredprov.dll
2016-09-30 09:07:15 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2016-09-30 09:07:15 ----A---- C:\WINDOWS\system32\mspaint.exe
2016-09-30 09:07:15 ----A---- C:\WINDOWS\system32\AccountsRt.dll
2016-09-30 09:07:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Ocr.dll
2016-09-30 09:07:14 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-09-30 09:07:14 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.dll
2016-09-30 09:07:14 ----A---- C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2016-09-30 09:07:14 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-09-30 09:07:14 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\system32\Family.Client.dll
2016-09-30 09:07:12 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.Ngc.dll
2016-09-30 09:07:12 ----A---- C:\WINDOWS\SYSWOW64\NaturalLanguage6.dll
2016-09-30 09:07:12 ----A---- C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2016-09-30 09:07:12 ----A---- C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2016-09-30 09:07:12 ----A---- C:\WINDOWS\system32\imapi2.dll
2016-09-30 09:07:12 ----A---- C:\WINDOWS\system32\Family.Authentication.dll
2016-09-30 09:07:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.UserDeviceAssociation.dll
2016-09-30 09:07:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Energy.dll
2016-09-30 09:07:11 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-09-30 09:07:11 ----A---- C:\WINDOWS\system32\smphost.dll
2016-09-30 09:07:11 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2016-09-30 09:07:11 ----A---- C:\WINDOWS\system32\appinfo.dll
2016-09-30 09:07:10 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-09-30 09:07:09 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-09-30 09:07:08 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-09-30 09:07:08 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-09-30 09:07:07 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-09-30 09:07:06 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-09-30 09:07:05 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-09-30 09:07:04 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-09-30 09:07:03 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2016-09-30 09:07:03 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-09-30 09:07:02 ----A---- C:\WINDOWS\SYSWOW64\wsp_sr.dll
2016-09-30 09:07:02 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-09-30 09:07:02 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-09-30 09:07:01 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2016-09-30 09:07:01 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-09-30 09:07:00 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-09-30 09:07:00 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-09-30 09:07:00 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-09-30 09:07:00 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-09-30 09:06:59 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2016-09-30 09:06:59 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2016-09-30 09:06:59 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2016-09-30 09:06:59 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-09-30 09:06:59 ----A---- C:\WINDOWS\system32\NetworkCollectionAgent.dll
2016-09-30 09:06:59 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-09-30 09:06:58 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2016-09-30 09:06:58 ----A---- C:\WINDOWS\SYSWOW64\NetworkCollectionAgent.dll
2016-09-30 09:06:57 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2016-09-30 09:06:57 ----A---- C:\WINDOWS\system32\winload.exe
2016-09-30 09:06:57 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2016-09-30 09:06:56 ----A---- C:\WINDOWS\SYSWOW64\ws2_32.dll
2016-09-30 09:06:56 ----A---- C:\WINDOWS\system32\hvix64.exe
2016-09-30 09:06:55 ----A---- C:\WINDOWS\system32\winresume.exe
2016-09-30 09:06:55 ----A---- C:\WINDOWS\system32\hvax64.exe
2016-09-30 09:06:54 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2016-09-30 09:06:54 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-09-30 09:06:53 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-09-30 09:06:53 ----A---- C:\WINDOWS\system32\provops.dll
2016-09-30 09:06:53 ----A---- C:\WINDOWS\system32\hvloader.exe
2016-09-30 09:06:52 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2016-09-30 09:06:52 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-09-30 09:06:52 ----A---- C:\WINDOWS\system32\FontProvider.dll
2016-09-30 09:06:51 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-09-30 09:06:51 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2016-09-30 09:06:51 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-09-30 09:06:51 ----A---- C:\WINDOWS\system32\biwinrt.dll
2016-09-30 09:06:50 ----A---- C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2016-09-30 09:06:50 ----A---- C:\WINDOWS\system32\mprddm.dll
2016-09-30 09:06:50 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2016-09-30 09:06:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2016-09-30 09:06:49 ----A---- C:\WINDOWS\system32\msdtctm.dll
2016-09-30 09:06:48 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2016-09-30 09:06:48 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-09-30 09:06:48 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2016-09-30 09:06:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.InkControls.dll
2016-09-30 09:06:47 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2016-09-30 09:06:47 ----A---- C:\WINDOWS\system32\wlancfg.dll
2016-09-30 09:06:47 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2016-09-30 09:06:47 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-09-30 09:06:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Phone.dll
2016-09-30 09:06:46 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2016-09-30 09:06:46 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2016-09-30 09:06:46 ----A---- C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2016-09-30 09:06:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2016-09-30 09:06:45 ----A---- C:\WINDOWS\SYSWOW64\pwrshplugin.dll
2016-09-30 09:06:45 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-09-30 09:06:45 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2016-09-30 09:06:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFiDirect.dll
