VIRY.CZ

Dobry den,prosim Vas pekne o pomoc.Notebook je neskutocne pomaly a mrzne.Od vcera je to nznesitelne uz.Dakujem pekne.

Logfile of random's system information tool 1.13 (written by random/random)
Run by Martin at 2016-10-19 18:29:30
Microsoft Windows 10 Home
System drive C: has 661 GB (72%) free of 913 GB
Total RAM: 3979 MB (46% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:29:48, on 19.10.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Martin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_185.exe
C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_185.exe
C:\Program Files\trend micro\Martin_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com/?pc=LCJB
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Martin\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: CCSDK - Unknown owner - C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Conexant Audio Message Service (CxAudMsg) - Unknown owner - C:\WINDOWS\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @oem10.inf,%SERVICE_NAME%;Intel Bluetooth Service (ibtsiva) - Unknown owner - C:\WINDOWS\system32\ibtsiva (file missing)
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Lenovo EasyPlus Hotspot - Lenovo - C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe
O23 - Service: Lenovo System Agent Service - LENOVO INCORPORATED. - C:\Program Files\Lenovo\iMController\SystemAgentService.exe
O23 - Service: Lenovo WiFiHotspot Service (LenovoWiFiHotspotSvr) - Unknown owner - C:\Windows\System32\LenovoWiFiHotspotSvr.exe (file missing)
O23 - Service: LSCWinService - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: LUService - Lenovo(beijing) Limited - C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Lenovo PhoneCompanionPusher Service (PhoneCompanionPusher) - Lenovo - C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe
O23 - Service: Lenovo PhoneCompanionVap Service (PhoneCompanionVap) - Lenovo - C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\WINDOWS\system32\SAsrv.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9080 bytes

======Listing Processes======







C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-f6d5e500-8dcf-486c-af46-4f03f56226fe -SystemEventPortName:HostProcess-ef24c74c-e5d7-4705-8800-2a5b3dadb1a1 -IoCancelEventPortName:HostProcess-a28cd35e-8e43-4166-af69-4e4ef0330a67 -NonStateChangingEventPortName:HostProcess-bda2a8bb-5d65-4e08-b4f7-ffd983ece723 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:dc0e0104-a21f-48b8-80be-763c04da3d7b -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
dashost.exe {149d9d5f-80dd-4930-9c5d44ef1a7f7040}
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\ibtsiva
"C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe"
C:\WINDOWS\system32\CxAudMsg64.exe
"C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe"
"C:\Program Files\Lenovo\iMController\SystemAgentService.exe"
C:\Windows\System32\LenovoWiFiHotspotSvr.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
C:\WINDOWS\SysWoW64\SAsrv.exe
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe"
"C:\Program Files\CyberLink\Shared files\RichVideo64.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding

C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe"
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-56be9eb8-8aa6-4d87-b623-402fe84f9641 -SystemEventPortName:HostProcess-153f2278-28a4-4a62-ae3c-4e54e68fce79 -IoCancelEventPortName:HostProcess-8a020438-efb6-4fb3-b0d2-124b8d917fe1 -NonStateChangingEventPortName:HostProcess-f523d809-378c-4273-a24b-43d6ea922393 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:3b2e01a5-61e4-4374-892c-e3712bfb6495 -DeviceGroupId:WpdFsGroup
"C:\ProgramData\Lenovo App Services\Engine\LenovoAppServices.exe"
C:\windows\system32\rundll32.exe C:\windows\system32\pla.dll,PlaHost "LSC Memory" "0x544_0x11a4_0x753059340"

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"dwm.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
igfxHK.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE"
"C:\Windows\RTFTrack.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe"
"C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files\CONEXANT\ForteConfig\fmapp.exe"
"C:\Users\Martin\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"fontdrvhost.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel="2940.0.5685949\647882954" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 2940 "\\.\pipe\gecko-crash-server-pipe.2940" tab
C:\WINDOWS\system32\DllHost.exe /Processid:{49F6E667-6658-4BD1-9DE9-6AF87F9FAF85}
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel="2940.9.2128816772\1102599708" "C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_23_0_0_185.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 2940 "\\.\pipe\gecko-crash-server-pipe.2940" plugin
"C:\WINDOWS\System32\Macromed\Flash\FlashPlayerPlugin_23_0_0_185.exe" --proxy-stub-channel=Flash5300.688BFC90.1664 --host-broker-channel=Flash5300.688BFC90.20723 --host-pid=5300 --host-npapi-version=29 --plugin-path="C:\WINDOWS\System32\Macromed\Flash\NPSWF32_23_0_0_185.dll"
"C:\WINDOWS\System32\Macromed\Flash\FlashPlayerPlugin_23_0_0_185.exe" --channel=5520.00EFF538.430269506 --proxy-stub-channel=Flash5300.688BFC90.1664 --plugin-path="C:\WINDOWS\System32\Macromed\Flash\NPSWF32_23_0_0_185.dll" --host-npapi-version=29 --type=renderer
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe87_ Global\UsGthrCtrlFltPipeMssGthrPipe87 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 624 628 636 8192 632
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\AUDIODG.EXE 0x678
"C:\Users\Martin\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\system32\tasks\avast! Emergency Update - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\WINDOWS\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\WINDOWS\system32\tasks\Lenovo App Services - %PROGRAMDATA%\Lenovo App Services\Engine\LenovoAppServices.exe
C:\WINDOWS\system32\tasks\OFFICE2013ACT - C:\ProgramData\Office2013\OFFICEICON.vbs
C:\WINDOWS\system32\tasks\OneDrive Standalone Update Task - C:\Users\Martin\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
C:\WINDOWS\system32\tasks\PDVDServ Task - C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE
C:\WINDOWS\system32\tasks\SafeZone scheduled Autoupdate 1462870297 - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
C:\WINDOWS\system32\tasks\Synaptics TouchPad Enhancements - "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\system32\tasks\User_Feed_Synchronization-{8E0F0EEC-C00B-4AB1-A4D9-5041EA289363} - C:\WINDOWS\system32\msfeedssync.exe sync
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTask - %windir%\System32\XblGameSaveTask.exe standby
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTaskLogon - %windir%\System32\XblGameSaveTask.exe logon
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join - %SystemRoot%\System32\AutoWorkplace.exe join
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network - C:\windows\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCleanup
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan - %ProgramFiles%\Windows Defender\MpCmdRun.exe Scan -ScheduleJob
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdVerification
C:\WINDOWS\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe RebootDialog
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Refresh Settings - %systemroot%\system32\usoclient.exe RefreshSettings
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot - %systemroot%\system32\usoclient.exe ResumeUpdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display - C:\windows\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot - C:\windows\system32\MusNotification.exe ReadyToReboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\WINDOWS\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\WINDOWS\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\WINDOWS\system32\tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask - %windir%\system32\speech_onecore\common\SpeechModelDownload.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\WINDOWS\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemovalTools\MRT_HB - C:\windows\system32\MRT.exe /EHB /Q
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\WINDOWS\system32\tasks\Microsoft\Windows\PLA\LSC Memory - C:\windows\system32\rundll32.exe C:\windows\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)"
C:\WINDOWS\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\WINDOWS\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload - %windir%\system32\dmclient.exe utcwnf
C:\WINDOWS\system32\tasks\Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask - %windir%\system32\MDMAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\WINDOWS\system32\tasks\Microsoft\Windows\Device Information\Device - %windir%\system32\devicecensus.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\WINDOWS\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\WINDOWS\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\WINDOWS\system32\tasks\Lenovo\Dependency Package Auto Update - C:\Program Files\Lenovo\iMController\AutoUpdate.exe
C:\WINDOWS\system32\tasks\Lenovo\Lenovo Customer Feedback Program 64 35 - "%ProgramFiles(x86)%\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe"
C:\WINDOWS\system32\tasks\Lenovo\Lenovo Solution Center Launcher - %programfiles%\lenovo\lenovo solution center\App\LSCService.exe Actions UpdateStatus
C:\WINDOWS\system32\tasks\Lenovo\LSC\Lenovo Solution Center Notifications - %programfiles%\Lenovo\Lenovo Solution Center\LSCNotify.exe /show
C:\WINDOWS\system32\tasks\Lenovo\LSC\LSCHardwareScan - "C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe" -diag HWScan
C:\WINDOWS\system32\tasks\Lenovo\LSC\LSCHardwareScanPostpone - "C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe" -diag HWScan

=========Mozilla firefox=========

ProfilePath - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\sddoq0fl.default

prefs.js - "browser.startup.homepage" - "www.google.sk"

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"sp@avast.com"=C:\Program Files\AVAST Software\Avast\SafePrice\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.185 Plugin
"Path"=C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_23_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.185 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_185.dll


C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\sddoq0fl.default\addons.json

C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\sddoq0fl.default\extensions.json
Avast Online Security - extension - wrc@avast.com - C:\Program Files\AVAST Software\Avast\WebRep\FF
Avast SafePrice - extension - sp@avast.com - C:\Program Files\AVAST Software\Avast\SafePrice\FF
Firefox Hotfix - extension - firefox-hotfix@mozilla.org - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\sddoq0fl.default\extensions\firefox-hotfix@mozilla.org.xpi
Multi-process staged rollout - extension - e10srollout@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi
Pocket - extension - firefox@getpocket.com - C:\Program Files (x86)\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi
Web Compat - extension - webcompat@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
Multi-process staged rollout - extension - e10srollout@mozilla.org - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\sddoq0fl.default\features\{dcf381b3-6e5d-4fd0-b25d-9bf4c1f90610}\e10srollout@mozilla.org.xpi

C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\sddoq0fl.default\pluginreg.dat
Plugin - VLC Web Plugin - 2.2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
Plugin - Shockwave Flash - 23.0.0.185 - C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_23_0_0_185.dll

======Registry dump======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={CBDCB047-04D4-4C19-B904-114524D2313F}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CBDCB047-04D4-4C19-B904-114524D2313F}]
"URL"=http://www.bing.com/search?q={searchTer ... TR&pc=LCJB


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={CBDCB047-04D4-4C19-B904-114524D2313F}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{CBDCB047-04D4-4C19-B904-114524D2313F}]
"URL"=http://www.bing.com/search?q={searchTer ... TR&pc=LCJB

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-05-10 902624]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-05-10 679680]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtsFT"=C:\WINDOWS\RTFTrack.exe [2015-06-16 5060864]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-07-16 2403104]
"ShadowPlay"=C:\windows\system32\nvspcap64.dll [2014-07-16 1283136]
"PhoneCompanion"=C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [2015-05-28 836592]
"Energy Manager"=C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [2015-05-28 16094704]
"Lenovo Utility"=C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [2015-05-28 10841584]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2014-11-20 919768]
"ForteConfig"=C:\Program Files\Conexant\ForteConfig\fmapp.exe [2010-10-26 49056]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2014-04-10 1830616]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-07-27 3945672]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Martin\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-09-02 633024]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"CLMLServer_For_P2G8"=C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [2014-09-09 110344]
"CLVirtualDrive"=C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [2014-09-09 492808]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-06-28 7408312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"undockwithoutlogon"=1
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
"StubPath"=%SystemRoot%\inf\unregmp2.exe /ShowWMP