2016-09-30 09:06:44 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2016-09-30 09:06:44 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-09-30 09:06:43 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-09-30 09:06:43 ----A---- C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2016-09-30 09:06:43 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-09-30 09:06:43 ----A---- C:\WINDOWS\system32\Geolocation.dll
2016-09-30 09:06:42 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2016-09-30 09:06:42 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2016-09-30 09:06:42 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2016-09-30 09:06:42 ----A---- C:\WINDOWS\SYSWOW64\dmenrollengine.dll
2016-09-30 09:06:42 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-09-30 09:06:42 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-09-30 09:06:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Picker.dll
2016-09-30 09:06:41 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2016-09-30 09:06:41 ----A---- C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
Run by Lenovo at 2016-10-10 07:25:44
Microsoft Windows 10 Pro
System drive C: has 353 GB (74%) free of 476 GB
Total RAM: 4007 MB (32% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:25:51, on 10.10.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0000)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe
C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
C:\Users\Lenovo\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
C:\Users\Lenovo\AppData\Roaming\Dashlane\Dashlane.exe
C:\Users\Lenovo\AppData\Roaming\Dashlane\DashlanePlugin.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Lenovo.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Dashlane BHO - {42D79B50-CC4A-4A8E-860F-BE674AF053A2} - C:\Users\Lenovo\AppData\Roaming\Dashlane\ie\Dashlanei.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Advanced SystemCare Surfing Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: Dashlane Toolbar - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\Users\Lenovo\AppData\Roaming\Dashlane\ie\KWIEBar.dll
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Lenovo\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Advanced SystemCare 9] "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto
O4 - HKCU\..\Run: [Dashlane] "C:\Users\Lenovo\AppData\Roaming\Dashlane\Dashlane.exe" autoLaunchAtStartup
O4 - HKCU\..\Run: [DashlanePlugin] "C:\Users\Lenovo\AppData\Roaming\Dashlane\DashlanePlugin.exe" ws
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Advanced SystemCare Service 9 (AdvancedSystemCareService9) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @oem14.inf,%ibm.svcDesc0%;Lenovo PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe (file missing)
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: @oem14.inf,%Lenovo.svcDesc1%;Lenovo Platform Service (LPlatSvc) - Unknown owner - C:\WINDOWS\system32\LPlatSvc.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10748 bytes
======Listing Processes======
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe"
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ad893680-65ef-4443-b4bf-afeace2c9188 -SystemEventPortName:HostProcess-ffc0345e-d181-41a0-8a2e-7a46e89c40e4 -IoCancelEventPortName:HostProcess-9a886f4d-afde-442e-b66b-7e0984cdf34b -NonStateChangingEventPortName:HostProcess-2fdb76a4-b9d9-4c6b-8ebb-1accdfab9dd8 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ee153fd3-9917-4f6c-b677-0780600d4a35 -DeviceGroupId:
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\LPlatSvc.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
sihost.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe" /STARTUP
"C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe" /Task
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
"C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Users\Lenovo\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto
"C:\Users\Lenovo\AppData\Roaming\Dashlane\Dashlane.exe" autoLaunchAtStartup
"C:\Users\Lenovo\AppData\Roaming\Dashlane\DashlanePlugin.exe" ws
"C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE" /tsr
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"fontdrvhost.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
"C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE"
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" /SkipUac
"C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe" driverbooster
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /systemstart
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe" /starttips
"C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe" /RunCurUs
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=-m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=53.0.2785.116 --handshake-handle=0x24c
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="14612.0.685062244\480981550" --mojo-application-channel-token=147B3E61BC5A15526005E2827BC6AC22 --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ClientSideDetectionModel/Model0/DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/StandardR7/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Control/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --supports-dual-gpus=false --gpu-driver-bug-workarounds=5,14,18,31,48,56 --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=9.17.10.4229 --gpu-driver-date=5-27-2015 --mojo-platform-channel-handle=1500 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Control/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --primordial-pipe-token=94D2A709BB6AD073F80C928045A7F5AF --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=AAD3559D2FBBBE0DDF2DFBDEFF36265B --mojo-application-channel-token=94D2A709BB6AD073F80C928045A7F5AF --channel="14612.3.1737454691\1391820585" --mojo-platform-channel-handle=2768 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Control/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --primordial-pipe-token=062CB643209B32AC6DF8D0CFB8640A39 --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=5960B041CF978480D7527E92F9237B53 --mojo-application-channel-token=062CB643209B32AC6DF8D0CFB8640A39 --channel="14612.4.1298793274\422149443" --mojo-platform-channel-handle=2872 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Control/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/*StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --primordial-pipe-token=AF991B99DE7E31F800B80EF89A1D1992 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=70C9F9821038E3C607267D7970DE21FC --mojo-application-channel-token=AF991B99DE7E31F800B80EF89A1D1992 --channel="14612.5.1015924555\716213045" --mojo-platform-channel-handle=5784 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Control/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/*StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --primordial-pipe-token=19B4F34D5A2C8BA0854FC6614EB79D56 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=99730A09C46EF02A1B44A222EB243FB9 --mojo-application-channel-token=19B4F34D5A2C8BA0854FC6614EB79D56 --channel="14612.6.50301317\78405713" --mojo-platform-channel-handle=5604 /prefetch:1