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-10-19 18:29:31 ----D---- C:\Program Files\trend micro
2016-10-19 18:29:30 ----D---- C:\rsit
2016-10-11 21:50:30 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-10-11 21:50:29 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-10-11 21:50:27 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-10-11 21:50:24 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-10-11 21:50:23 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2016-10-11 21:50:23 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-10-11 21:50:22 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-10-11 21:50:21 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-10-11 21:50:21 ----A---- C:\WINDOWS\system32\wpncore.dll
2016-10-11 21:50:21 ----A---- C:\WINDOWS\system32\ncsi.dll
2016-10-11 21:50:20 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-10-11 21:50:20 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2016-10-11 21:50:20 ----A---- C:\WINDOWS\system32\wpx.dll
2016-10-11 21:50:19 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2016-10-11 21:50:19 ----A---- C:\WINDOWS\system32\nlasvc.dll
2016-10-11 21:50:19 ----A---- C:\WINDOWS\system32\msdtctm.dll
2016-10-11 21:50:19 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-10-11 21:50:19 ----A---- C:\WINDOWS\system32\credprovs.dll
2016-10-11 21:50:18 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.dll
2016-10-11 21:50:18 ----A---- C:\WINDOWS\system32\netshell.dll
2016-10-11 21:50:18 ----A---- C:\WINDOWS\system32\bcdedit.exe
2016-10-11 21:50:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.AllJoyn.dll
2016-10-11 21:50:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2016-10-11 21:50:17 ----A---- C:\WINDOWS\SYSWOW64\dsreg.dll
2016-10-11 21:50:17 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2016-10-11 21:50:17 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2016-10-11 21:50:16 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.dll
2016-10-11 21:50:16 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2016-10-11 21:50:16 ----A---- C:\WINDOWS\system32\dsreg.dll
2016-10-11 21:50:15 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2016-10-11 21:50:15 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2016-10-11 21:50:15 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2016-10-11 21:50:14 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.Ngc.dll
2016-10-11 21:50:14 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2016-10-11 21:50:14 ----A---- C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-11 21:50:13 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-10-11 21:50:07 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-10-11 21:50:02 ----A---- C:\WINDOWS\system32\shell32.dll
2016-10-11 21:49:58 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-10-11 21:49:57 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-10-11 21:49:54 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-10-11 21:49:53 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-10-11 21:49:50 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-10-11 21:49:47 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-10-11 21:49:46 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-10-11 21:49:45 ----A---- C:\WINDOWS\system32\wininet.dll
2016-10-11 21:49:44 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-10-11 21:49:43 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-10-11 21:49:43 ----A---- C:\WINDOWS\system32\smartscreen.exe
2016-10-11 21:49:43 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-10-11 21:49:42 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-10-11 21:49:41 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-10-11 21:49:41 ----A---- C:\WINDOWS\system32\drivers\MegaSas2i.sys
2016-10-11 21:49:40 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-10-11 21:49:39 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-10-11 21:49:38 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-10-11 21:49:38 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-10-11 21:49:38 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-10-11 21:49:38 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-10-11 21:49:37 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-10-11 21:49:36 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2016-10-11 21:49:36 ----A---- C:\WINDOWS\SYSWOW64\credprovs.dll
2016-10-11 21:49:36 ----A---- C:\WINDOWS\system32\adsmsext.dll
2016-10-11 21:49:35 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2016-10-11 21:49:35 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2016-10-11 21:49:35 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2016-10-11 21:49:35 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2016-10-11 21:49:32 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2016-10-11 21:49:32 ----A---- C:\WINDOWS\SYSWOW64\dialclient.dll
2016-10-11 21:49:32 ----A---- C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2016-10-11 21:49:32 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-10-11 21:49:32 ----A---- C:\WINDOWS\system32\aadtb.dll
2016-10-11 21:49:25 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-10-11 21:49:22 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-10-11 21:49:22 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2016-10-11 21:49:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-10-11 21:49:21 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-10-11 21:49:21 ----A---- C:\WINDOWS\system32\daxexec.dll
2016-10-11 21:49:19 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-10-11 21:49:19 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-10-11 21:49:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-10-11 21:49:16 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-10-11 21:49:15 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-10-11 21:49:13 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2016-10-11 21:49:13 ----A---- C:\WINDOWS\system32\wc_storage.dll
2016-10-11 21:49:13 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2016-10-11 21:49:13 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-10-11 21:49:12 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-10-11 21:49:09 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-10-11 21:49:09 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-10-11 21:49:09 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2016-10-11 21:49:09 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-10-11 21:49:09 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-10-11 21:49:08 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-10-11 21:49:08 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-10-11 21:49:07 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2016-10-11 21:49:07 ----A---- C:\WINDOWS\system32\efswrt.dll
2016-10-11 21:49:06 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2016-10-11 21:49:06 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-10-11 21:49:05 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2016-10-11 21:49:05 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2016-10-11 21:49:05 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-10-11 21:49:05 ----A---- C:\WINDOWS\system32\dialclient.dll
2016-10-11 21:48:58 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-10-11 21:48:56 ----A---- C:\WINDOWS\system32\wmp.dll
2016-10-11 21:48:54 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-10-11 21:48:53 ----A---- C:\WINDOWS\system32\apprepsync.dll
2016-10-11 21:48:52 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-10-11 21:48:50 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-10-11 21:48:50 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2016-10-11 21:48:49 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-10-11 21:48:49 ----A---- C:\WINDOWS\system32\apprepapi.dll
2016-10-11 21:48:48 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-10-11 21:48:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-10-11 21:48:47 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-10-11 21:48:46 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-10-11 21:48:45 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-10-11 21:48:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2016-10-11 21:48:44 ----A---- C:\WINDOWS\system32\winload.exe
2016-10-11 21:48:43 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2016-10-11 21:48:43 ----A---- C:\WINDOWS\system32\GamePanel.exe
2016-10-11 21:48:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-10-11 21:48:42 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2016-10-11 21:48:42 ----A---- C:\WINDOWS\system32\winresume.exe
2016-10-11 21:48:42 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2016-10-11 21:48:41 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-10-11 21:48:41 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2016-10-11 21:48:41 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-10-11 21:48:41 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2016-10-11 21:48:40 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2016-10-11 21:48:40 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2016-10-11 21:48:40 ----A---- C:\WINDOWS\system32\FrameServer.dll
2016-10-11 21:48:39 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2016-10-11 21:48:39 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2016-10-11 21:48:39 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2016-10-11 21:48:39 ----A---- C:\WINDOWS\system32\drivers\tm.sys
2016-10-11 21:48:39 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2016-10-11 21:48:39 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2016-10-11 21:48:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2016-10-11 21:48:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2016-10-11 21:48:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2016-10-11 21:48:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2016-10-11 21:48:38 ----A---- C:\WINDOWS\system32\Windows.Networking.HostName.dll
2016-10-11 21:48:38 ----A---- C:\WINDOWS\system32\offreg.dll
2016-10-11 21:48:37 ----A---- C:\WINDOWS\SYSWOW64\ConfigureExpandedStorage.dll
2016-10-11 21:48:37 ----A---- C:\WINDOWS\system32\msi.dll
2016-10-11 21:48:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryClient.dll
2016-10-11 21:48:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-11 21:48:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.HostName.dll
2016-10-11 21:48:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2016-10-11 21:48:36 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2016-10-11 21:48:36 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-10-11 21:48:36 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-10-11 21:48:36 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2016-10-11 21:48:33 ----A---- C:\WINDOWS\system32\ShareHost.dll
2016-10-11 21:48:32 ----A---- C:\WINDOWS\system32\twinui.dll
2016-10-11 21:48:28 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-10-11 21:48:25 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-10-11 21:48:24 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-10-11 21:48:23 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-10-11 21:48:23 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-10-11 21:48:22 ----A---- C:\WINDOWS\system32\mos.dll
2016-10-11 21:48:19 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-10-11 21:48:19 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-10-11 21:48:19 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-10-11 21:48:15 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-10-11 21:48:15 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-10-11 21:48:15 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-10-11 21:48:14 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-10-11 21:48:14 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2016-10-11 21:48:13 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-10-11 21:48:12 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-10-11 21:48:12 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-10-11 21:48:12 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2016-10-11 21:48:11 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-10-11 21:48:10 ----A---- C:\WINDOWS\system32\cloudAP.dll
2016-10-11 21:48:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2016-10-11 21:48:09 ----A---- C:\WINDOWS\SYSWOW64\mfsensorgroup.dll
2016-10-11 21:48:09 ----A---- C:\WINDOWS\system32\mfps.dll
2016-10-11 21:48:09 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2016-10-11 21:48:09 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-10-11 21:48:09 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-10-11 21:48:08 ----A---- C:\WINDOWS\SYSWOW64\adsmsext.dll
2016-10-11 21:48:08 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-10-11 21:48:08 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-10-11 21:48:08 ----A---- C:\WINDOWS\system32\drivers\bthpan.sys
2016-10-11 21:48:08 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-10-11 21:48:07 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-10-11 21:48:07 ----A---- C:\WINDOWS\system32\mspaint.exe
2016-10-11 21:48:07 ----A---- C:\WINDOWS\system32\ErrorDetails.dll
2016-10-11 21:48:06 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-10-07 18:32:13 ----SHD---- C:\Config.Msi
2016-09-29 22:33:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2016-09-29 22:33:13 ----A---- C:\WINDOWS\SYSWOW64\LicenseManagerApi.dll
2016-09-29 22:33:13 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2016-09-29 22:33:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.UXRes.dll
2016-09-29 22:33:12 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2016-09-29 22:33:12 ----A---- C:\WINDOWS\system32\mssrch.dll
2016-09-29 22:33:11 ----A---- C:\WINDOWS\system32\tquery.dll
2016-09-29 22:33:10 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-09-29 22:33:10 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2016-09-29 22:33:10 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2016-09-29 22:33:09 ----A---- C:\WINDOWS\system32\nettrace.dll
2016-09-29 22:33:08 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2016-09-29 22:33:08 ----A---- C:\WINDOWS\system32\usbmon.dll
2016-09-29 22:33:08 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2016-09-29 22:33:08 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2016-09-29 22:33:08 ----A---- C:\WINDOWS\system32\samsrv.dll
2016-09-29 22:33:07 ----A---- C:\WINDOWS\SYSWOW64\WSManHTTPConfig.exe
2016-09-29 22:33:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.CredDialogController.dll
2016-09-29 22:33:07 ----A---- C:\WINDOWS\SYSWOW64\TempSignedLicenseExchangeTask.dll
2016-09-29 22:33:07 ----A---- C:\WINDOWS\system32\mprdim.dll
2016-09-29 22:33:07 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2016-09-29 22:33:07 ----A---- C:\WINDOWS\system32\ci.dll
2016-09-29 22:33:06 ----A---- C:\WINDOWS\SYSWOW64\mfksproxy.dll
2016-09-29 22:33:06 ----A---- C:\WINDOWS\system32\wkssvc.dll
2016-09-29 22:33:06 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-09-29 22:33:06 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-09-29 22:33:06 ----A---- C:\WINDOWS\system32\SessEnv.dll
2016-09-29 22:33:06 ----A---- C:\WINDOWS\system32\offlinesam.dll
2016-09-29 22:33:06 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-09-29 22:33:06 ----A---- C:\WINDOWS\system32\hal.dll
2016-09-29 22:33:06 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-09-29 22:33:05 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2016-09-29 22:33:05 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2016-09-29 22:33:05 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-09-29 22:33:05 ----A---- C:\WINDOWS\system32\webio.dll
2016-09-29 22:33:05 ----A---- C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-09-29 22:33:05 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2016-09-29 22:33:05 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2016-09-29 22:33:05 ----A---- C:\WINDOWS\system32\drivers\wcifs.sys
2016-09-29 22:33:04 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-09-29 22:33:04 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2016-09-29 22:33:04 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll
2016-09-29 22:33:04 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-09-29 22:33:04 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-09-29 22:33:04 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-09-29 22:33:04 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-09-29 22:33:03 ----A---- C:\WINDOWS\system32\securekernel.exe
2016-09-29 22:33:03 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-09-29 22:33:03 ----A---- C:\WINDOWS\system32\profsvc.dll
2016-09-29 22:33:02 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-09-29 22:33:02 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2016-09-29 22:33:02 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-09-29 22:33:02 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-09-29 22:32:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.FaceAnalysis.dll
2016-09-29 22:32:59 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2016-09-29 22:32:58 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2016-09-29 22:32:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2016-09-29 22:32:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.LowLevel.dll
2016-09-29 22:32:58 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2016-09-29 22:32:58 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-09-29 22:32:58 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-09-29 22:32:58 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-09-29 22:32:58 ----A---- C:\WINDOWS\system32\lsm.dll
2016-09-29 22:32:58 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2016-09-29 22:32:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.3D.dll
2016-09-29 22:32:57 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-09-29 22:32:57 ----A---- C:\WINDOWS\system32\mssprxy.dll
2016-09-29 22:32:56 ----A---- C:\WINDOWS\system32\Windows.Perception.Stub.dll
2016-09-29 22:32:56 ----A---- C:\WINDOWS\system32\puiobj.dll
2016-09-29 22:32:55 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2016-09-29 22:32:55 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-09-29 22:32:55 ----A---- C:\WINDOWS\SYSWOW64\imapi2.dll
2016-09-29 22:32:55 ----A---- C:\WINDOWS\SYSWOW64\findnetprinters.dll
2016-09-29 22:32:55 ----A---- C:\WINDOWS\SYSWOW64\credprovslegacy.dll
2016-09-29 22:32:55 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2016-09-29 22:32:55 ----A---- C:\WINDOWS\system32\Windows.Devices.Printers.dll
2016-09-29 22:32:55 ----A---- C:\WINDOWS\system32\NetworkUXBroker.dll
2016-09-29 22:32:55 ----A---- C:\WINDOWS\system32\fhcfg.dll
2016-09-29 22:32:55 ----A---- C:\WINDOWS\system32\credprovslegacy.dll
2016-09-29 22:32:55 ----A---- C:\WINDOWS\system32\CastLaunch.dll
2016-09-29 22:32:55 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2016-09-29 22:32:54 ----A---- C:\WINDOWS\system32\sppsvc.exe
2016-09-29 22:32:45 ----A---- C:\WINDOWS\system32\sppobjs.dll
2016-09-29 22:32:45 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2016-09-29 22:32:44 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-09-29 22:32:44 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2016-09-29 22:32:44 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-09-29 22:32:44 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2016-09-29 22:32:44 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-09-29 22:32:44 ----A---- C:\WINDOWS\system32\ClipUp.exe
2016-09-29 22:32:44 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-09-29 22:32:43 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-09-29 22:32:42 ----A---- C:\WINDOWS\system32\cdp.dll
2016-09-29 22:32:41 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-09-29 22:32:41 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-09-29 22:32:40 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2016-09-29 22:32:39 ----A---- C:\WINDOWS\system32\wsp_sr.dll
2016-09-29 22:32:39 ----A---- C:\WINDOWS\system32\wsp_health.dll
2016-09-29 22:32:39 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2016-09-29 22:32:39 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-09-29 22:32:38 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-09-29 22:32:38 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2016-09-29 22:32:38 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-09-29 22:32:38 ----A---- C:\WINDOWS\system32\sppwinob.dll
2016-09-29 22:32:37 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-09-29 22:32:37 ----A---- C:\WINDOWS\system32\tdh.dll
2016-09-29 22:32:37 ----A---- C:\WINDOWS\system32\SensorService.dll
2016-09-29 22:32:37 ----A---- C:\WINDOWS\system32\gpsvc.dll
2016-09-29 22:32:37 ----A---- C:\WINDOWS\system32\bdesvc.dll
2016-09-29 22:32:37 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-09-29 22:32:36 ----A---- C:\WINDOWS\system32\NotificationController.dll
2016-09-29 22:32:36 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-09-29 22:32:36 ----A---- C:\WINDOWS\system32\devinv.dll
2016-09-29 22:32:36 ----A---- C:\WINDOWS\system32\cdpusersvc.dll
2016-09-29 22:32:36 ----A---- C:\WINDOWS\system32\cdpsvc.dll
2016-09-29 22:32:35 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2016-09-29 22:32:35 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-09-29 22:32:35 ----A---- C:\WINDOWS\system32\SpaceControl.dll
2016-09-29 22:32:35 ----A---- C:\WINDOWS\system32\SpaceAgent.exe
2016-09-29 22:32:35 ----A---- C:\WINDOWS\system32\resutils.dll
2016-09-29 22:32:35 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-09-29 22:32:35 ----A---- C:\WINDOWS\system32\manage-bde.exe
2016-09-29 22:32:35 ----A---- C:\WINDOWS\system32\localspl.dll
2016-09-29 22:32:34 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2016-09-29 22:32:34 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-09-29 22:32:34 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-09-29 22:32:34 ----A---- C:\WINDOWS\system32\sppcext.dll
2016-09-29 22:32:34 ----A---- C:\WINDOWS\system32\pdh.dll
2016-09-29 22:32:34 ----A---- C:\WINDOWS\system32\icsvc.dll
2016-09-29 22:32:34 ----A---- C:\WINDOWS\system32\discan.dll
2016-09-29 22:32:34 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2016-09-29 22:32:33 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-09-29 22:32:33 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2016-09-29 22:32:33 ----A---- C:\WINDOWS\system32\systemreset.exe
2016-09-29 22:32:33 ----A---- C:\WINDOWS\system32\ReAgent.dll
2016-09-29 22:32:33 ----A---- C:\WINDOWS\system32\NfcRadioMedia.dll
2016-09-29 22:32:33 ----A---- C:\WINDOWS\system32\AppContracts.dll
2016-09-29 22:32:33 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-09-29 22:32:32 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2016-09-29 22:32:32 ----A---- C:\WINDOWS\SYSWOW64\offlinesam.dll
2016-09-29 22:32:32 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2016-09-29 22:32:32 ----A---- C:\WINDOWS\system32\Windows.Gaming.Input.dll
2016-09-29 22:32:32 ----A---- C:\WINDOWS\system32\Sens.dll
2016-09-29 22:32:32 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-09-29 22:32:32 ----A---- C:\WINDOWS\system32\fveui.dll
2016-09-29 22:32:32 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-29 22:32:31 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2016-09-29 22:32:31 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-09-29 22:32:31 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-09-29 22:32:31 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2016-09-29 22:32:31 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2016-09-29 22:32:31 ----A---- C:\WINDOWS\splwow64.exe
2016-09-29 22:32:30 ----A---- C:\WINDOWS\SYSWOW64\wlancfg.dll
2016-09-29 22:32:30 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2016-09-29 22:32:30 ----A---- C:\WINDOWS\SYSWOW64\BcastDVRHelper.dll
2016-09-29 22:32:30 ----A---- C:\WINDOWS\system32\fvenotify.exe
2016-09-29 22:32:30 ----A---- C:\WINDOWS\system32\bdeui.dll
2016-09-29 22:32:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2016-09-29 22:32:29 ----A---- C:\WINDOWS\SYSWOW64\CryptoWinRT.dll
2016-09-29 22:32:29 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-09-29 22:32:29 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2016-09-29 22:32:29 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2016-09-29 22:32:29 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2016-09-29 22:32:29 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-09-29 22:32:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-09-29 22:32:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-09-29 22:32:28 ----A---- C:\WINDOWS\SYSWOW64\sppcext.dll
2016-09-29 22:32:28 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2016-09-29 22:32:28 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-09-29 22:32:28 ----A---- C:\WINDOWS\system32\Windows.Media.Ocr.dll
2016-09-29 22:32:28 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-09-29 22:32:28 ----A---- C:\WINDOWS\system32\Windows.Devices.Radios.dll
2016-09-29 22:32:28 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2016-09-29 22:32:28 ----A---- C:\WINDOWS\system32\credprovhost.dll
2016-09-29 22:32:28 ----A---- C:\WINDOWS\system32\clusapi.dll
2016-09-29 22:32:27 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2016-09-29 22:32:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.Perception.Stub.dll
2016-09-29 22:32:27 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-09-29 22:32:27 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2016-09-29 22:32:27 ----A---- C:\WINDOWS\system32\PrintWSDAHost.dll
2016-09-29 22:32:27 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-09-29 22:32:26 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2016-09-29 22:32:26 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2016-09-29 22:32:26 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2016-09-29 22:32:26 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2016-09-29 22:32:26 ----A---- C:\WINDOWS\system32\ffbroker.dll
2016-09-29 22:32:07 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-09-29 22:32:03 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-09-29 22:31:56 ----A---- C:\WINDOWS\system32\spaceman.exe
2016-09-29 22:31:55 ----A---- C:\WINDOWS\system32\mispace.dll
2016-09-29 22:31:54 ----A---- C:\WINDOWS\system32\storagewmi.dll
2016-09-29 22:31:53 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-09-29 22:31:53 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-09-29 22:31:53 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2016-09-29 22:31:52 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-09-29 22:31:51 ----A---- C:\WINDOWS\SYSWOW64\MSAC3ENC.DLL
2016-09-29 22:31:51 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-09-29 22:31:51 ----A---- C:\WINDOWS\system32\qmgr.dll
2016-09-29 22:31:50 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2016-09-29 22:31:50 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-09-29 22:31:49 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2016-09-29 22:31:49 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-09-29 22:31:48 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2016-09-29 22:31:46 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-09-29 22:31:46 ----A---- C:\WINDOWS\system32\dsregcmd.exe
2016-09-29 22:31:46 ----A---- C:\WINDOWS\explorer.exe
2016-09-29 22:31:45 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-09-29 22:31:43 ----A---- C:\WINDOWS\system32\uReFS.dll
2016-09-29 22:31:41 ----A---- C:\WINDOWS\system32\rascustom.dll
2016-09-29 22:31:40 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-09-29 22:31:40 ----A---- C:\WINDOWS\system32\mfksproxy.dll
2016-09-29 22:31:40 ----A---- C:\WINDOWS\system32\fveapibase.dll
2016-09-29 22:31:40 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2016-09-29 22:31:40 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2016-09-29 22:31:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2016-09-29 22:31:37 ----A---- C:\WINDOWS\system32\dnsapi.dll
2016-09-29 22:31:36 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2016-09-29 22:31:36 ----A---- C:\WINDOWS\system32\WSManHTTPConfig.exe
2016-09-29 22:31:36 ----A---- C:\WINDOWS\system32\wintrust.dll
2016-09-29 22:31:36 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2016-09-29 22:31:36 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-09-29 22:31:36 ----A---- C:\WINDOWS\system32\RMapi.dll
2016-09-29 22:31:35 ----A---- C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-09-29 22:31:35 ----A---- C:\WINDOWS\system32\mprapi.dll
2016-09-29 22:31:35 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-09-29 22:31:34 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-09-29 22:31:34 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-09-29 22:31:34 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-09-29 22:31:34 ----A---- C:\WINDOWS\system32\LsaIso.exe
2016-09-29 22:31:34 ----A---- C:\WINDOWS\system32\drivers\cmimcext.sys
2016-09-29 22:31:34 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2016-09-29 22:31:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2016-09-29 22:31:33 ----A---- C:\WINDOWS\SYSWOW64\tsmf.dll
2016-09-29 22:31:33 ----A---- C:\WINDOWS\system32\drivers\http.sys
2016-09-29 22:31:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-09-29 22:31:32 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-09-29 22:31:32 ----A---- C:\WINDOWS\SYSWOW64\biwinrt.dll
2016-09-29 22:31:32 ----A---- C:\WINDOWS\system32\wpnapps.dll
2016-09-29 22:31:32 ----A---- C:\WINDOWS\system32\nltest.exe
2016-09-29 22:31:32 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-09-29 22:31:32 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2016-09-29 22:31:31 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-09-29 22:31:31 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-09-29 22:31:30 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-09-29 22:31:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2016-09-29 22:31:30 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2016-09-29 22:31:30 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-09-29 22:31:30 ----A---- C:\WINDOWS\system32\devenum.dll
2016-09-29 22:31:30 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2016-09-29 22:31:29 ----A---- C:\WINDOWS\system32\usermgr.dll
2016-09-29 22:31:29 ----A---- C:\WINDOWS\system32\rasmans.dll
2016-09-29 22:31:29 ----A---- C:\WINDOWS\system32\ieproxy.dll
2016-09-29 22:31:29 ----A---- C:\WINDOWS\system32\DataExchange.dll
2016-09-29 22:31:28 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2016-09-29 22:31:28 ----A---- C:\WINDOWS\SYSWOW64\DataExchange.dll
2016-09-29 22:31:28 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-09-29 22:31:28 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-09-29 22:31:28 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2016-09-29 22:31:28 ----A---- C:\WINDOWS\system32\RelPost.exe
2016-09-29 22:31:28 ----A---- C:\WINDOWS\system32\drivers\winhvr.sys
2016-09-29 22:31:27 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2016-09-29 22:31:27 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2016-09-29 22:31:27 ----A---- C:\WINDOWS\system32\setupugc.exe
2016-09-29 22:31:27 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2016-09-29 22:31:27 ----A---- C:\WINDOWS\system32\Family.SyncEngine.dll
2016-09-29 22:31:27 ----A---- C:\WINDOWS\system32\BackgroundMediaPolicy.dll
2016-09-29 22:31:26 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2016-09-29 22:31:26 ----A---- C:\WINDOWS\system32\Windows.Devices.Perception.dll
2016-09-29 22:31:26 ----A---- C:\WINDOWS\system32\OneBackupHandler.dll
2016-09-29 22:31:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-09-29 22:31:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-09-29 22:31:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-09-29 22:31:25 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-09-29 22:31:25 ----A---- C:\WINDOWS\system32\CryptoWinRT.dll
2016-09-29 22:31:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.PointOfService.dll
2016-09-29 22:31:24 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2016-09-29 22:31:24 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2016-09-29 22:31:24 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-09-29 22:31:24 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-09-29 22:31:24 ----A---- C:\WINDOWS\system32\easwrt.dll
2016-09-29 22:31:23 ----A---- C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-09-29 22:31:23 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2016-09-29 22:31:23 ----A---- C:\WINDOWS\system32\bootux.dll
2016-09-29 22:31:23 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2016-09-29 22:31:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2016-09-29 22:31:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.dll
2016-09-29 22:31:22 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2016-09-29 22:31:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SmartCards.dll
2016-09-29 22:31:21 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2016-09-29 22:31:21 ----A---- C:\WINDOWS\SYSWOW64\ngccredprov.dll
2016-09-29 22:31:21 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-09-29 22:31:21 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-09-29 22:31:21 ----A---- C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2016-09-29 22:31:21 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-09-29 22:31:21 ----A---- C:\WINDOWS\system32\AccountsRt.dll
2016-09-29 22:31:20 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-09-29 22:31:20 ----A---- C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2016-09-29 22:31:20 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-09-29 22:31:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Ocr.dll
2016-09-29 22:31:19 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-09-29 22:31:19 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2016-09-29 22:31:19 ----A---- C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2016-09-29 22:31:19 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2016-09-29 22:31:19 ----A---- C:\WINDOWS\system32\imapi2.dll
2016-09-29 22:31:19 ----A---- C:\WINDOWS\system32\Family.Client.dll
2016-09-29 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Energy.dll
2016-09-29 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\NaturalLanguage6.dll
2016-09-29 22:31:18 ----A---- C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2016-09-29 22:31:18 ----A---- C:\WINDOWS\system32\smphost.dll
2016-09-29 22:31:18 ----A---- C:\WINDOWS\system32\Family.Authentication.dll
2016-09-29 22:31:18 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2016-09-29 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.UserDeviceAssociation.dll
2016-09-29 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-09-29 22:31:17 ----A---- C:\WINDOWS\system32\appinfo.dll
2016-09-29 22:31:16 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-09-29 22:31:10 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-09-29 22:31:09 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-09-29 22:31:06 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-09-29 22:31:06 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-09-29 22:31:05 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-09-29 22:31:05 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-09-29 22:31:04 ----A---- C:\WINDOWS\SYSWOW64\wsp_sr.dll
2016-09-29 22:31:04 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2016-09-29 22:31:02 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2016-09-29 22:31:02 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-09-29 22:31:02 ----A---- C:\WINDOWS\system32\NetworkCollectionAgent.dll
2016-09-29 22:31:02 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-09-29 22:31:01 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2016-09-29 22:31:01 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2016-09-29 22:31:01 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2016-09-29 22:31:01 ----A---- C:\WINDOWS\SYSWOW64\NetworkCollectionAgent.dll
2016-09-29 22:31:01 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-09-29 22:31:00 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2016-09-29 22:31:00 ----A---- C:\WINDOWS\system32\provops.dll
2016-09-29 22:31:00 ----A---- C:\WINDOWS\system32\drivers\BthLEEnum.sys
2016-09-29 22:30:59 ----A---- C:\WINDOWS\system32\hvix64.exe
2016-09-29 22:30:59 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2016-09-29 22:30:58 ----A---- C:\WINDOWS\SYSWOW64\ws2_32.dll
2016-09-29 22:30:57 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2016-09-29 22:30:57 ----A---- C:\WINDOWS\system32\hvax64.exe
2016-09-29 22:30:55 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2016-09-29 22:30:55 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-09-29 22:30:55 ----A---- C:\WINDOWS\system32\hvloader.exe
2016-09-29 22:30:55 ----A---- C:\WINDOWS\system32\FontProvider.dll
2016-09-29 22:30:54 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-09-29 22:30:54 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2016-09-29 22:30:54 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-09-29 22:30:53 ----A---- C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2016-09-29 22:30:53 ----A---- C:\WINDOWS\system32\mprddm.dll
2016-09-29 22:30:53 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2016-09-29 22:30:53 ----A---- C:\WINDOWS\system32\biwinrt.dll
2016-09-29 22:30:52 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2016-09-29 22:30:52 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2016-09-29 22:30:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.InkControls.dll
2016-09-29 22:30:51 ----A---- C:\WINDOWS\system32\wlancfg.dll
2016-09-29 22:30:51 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2016-09-29 22:30:51 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2016-09-29 22:30:51 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-09-29 22:30:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Phone.dll
2016-09-29 22:30:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2016-09-29 22:30:50 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2016-09-29 22:30:50 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2016-09-29 22:30:50 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2016-09-29 22:30:50 ----A---- C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2016-09-29 22:30:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFiDirect.dll
2016-09-29 22:30:49 ----A---- C:\WINDOWS\SYSWOW64\pwrshplugin.dll
2016-09-29 22:30:49 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-09-29 22:30:48 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2016-09-29 22:30:48 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-09-29 22:30:48 ----A---- C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2016-09-29 22:30:48 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-09-29 22:30:47 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2016-09-29 22:30:47 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2016-09-29 22:30:47 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2016-09-29 22:30:47 ----A---- C:\WINDOWS\SYSWOW64\dmenrollengine.dll
2016-09-29 22:30:47 ----A---- C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2016-09-29 22:30:47 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-09-29 22:30:47 ----A---- C:\WINDOWS\system32\Geolocation.dll
2016-09-29 22:30:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-09-29 22:30:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Picker.dll
2016-09-29 22:30:46 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2016-09-29 22:30:46 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-09-29 22:30:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2016-09-29 22:30:45 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-09-29 22:30:45 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.dll
2016-09-29 22:30:44 ----A---- C:\WINDOWS\SYSWOW64\WinRtTracing.dll
2016-09-29 22:30:44 ----A---- C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-09-29 22:30:44 ----A---- C:\WINDOWS\system32\Windows.Energy.dll
2016-09-29 22:30:44 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-09-29 22:30:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SerialCommunication.dll
2016-09-29 22:30:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Core.dll
2016-09-29 22:30:42 ----A---- C:\WINDOWS\system32\NaturalLanguage6.dll
2016-09-29 22:30:42 ----A---- C:\WINDOWS\system32\MSAC3ENC.DLL
2016-09-29 22:30:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-09-29 22:30:35 ----A---- C:\WINDOWS\system32\msctf.dll
2016-09-29 22:30:31 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2016-09-29 22:30:31 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2016-09-29 22:30:31 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-09-29 22:30:30 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-09-29 22:30:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-09-29 22:30:28 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2016-09-29 22:30:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.MediaPlayer.dll
2016-09-29 22:30:27 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2016-09-29 22:30:27 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2016-09-29 22:30:26 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2016-09-29 22:30:26 ----A---- C:\WINDOWS\system32\gdi32full.dll
2016-09-29 22:30:25 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2016-09-29 22:30:25 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2016-09-29 22:30:25 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2016-09-29 22:30:25 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-09-29 22:30:24 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2016-09-29 22:30:24 ----A---- C:\WINDOWS\system32\ws2_32.dll
2016-09-29 22:30:24 ----A---- C:\WINDOWS\system32\winsrv.dll
2016-09-29 22:30:24 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-09-29 22:30:24 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2016-09-29 22:30:24 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2016-09-29 22:30:23 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2016-09-29 22:30:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-09-29 22:30:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.BackgroundMediaPlayback.dll
2016-09-29 22:30:23 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2016-09-29 22:30:23 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2016-09-29 22:30:22 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2016-09-29 22:30:22 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-09-29 22:30:22 ----A---- C:\WINDOWS\system32\vmrdvcore.dll
2016-09-29 22:30:22 ----A---- C:\WINDOWS\system32\skci.dll
2016-09-29 22:30:22 ----A---- C:\WINDOWS\system32\qedit.dll
2016-09-29 22:30:22 ----A---- C:\WINDOWS\system32\icsvcext.dll
2016-09-29 22:30:22 ----A---- C:\WINDOWS\system32\dwmapi.dll
2016-09-29 22:30:22 ----A---- C:\WINDOWS\system32\bdeunlock.exe
2016-09-29 22:30:21 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2016-09-29 22:30:21 ----A---- C:\WINDOWS\SYSWOW64\mprapi.dll
2016-09-29 22:30:21 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-09-29 22:30:21 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2016-09-29 22:30:21 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2016-09-29 22:30:21 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-09-29 22:30:21 ----A---- C:\WINDOWS\system32\fvewiz.dll
2016-09-29 22:30:21 ----A---- C:\WINDOWS\system32\drivers\vpci.sys
2016-09-29 22:30:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2016-09-29 22:30:20 ----A---- C:\WINDOWS\SYSWOW64\BackgroundMediaPolicy.dll
2016-09-29 22:30:20 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-09-29 22:30:20 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-09-29 22:30:20 ----A---- C:\WINDOWS\system32\pwrshplugin.dll
2016-09-29 22:30:20 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2016-09-29 22:30:20 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-09-29 22:30:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Identity.Provider.dll
2016-09-29 22:30:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.Input.dll
2016-09-29 22:30:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Perception.dll
2016-09-29 22:30:19 ----A---- C:\WINDOWS\SYSWOW64\oleacc.dll
2016-09-29 22:30:19 ----A---- C:\WINDOWS\system32\sbe.dll
2016-09-29 22:30:19 ----A---- C:\WINDOWS\system32\fvecpl.dll
2016-09-29 22:30:19 ----A---- C:\WINDOWS\system32\CPFilters.dll
2016-09-29 22:30:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2016-09-29 22:30:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.XboxLive.Storage.dll
2016-09-29 22:30:18 ----A---- C:\WINDOWS\SYSWOW64\PlayToReceiver.dll
2016-09-29 22:30:18 ----A---- C:\WINDOWS\SYSWOW64\ClipboardServer.dll
2016-09-29 22:30:18 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-09-29 22:30:18 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-09-29 22:30:18 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2016-09-29 22:30:17 ----A---- C:\WINDOWS\SYSWOW64\WwaApi.dll
2016-09-29 22:30:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Import.dll
2016-09-29 22:30:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFi.dll
2016-09-29 22:30:17 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-09-29 22:30:17 ----A---- C:\WINDOWS\SYSWOW64\credprovhost.dll
2016-09-29 22:30:17 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-09-29 22:30:17 ----A---- C:\WINDOWS\system32\rshx32.dll
2016-09-29 22:30:17 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-09-29 22:30:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Radios.dll
2016-09-29 22:30:16 ----A---- C:\WINDOWS\SYSWOW64\smphost.dll
2016-09-29 22:30:16 ----A---- C:\WINDOWS\SYSWOW64\Geolocation.dll
2016-09-29 22:30:16 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-09-29 22:30:16 ----A---- C:\WINDOWS\system32\odbcconf.dll
2016-09-24 20:51:31 ----AD---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2016-10-19 18:29:31 ----RD---- C:\Program Files
2016-10-19 17:59:46 ----D---- C:\WINDOWS\Prefetch
2016-10-19 17:58:02 ----HD---- C:\Program Files\WindowsApps
2016-10-19 17:57:43 ----D---- C:\WINDOWS\Temp
2016-10-19 17:51:11 ----D---- C:\WINDOWS\system32\sru
2016-10-19 14:44:08 ----D---- C:\WINDOWS\system32\drivers
2016-10-18 22:09:55 ----D---- C:\ProgramData\Lenovo App Services
2016-10-18 20:02:25 ----D---- C:\WINDOWS\system32\config
2016-10-18 17:13:53 ----D---- C:\Users\Martin\AppData\Roaming\vlc
2016-10-18 14:32:21 ----D---- C:\WINDOWS\system32\SleepStudy
2016-10-18 13:48:42 ----D---- C:\WINDOWS\system32\catroot2
2016-10-18 13:48:39 ----D---- C:\WINDOWS\WinSxS
2016-10-18 13:48:23 ----D---- C:\WINDOWS\CbsTemp
2016-10-18 03:01:55 ----D---- C:\WINDOWS\system32\Macromed
2016-10-18 03:01:53 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2016-10-17 10:58:48 ----D---- C:\Windows
2016-10-17 10:58:44 ----D---- C:\WINDOWS\SoftwareDistribution
2016-10-16 20:48:59 ----D---- C:\WINDOWS\System32
2016-10-16 20:48:59 ----D---- C:\WINDOWS\INF
2016-10-16 20:48:57 ----D---- C:\WINDOWS\debug
2016-10-14 00:23:43 ----RD---- C:\WINDOWS\Microsoft.NET
2016-10-13 22:11:29 ----RSD---- C:\WINDOWS\assembly
2016-10-12 16:56:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-10-12 16:52:36 ----D---- C:\WINDOWS\AppReadiness
2016-10-12 16:49:57 ----D---- C:\WINDOWS\system32\DriverStore
2016-10-12 16:47:57 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2016-10-12 16:47:57 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-10-12 16:47:57 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-10-12 16:47:57 ----D---- C:\WINDOWS\SysWOW64
2016-10-12 16:47:56 ----SD---- C:\WINDOWS\system32\DiagSvcs
2016-10-12 16:47:56 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-10-12 16:47:56 ----D---- C:\WINDOWS\system32\wbem
2016-10-12 16:47:56 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2016-10-12 16:47:56 ----D---- C:\WINDOWS\system32\sk-SK
2016-10-12 16:47:56 ----D---- C:\WINDOWS\system32\migwiz
2016-10-12 16:47:56 ----D---- C:\WINDOWS\system32\en-US
2016-10-12 16:47:56 ----D---- C:\WINDOWS\system32\cs-CZ
2016-10-12 16:47:55 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-10-12 16:47:55 ----D---- C:\WINDOWS\system32\Boot
2016-10-12 16:47:55 ----D---- C:\WINDOWS\ShellExperiences
2016-10-12 16:47:55 ----D---- C:\Program Files\Windows Photo Viewer
2016-10-12 16:47:55 ----D---- C:\Program Files\Windows Mail
2016-10-12 16:47:55 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2016-10-12 16:43:55 ----D---- C:\WINDOWS\system32\MRT
2016-10-12 16:39:42 ----AC---- C:\WINDOWS\system32\MRT.exe
2016-10-12 12:08:54 ----SHD---- C:\System Volume Information
2016-10-12 00:12:35 ----HD---- C:\ProgramData
2016-10-07 18:34:16 ----D---- C:\WINDOWS\system32\LogFiles
2016-10-07 18:32:22 ----SHD---- C:\WINDOWS\Installer
2016-10-04 12:06:40 ----D---- C:\WINDOWS\rescache
2016-10-03 22:09:37 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-10-01 15:37:16 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-10-01 15:35:21 ----SD---- C:\WINDOWS\SYSWOW64\F12
2016-10-01 15:35:21 ----D---- C:\WINDOWS\SYSWOW64\wbem
2016-10-01 15:35:21 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-CS
2016-10-01 15:35:21 ----D---- C:\WINDOWS\SYSWOW64\setup
2016-10-01 15:35:21 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-10-01 15:35:07 ----SD---- C:\WINDOWS\system32\F12
2016-10-01 15:35:07 ----D---- C:\WINDOWS\system32\Sysprep
2016-10-01 15:35:07 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2016-10-01 15:35:07 ----D---- C:\WINDOWS\system32\setup
2016-10-01 15:35:07 ----D---- C:\WINDOWS\system32\oobe
2016-10-01 15:35:07 ----D---- C:\WINDOWS\system32\drivers\en-US
2016-10-01 15:35:07 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2016-10-01 15:35:07 ----D---- C:\WINDOWS\system32\Dism
2016-10-01 15:35:07 ----D---- C:\WINDOWS\system32\appraiser
2016-10-01 15:35:04 ----D---- C:\WINDOWS\Provisioning
2016-10-01 15:35:04 ----D---- C:\WINDOWS\bcastdvr
2016-10-01 15:35:04 ----D---- C:\WINDOWS\AppPatch
2016-10-01 15:35:04 ----D---- C:\Program Files\Internet Explorer
2016-10-01 15:35:04 ----D---- C:\Program Files (x86)\Internet Explorer
2016-09-26 22:44:03 ----D---- C:\Users\Martin\AppData\Roaming\uTorrent
2016-09-26 11:46:09 ----D---- C:\ProgramData\Energy Manager
2016-09-24 22:48:52 ----RD---- C:\Program Files (x86)