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\WINDOWS\system32\LPlatSvc.exe" -EM
C:\WINDOWS\splwow64.exe 8192
taskhostw.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/*EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/*GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/*PasswordSmartBubble/3-Times/*PluginPowerSaverTiny/Control/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/*StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/*TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --primordial-pipe-token=8E4CCC5E08BB8F3476E32C8177853CE3 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=3C4BD2137FA9D1E0EA45A8E0DA79D3A0 --mojo-application-channel-token=8E4CCC5E08BB8F3476E32C8177853CE3 --channel="14612.88.1942825468\756018495" --mojo-platform-channel-handle=7236 /prefetch:1
"C:\WINDOWS\system32\LPlatSvc.exe" -EM
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\WINDOWS\SysWOW64\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1431082094-2584509363-2256584928-100197_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1431082094-2584509363-2256584928-100197 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=BlockSmallPluginContent<PluginPowerSaverTiny,DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/*EnableWin32kLockDownMimeTypes/PPAPILockdown_Control/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/*GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/*PasswordSmartBubble/3-Times/*PluginPowerSaverTiny/Control/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Control/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/*StrictSecureCookies/Default/SyncHttpContentCompression/Enabled/*TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_48/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/ --primordial-pipe-token=A7831996E63490B1C2FA4264BA2D04CA --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=BBA66DED9EB028765DEDCD671BA5E578 --mojo-application-channel-token=A7831996E63490B1C2FA4264BA2D04CA --channel="14612.97.1039067076\1365932816" --mojo-platform-channel-handle=6852 /prefetch:1
C:\Windows\System32\smartscreen.exe -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe98_ Global\UsGthrCtrlFltPipeMssGthrPipe98 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 680 684 692 8192 688
C:\WINDOWS\system32\AUDIODG.EXE 0x58c
"C:\Users\Lenovo\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\ASC9_SkipUac_Lenovo.job - C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe /SkipUac
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\SlimDrivers Startup.job - C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe -boot
C:\WINDOWS\tasks\Uninstaller_SkipUac_Lenovo.job - C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe /UninstallExplorer
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-11-12 2472224]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{42D79B50-CC4A-4A8E-860F-BE674AF053A2}]
Dashlane BHO - C:\Users\Lenovo\AppData\Roaming\Dashlane\ie\Dashlanei.dll [2016-09-22 958848]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Surfing Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2015-07-09 682784]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440}
{669695BC-A811-4A9D-8CDF-BA8C795F261C} - Dashlane Toolbar - C:\Users\Lenovo\AppData\Roaming\Dashlane\ie\KWIEBar.dll [2016-09-22 136064]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2015-06-01 183216]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2015-06-01 411056]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2015-06-01 453552]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-09-24 36352]
"SynLenovoHelper"=C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe [2016-08-26 155240]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Lenovo\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-09-29 633024]
"Advanced SystemCare 9"=C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [2016-07-27 2023712]
"Dashlane"=C:\Users\Lenovo\AppData\Roaming\Dashlane\Dashlane.exe [2016-09-22 476544]
"DashlanePlugin"=C:\Users\Lenovo\AppData\Roaming\Dashlane\DashlanePlugin.exe [2016-09-22 535424]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"IObit Malware Fighter"=C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [2016-08-19 5989664]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-09-14 9107616]
C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2015-06-01 451584]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-10-10 07:25:45 ----D---- C:\Program Files\trend micro
2016-10-10 07:25:44 ----D---- C:\rsit
2016-10-05 09:16:11 ----A---- C:\WINDOWS\system32\drivers\cysmb.sys
2016-10-04 08:57:16 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-10-03 07:14:11 ----A---- C:\WINDOWS\system32\drivers\aswHdsKe.sys
2016-09-30 09:09:32 ----A---- C:\WINDOWS\system32\mssrch.dll
2016-09-30 09:09:31 ----A---- C:\WINDOWS\system32\wmp.dll
2016-09-30 09:09:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-09-30 09:09:29 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-09-30 09:09:28 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-09-30 09:09:27 ----A---- C:\WINDOWS\system32\tquery.dll
2016-09-30 09:09:26 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-09-30 09:09:25 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2016-09-30 09:09:25 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-09-30 09:09:24 ----A---- C:\WINDOWS\SYSWOW64\LicenseManagerApi.dll
2016-09-30 09:09:24 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2016-09-30 09:09:24 ----A---- C:\WINDOWS\system32\nettrace.dll
2016-09-30 09:09:24 ----A---- C:\WINDOWS\system32\daxexec.dll
2016-09-30 09:09:23 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-09-30 09:09:23 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-09-30 09:09:23 ----A---- C:\WINDOWS\system32\usbmon.dll
2016-09-30 09:09:22 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2016-09-30 09:09:22 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2016-09-30 09:09:22 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2016-09-30 09:09:21 ----A---- C:\WINDOWS\SYSWOW64\TempSignedLicenseExchangeTask.dll
2016-09-30 09:09:21 ----A---- C:\WINDOWS\system32\wc_storage.dll
2016-09-30 09:09:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.CredDialogController.dll
2016-09-30 09:09:20 ----A---- C:\WINDOWS\system32\samsrv.dll
2016-09-30 09:09:20 ----A---- C:\WINDOWS\system32\ci.dll
2016-09-30 09:09:19 ----A---- C:\WINDOWS\SYSWOW64\WSManHTTPConfig.exe
2016-09-30 09:09:19 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2016-09-30 09:09:19 ----A---- C:\WINDOWS\system32\mprdim.dll
2016-09-30 09:09:19 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2016-09-30 09:09:18 ----A---- C:\WINDOWS\SYSWOW64\mfksproxy.dll
2016-09-30 09:09:18 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-09-30 09:09:18 ----A---- C:\WINDOWS\system32\hal.dll
2016-09-30 09:09:18 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2016-09-30 09:09:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2016-09-30 09:09:17 ----A---- C:\WINDOWS\system32\wkssvc.dll
2016-09-30 09:09:17 ----A---- C:\WINDOWS\system32\SessEnv.dll
2016-09-30 09:09:17 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2016-09-30 09:09:17 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-09-30 09:09:17 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-09-30 09:09:16 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2016-09-30 09:09:16 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2016-09-30 09:09:16 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-09-30 09:09:16 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-09-30 09:09:16 ----A---- C:\WINDOWS\system32\webio.dll
2016-09-30 09:09:15 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2016-09-30 09:09:15 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2016-09-30 09:09:15 ----A---- C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-09-30 09:09:15 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2016-09-30 09:09:15 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2016-09-30 09:09:15 ----A---- C:\WINDOWS\system32\drivers\wcifs.sys
2016-09-30 09:09:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2016-09-30 09:09:14 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2016-09-30 09:09:14 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-09-30 09:09:14 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-09-30 09:09:13 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-09-30 09:09:13 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-09-30 09:09:13 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll
2016-09-30 09:09:13 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-09-30 09:09:13 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-09-30 09:09:13 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-09-30 09:09:12 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2016-09-30 09:09:11 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2016-09-30 09:09:11 ----A---- C:\WINDOWS\system32\securekernel.exe
2016-09-30 09:09:11 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-09-30 09:09:11 ----A---- C:\WINDOWS\system32\profsvc.dll
2016-09-30 09:09:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2016-09-30 09:09:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2016-09-30 09:09:10 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-09-30 09:09:10 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2016-09-30 09:09:10 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2016-09-30 09:09:10 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-09-30 09:09:10 ----A---- C:\WINDOWS\system32\offlinesam.dll
2016-09-30 09:09:09 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-09-30 09:09:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.FaceAnalysis.dll
2016-09-30 09:09:06 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-09-30 09:09:06 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2016-09-30 09:09:05 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2016-09-30 09:09:05 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-09-30 09:09:05 ----A---- C:\WINDOWS\system32\efswrt.dll
2016-09-30 09:09:05 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2016-09-30 09:09:04 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2016-09-30 09:09:04 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2016-09-30 09:09:04 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-09-30 09:09:04 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-09-30 09:09:04 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-09-30 09:09:04 ----A---- C:\WINDOWS\system32\lsm.dll
2016-09-30 09:09:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2016-09-30 09:09:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.LowLevel.dll
2016-09-30 09:09:03 ----A---- C:\WINDOWS\system32\mssprxy.dll
2016-09-30 09:09:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2016-09-30 09:09:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.3D.dll
2016-09-30 09:09:02 ----A---- C:\WINDOWS\system32\Windows.Perception.Stub.dll
2016-09-30 09:09:02 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-09-30 09:09:02 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2016-09-30 09:09:02 ----A---- C:\WINDOWS\system32\FrameServer.dll
2016-09-30 09:09:01 ----A---- C:\WINDOWS\system32\tspubwmi.dll
2016-09-30 09:09:01 ----A---- C:\WINDOWS\system32\puiobj.dll
2016-09-30 09:09:01 ----A---- C:\WINDOWS\system32\netshell.dll
2016-09-30 09:09:01 ----A---- C:\WINDOWS\system32\CastLaunch.dll
2016-09-30 09:09:00 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-09-30 09:09:00 ----A---- C:\WINDOWS\SYSWOW64\imapi2.dll
2016-09-30 09:09:00 ----A---- C:\WINDOWS\SYSWOW64\credprovslegacy.dll
2016-09-30 09:09:00 ----A---- C:\WINDOWS\system32\Windows.Devices.Printers.dll
2016-09-30 09:09:00 ----A---- C:\WINDOWS\system32\NetworkUXBroker.dll
2016-09-30 09:09:00 ----A---- C:\WINDOWS\system32\fhcfg.dll
2016-09-30 09:09:00 ----A---- C:\WINDOWS\system32\credprovslegacy.dll
2016-09-30 09:08:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-09-30 09:08:59 ----A---- C:\WINDOWS\SYSWOW64\findnetprinters.dll