File C:\WINDOWS\system32\winlogon.exe is digitally signed
File C:\WINDOWS\system32\wininit.exe is digitally signed
File C:\WINDOWS\explorer.exe is digitally signed
File C:\WINDOWS\SysWOW64\explorer.exe is digitally signed
File C:\WINDOWS\system32\svchost.exe is digitally signed
File C:\WINDOWS\SysWOW64\svchost.exe is digitally signed
File C:\WINDOWS\system32\services.exe is digitally signed
File C:\WINDOWS\system32\User32.dll is digitally signed
File C:\WINDOWS\SysWOW64\User32.dll is digitally signed
File C:\WINDOWS\system32\userinit.exe is digitally signed
File C:\WINDOWS\SysWOW64\userinit.exe is digitally signed
File C:\WINDOWS\system32\rpcss.dll is digitally signed
File C:\WINDOWS\system32\Drivers\volsnap.sys is digitally signed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-05-10 74544]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-08-05 292704]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\WINDOWS\system32\drivers\iorate.sys [2016-07-16 45920]
R0 MBI;@oem41.inf,%MBI.SVCDESC%;Intel(R) Sideband Fabric Device Service; C:\WINDOWS\System32\drivers\MBI.sys [2013-10-10 29464]
R0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2016-10-05 64352]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2016-05-10 37144]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2016-05-10 103064]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-05-10 1070904]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-05-10 465792]
R1 CLVirtualDrive;CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [2013-11-12 91912]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-05-10 37656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-05-10 107792]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2016-05-10 166432]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2016-07-16 70144]
R3 ACPIVPC;@oem26.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2015-05-28 35576]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2016-09-03 84992]
R3 CnxtHdAudService;@oem3.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2015-11-25 1552888]
R3 ibtusb;@oem10.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R); C:\WINDOWS\system32\DRIVERS\ibtusb.sys [2016-07-12 349960]
R3 iwdbus;@oem30.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-12-01 38896]
R3 NETwNb64;___ Intel(R) Wireless Adapter Driver for Windows 8.1 - 64 Bit; C:\WINDOWS\System32\drivers\Netwbw02.sys [2016-07-16 3485696]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-07-23 11142984]
R3 nvvad_WaveExtensible;@oem2.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-03-31 40392]
R3 rt640x64;@oem21.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-07-22 886528]
R3 RTSUER;@oem35.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-07-03 410880]
R3 rtsuvc;@oem24.inf,%rtsuvc.DeviceDesc%;Lenovo EasyCamera; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [2015-06-16 3068160]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-07-27 42696]
R3 SynTP;@oem9.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-07-27 618696]
R3 TXEIx64;@oem19.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\WINDOWS\System32\drivers\TXEIx64.sys [2014-01-15 88592]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2016-07-16 88416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2016-09-03 114176]
S3 BthLEEnum;@BthLEEnum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2016-09-15 249856]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2016-10-05 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2016-09-03 965120]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2016-08-06 73568]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-03-01 38296]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2016-07-16 120320]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-07-16 19288]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2016-07-16 183808]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\WINDOWS\System32\drivers\scmdisk0101.sys [2016-07-16 123904]
S3 UcmTcpciCx0101;UCM-TCPCI KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmTcpciCx.sys [2016-07-16 108544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-05-10 243296]
R2 CCSDK;CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [2014-07-10 592880]
R2 CDPUserSvc_4a3e4a2;CDPUserSvc_4a3e4a2; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R2 CxAudMsg;Conexant Audio Message Service; C:\WINDOWS\system32\CxAudMsg64.exe [2014-10-20 207576]
R2 ibtsiva;@oem10.inf,%SERVICE_NAME%;Intel Bluetooth Service; C:\WINDOWS\system32\ibtsiva []
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2016-05-03 337888]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [2013-07-02 733696]
R2 Lenovo System Agent Service;Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [2015-12-14 584664]
R2 LenovoWiFiHotspotSvr;Lenovo WiFiHotspot Service; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [2015-05-28 198192]
R2 LUService;LUService; C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [2014-02-18 38896]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-07-23 937800]
R2 OneSyncSvc_4a3e4a2;Sync Host_4a3e4a2; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R2 PhoneCompanionPusher;Lenovo PhoneCompanionPusher Service; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [2015-05-28 288240]
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2012-04-24 390632]
R2 SAService;Conexant SmartAudio service; C:\WINDOWS\syswow64\SAsrv.exe [2014-12-09 423128]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-07-27 246472]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2016-05-26 43696]
R3 PimIndexMaintenanceSvc_4a3e4a2;Contact Data_4a3e4a2; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\RMapi.dll
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\TimeBrokerServer.dll
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=%SystemRoot%\System32\CDPUserSvc.dll
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll"=%SystemRoot%\system32\FrameServer.dll
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\hvhostsvc.dll
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-07-02 822232]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\irmon.dll
S3 Lenovo EasyPlus Hotspot;Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [2014-09-23 561408]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2016-01-08 272864]
S3 MessagingService_4a3e4a2;MessagingService_4a3e4a2; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-09-24 172488]
S3 PhoneCompanionVap;Lenovo PhoneCompanionVap Service; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe [2015-05-28 305136]
S4 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2014-07-23 172344]
S4 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-07-16 1719640]
S4 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-07-16 18954072]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; %SystemRoot%\System32\svchost.exe -k netsvcs;"ServiceDll"=%systemroot%\system32\Windows.SharedPC.AccountManager.dll

-----------------EOF-----------------

prikladam aj toto pre istotu

info.txt logfile of random's system information tool 1.13 2016-10-19 18:30:34

======MBR======

0x0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000BE0F942B000000000200EEFFFFFF01000000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055AA

======Uninstall list======

[2016/09/02 18:26:12]-->C:\Program Files\CONEXANT\cAudioFilterAgent\SETUP64.EXE -U -IcAudioFilterAgent -SM=cAudioFilterAgent64.exe,16
[2016/09/02 18:26:12]-->C:\Program Files\Conexant\CxAudMsg\SETUP64.EXE -U -ICxAudMsg
[2016/09/02 18:26:12]-->C:\Program Files\Conexant\DolbyGUI\SETUP64.EXE -U -IDolbyGUI
[2016/09/02 18:26:12]-->C:\Program Files\CONEXANT\ForteConfig\SETUP64.EXE -U -IForteConfig -SM=fmapp.exe,16
[2016/09/02 18:26:12]-->C:\Program Files\Conexant\SAII\SETUP64.EXE -U -ISAII -SWTM="HDAudioAPI-D9A3021B-9BCE-458C-B667-9029C4EF4050,1801"
[2016/09/02 18:26:31]-->"C:\Program Files (x86)\InstallShield Installation Information\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}\setup.exe" /z-uninstall
[2016/09/02 18:26:31]-->MsiExec /X{80407BA7-7763-4395-AB98-5233F1B34E65}
[2016/09/03 20:23:41]-->"C:\Program Files (x86)\InstallShield Installation Information\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}\setup.exe" /z-uninstall
Lenovo Photo Master [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{BC94C56A-3649-420C-8756-2ADEBE399D33}\Setup.exe" /z-uninstall
Lenovo Photo Master [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{BC94C56A-3649-420C-8756-2ADEBE399D33}\Setup.exe" /z-uninstall
Adobe AIR [2016/10/07 20:19:02]-->c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR [20161007]-->MsiExec.exe /I{BBEC10F9-AC15-41EE-A271-0B1077F53740}
Adobe Flash Player 23 NPAPI [2016/10/18 03:01:59]-->C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_23_0_0_185_Plugin.exe -maintain plugin
Avast Free Antivirus [2016/10/07 20:19:02]-->C:\Program Files\AVAST Software\Avast\Setup\Instup.exe /control_panel
CCleaner [2016/09/02 18:26:12]-->"C:\Program Files\CCleaner\uninst.exe"
CCSDK [20150527]-->"C:\Program Files (x86)\Lenovo\CCSDK\unins000.exe" /VERYSILENT /VERYSILENT
Conexant HD Audio [2016/09/02 18:16:35]-->C:\Program Files\CONEXANT\CNXT_AUDIO_HDA\UIU64a.exe -U -G -IG14Plmwa.inf
CyberLink Power2Go 8 [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}\Setup.exe" /z-uninstall
CyberLink Power2Go 8 [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}\Setup.exe" /z-uninstall
CyberLink PowerDirector 10 [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}\setup.exe" /z-uninstall
CyberLink PowerDirector 10 [2016/09/02 18:26:30]-->"C:\Program Files (x86)\InstallShield Installation Information\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}\setup.exe" /z-uninstall
Dependency Package Update [20150527]-->MsiExec.exe /X{5252431C-288E-409D-ADCF-24407E0E6F70}
Dependency Package Update [20160204]-->MsiExec.exe /X{3117B53D-A409-4D99-A0DE-11A1A40696FA}
Dependency Package Update [20160204]-->MsiExec.exe /X{4430150F-61B3-4142-BE04-EAC68C8DDA18}
Dependency Package Update [20160204]-->MsiExec.exe /X{4ABFEC28-1554-493D-A84D-BEA21D8E6D6F}
Dependency Package Update [20160204]-->MsiExec.exe /X{503B47A9-E34A-4841-ADD7-417191D5DB5E}
Dependency Package Update [20160204]-->MsiExec.exe /X{546FF45D-2467-4950-AAFB-0A06ACBB6B2C}
Dependency Package Update [20160204]-->MsiExec.exe /X{5B2190E9-199D-450A-94B3-4D6826C770C2}
Dependency Package Update [20160204]-->MsiExec.exe /X{5BEFE1E1-F597-4B79-913B-15FFDB25B744}
Dependency Package Update [20160204]-->MsiExec.exe /X{63DE35C9-B080-4D03-B110-99E14FD35BCE}
Dependency Package Update [20160204]-->MsiExec.exe /X{65316098-0220-4D5C-B37A-6136083A0897}
Dependency Package Update [20160204]-->MsiExec.exe /X{E966DBE4-5075-465E-BA81-BC9A3A3204B3}
Dependency Package Update [20160204]-->MsiExec.exe /X{FFED38DF-94DC-4FF9-96C1-A6990EDA6B03}
Dependency Package Update [20160212]-->MsiExec.exe /X{0788641D-D31A-478D-BB34-C41564AE9F93}
Dependency Package Update [20160212]-->MsiExec.exe /X{4AF6C9BC-D8DB-4286-94D9-474CE54ADAA2}
Dependency Package Update [20160430]-->MsiExec.exe /X{1D2682EA-75DD-44B6-BF2D-CD3C49EAD012}
Dolby Digital Plus Advanced Audio [20160809]-->MsiExec.exe /X{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}
Energy Manager [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{AC768037-7079-4658-AC24-2897650E0ABE}\setup.exe" -runfromtemp -l0x0409 -removeonly
Energy Manager [20150527]-->MsiExec.exe /I{AC768037-7079-4658-AC24-2897650E0ABE}
Intel(R) Processor Graphics [2016/09/02 18:26:32]-->C:\Program Files (x86)\Intel\Intel(R) Processor Graphics\Uninstall\setup.exe -uninstall
Intel(R) Sideband Fabric Device Driver [2016/09/02 18:26:30]-->C:\Program Files (x86)\Intel\Intel(R) MBI Driver\Uninstall\setup.exe -uninstall
Intel(R) Trusted Execution Engine [20150527]-->MsiExec.exe /I{2D6248C0-4693-4CAB-9922-F05E4015F62A}
Intel(R) Trusted Execution Engine [2016/09/02 18:26:12]-->"C:\ProgramData\Intel\Package Cache\{176E2755-0A17-42C6-88E2-192AB2131278}\Setup.exe" -uninstall
Intel(R) Trusted Execution Engine Driver [20150527]-->MsiExec.exe /I{6307E820-0317-4DCE-AAE0-7B6CAD867055}
Intel® PROSet/Wireless Software [2016/09/02 18:26:31]-->"C:\ProgramData\Package Cache\{2f4d8103-e601-4d48-b81d-d508d760aaba}\Setup.exe" /uninstall
Intel® PROSet/Wireless WiFi Software [20150527]-->MsiExec.exe /I{62DE858A-A2A5-452F-B067-C5F104358AD6}
Lenovo App Services [2016/10/12 17:07:39]-->"C:\ProgramData\Lenovo App Services\Uninstall.exe"
Lenovo Dependency Package [20150527]-->"C:\Program Files\lenovo\iMController\unins000.exe"
Lenovo EasyCamera [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}\setup.exe" /runfromtemp /removeonly /s /f1"C:\Program Files (x86)\InstallShield Installation Information\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}\usetup.iss"
Lenovo EasyCamera [2016/09/02 18:15:23]-->C:\WINDOWS\RtCamU64.exe /u /s
Lenovo FusionEngine [2016/09/02 18:26:30]-->C:\Program Files (x86)\Lenovo\FusionEngine\uninst.exe
Lenovo Mobile Phone Wireless Import [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{DFB2E0D6-8DDE-49A4-B8F7-03C14DACCBA6}\setup.exe" -runfromtemp -l0x0409 -removeonly
Lenovo Mobile Phone Wireless Import [20150527]-->MsiExec.exe /I{DFB2E0D6-8DDE-49A4-B8F7-03C14DACCBA6}
Lenovo OneKey Recovery [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}\setup.exe" /z-uninstall
Lenovo OneKey Recovery [2016/09/02 18:26:30]-->"C:\Program Files (x86)\InstallShield Installation Information\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}\setup.exe" /z-uninstall
Lenovo PhoneCompanion [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{0F82EA83-B0C5-4AB9-9695-DFE92C5FD57B}\setup.exe" -runfromtemp -l0x0409 -removeonly
Lenovo PhoneCompanion [20150527]-->MsiExec.exe /I{0F82EA83-B0C5-4AB9-9695-DFE92C5FD57B}
Lenovo PowerDVD10 [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}\setup.exe" /z-uninstall
Lenovo PowerDVD10 [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}\setup.exe" /z-uninstall
Lenovo Solution Center [20160307]-->MsiExec.exe /X{49277B39-D2E8-4342-9CE8-FC080C3FA344}
Lenovo Updates [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{A2E1E9F0-0B68-4166-8C7F-85B563B84DF4}\setup.exe" -runfromtemp -l0x0409 -removeonly
Lenovo Updates [20150527]-->MsiExec.exe /I{A2E1E9F0-0B68-4166-8C7F-85B563B84DF4}
Metric Collection SDK 35 [20150527]-->MsiExec.exe /X{C2B5B5B0-2545-4E94-B4BA-548D4BF0B196}
Microsoft Office [20150527]-->MsiExec.exe /X{90150000-0138-0409-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable [20150527]-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 [20150527]-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 [20150527]-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 [20150527]-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 [20150527]-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 [2016/09/02 18:26:31]-->"C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /uninstall
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 [20150527]-->MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 [20150527]-->MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}
Mozilla Firefox 49.0.1 (x86 sk) [2016/10/07 20:19:02]-->"C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service [2016/09/24 22:48:53]-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
NVIDIA GeForce Experience 2.1.1 [20150527]-->"C:\windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{94644F0D-F19B-4401-B78E-21286D392DEB}\NVI2.DLL",UninstallPackage Display.GFExperience
NVIDIA Graphics Driver 333.43 [20150527]-->"C:\windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{94644F0D-F19B-4401-B78E-21286D392DEB}\NVI2.DLL",UninstallPackage Display.Driver
NVIDIA PhysX [20150527]-->MsiExec.exe /I{80407BA7-7763-4395-AB98-5233F1B34E65}
NVIDIA PhysX System Software 9.13.1220 [20150527]-->"C:\windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{94644F0D-F19B-4401-B78E-21286D392DEB}\NVI2.DLL",UninstallPackage Display.PhysX
Realtek Card Reader [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\setup.exe" -runfromtemp -removeonly
Realtek Ethernet Controller Driver [20150527]-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe -runfromtemp -removeonly
SafeZone Stable 1.48.2066.101 [2016/09/02 18:26:31]-->"C:\Program Files\AVAST Software\SZBrowser\Launcher.exe" /uninstall
SHAREit [20150527]-->"C:\Program Files (x86)\Lenovo\SHAREit\unins000.exe"
SUPERAntiSpyware [2016/09/02 18:26:13]-->"C:\Program Files\SUPERAntiSpyware\Uninstall.exe"
Synaptics Pointing Device Driver [2016/09/02 18:16:39]-->rundll32.exe "%ProgramFiles%\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
UESDK [20150527]-->"C:\Program Files (x86)\Lenovo\UESDK\unins000.exe" /VERYSILENT /VERYSILENT
User Manuals [20150527]-->"C:\Program Files (x86)\InstallShield Installation Information\{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}\setup.exe" -runfromtemp -l0x0409 -removeonly
User Manuals [20150527]-->MsiExec.exe /X{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}
VLC media player [2016/09/02 18:26:31]-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
Windows Driver Package - Lenovo (ACPIVPC) System (09/24/2013 19.29.2.34) [2016/09/02 18:26:12]-->C:\PROGRA~1\DIFX\8C6574~1\DPInst.exe /u C:\windows\System32\DriverStore\FileRepository\acpivpc.inf_amd64_096f446edcbd01f6\acpivpc.inf
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (07/25/2013 10.30.0.288) [2016/09/02 18:26:11]-->C:\PROGRA~1\DIFX\8C6574~1\DPInst.exe /u C:\windows\System32\DriverStore\FileRepository\wudfvhidmini.inf_amd64_7d883db511b20660\wudfvhidmini.inf
WinRAR 5.21 (64-bit) [2016/09/02 18:26:12]-->C:\Program Files\WinRAR\uninstall.exe