2016-09-30 09:08:59 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2016-09-30 09:08:58 ----A---- C:\WINDOWS\system32\aadtb.dll
2016-09-30 09:08:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.UXRes.dll
2016-09-30 09:08:57 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2016-09-30 09:08:57 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2016-09-30 09:08:55 ----A---- C:\WINDOWS\system32\sppsvc.exe
2016-09-30 09:08:53 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2016-09-30 09:08:52 ----A---- C:\WINDOWS\system32\sppobjs.dll
2016-09-30 09:08:51 ----A---- C:\WINDOWS\system32\ClipUp.exe
2016-09-30 09:08:50 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-09-30 09:08:49 ----A---- C:\WINDOWS\system32\cdp.dll
2016-09-30 09:08:48 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-09-30 09:08:47 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-09-30 09:08:47 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-09-30 09:08:47 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2016-09-30 09:08:45 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2016-09-30 09:08:45 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2016-09-30 09:08:44 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-09-30 09:08:44 ----A---- C:\WINDOWS\system32\wsp_sr.dll
2016-09-30 09:08:44 ----A---- C:\WINDOWS\system32\wsp_health.dll
2016-09-30 09:08:44 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-09-30 09:08:43 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-09-30 09:08:43 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2016-09-30 09:08:43 ----A---- C:\WINDOWS\system32\sppwinob.dll
2016-09-30 09:08:43 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2016-09-30 09:08:42 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-09-30 09:08:42 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-09-30 09:08:42 ----A---- C:\WINDOWS\system32\tdh.dll
2016-09-30 09:08:41 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-09-30 09:08:40 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-09-30 09:08:40 ----A---- C:\WINDOWS\system32\gpsvc.dll
2016-09-30 09:08:40 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-09-30 09:08:39 ----A---- C:\WINDOWS\system32\SensorService.dll
2016-09-30 09:08:39 ----A---- C:\WINDOWS\system32\cdpsvc.dll
2016-09-30 09:08:39 ----A---- C:\WINDOWS\system32\bdesvc.dll
2016-09-30 09:08:39 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-09-30 09:08:38 ----A---- C:\WINDOWS\system32\devinv.dll
2016-09-30 09:08:38 ----A---- C:\WINDOWS\system32\cdpusersvc.dll
2016-09-30 09:08:37 ----A---- C:\WINDOWS\system32\NotificationController.dll
2016-09-30 09:08:37 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-09-30 09:08:36 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-09-30 09:08:36 ----A---- C:\WINDOWS\system32\SpaceControl.dll
2016-09-30 09:08:36 ----A---- C:\WINDOWS\system32\SpaceAgent.exe
2016-09-30 09:08:36 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-09-30 09:08:36 ----A---- C:\WINDOWS\system32\localspl.dll
2016-09-30 09:08:35 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2016-09-30 09:08:35 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-09-30 09:08:35 ----A---- C:\WINDOWS\system32\pwcreator.exe
2016-09-30 09:08:35 ----A---- C:\WINDOWS\system32\manage-bde.exe
2016-09-30 09:08:34 ----A---- C:\WINDOWS\system32\sppcext.dll
2016-09-30 09:08:34 ----A---- C:\WINDOWS\system32\pdh.dll
2016-09-30 09:08:34 ----A---- C:\WINDOWS\system32\discan.dll
2016-09-30 09:08:34 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2016-09-30 09:08:33 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2016-09-30 09:08:33 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-09-30 09:08:33 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-09-30 09:08:33 ----A---- C:\WINDOWS\system32\ReAgent.dll
2016-09-30 09:08:33 ----A---- C:\WINDOWS\system32\icsvc.dll
2016-09-30 09:08:33 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-09-30 09:08:32 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-09-30 09:08:32 ----A---- C:\WINDOWS\system32\systemreset.exe
2016-09-30 09:08:32 ----A---- C:\WINDOWS\system32\ShareHost.dll
2016-09-30 09:08:32 ----A---- C:\WINDOWS\system32\NfcRadioMedia.dll
2016-09-30 09:08:32 ----A---- C:\WINDOWS\system32\AppContracts.dll
2016-09-30 09:08:32 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-09-30 09:08:31 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2016-09-30 09:08:31 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2016-09-30 09:08:31 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-09-30 09:08:31 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-09-30 09:08:31 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-30 09:08:30 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2016-09-30 09:08:30 ----A---- C:\WINDOWS\system32\Windows.Gaming.Input.dll
2016-09-30 09:08:30 ----A---- C:\WINDOWS\system32\Sens.dll
2016-09-30 09:08:30 ----A---- C:\WINDOWS\system32\fveui.dll
2016-09-30 09:08:30 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2016-09-30 09:08:29 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2016-09-30 09:08:29 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-09-30 09:08:29 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2016-09-30 09:08:29 ----A---- C:\WINDOWS\splwow64.exe
2016-09-30 09:08:28 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-09-30 09:08:28 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2016-09-30 09:08:28 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-09-30 09:08:28 ----A---- C:\WINDOWS\system32\bdeui.dll
2016-09-30 09:08:27 ----A---- C:\WINDOWS\SYSWOW64\wlancfg.dll
2016-09-30 09:08:27 ----A---- C:\WINDOWS\system32\fvenotify.exe
2016-09-30 09:08:26 ----A---- C:\WINDOWS\SYSWOW64\offlinesam.dll
2016-09-30 09:08:26 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2016-09-30 09:08:26 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-09-30 09:08:26 ----A---- C:\WINDOWS\system32\resutils.dll
2016-09-30 09:08:25 ----A---- C:\WINDOWS\SYSWOW64\CryptoWinRT.dll
2016-09-30 09:08:25 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2016-09-30 09:08:25 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2016-09-30 09:08:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2016-09-30 09:08:24 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-09-30 09:08:23 ----A---- C:\WINDOWS\SYSWOW64\sppcext.dll
2016-09-30 09:08:23 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2016-09-30 09:08:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2016-09-30 09:08:22 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-09-30 09:08:22 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-09-30 09:08:22 ----A---- C:\WINDOWS\system32\credprovhost.dll
2016-09-30 09:08:22 ----A---- C:\WINDOWS\system32\clusapi.dll
2016-09-30 09:08:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-09-30 09:08:21 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2016-09-30 09:08:21 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-09-30 09:08:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-09-30 09:08:20 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2016-09-30 09:08:20 ----A---- C:\WINDOWS\SYSWOW64\BcastDVRHelper.dll
2016-09-30 09:08:20 ----A---- C:\WINDOWS\system32\Windows.Media.Ocr.dll
2016-09-30 09:08:20 ----A---- C:\WINDOWS\system32\Windows.Devices.Radios.dll
2016-09-30 09:08:20 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2016-09-30 09:08:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Perception.Stub.dll
2016-09-30 09:08:19 ----A---- C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2016-09-30 09:08:19 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2016-09-30 09:08:19 ----A---- C:\WINDOWS\system32\PrintWSDAHost.dll
2016-09-30 09:08:18 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2016-09-30 09:08:18 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-09-30 09:08:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Diagnostics.dll
2016-09-30 09:08:17 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2016-09-30 09:08:17 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-09-30 09:08:16 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2016-09-30 09:08:16 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2016-09-30 09:08:16 ----A---- C:\WINDOWS\system32\ffbroker.dll
2016-09-30 09:08:15 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2016-09-30 09:08:06 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-09-30 09:08:04 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-09-30 09:08:02 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-09-30 09:08:00 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-09-30 09:07:56 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-09-30 09:07:55 ----A---- C:\WINDOWS\system32\twinui.dll
2016-09-30 09:07:51 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2016-09-30 09:07:50 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-09-30 09:07:49 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-09-30 09:07:48 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-09-30 09:07:48 ----A---- C:\WINDOWS\system32\spaceman.exe
2016-09-30 09:07:48 ----A---- C:\WINDOWS\system32\mispace.dll
2016-09-30 09:07:48 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-09-30 09:07:47 ----A---- C:\WINDOWS\SYSWOW64\MSAC3ENC.DLL
2016-09-30 09:07:47 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-09-30 09:07:46 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2016-09-30 09:07:46 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2016-09-30 09:07:46 ----A---- C:\WINDOWS\system32\storagewmi.dll
2016-09-30 09:07:45 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-09-30 09:07:45 ----A---- C:\WINDOWS\system32\wininet.dll
2016-09-30 09:07:45 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-09-30 09:07:45 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-09-30 09:07:44 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-09-30 09:07:44 ----A---- C:\WINDOWS\system32\dsregcmd.exe
2016-09-30 09:07:44 ----A---- C:\WINDOWS\explorer.exe
2016-09-30 09:07:43 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2016-09-30 09:07:43 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-09-30 09:07:42 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-09-30 09:07:42 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-09-30 09:07:41 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-09-30 09:07:41 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-09-30 09:07:41 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-09-30 09:07:40 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-09-30 09:07:40 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-09-30 09:07:40 ----A---- C:\WINDOWS\system32\qmgr.dll
2016-09-30 09:07:39 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-09-30 09:07:39 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-09-30 09:07:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-09-30 09:07:38 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2016-09-30 09:07:38 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-09-30 09:07:38 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-09-30 09:07:37 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2016-09-30 09:07:37 ----A---- C:\WINDOWS\system32\rascustom.dll
2016-09-30 09:07:37 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2016-09-30 09:07:36 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-09-30 09:07:36 ----A---- C:\WINDOWS\system32\mfksproxy.dll
2016-09-30 09:07:36 ----A---- C:\WINDOWS\system32\fveapibase.dll
2016-09-30 09:07:36 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2016-09-30 09:07:36 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-09-30 09:07:36 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-09-30 09:07:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-09-30 09:07:35 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-09-30 09:07:35 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-09-30 09:07:35 ----A---- C:\WINDOWS\system32\uReFS.dll
2016-09-30 09:07:35 ----A---- C:\WINDOWS\system32\dnsapi.dll
2016-09-30 09:07:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2016-09-30 09:07:34 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2016-09-30 09:07:34 ----A---- C:\WINDOWS\system32\WSManHTTPConfig.exe
2016-09-30 09:07:34 ----A---- C:\WINDOWS\system32\wintrust.dll
2016-09-30 09:07:34 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2016-09-30 09:07:34 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-09-30 09:07:34 ----A---- C:\WINDOWS\system32\RMapi.dll
2016-09-30 09:07:33 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-09-30 09:07:33 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-09-30 09:07:33 ----A---- C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-09-30 09:07:33 ----A---- C:\WINDOWS\system32\mprapi.dll