======System event log======

Computer Name: Mato
Event Code: 16392
Message: The BITS service failed to start. Error 0x80080005.
Record Number: 48
Source Name: Microsoft-Windows-Bits-Client
Time Written: 20160902161252.901459-000
Event Type: Error
User: NT AUTHORITY\SYSTEM

Computer Name: Mato
Event Code: 10010
Message: The server {A47979D2-C419-11D9-A5B4-001185AD2B89} did not register with DCOM within the required timeout.
Record Number: 47
Source Name: Microsoft-Windows-DistributedCOM
Time Written: 20160902161244.904849-000
Event Type: Error
User: NT AUTHORITY\SYSTEM

Computer Name: Mato
Event Code: 10010
Message: The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout.
Record Number: 46
Source Name: Microsoft-Windows-DistributedCOM
Time Written: 20160902161244.748567-000
Event Type: Error
User: NT AUTHORITY\LOCAL SERVICE

Computer Name: Mato
Event Code: 7023
Message: Služba Network List Service bola ukončená s nasledujúcou chybou:
The device is not ready.
Record Number: 43
Source Name: Service Control Manager
Time Written: 20160902161044.929978-000
Event Type: Error
User:

Computer Name: Mato
Event Code: 7023
Message: Služba IP Helper bola ukončená s nasledujúcou chybou:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
Record Number: 42
Source Name: Service Control Manager
Time Written: 20160902161042.039209-000
Event Type: Error
User:

=====Application event log=====

Computer Name: Mato
Event Code: 4104
Message: Failed trying to get the state of the cluster node: .The error code returned: 0x8007085A
Record Number: 30
Source Name: Microsoft-Windows-MSDTC Client 2
Time Written: 20160902163049.204810-000
Event Type: Error
User:

Computer Name: Mato
Event Code: 4104
Message: Failed trying to get the state of the cluster node: .The error code returned: 0x8007085A
Record Number: 28
Source Name: Microsoft-Windows-MSDTC 2
Time Written: 20160902163048.923546-000
Event Type: Error
User:

Computer Name: Mato
Event Code: 4104
Message: Failed trying to get the state of the cluster node: MATO.The error code returned: 0x8007085A
Record Number: 27
Source Name: Microsoft-Windows-MSDTC Client 2
Time Written: 20160902163048.095381-000
Event Type: Warning
User:

Computer Name: Mato
Event Code: 4104
Message: Failed trying to get the state of the cluster node: .The error code returned: 0x8007085A
Record Number: 26
Source Name: Microsoft-Windows-MSDTC Client 2
Time Written: 20160902163047.876619-000
Event Type: Error
User:

Computer Name: Mato
Event Code: 1534
Message: Profile notification of event Create for component {D63AA156-D534-4BAC-9BF1-55359CF5EC30} failed, error code is The system cannot find the path specified.
.


Record Number: 9
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20160902162104.796517-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM

=====Security event log=====

Computer Name: Mato
Event Code: 4688
Message: A new process has been created.

Creator Subject:
Security ID: S-1-5-18
Account Name: -
Account Domain: -
Logon ID: 0x3E7

Target Subject:
Security ID: S-1-0-0
Account Name: -
Account Domain: -
Logon ID: 0x0

Process Information:
New Process ID: 0x198
New Process Name: C:\Windows\System32\smss.exe
Token Elevation Type: %%1936
Mandatory Label: S-1-16-16384
Creator Process ID: 0x144
Creator Process Name: C:\Windows\System32\smss.exe
Process Command Line:

Token Elevation Type indicates the type of token that was assigned to the new process in accordance with User Account Control policy.

Type 1 is a full token with no privileges removed or groups disabled. A full token is only used if User Account Control is disabled or if the user is the built-in Administrator account or a service account.

Type 2 is an elevated token with no privileges removed or groups disabled. An elevated token is used when User Account Control is enabled and the user chooses to start the program using Run as administrator. An elevated token is also used when an application is configured to always require administrative privilege or to always require maximum privilege, and the user is a member of the Administrators group.

Type 3 is a limited token with administrative privileges removed and administrative groups disabled. The limited token is used when User Account Control is enabled, the application does not require administrative privilege, and the user does not choose to start the program using Run as administrator.
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20160902160936.587073-000
Event Type: Audit Success
User:

Computer Name: Mato
Event Code: 4688
Message: A new process has been created.

Creator Subject:
Security ID: S-1-5-18
Account Name: -
Account Domain: -
Logon ID: 0x3E7

Target Subject:
Security ID: S-1-0-0
Account Name: -
Account Domain: -
Logon ID: 0x0

Process Information:
New Process ID: 0x18c
New Process Name: C:\Windows\System32\setupcl.exe
Token Elevation Type: %%1936
Mandatory Label: S-1-16-16384
Creator Process ID: 0x144
Creator Process Name: C:\Windows\System32\smss.exe
Process Command Line:

Token Elevation Type indicates the type of token that was assigned to the new process in accordance with User Account Control policy.

Type 1 is a full token with no privileges removed or groups disabled. A full token is only used if User Account Control is disabled or if the user is the built-in Administrator account or a service account.

Type 2 is an elevated token with no privileges removed or groups disabled. An elevated token is used when User Account Control is enabled and the user chooses to start the program using Run as administrator. An elevated token is also used when an application is configured to always require administrative privilege or to always require maximum privilege, and the user is a member of the Administrators group.

Type 3 is a limited token with administrative privileges removed and administrative groups disabled. The limited token is used when User Account Control is enabled, the application does not require administrative privilege, and the user does not choose to start the program using Run as administrator.
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20160902160915.762825-000
Event Type: Audit Success
User:

Computer Name: Mato
Event Code: 4688
Message: A new process has been created.

Creator Subject:
Security ID: S-1-5-18
Account Name: -
Account Domain: -
Logon ID: 0x3E7

Target Subject:
Security ID: S-1-0-0
Account Name: -
Account Domain: -
Logon ID: 0x0

Process Information:
New Process ID: 0x150
New Process Name: C:\Windows\System32\autochk.exe
Token Elevation Type: %%1936
Mandatory Label: S-1-16-16384
Creator Process ID: 0x144
Creator Process Name: C:\Windows\System32\smss.exe
Process Command Line:

Token Elevation Type indicates the type of token that was assigned to the new process in accordance with User Account Control policy.

Type 1 is a full token with no privileges removed or groups disabled. A full token is only used if User Account Control is disabled or if the user is the built-in Administrator account or a service account.

Type 2 is an elevated token with no privileges removed or groups disabled. An elevated token is used when User Account Control is enabled and the user chooses to start the program using Run as administrator. An elevated token is also used when an application is configured to always require administrative privilege or to always require maximum privilege, and the user is a member of the Administrators group.

Type 3 is a limited token with administrative privileges removed and administrative groups disabled. The limited token is used when User Account Control is enabled, the application does not require administrative privilege, and the user does not choose to start the program using Run as administrator.
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20160902160911.196649-000
Event Type: Audit Success
User:

Computer Name: Mato
Event Code: 4688
Message: A new process has been created.

Creator Subject:
Security ID: S-1-5-18
Account Name: -
Account Domain: -
Logon ID: 0x3E7

Target Subject:
Security ID: S-1-0-0
Account Name: -
Account Domain: -
Logon ID: 0x0

Process Information:
New Process ID: 0x144
New Process Name: C:\Windows\System32\smss.exe
Token Elevation Type: %%1936
Mandatory Label: S-1-16-16384
Creator Process ID: 0x4
Creator Process Name:
Process Command Line:

Token Elevation Type indicates the type of token that was assigned to the new process in accordance with User Account Control policy.

Type 1 is a full token with no privileges removed or groups disabled. A full token is only used if User Account Control is disabled or if the user is the built-in Administrator account or a service account.

Type 2 is an elevated token with no privileges removed or groups disabled. An elevated token is used when User Account Control is enabled and the user chooses to start the program using Run as administrator. An elevated token is also used when an application is configured to always require administrative privilege or to always require maximum privilege, and the user is a member of the Administrators group.

Type 3 is a limited token with administrative privileges removed and administrative groups disabled. The limited token is used when User Account Control is enabled, the application does not require administrative privilege, and the user does not choose to start the program using Run as administrator.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20160902160911.079921-000
Event Type: Audit Success
User:

Computer Name: Mato
Event Code: 4826
Message: Boot Configuration Data loaded.

Subject:
Security ID: S-1-5-18
Account Name: -
Account Domain: -
Logon ID: 0x3E7

General Settings:
Load Options: -
Advanced Options: No
Configuration Access Policy: Default
System Event Logging: No
Kernel Debugging: No
VSM Launch Type: Off

Signature Settings:
Test Signing: No
Flight Signing: No
Disable Integrity Checks: No

HyperVisor Settings:
HyperVisor Load Options: -
HyperVisor Launch Type: Off
HyperVisor Debugging: No
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20160902160911.062428-000
Event Type: Audit Success
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"OS"=Windows_NT
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"NUMBER_OF_PROCESSORS"=4
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 55 Stepping 8, GenuineIntel
"PROCESSOR_REVISION"=3708
"FP_NO_HOST_CHECK"=NO
"Path"=C:\Program Files (x86)\Lenovo\FusionEngine;C:\Program Files (x86)\Intel\TXE Components\TCS\;C:\Program Files\Intel\TXE Components\TCS\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin
"configsetroot"=%SystemRoot%\ConfigSetRoot
"easyplussdk"="C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin"
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Nieco to naslo:

# AdwCleaner v6.030 - Logfile created 19/10/2016 at 19:22:50
# Updated on 19/10/2016 by Malwarebytes
# Database : 2016-10-18.1 [Server]
# Operating System : Windows 10 Home (X64)
# Username : Martin - MATO
# Running from : C:\Users\Martin\Desktop\adwcleaner_6.030.exe
# Mode: Clean
# Support : hxxps://www.malwarebytes.com/support



***** [ Services ] *****



***** [ Folders ] *****



***** [ Files ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Shortcuts ] *****



***** [ Scheduled Tasks ] *****



***** [ Registry ] *****

[-] Data restored: HKU\S-1-5-21-2859240268-2567040217-3832528946-1001\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data restored: HKU\S-1-5-21-2859240268-2567040217-3832528946-1001\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
[-] Data restored: HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data restored: HKCU\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
[-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]


***** [ Web browsers ] *****



*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1411 Bytes] - [19/10/2016 19:22:50]
C:\AdwCleaner\AdwCleaner[S0].txt - [1899 Bytes] - [19/10/2016 19:22:36]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1557 Bytes] ##########

Teď dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-10-2016
Ran by Martin (administrator) on MATO (19-10-2016 20:09:51)
Running from C:\Users\Martin\Desktop
Loaded Profiles: Martin (Available Profiles: Martin)
Platform: Windows 10 Home Version 1607 (X64) Language: Angličtina (USA)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
() C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Updates\LU.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo) C:\ProgramData\Lenovo App Services\Engine\LenovoAppServices.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [5060864 2015-06-16] (Realtek semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\nvspcap64.dll [1283136 2014-07-16] (NVIDIA Corporation)
HKLM\...\Run: [PhoneCompanion] => C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [836592 2015-05-28] (Lenovo)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [16094704 2015-05-28] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [10841584 2015-05-28] (Lenovo(beijing) Limited)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [919768 2014-11-20] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3945672 2015-07-27] (Synaptics Incorporated)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [110344 2014-09-09] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [492808 2014-09-09] (CyberLink Corp.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7408312 2016-06-28] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-05-10] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 95.47.178.167 8.8.8.8
Tcpip\..\Interfaces\{1564e105-4c99-468d-9124-90b03cede2f5}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{c0d78d55-e5f7-4ca6-86a5-baee76557cd9}: [DhcpNameServer] 95.47.178.167 8.8.8.8

Internet Explorer:
==================
HKU\S-1-5-21-2859240268-2567040217-3832528946-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-2859240268-2567040217-3832528946-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
SearchScopes: HKU\S-1-5-21-2859240268-2567040217-3832528946-1001 -> DefaultScope {CBDCB047-04D4-4C19-B904-114524D2313F} URL =
SearchScopes: HKU\S-1-5-21-2859240268-2567040217-3832528946-1001 -> {CBDCB047-04D4-4C19-B904-114524D2313F} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-05-10] (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-05-10] (AVAST Software)