2016-09-30 09:07:33 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-09-30 09:07:33 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2016-09-30 09:07:32 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-09-30 09:07:32 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-09-30 09:07:32 ----A---- C:\WINDOWS\system32\LsaIso.exe
2016-09-30 09:07:32 ----A---- C:\WINDOWS\system32\drivers\cmimcext.sys
2016-09-30 09:07:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2016-09-30 09:07:31 ----A---- C:\WINDOWS\SYSWOW64\biwinrt.dll
2016-09-30 09:07:31 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2016-09-30 09:07:31 ----A---- C:\WINDOWS\system32\drivers\http.sys
2016-09-30 09:07:30 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-09-30 09:07:30 ----A---- C:\WINDOWS\SYSWOW64\tsmf.dll
2016-09-30 09:07:30 ----A---- C:\WINDOWS\system32\wpnapps.dll
2016-09-30 09:07:30 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-09-30 09:07:30 ----A---- C:\WINDOWS\system32\apprepsync.dll
2016-09-30 09:07:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-09-30 09:07:29 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-09-30 09:07:29 ----A---- C:\WINDOWS\system32\nltest.exe
2016-09-30 09:07:28 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-09-30 09:07:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2016-09-30 09:07:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2016-09-30 09:07:28 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2016-09-30 09:07:28 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-09-30 09:07:27 ----A---- C:\WINDOWS\system32\ieproxy.dll
2016-09-30 09:07:27 ----A---- C:\WINDOWS\system32\devenum.dll
2016-09-30 09:07:27 ----A---- C:\WINDOWS\system32\DataExchange.dll
2016-09-30 09:07:27 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2016-09-30 09:07:26 ----A---- C:\WINDOWS\system32\usermgr.dll
2016-09-30 09:07:26 ----A---- C:\WINDOWS\system32\RelPost.exe
2016-09-30 09:07:26 ----A---- C:\WINDOWS\system32\rasmans.dll
2016-09-30 09:07:26 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-09-30 09:07:25 ----A---- C:\WINDOWS\SYSWOW64\DataExchange.dll
2016-09-30 09:07:25 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-09-30 09:07:25 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2016-09-30 09:07:25 ----A---- C:\WINDOWS\system32\apprepapi.dll
2016-09-30 09:07:24 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2016-09-30 09:07:24 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-09-30 09:07:24 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2016-09-30 09:07:24 ----A---- C:\WINDOWS\system32\drivers\winhvr.sys
2016-09-30 09:07:24 ----A---- C:\WINDOWS\system32\BackgroundMediaPolicy.dll
2016-09-30 09:07:23 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2016-09-30 09:07:23 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2016-09-30 09:07:23 ----A---- C:\WINDOWS\system32\setupugc.exe
2016-09-30 09:07:23 ----A---- C:\WINDOWS\system32\OneBackupHandler.dll
2016-09-30 09:07:23 ----A---- C:\WINDOWS\system32\Family.SyncEngine.dll
2016-09-30 09:07:22 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2016-09-30 09:07:22 ----A---- C:\WINDOWS\system32\Windows.Devices.Perception.dll
2016-09-30 09:07:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-09-30 09:07:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-09-30 09:07:21 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-09-30 09:07:21 ----A---- C:\WINDOWS\system32\fveprompt.exe
2016-09-30 09:07:21 ----A---- C:\WINDOWS\system32\baaupdate.exe
2016-09-30 09:07:21 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-09-30 09:07:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.PointOfService.dll
2016-09-30 09:07:20 ----A---- C:\WINDOWS\SYSWOW64\dsreg.dll
2016-09-30 09:07:20 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2016-09-30 09:07:20 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2016-09-30 09:07:20 ----A---- C:\WINDOWS\system32\easwrt.dll
2016-09-30 09:07:20 ----A---- C:\WINDOWS\system32\CryptoWinRT.dll
2016-09-30 09:07:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-09-30 09:07:19 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.dll
2016-09-30 09:07:19 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-09-30 09:07:19 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-09-30 09:07:19 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2016-09-30 09:07:18 ----A---- C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-09-30 09:07:18 ----A---- C:\WINDOWS\system32\bootux.dll
2016-09-30 09:07:18 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2016-09-30 09:07:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2016-09-30 09:07:17 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-09-30 09:07:17 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-09-30 09:07:17 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2016-09-30 09:07:17 ----A---- C:\WINDOWS\system32\dsreg.dll
2016-09-30 09:07:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SmartCards.dll
2016-09-30 09:07:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.dll
2016-09-30 09:07:16 ----A---- C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2016-09-30 09:07:16 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2016-09-30 09:07:16 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-09-30 09:07:15 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2016-09-30 09:07:15 ----A---- C:\WINDOWS\SYSWOW64\ngccredprov.dll
2016-09-30 09:07:15 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2016-09-30 09:07:15 ----A---- C:\WINDOWS\system32\mspaint.exe
2016-09-30 09:07:15 ----A---- C:\WINDOWS\system32\AccountsRt.dll
2016-09-30 09:07:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Ocr.dll
2016-09-30 09:07:14 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-09-30 09:07:14 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.dll
2016-09-30 09:07:14 ----A---- C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2016-09-30 09:07:14 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-09-30 09:07:14 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2016-09-30 09:07:13 ----A---- C:\WINDOWS\system32\Family.Client.dll
2016-09-30 09:07:12 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.Ngc.dll
2016-09-30 09:07:12 ----A---- C:\WINDOWS\SYSWOW64\NaturalLanguage6.dll
2016-09-30 09:07:12 ----A---- C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2016-09-30 09:07:12 ----A---- C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2016-09-30 09:07:12 ----A---- C:\WINDOWS\system32\imapi2.dll