FireFox:
========
FF DefaultProfile: sddoq0fl.default
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\sddoq0fl.default [2016-10-19]
FF Homepage: Mozilla\Firefox\Profiles\sddoq0fl.default -> www.google.sk
FF Extension: (Firefox Hotfix) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\sddoq0fl.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-08-31]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-05-10]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-05-10]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_185.dll [2016-10-18] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_23_0_0_185.dll [2016-10-18] ()
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [243296 2016-05-10] (AVAST Software)
R2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [592880 2014-07-10] ()
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-02] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-02] (Intel(R) Corporation)
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [561408 2014-09-23] (Lenovo)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584664 2015-12-14] (LENOVO INCORPORATED.)
R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2015-05-28] (Lenovo(beijing) Limited)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272864 2016-01-08] (Lenovo)
R2 LUService; C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [38896 2014-02-18] (Lenovo(beijing) Limited)
S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1719640 2014-07-16] (NVIDIA Corporation)
S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18954072 2014-07-16] (NVIDIA Corporation)
R2 PhoneCompanionPusher; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [288240 2015-05-28] (Lenovo)
S3 PhoneCompanionVap; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe [305136 2015-05-28] (Lenovo)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-07-27] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [37656 2016-05-10] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [37144 2016-05-10] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [107792 2016-05-10] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [103064 2016-05-10] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-05-10] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1070904 2016-05-10] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [465792 2016-05-10] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [166432 2016-05-10] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-08-05] (AVAST Software)
R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [349960 2016-07-12] (Intel Corporation)
R0 MBI; C:\WINDOWS\System32\drivers\MBI.sys [29464 2013-10-10] (Intel Corporation)
S0 megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [64352 2016-10-05] (Avago Technologies)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 NETwNb64; C:\WINDOWS\System32\drivers\Netwbw02.sys [3485696 2016-07-16] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19288 2014-07-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 2015-07-22] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [410880 2015-07-03] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3068160 2015-06-16] (Realtek Semiconductor Corp.)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-07-27] (Synaptics Incorporated)
R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-10-19 20:09 - 2016-10-19 20:10 - 00013438 _____ C:\Users\Martin\Desktop\FRST.txt
2016-10-19 20:09 - 2016-10-19 20:09 - 02407424 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2016-10-19 20:09 - 2016-10-19 20:09 - 00000000 ____D C:\FRST
2016-10-19 19:19 - 2016-10-19 19:22 - 00000000 ____D C:\AdwCleaner
2016-10-19 19:17 - 2016-10-19 19:18 - 03910208 _____ C:\Users\Martin\Desktop\adwcleaner_6.030.exe
2016-10-19 19:07 - 2016-10-19 19:08 - 00203032 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-10-19 18:29 - 2016-10-19 18:30 - 00000000 ____D C:\rsit
2016-10-19 18:29 - 2016-10-19 18:29 - 00000000 ____D C:\Program Files\trend micro
2016-10-19 18:28 - 2016-10-19 18:29 - 01328128 _____ C:\Users\Martin\Desktop\RSITx64.exe
2016-10-11 21:50 - 2016-10-05 12:17 - 01322848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2016-10-11 21:50 - 2016-10-05 12:12 - 02446696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-10-11 21:50 - 2016-10-05 12:09 - 22219328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-10-11 21:50 - 2016-10-05 11:44 - 22568960 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-10-11 21:50 - 2016-10-05 11:36 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-11 21:50 - 2016-10-05 11:35 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2016-10-11 21:50 - 2016-10-05 11:35 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2016-10-11 21:50 - 2016-10-05 11:33 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-10-11 21:50 - 2016-10-05 11:33 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2016-10-11 21:50 - 2016-10-05 11:32 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2016-10-11 21:50 - 2016-10-05 11:31 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2016-10-11 21:50 - 2016-10-05 11:31 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2016-10-11 21:50 - 2016-10-05 11:30 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2016-10-11 21:50 - 2016-10-05 11:29 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2016-10-11 21:50 - 2016-10-05 11:28 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2016-10-11 21:50 - 2016-10-05 11:26 - 23680512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-10-11 21:50 - 2016-10-05 11:26 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2016-10-11 21:50 - 2016-10-05 11:26 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-10-11 21:50 - 2016-10-05 11:26 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2016-10-11 21:50 - 2016-10-05 11:25 - 01589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2016-10-11 21:50 - 2016-10-05 11:25 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2016-10-11 21:50 - 2016-10-05 11:25 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2016-10-11 21:50 - 2016-10-05 11:24 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2016-10-11 21:50 - 2016-10-05 11:23 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2016-10-11 21:50 - 2016-10-05 11:22 - 13081088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-10-11 21:50 - 2016-10-05 11:21 - 01364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-10-11 21:50 - 2016-10-05 11:20 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-10-11 21:50 - 2016-10-05 11:19 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-10-11 21:50 - 2016-10-05 11:18 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-10-11 21:50 - 2016-10-05 11:17 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-10-11 21:50 - 2016-10-05 11:15 - 07625728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-10-11 21:50 - 2016-10-05 11:15 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2016-10-11 21:50 - 2016-10-05 11:11 - 12174848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-10-11 21:50 - 2016-10-05 11:10 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-10-11 21:50 - 2016-10-05 11:09 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-10-11 21:50 - 2016-10-05 11:08 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2016-10-11 21:50 - 2016-10-05 11:07 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2016-10-11 21:50 - 2016-10-05 11:06 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2016-10-11 21:49 - 2016-10-05 12:13 - 02750384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-10-11 21:49 - 2016-10-05 12:13 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-10-11 21:49 - 2016-10-05 12:13 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2016-10-11 21:49 - 2016-10-05 12:12 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-10-11 21:49 - 2016-10-05 12:09 - 00064352 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys
2016-10-11 21:49 - 2016-10-05 11:51 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-10-11 21:49 - 2016-10-05 11:50 - 02256592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-10-11 21:49 - 2016-10-05 11:45 - 20965240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-10-11 21:49 - 2016-10-05 11:41 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-10-11 21:49 - 2016-10-05 11:38 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2016-10-11 21:49 - 2016-10-05 11:35 - 00327680 _____ C:\WINDOWS\system32\wc_storage.dll
2016-10-11 21:49 - 2016-10-05 11:34 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2016-10-11 21:49 - 2016-10-05 11:33 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-10-11 21:49 - 2016-10-05 11:32 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2016-10-11 21:49 - 2016-10-05 11:31 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2016-10-11 21:49 - 2016-10-05 11:29 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-10-11 21:49 - 2016-10-05 11:27 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-10-11 21:49 - 2016-10-05 11:26 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-10-11 21:49 - 2016-10-05 11:26 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2016-10-11 21:49 - 2016-10-05 11:25 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-10-11 21:49 - 2016-10-05 11:25 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-10-11 21:49 - 2016-10-05 11:24 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll
2016-10-11 21:49 - 2016-10-05 11:23 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2016-10-11 21:49 - 2016-10-05 11:23 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2016-10-11 21:49 - 2016-10-05 11:23 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2016-10-11 21:49 - 2016-10-05 11:23 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2016-10-11 21:49 - 2016-10-05 11:21 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2016-10-11 21:49 - 2016-10-05 11:21 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2016-10-11 21:49 - 2016-10-05 11:20 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-10-11 21:49 - 2016-10-05 11:19 - 02390016 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2016-10-11 21:49 - 2016-10-05 11:19 - 02265088 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-10-11 21:49 - 2016-10-05 11:19 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-10-11 21:49 - 2016-10-05 11:18 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-10-11 21:49 - 2016-10-05 11:18 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2016-10-11 21:49 - 2016-10-05 11:17 - 08126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-10-11 21:49 - 2016-10-05 11:17 - 01493504 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-10-11 21:49 - 2016-10-05 11:16 - 19418624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-10-11 21:49 - 2016-10-05 11:16 - 04747776 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-10-11 21:49 - 2016-10-05 11:16 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-10-11 21:49 - 2016-10-05 11:16 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-10-11 21:49 - 2016-10-05 11:15 - 01980416 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-10-11 21:49 - 2016-10-05 11:15 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-10-11 21:49 - 2016-10-05 11:15 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2016-10-11 21:49 - 2016-10-05 11:14 - 19416576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-10-11 21:49 - 2016-10-05 11:14 - 02667520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-10-11 21:49 - 2016-10-05 11:14 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2016-10-11 21:49 - 2016-10-05 11:14 - 01778176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-10-11 21:49 - 2016-10-05 11:14 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-10-11 21:49 - 2016-10-05 11:13 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2016-10-11 21:49 - 2016-10-05 11:12 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2016-10-11 21:49 - 2016-10-05 11:11 - 06108672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-10-11 21:49 - 2016-10-05 11:11 - 06043136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-10-11 21:49 - 2016-10-05 11:11 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-10-11 21:49 - 2016-10-05 11:09 - 07467520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-10-11 21:49 - 2016-10-05 11:09 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-10-11 21:49 - 2016-10-05 11:09 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-10-11 21:49 - 2016-10-05 11:07 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-10-11 21:49 - 2016-10-05 11:07 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2016-10-11 21:49 - 2016-10-05 11:07 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-10-11 21:49 - 2016-10-05 11:06 - 02254336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-10-11 21:49 - 2016-10-05 11:06 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-10-11 21:49 - 2016-10-05 11:06 - 01594368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-10-11 21:49 - 2016-10-05 11:06 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-10-11 21:49 - 2016-10-05 11:05 - 03105792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2016-10-11 21:49 - 2016-09-07 07:34 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-10-11 21:48 - 2016-10-05 12:35 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-10-11 21:48 - 2016-10-05 12:34 - 01051104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-10-11 21:48 - 2016-10-05 12:34 - 00894088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-10-11 21:48 - 2016-10-05 12:33 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2016-10-11 21:48 - 2016-10-05 12:31 - 02213248 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-10-11 21:48 - 2016-10-05 12:31 - 01353768 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-10-11 21:48 - 2016-10-05 12:31 - 01172472 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-10-11 21:48 - 2016-10-05 12:30 - 07812448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-10-11 21:48 - 2016-10-05 12:22 - 01181536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2016-10-11 21:48 - 2016-10-05 12:16 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-10-11 21:48 - 2016-10-05 12:12 - 01112928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-10-11 21:48 - 2016-10-05 12:09 - 04129928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-10-11 21:48 - 2016-10-05 12:09 - 01071728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-10-11 21:48 - 2016-10-05 12:09 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-10-11 21:48 - 2016-10-05 12:08 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2016-10-11 21:48 - 2016-10-05 12:04 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2016-10-11 21:48 - 2016-10-05 12:04 - 00628032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-10-11 21:48 - 2016-10-05 12:03 - 01705976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-10-11 21:48 - 2016-10-05 11:50 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2016-10-11 21:48 - 2016-10-05 11:49 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-10-11 21:48 - 2016-10-05 11:48 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-10-11 21:48 - 2016-10-05 11:46 - 03892352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-10-11 21:48 - 2016-10-05 11:46 - 01360456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-10-11 21:48 - 2016-10-05 11:46 - 00980824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-10-11 21:48 - 2016-10-05 11:38 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2016-10-11 21:48 - 2016-10-05 11:36 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys
2016-10-11 21:48 - 2016-10-05 11:36 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-10-11 21:48 - 2016-10-05 11:35 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2016-10-11 21:48 - 2016-10-05 11:35 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-10-11 21:48 - 2016-10-05 11:34 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2016-10-11 21:48 - 2016-10-05 11:33 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2016-10-11 21:48 - 2016-10-05 11:32 - 00379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2016-10-11 21:48 - 2016-10-05 11:32 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
2016-10-11 21:48 - 2016-10-05 11:31 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-10-11 21:48 - 2016-10-05 11:31 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-10-11 21:48 - 2016-10-05 11:31 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2016-10-11 21:48 - 2016-10-05 11:31 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2016-10-11 21:48 - 2016-10-05 11:29 - 09129984 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-10-11 21:48 - 2016-10-05 11:29 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-10-11 21:48 - 2016-10-05 11:29 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-10-11 21:48 - 2016-10-05 11:28 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2016-10-11 21:48 - 2016-10-05 11:28 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2016-10-11 21:48 - 2016-10-05 11:28 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2016-10-11 21:48 - 2016-10-05 11:28 - 00406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-10-11 21:48 - 2016-10-05 11:28 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
2016-10-11 21:48 - 2016-10-05 11:27 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2016-10-11 21:48 - 2016-10-05 11:27 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-11 21:48 - 2016-10-05 11:26 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2016-10-11 21:48 - 2016-10-05 11:24 - 13434368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-10-11 21:48 - 2016-10-05 11:23 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-10-11 21:48 - 2016-10-05 11:22 - 07654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-10-11 21:48 - 2016-10-05 11:22 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-10-11 21:48 - 2016-10-05 11:22 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2016-10-11 21:48 - 2016-10-05 11:21 - 08075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-10-11 21:48 - 2016-10-05 11:21 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-10-11 21:48 - 2016-10-05 11:21 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2016-10-11 21:48 - 2016-10-05 11:20 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-10-11 21:48 - 2016-10-05 11:20 - 00804864 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2016-10-11 21:48 - 2016-10-05 11:18 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-10-11 21:48 - 2016-10-05 11:18 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-10-11 21:48 - 2016-10-05 11:18 - 00911872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2016-10-11 21:48 - 2016-10-05 11:17 - 04136960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2016-10-11 21:48 - 2016-10-05 11:17 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll
2016-10-11 21:48 - 2016-10-05 11:16 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-10-11 21:48 - 2016-10-05 11:16 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-10-11 21:48 - 2016-10-05 11:15 - 03617792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-10-11 21:48 - 2016-10-05 11:15 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2016-10-11 21:48 - 2016-10-05 11:15 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-10-11 21:48 - 2016-10-05 11:15 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2016-10-11 21:48 - 2016-10-05 11:15 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2016-10-11 21:48 - 2016-10-05 11:14 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-10-11 21:48 - 2016-10-05 11:14 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-10-11 21:48 - 2016-10-05 11:14 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-10-11 21:48 - 2016-10-05 11:14 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-10-11 21:48 - 2016-10-05 11:14 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-10-11 21:48 - 2016-10-05 11:13 - 12345856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-10-11 21:48 - 2016-10-05 11:13 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2016-10-11 21:48 - 2016-10-05 11:12 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2016-10-11 21:48 - 2016-10-05 11:12 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-10-11 21:48 - 2016-10-05 11:11 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2016-10-11 21:48 - 2016-10-05 11:09 - 03369984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2016-10-11 21:48 - 2016-10-05 11:09 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2016-10-11 21:48 - 2016-10-05 11:08 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-10-11 21:48 - 2016-10-05 11:08 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2016-10-11 21:48 - 2016-10-05 11:07 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2016-10-11 21:48 - 2016-10-05 11:07 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2016-10-11 21:48 - 2016-10-05 11:06 - 02999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-10-11 21:48 - 2016-10-05 11:06 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2016-10-11 21:48 - 2016-10-05 11:06 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-10-11 21:48 - 2016-10-05 11:05 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-10-11 21:48 - 2016-10-05 02:01 - 00446124 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-09-29 22:33 - 2016-09-15 19:40 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2016-09-29 22:33 - 2016-09-15 19:35 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2016-09-29 22:33 - 2016-09-15 19:33 - 00083120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2016-09-29 22:33 - 2016-09-15 19:29 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-09-29 22:33 - 2016-09-15 19:27 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2016-09-29 22:33 - 2016-09-15 19:22 - 00860512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-09-29 22:33 - 2016-09-15 19:21 - 01000288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-09-29 22:33 - 2016-09-15 19:20 - 00634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2016-09-29 22:33 - 2016-09-15 19:15 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2016-09-29 22:33 - 2016-09-15 19:14 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-09-29 22:33 - 2016-09-15 19:14 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2016-09-29 22:33 - 2016-09-15 19:13 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2016-09-29 22:33 - 2016-09-15 19:12 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-09-29 22:33 - 2016-09-15 19:06 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2016-09-29 22:33 - 2016-09-15 19:06 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2016-09-29 22:33 - 2016-09-15 19:03 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-09-29 22:33 - 2016-09-15 19:03 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll
2016-09-29 22:33 - 2016-09-15 19:02 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll
2016-09-29 22:33 - 2016-09-15 18:56 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll
2016-09-29 22:33 - 2016-09-15 18:55 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2016-09-29 22:33 - 2016-09-15 18:50 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2016-09-29 22:33 - 2016-09-15 18:49 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-09-29 22:33 - 2016-09-15 18:42 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-09-29 22:33 - 2016-09-15 18:40 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-09-29 22:33 - 2016-09-15 18:40 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-09-29 22:33 - 2016-09-15 18:39 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-09-29 22:33 - 2016-09-15 18:38 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2016-09-29 22:33 - 2016-09-15 18:38 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2016-09-29 22:33 - 2016-09-15 18:37 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-09-29 22:33 - 2016-09-15 18:37 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2016-09-29 22:33 - 2016-09-15 18:36 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2016-09-29 22:33 - 2016-09-15 18:36 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2016-09-29 22:33 - 2016-09-15 18:36 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-09-29 22:33 - 2016-09-15 18:35 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
2016-09-29 22:33 - 2016-09-15 18:35 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2016-09-29 22:33 - 2016-09-15 18:34 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2016-09-29 22:33 - 2016-09-15 18:34 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2016-09-29 22:33 - 2016-09-15 18:32 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2016-09-29 22:33 - 2016-09-15 18:30 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-09-29 22:33 - 2016-09-15 18:27 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-09-29 22:33 - 2016-09-15 18:26 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-09-29 22:33 - 2016-09-15 18:25 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2016-09-29 22:33 - 2016-09-15 18:23 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2016-09-29 22:33 - 2016-09-15 18:23 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-09-29 22:33 - 2016-09-15 18:21 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2016-09-29 22:33 - 2016-09-15 18:21 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-09-29 22:33 - 2016-09-15 18:20 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2016-09-29 22:33 - 2016-09-15 18:20 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-09-29 22:33 - 2016-09-15 18:20 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2016-09-29 22:33 - 2016-09-15 18:20 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2016-09-29 22:33 - 2016-09-15 18:19 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2016-09-29 22:33 - 2016-09-15 18:19 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-09-29 22:33 - 2016-09-15 18:16 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2016-09-29 22:33 - 2016-08-05 10:29 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-09-29 22:32 - 2016-09-15 20:14 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-09-29 22:32 - 2016-09-15 19:30 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-09-29 22:32 - 2016-09-15 19:29 - 01377016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2016-09-29 22:32 - 2016-09-15 19:29 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2016-09-29 22:32 - 2016-09-15 19:29 - 00512416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2016-09-29 22:32 - 2016-09-15 19:27 - 05622088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2016-09-29 22:32 - 2016-09-15 19:27 - 00553312 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-09-29 22:32 - 2016-09-15 19:25 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-29 22:32 - 2016-09-15 19:23 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-09-29 22:32 - 2016-09-15 19:21 - 01218912 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-09-29 22:32 - 2016-09-15 19:20 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-09-29 22:32 - 2016-09-15 19:18 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-09-29 22:32 - 2016-09-15 19:16 - 01292640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-09-29 22:32 - 2016-09-15 19:16 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-09-29 22:32 - 2016-09-15 19:13 - 01264912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-09-29 22:32 - 2016-09-15 19:12 - 08158672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-09-29 22:32 - 2016-09-15 19:11 - 00773168 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-09-29 22:32 - 2016-09-15 19:10 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-09-29 22:32 - 2016-09-15 19:10 - 00918848 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-09-29 22:32 - 2016-09-15 19:06 - 01469120 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-09-29 22:32 - 2016-09-15 19:06 - 00587968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-09-29 22:32 - 2016-09-15 19:06 - 00050880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-09-29 22:32 - 2016-09-15 19:03 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2016-09-29 22:32 - 2016-09-15 19:01 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2016-09-29 22:32 - 2016-09-15 19:00 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-09-29 22:32 - 2016-09-15 18:59 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll
2016-09-29 22:32 - 2016-09-15 18:58 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-09-29 22:32 - 2016-09-15 18:58 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll
2016-09-29 22:32 - 2016-09-15 18:57 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2016-09-29 22:32 - 2016-09-15 18:57 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-09-29 22:32 - 2016-09-15 18:56 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-09-29 22:32 - 2016-09-15 18:56 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2016-09-29 22:32 - 2016-09-15 18:56 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2016-09-29 22:32 - 2016-09-15 18:56 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2016-09-29 22:32 - 2016-09-15 18:55 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2016-09-29 22:32 - 2016-09-15 18:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-09-29 22:32 - 2016-09-15 18:55 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-09-29 22:32 - 2016-09-15 18:55 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2016-09-29 22:32 - 2016-09-15 18:54 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2016-09-29 22:32 - 2016-09-15 18:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2016-09-29 22:32 - 2016-09-15 18:54 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
2016-09-29 22:32 - 2016-09-15 18:53 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2016-09-29 22:32 - 2016-09-15 18:53 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2016-09-29 22:32 - 2016-09-15 18:52 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2016-09-29 22:32 - 2016-09-15 18:51 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2016-09-29 22:32 - 2016-09-15 18:51 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
2016-09-29 22:32 - 2016-09-15 18:50 - 07219200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-09-29 22:32 - 2016-09-15 18:50 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2016-09-29 22:32 - 2016-09-15 18:47 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-09-29 22:32 - 2016-09-15 18:47 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2016-09-29 22:32 - 2016-09-15 18:46 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2016-09-29 22:32 - 2016-09-15 18:46 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2016-09-29 22:32 - 2016-09-15 18:46 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll
2016-09-29 22:32 - 2016-09-15 18:43 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2016-09-29 22:32 - 2016-09-15 18:43 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2016-09-29 22:32 - 2016-09-15 18:43 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2016-09-29 22:32 - 2016-09-15 18:43 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2016-09-29 22:32 - 2016-09-15 18:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2016-09-29 22:32 - 2016-09-15 18:42 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2016-09-29 22:32 - 2016-09-15 18:41 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2016-09-29 22:32 - 2016-09-15 18:41 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
2016-09-29 22:32 - 2016-09-15 18:41 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2016-09-29 22:32 - 2016-09-15 18:40 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2016-09-29 22:32 - 2016-09-15 18:40 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2016-09-29 22:32 - 2016-09-15 18:40 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-09-29 22:32 - 2016-09-15 18:40 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2016-09-29 22:32 - 2016-09-15 18:39 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-09-29 22:32 - 2016-09-15 18:39 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2016-09-29 22:32 - 2016-09-15 18:39 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll
2016-09-29 22:32 - 2016-09-15 18:39 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2016-09-29 22:32 - 2016-09-15 18:39 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2016-09-29 22:32 - 2016-09-15 18:38 - 01291264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2016-09-29 22:32 - 2016-09-15 18:38 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2016-09-29 22:32 - 2016-09-15 18:38 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2016-09-29 22:32 - 2016-09-15 18:38 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-09-29 22:32 - 2016-09-15 18:38 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll
2016-09-29 22:32 - 2016-09-15 18:37 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-09-29 22:32 - 2016-09-15 18:37 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2016-09-29 22:32 - 2016-09-15 18:37 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll
2016-09-29 22:32 - 2016-09-15 18:37 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-09-29 22:32 - 2016-09-15 18:36 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2016-09-29 22:32 - 2016-09-15 18:36 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2016-09-29 22:32 - 2016-09-15 18:36 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2016-09-29 22:32 - 2016-09-15 18:36 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2016-09-29 22:32 - 2016-09-15 18:36 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2016-09-29 22:32 - 2016-09-15 18:36 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll
2016-09-29 22:32 - 2016-09-15 18:35 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-09-29 22:32 - 2016-09-15 18:35 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2016-09-29 22:32 - 2016-09-15 18:35 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-09-29 22:32 - 2016-09-15 18:35 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-09-29 22:32 - 2016-09-15 18:35 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2016-09-29 22:32 - 2016-09-15 18:35 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-09-29 22:32 - 2016-09-15 18:35 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-09-29 22:32 - 2016-09-15 18:35 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-09-29 22:32 - 2016-09-15 18:35 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-09-29 22:32 - 2016-09-15 18:35 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
2016-09-29 22:32 - 2016-09-15 18:35 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-09-29 22:32 - 2016-09-15 18:34 - 00424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2016-09-29 22:32 - 2016-09-15 18:33 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-09-29 22:32 - 2016-09-15 18:32 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2016-09-29 22:32 - 2016-09-15 18:31 - 01912320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2016-09-29 22:32 - 2016-09-15 18:31 - 01553408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2016-09-29 22:32 - 2016-09-15 18:30 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2016-09-29 22:32 - 2016-09-15 18:30 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2016-09-29 22:32 - 2016-09-15 18:30 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
2016-09-29 22:32 - 2016-09-15 18:29 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2016-09-29 22:32 - 2016-09-15 18:29 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-09-29 22:32 - 2016-09-15 18:29 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2016-09-29 22:32 - 2016-09-15 18:28 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2016-09-29 22:32 - 2016-09-15 18:27 - 05111296 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-09-29 22:32 - 2016-09-15 18:27 - 01078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-09-29 22:32 - 2016-09-15 18:27 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2016-09-29 22:32 - 2016-09-15 18:27 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2016-09-29 22:32 - 2016-09-15 18:27 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2016-09-29 22:32 - 2016-09-15 18:27 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2016-09-29 22:32 - 2016-09-15 18:27 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe
2016-09-29 22:32 - 2016-09-15 18:27 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe
2016-09-29 22:32 - 2016-09-15 18:27 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll
2016-09-29 22:32 - 2016-09-15 18:26 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2016-09-29 22:32 - 2016-09-15 18:26 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
2016-09-29 22:32 - 2016-09-15 18:26 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll
2016-09-29 22:32 - 2016-09-15 18:25 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll
2016-09-29 22:32 - 2016-09-15 18:25 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2016-09-29 22:32 - 2016-09-15 18:24 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2016-09-29 22:32 - 2016-09-15 18:23 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2016-09-29 22:32 - 2016-09-15 18:22 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-09-29 22:32 - 2016-09-15 18:22 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2016-09-29 22:32 - 2016-09-15 18:22 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-09-29 22:32 - 2016-09-15 18:21 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-09-29 22:32 - 2016-09-15 18:21 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-09-29 22:32 - 2016-09-15 18:20 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2016-09-29 22:32 - 2016-09-15 18:19 - 01130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-09-29 22:32 - 2016-09-15 18:19 - 00788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-09-29 22:32 - 2016-09-15 18:16 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2016-09-29 22:32 - 2016-09-15 18:16 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-09-29 22:31 - 2016-09-15 19:35 - 01570680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-09-29 22:31 - 2016-09-15 19:32 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-09-29 22:31 - 2016-09-15 19:30 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2016-09-29 22:31 - 2016-09-15 19:29 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2016-09-29 22:31 - 2016-09-15 19:29 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2016-09-29 22:31 - 2016-09-15 19:29 - 00023392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys
2016-09-29 22:31 - 2016-09-15 19:28 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2016-09-29 22:31 - 2016-09-15 19:26 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2016-09-29 22:31 - 2016-09-15 19:25 - 00262960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2016-09-29 22:31 - 2016-09-15 19:24 - 00764936 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-09-29 22:31 - 2016-09-15 19:23 - 01503032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-09-29 22:31 - 2016-09-15 19:22 - 05722320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-09-29 22:31 - 2016-09-15 19:22 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2016-09-29 22:31 - 2016-09-15 19:19 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2016-09-29 22:31 - 2016-09-15 19:18 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-09-29 22:31 - 2016-09-15 19:18 - 01123368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-09-29 22:31 - 2016-09-15 19:18 - 00955528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-09-29 22:31 - 2016-09-15 19:18 - 00856872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2016-09-29 22:31 - 2016-09-15 19:18 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-09-29 22:31 - 2016-09-15 19:17 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-09-29 22:31 - 2016-09-15 19:16 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-09-29 22:31 - 2016-09-15 19:16 - 02190176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-09-29 22:31 - 2016-09-15 19:16 - 01738040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-09-29 22:31 - 2016-09-15 19:16 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2016-09-29 22:31 - 2016-09-15 19:16 - 00657760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-09-29 22:31 - 2016-09-15 19:16 - 00401760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-09-29 22:31 - 2016-09-15 19:16 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-09-29 22:31 - 2016-09-15 19:15 - 00649568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-09-29 22:31 - 2016-09-15 19:15 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2016-09-29 22:31 - 2016-09-15 19:15 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-09-29 22:31 - 2016-09-15 19:15 - 00130912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2016-09-29 22:31 - 2016-09-15 19:11 - 04673296 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-09-29 22:31 - 2016-09-15 19:06 - 01046880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-09-29 22:31 - 2016-09-15 19:00 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2016-09-29 22:31 - 2016-09-15 19:00 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2016-09-29 22:31 - 2016-09-15 19:00 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-09-29 22:31 - 2016-09-15 18:58 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-09-29 22:31 - 2016-09-15 18:58 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll
2016-09-29 22:31 - 2016-09-15 18:57 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2016-09-29 22:31 - 2016-09-15 18:57 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-09-29 22:31 - 2016-09-15 18:56 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2016-09-29 22:31 - 2016-09-15 18:56 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll
2016-09-29 22:31 - 2016-09-15 18:55 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2016-09-29 22:31 - 2016-09-15 18:55 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2016-09-29 22:31 - 2016-09-15 18:55 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll
2016-09-29 22:31 - 2016-09-15 18:55 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-09-29 22:31 - 2016-09-15 18:55 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-09-29 22:31 - 2016-09-15 18:55 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2016-09-29 22:31 - 2016-09-15 18:54 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2016-09-29 22:31 - 2016-09-15 18:53 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-09-29 22:31 - 2016-09-15 18:53 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2016-09-29 22:31 - 2016-09-15 18:52 - 01358336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-09-29 22:31 - 2016-09-15 18:52 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll
2016-09-29 22:31 - 2016-09-15 18:52 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2016-09-29 22:31 - 2016-09-15 18:52 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-09-29 22:31 - 2016-09-15 18:49 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2016-09-29 22:31 - 2016-09-15 18:49 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-09-29 22:31 - 2016-09-15 18:48 - 01321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2016-09-29 22:31 - 2016-09-15 18:48 - 01112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2016-09-29 22:31 - 2016-09-15 18:47 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2016-09-29 22:31 - 2016-09-15 18:47 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2016-09-29 22:31 - 2016-09-15 18:46 - 03305984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-09-29 22:31 - 2016-09-15 18:45 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2016-09-29 22:31 - 2016-09-15 18:45 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2016-09-29 22:31 - 2016-09-15 18:44 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2016-09-29 22:31 - 2016-09-15 18:43 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll
2016-09-29 22:31 - 2016-09-15 18:42 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-09-29 22:31 - 2016-09-15 18:42 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll
2016-09-29 22:31 - 2016-09-15 18:42 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2016-09-29 22:31 - 2016-09-15 18:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
2016-09-29 22:31 - 2016-09-15 18:41 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
2016-09-29 22:31 - 2016-09-15 18:41 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-09-29 22:31 - 2016-09-15 18:41 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2016-09-29 22:31 - 2016-09-15 18:41 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2016-09-29 22:31 - 2016-09-15 18:40 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-09-29 22:31 - 2016-09-15 18:40 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2016-09-29 22:31 - 2016-09-15 18:40 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthLEEnum.sys
2016-09-29 22:31 - 2016-09-15 18:40 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2016-09-29 22:31 - 2016-09-15 18:40 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2016-09-29 22:31 - 2016-09-15 18:40 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2016-09-29 22:31 - 2016-09-15 18:39 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-09-29 22:31 - 2016-09-15 18:39 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-09-29 22:31 - 2016-09-15 18:39 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2016-09-29 22:31 - 2016-09-15 18:39 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-09-29 22:31 - 2016-09-15 18:39 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2016-09-29 22:31 - 2016-09-15 18:38 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-09-29 22:31 - 2016-09-15 18:38 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll
2016-09-29 22:31 - 2016-09-15 18:38 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2016-09-29 22:31 - 2016-09-15 18:38 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-09-29 22:31 - 2016-09-15 18:38 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2016-09-29 22:31 - 2016-09-15 18:38 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-09-29 22:31 - 2016-09-15 18:38 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2016-09-29 22:31 - 2016-09-15 18:38 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2016-09-29 22:31 - 2016-09-15 18:37 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-09-29 22:31 - 2016-09-15 18:37 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-09-29 22:31 - 2016-09-15 18:37 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-09-29 22:31 - 2016-09-15 18:36 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2016-09-29 22:31 - 2016-09-15 18:36 - 00648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2016-09-29 22:31 - 2016-09-15 18:36 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-09-29 22:31 - 2016-09-15 18:36 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-09-29 22:31 - 2016-09-15 18:36 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2016-09-29 22:31 - 2016-09-15 18:36 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-09-29 22:31 - 2016-09-15 18:36 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2016-09-29 22:31 - 2016-09-15 18:35 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
2016-09-29 22:31 - 2016-09-15 18:35 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2016-09-29 22:31 - 2016-09-15 18:34 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
2016-09-29 22:31 - 2016-09-15 18:34 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2016-09-29 22:31 - 2016-09-15 18:34 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2016-09-29 22:31 - 2016-09-15 18:33 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2016-09-29 22:31 - 2016-09-15 18:33 - 01004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-09-29 22:31 - 2016-09-15 18:33 - 00963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2016-09-29 22:31 - 2016-09-15 18:33 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll
2016-09-29 22:31 - 2016-09-15 18:32 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2016-09-29 22:31 - 2016-09-15 18:32 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2016-09-29 22:31 - 2016-09-15 18:31 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2016-09-29 22:31 - 2016-09-15 18:31 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2016-09-29 22:31 - 2016-09-15 18:30 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-09-29 22:31 - 2016-09-15 18:29 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-09-29 22:31 - 2016-09-15 18:29 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe
2016-09-29 22:31 - 2016-09-15 18:28 - 03288064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2016-09-29 22:31 - 2016-09-15 18:28 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2016-09-29 22:31 - 2016-09-15 18:28 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-09-29 22:31 - 2016-09-15 18:27 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2016-09-29 22:31 - 2016-09-15 18:27 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-09-29 22:31 - 2016-09-15 18:27 - 00702976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2016-09-29 22:31 - 2016-09-15 18:26 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2016-09-29 22:31 - 2016-09-15 18:25 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-09-29 22:31 - 2016-09-15 18:25 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll
2016-09-29 22:31 - 2016-09-15 18:23 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-09-29 22:31 - 2016-09-15 18:23 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-09-29 22:31 - 2016-09-15 18:23 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2016-09-29 22:31 - 2016-09-15 18:23 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2016-09-29 22:31 - 2016-09-15 18:22 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-09-29 22:31 - 2016-09-15 18:22 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2016-09-29 22:31 - 2016-09-15 18:22 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-09-29 22:31 - 2016-09-15 18:22 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2016-09-29 22:31 - 2016-09-15 18:21 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-09-29 22:31 - 2016-09-15 18:20 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2016-09-29 22:31 - 2016-09-15 18:20 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-09-29 22:31 - 2016-09-15 18:20 - 01710080 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-09-29 22:31 - 2016-09-15 18:20 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-09-29 22:31 - 2016-09-15 18:19 - 03202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-09-29 22:31 - 2016-09-15 18:19 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-09-29 22:31 - 2016-09-15 18:18 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-09-29 22:31 - 2016-09-15 18:18 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-09-29 22:31 - 2016-09-15 18:17 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-09-29 22:31 - 2016-09-15 18:16 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe
2016-09-29 22:31 - 2016-08-06 05:34 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
2016-09-29 22:31 - 2016-08-05 10:29 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-09-29 22:30 - 2016-09-15 19:37 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-09-29 22:30 - 2016-09-15 19:37 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2016-09-29 22:30 - 2016-09-15 19:37 - 00402352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2016-09-29 22:30 - 2016-09-15 19:29 - 00424640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2016-09-29 22:30 - 2016-09-15 19:29 - 00169056 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2016-09-29 22:30 - 2016-09-15 19:29 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2016-09-29 22:30 - 2016-09-15 19:27 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-09-29 22:30 - 2016-09-15 19:27 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-09-29 22:30 - 2016-09-15 19:25 - 00340320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-09-29 22:30 - 2016-09-15 19:25 - 00280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
2016-09-29 22:30 - 2016-09-15 19:22 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-09-29 22:30 - 2016-09-15 19:21 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2016-09-29 22:30 - 2016-09-15 19:18 - 06654616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-09-29 22:30 - 2016-09-15 19:15 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2016-09-29 22:30 - 2016-09-15 19:15 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-09-29 22:30 - 2016-09-15 19:14 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2016-09-29 22:30 - 2016-09-15 19:14 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2016-09-29 22:30 - 2016-09-15 19:14 - 00988512 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2016-09-29 22:30 - 2016-09-15 19:14 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2016-09-29 22:30 - 2016-09-15 19:14 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2016-09-29 22:30 - 2016-09-15 19:14 - 00435040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-09-29 22:30 - 2016-09-15 19:12 - 01472536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-09-29 22:30 - 2016-09-15 19:11 - 01990640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-09-29 22:30 - 2016-09-15 19:11 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-09-29 22:30 - 2016-09-15 19:11 - 01066104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-09-29 22:30 - 2016-09-15 19:11 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2016-09-29 22:30 - 2016-09-15 19:11 - 00725664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2016-09-29 22:30 - 2016-09-15 19:11 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2016-09-29 22:30 - 2016-09-15 19:08 - 05683712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-09-29 22:30 - 2016-09-15 19:07 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2016-09-29 22:30 - 2016-09-15 19:07 - 01418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-09-29 22:30 - 2016-09-15 19:07 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2016-09-29 22:30 - 2016-09-15 19:06 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-09-29 22:30 - 2016-09-15 19:01 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2016-09-29 22:30 - 2016-09-15 18:59 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2016-09-29 22:30 - 2016-09-15 18:59 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll
2016-09-29 22:30 - 2016-09-15 18:58 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2016-09-29 22:30 - 2016-09-15 18:58 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2016-09-29 22:30 - 2016-09-15 18:58 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2016-09-29 22:30 - 2016-09-15 18:58 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2016-09-29 22:30 - 2016-09-15 18:57 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2016-09-29 22:30 - 2016-09-15 18:57 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2016-09-29 22:30 - 2016-09-15 18:57 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
2016-09-29 22:30 - 2016-09-15 18:56 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2016-09-29 22:30 - 2016-09-15 18:56 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2016-09-29 22:30 - 2016-09-15 18:56 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2016-09-29 22:30 - 2016-09-15 18:56 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2016-09-29 22:30 - 2016-09-15 18:55 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2016-09-29 22:30 - 2016-09-15 18:55 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2016-09-29 22:30 - 2016-09-15 18:55 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2016-09-29 22:30 - 2016-09-15 18:55 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2016-09-29 22:30 - 2016-09-15 18:55 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2016-09-29 22:30 - 2016-09-15 18:54 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-09-29 22:30 - 2016-09-15 18:54 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2016-09-29 22:30 - 2016-09-15 18:53 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2016-09-29 22:30 - 2016-09-15 18:52 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2016-09-29 22:30 - 2016-09-15 18:52 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll
2016-09-29 22:30 - 2016-09-15 18:52 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2016-09-29 22:30 - 2016-09-15 18:51 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2016-09-29 22:30 - 2016-09-15 18:50 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll
2016-09-29 22:30 - 2016-09-15 18:49 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2016-09-29 22:30 - 2016-09-15 18:48 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2016-09-29 22:30 - 2016-09-15 18:46 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2016-09-29 22:30 - 2016-09-15 18:46 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2016-09-29 22:30 - 2016-09-15 18:46 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-09-29 22:30 - 2016-09-15 18:45 - 02749440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2016-09-29 22:30 - 2016-09-15 18:45 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-09-29 22:30 - 2016-09-15 18:44 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2016-09-29 22:30 - 2016-09-15 18:44 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2016-09-29 22:30 - 2016-09-15 18:44 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-09-29 22:30 - 2016-09-15 18:43 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2016-09-29 22:30 - 2016-09-15 18:43 - 03196416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-09-29 22:30 - 2016-09-15 18:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll
2016-09-29 22:30 - 2016-09-15 18:43 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-09-29 22:30 - 2016-09-15 18:43 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2016-09-29 22:30 - 2016-09-15 18:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll
2016-09-29 22:30 - 2016-09-15 18:41 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-09-29 22:30 - 2016-09-15 18:41 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2016-09-29 22:30 - 2016-09-15 18:41 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2016-09-29 22:30 - 2016-09-15 18:40 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-09-29 22:30 - 2016-09-15 18:40 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2016-09-29 22:30 - 2016-09-15 18:40 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2016-09-29 22:30 - 2016-09-15 18:40 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2016-09-29 22:30 - 2016-09-15 18:40 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2016-09-29 22:30 - 2016-09-15 18:40 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-09-29 22:30 - 2016-09-15 18:40 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-09-29 22:30 - 2016-09-15 18:39 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2016-09-29 22:30 - 2016-09-15 18:39 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
2016-09-29 22:30 - 2016-09-15 18:39 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2016-09-29 22:30 - 2016-09-15 18:38 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2016-09-29 22:30 - 2016-09-15 18:38 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-09-29 22:30 - 2016-09-15 18:38 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2016-09-29 22:30 - 2016-09-15 18:38 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
2016-09-29 22:30 - 2016-09-15 18:38 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-09-29 22:30 - 2016-09-15 18:37 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2016-09-29 22:30 - 2016-09-15 18:37 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-09-29 22:30 - 2016-09-15 18:37 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll
2016-09-29 22:30 - 2016-09-15 18:37 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2016-09-29 22:30 - 2016-09-15 18:37 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2016-09-29 22:30 - 2016-09-15 18:36 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2016-09-29 22:30 - 2016-09-15 18:36 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2016-09-29 22:30 - 2016-09-15 18:36 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-09-29 22:30 - 2016-09-15 18:36 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2016-09-29 22:30 - 2016-09-15 18:36 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-09-29 22:30 - 2016-09-15 18:36 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2016-09-29 22:30 - 2016-09-15 18:35 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-09-29 22:30 - 2016-09-15 18:35 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-09-29 22:30 - 2016-09-15 18:35 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2016-09-29 22:30 - 2016-09-15 18:35 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2016-09-29 22:30 - 2016-09-15 18:35 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2016-09-29 22:30 - 2016-09-15 18:34 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-09-29 22:30 - 2016-09-15 18:33 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
2016-09-29 22:30 - 2016-09-15 18:33 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2016-09-29 22:30 - 2016-09-15 18:31 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll
2016-09-29 22:30 - 2016-09-15 18:30 - 03776512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-09-29 22:30 - 2016-09-15 18:30 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-09-29 22:30 - 2016-09-15 18:30 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-09-29 22:30 - 2016-09-15 18:30 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2016-09-29 22:30 - 2016-09-15 18:29 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2016-09-29 22:30 - 2016-09-15 18:28 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2016-09-29 22:30 - 2016-09-15 18:27 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2016-09-29 22:30 - 2016-09-15 18:27 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL
2016-09-29 22:30 - 2016-09-15 18:25 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-09-29 22:30 - 2016-09-15 18:25 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-09-29 22:30 - 2016-09-15 18:24 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2016-09-29 22:30 - 2016-09-15 18:24 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-09-29 22:30 - 2016-09-15 18:24 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-09-29 22:30 - 2016-09-15 18:24 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2016-09-29 22:30 - 2016-09-15 18:24 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-09-29 22:30 - 2016-09-15 18:23 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2016-09-29 22:30 - 2016-09-15 18:23 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
2016-09-29 22:30 - 2016-09-15 18:23 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-09-29 22:30 - 2016-09-15 18:22 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2016-09-29 22:30 - 2016-09-15 18:20 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-09-29 22:30 - 2016-09-15 18:19 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2016-09-29 22:30 - 2016-09-15 18:17 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2016-09-29 22:30 - 2016-09-15 18:16 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2016-09-29 22:30 - 2016-09-15 18:16 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2016-09-29 22:30 - 2016-08-06 05:33 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
2016-09-28 20:47 - 2016-09-28 20:51 - 00000000 ____D C:\Users\Martin\Desktop\fotky moje
2016-09-26 21:18 - 2016-09-26 22:14 - 2140321532 _____ C:\Users\Martin\Desktop\Teenage.Mutant.Ninja.Turtles.Out.Of.The.Shadows.2016.1080p.BluRay.DD.x264.CZ.mkv
2016-09-24 20:51 - 2016-10-01 15:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-10-19 19:39 - 2015-05-28 06:02 - 00000000 ____D C:\ProgramData\Lenovo App Services
2016-10-19 19:29 - 2016-09-03 03:49 - 00399266 _____ C:\WINDOWS\system32\perfh005.dat
2016-10-19 19:29 - 2016-09-03 03:49 - 00120786 _____ C:\WINDOWS\system32\perfc005.dat
2016-10-19 19:29 - 2016-07-30 01:25 - 01546260 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-10-19 19:23 - 2016-09-02 18:33 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-10-19 19:23 - 2016-07-16 08:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2016-10-19 19:01 - 2016-02-10 23:39 - 00007602 _____ C:\Users\Martin\AppData\Local\resmon.resmoncfg
2016-10-19 18:57 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF
2016-10-19 18:46 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-10-19 17:58 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-10-19 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-10-18 17:13 - 2016-02-03 20:40 - 00000000 ____D C:\Users\Martin\AppData\Roaming\vlc
2016-10-18 14:32 - 2016-09-02 18:09 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-10-18 13:45 - 2016-09-02 18:32 - 00004280 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-10-18 13:45 - 2016-02-04 03:51 - 00000000 __SHD C:\Users\Martin\IntelGraphicsProfiles
2016-10-18 03:02 - 2016-02-07 13:05 - 00000000 ____D C:\Users\Martin\AppData\Local\Adobe
2016-10-18 03:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-10-18 03:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-10-12 17:07 - 2016-09-02 18:32 - 00003154 _____ C:\WINDOWS\System32\Tasks\Lenovo App Services
2016-10-12 16:52 - 2016-04-27 08:39 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-10-12 16:47 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-10-12 16:47 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-10-12 16:47 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-10-12 16:47 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
2016-10-12 16:47 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-10-12 16:47 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-10-12 16:47 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-10-12 16:43 - 2016-02-03 14:32 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-10-12 16:39 - 2016-02-03 14:32 - 143495576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-10-04 12:06 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache
2016-10-03 22:09 - 2016-07-16 13:49 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-10-03 22:09 - 2016-07-16 13:49 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-10-03 13:00 - 2016-09-02 18:21 - 00000000 ____D C:\Users\Martin
2016-10-01 15:37 - 2016-02-07 12:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-10-01 15:35 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2016-10-01 15:35 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-10-01 15:35 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2016-10-01 15:35 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\setup
2016-10-01 15:35 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-10-01 15:35 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-10-01 15:35 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Provisioning
2016-10-01 15:35 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-10-01 15:35 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-10-01 15:35 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-10-01 15:35 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-09-26 22:44 - 2016-02-18 20:03 - 00000000 ____D C:\Users\Martin\AppData\Roaming\uTorrent
2016-09-26 11:46 - 2015-05-28 06:22 - 00000000 ____D C:\ProgramData\Energy Manager

==================== Files in the root of some directories =======

2016-02-10 23:39 - 2016-10-19 19:01 - 0007602 _____ () C:\Users\Martin\AppData\Local\resmon.resmoncfg
2016-09-02 18:16 - 2016-09-02 18:16 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Martin\AppData\Local\Temp\libeay32.dll
C:\Users\Martin\AppData\Local\Temp\msvcr120.dll
C:\Users\Martin\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-10-05 13:37

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-10-2016
Ran by Martin (19-10-2016 20:11:21)
Running from C:\Users\Martin\Desktop
Windows 10 Home Version 1607 (X64) (2016-09-02 16:44:11)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2859240268-2567040217-3832528946-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2859240268-2567040217-3832528946-503 - Limited - Disabled)
Guest (S-1-5-21-2859240268-2567040217-3832528946-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2859240268-2567040217-3832528946-1003 - Limited - Enabled)
Martin (S-1-5-21-2859240268-2567040217-3832528946-1001 - Administrator - Enabled) => C:\Users\Martin

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 23.0.0.257 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.185 - Adobe Systems Incorporated)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.2.2262 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.14 - Piriform)
CCSDK (HKLM-x32\...\{AE75190B-11B4-4F90-8254-DAB275CF2557}_is1) (Version: 1.0.3.4 - Lenovo)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.27.55 - Conexant)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.4505 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.2810 - CyberLink Corp.)
CyberLink PowerDirector 10 (Version: 10.0.0.2810 - CyberLink Corp.) Hidden
Dependency Package Update (Version: 1.6.29.00 - Lenovo Inc.) Hidden
Dependency Package Update (Version: 1.6.32.00 - Lenovo Inc.) Hidden
Dependency Package Update (Version: 1.6.38.00 - Lenovo Inc.) Hidden
Dependency Package Update (x32 Version: 1.6.32.00 - Lenovo Group Limited) Hidden
Dependency Package Update (x32 Version: 1.6.38.00 - Lenovo Group Limited) Hidden
Dependency Package Update (x32 Version: 1.6.38.01 - Lenovo Group Limited) Hidden
Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc)
Energy Manager (HKLM-x32\...\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.5.0.21 - Lenovo)
Energy Manager (x32 Version: 1.5.0.21 - Lenovo) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 17.0.1347.2) (HKLM\...\{302600C1-6BDF-4FD1-1312-148929CC1385}) (Version: 17.0.1312.0414 - Intel Corporation)
Intel(R) Sideband Fabric Device Driver (HKLM-x32\...\C5A8BC6E-723A-4C0F-96E1-C426D1A4BCA9) (Version: 1.0.0.1002 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1064 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{2f4d8103-e601-4d48-b81d-d508d760aaba}) (Version: 17.0.3 - Intel Corporation)
Lenovo App Services (HKLM\...\Lenovo App Services) (Version: 0.200.8.268 - Lenovo)
Lenovo Dependency Package (HKLM\...\Lenovo Dependency Package_is1) (Version: 1.6.38.00 - Lenovo Group Limited)
Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10260 - Realtek Semiconductor Corp.)
Lenovo EasyCamera (HKLM-x32\...\{E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC}) (Version: 6.3.9600.11105 - Realtek Semiconductor Corp.)
Lenovo FusionEngine (HKLM-x32\...\Lenovo FusionEngine) (Version: 1.0.13.0 - Lenovo, Inc.)
Lenovo Mobile Phone Wireless Import (HKLM-x32\...\InstallShield_{DFB2E0D6-8DDE-49A4-B8F7-03C14DACCBA6}) (Version: 1.1.1.9 - Lenovo)
Lenovo Mobile Phone Wireless Import (x32 Version: 1.1.1.9 - Lenovo) Hidden
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.1.0.2326 - CyberLink Corp.)
Lenovo OneKey Recovery (Version: 8.1.0.2326 - CyberLink Corp.) Hidden
Lenovo PhoneCompanion (HKLM-x32\...\InstallShield_{0F82EA83-B0C5-4AB9-9695-DFE92C5FD57B}) (Version: 1.2.0.0 - Lenovo)
Lenovo PhoneCompanion (x32 Version: 1.2.0.0 - Lenovo) Hidden
Lenovo Photo Master (HKLM-x32\...\InstallShield_{BC94C56A-3649-420C-8756-2ADEBE399D33}) (Version: 1.5.2624.01 - CyberLink Corp.)
Lenovo Photo Master (x32 Version: 1.5.2624.01 - CyberLink Corp.) Hidden
Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5630.52 - CyberLink Corp.)
Lenovo PowerDVD10 (x32 Version: 10.0.5630.52 - CyberLink Corp.) Hidden
Lenovo Solution Center (HKLM\...\{49277B39-D2E8-4342-9CE8-FC080C3FA344}) (Version: 2.8.007.00 - Lenovo Group Limited)
Lenovo Updates (HKLM-x32\...\InstallShield_{A2E1E9F0-0B68-4166-8C7F-85B563B84DF4}) (Version: 1.0.0.65 - Lenovo)
Lenovo Updates (x32 Version: 1.0.0.65 - Lenovo) Hidden
Metric Collection SDK 35 (x32 Version: 1.2.0006.00 - Lenovo Group Limited) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4641.3004 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mozilla Firefox 49.0.1 (x86 sk) (HKLM-x32\...\Mozilla Firefox 49.0.1 (x86 sk)) (Version: 49.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.1.6109 - Mozilla)
NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)