2016-09-30 09:07:12 ----A---- C:\WINDOWS\system32\Family.Authentication.dll
2016-09-30 09:07:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.UserDeviceAssociation.dll
2016-09-30 09:07:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Energy.dll
2016-09-30 09:07:11 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-09-30 09:07:11 ----A---- C:\WINDOWS\system32\smphost.dll
2016-09-30 09:07:11 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2016-09-30 09:07:11 ----A---- C:\WINDOWS\system32\appinfo.dll
2016-09-30 09:07:10 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-09-30 09:07:09 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-09-30 09:07:08 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-09-30 09:07:08 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-09-30 09:07:07 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-09-30 09:07:06 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-09-30 09:07:05 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-09-30 09:07:04 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-09-30 09:07:03 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2016-09-30 09:07:03 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-09-30 09:07:02 ----A---- C:\WINDOWS\SYSWOW64\wsp_sr.dll
2016-09-30 09:07:02 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-09-30 09:07:02 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-09-30 09:07:01 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2016-09-30 09:07:01 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-09-30 09:07:00 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-09-30 09:07:00 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-09-30 09:07:00 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-09-30 09:07:00 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-09-30 09:06:59 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2016-09-30 09:06:59 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2016-09-30 09:06:59 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2016-09-30 09:06:59 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-09-30 09:06:59 ----A---- C:\WINDOWS\system32\NetworkCollectionAgent.dll
2016-09-30 09:06:59 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-09-30 09:06:58 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2016-09-30 09:06:58 ----A---- C:\WINDOWS\SYSWOW64\NetworkCollectionAgent.dll
2016-09-30 09:06:57 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2016-09-30 09:06:57 ----A---- C:\WINDOWS\system32\winload.exe
2016-09-30 09:06:57 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2016-09-30 09:06:56 ----A---- C:\WINDOWS\SYSWOW64\ws2_32.dll
2016-09-30 09:06:56 ----A---- C:\WINDOWS\system32\hvix64.exe
2016-09-30 09:06:55 ----A---- C:\WINDOWS\system32\winresume.exe
2016-09-30 09:06:55 ----A---- C:\WINDOWS\system32\hvax64.exe
2016-09-30 09:06:54 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2016-09-30 09:06:54 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-09-30 09:06:53 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-09-30 09:06:53 ----A---- C:\WINDOWS\system32\provops.dll
2016-09-30 09:06:53 ----A---- C:\WINDOWS\system32\hvloader.exe
2016-09-30 09:06:52 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2016-09-30 09:06:52 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-09-30 09:06:52 ----A---- C:\WINDOWS\system32\FontProvider.dll
2016-09-30 09:06:51 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-09-30 09:06:51 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2016-09-30 09:06:51 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-09-30 09:06:51 ----A---- C:\WINDOWS\system32\biwinrt.dll
2016-09-30 09:06:50 ----A---- C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2016-09-30 09:06:50 ----A---- C:\WINDOWS\system32\mprddm.dll
2016-09-30 09:06:50 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2016-09-30 09:06:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2016-09-30 09:06:49 ----A---- C:\WINDOWS\system32\msdtctm.dll
2016-09-30 09:06:48 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2016-09-30 09:06:48 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-09-30 09:06:48 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2016-09-30 09:06:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.InkControls.dll
2016-09-30 09:06:47 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2016-09-30 09:06:47 ----A---- C:\WINDOWS\system32\wlancfg.dll
2016-09-30 09:06:47 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2016-09-30 09:06:47 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-09-30 09:06:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Phone.dll
2016-09-30 09:06:46 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2016-09-30 09:06:46 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2016-09-30 09:06:46 ----A---- C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2016-09-30 09:06:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2016-09-30 09:06:45 ----A---- C:\WINDOWS\SYSWOW64\pwrshplugin.dll
2016-09-30 09:06:45 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-09-30 09:06:45 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2016-09-30 09:06:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFiDirect.dll
2016-09-30 09:06:44 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2016-09-30 09:06:44 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-09-30 09:06:43 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-09-30 09:06:43 ----A---- C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2016-09-30 09:06:43 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-09-30 09:06:43 ----A---- C:\WINDOWS\system32\Geolocation.dll
2016-09-30 09:06:42 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2016-09-30 09:06:42 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2016-09-30 09:06:42 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2016-09-30 09:06:42 ----A---- C:\WINDOWS\SYSWOW64\dmenrollengine.dll
2016-09-30 09:06:42 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-09-30 09:06:42 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-09-30 09:06:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Picker.dll
2016-09-30 09:06:41 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2016-09-30 09:06:41 ----A---- C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll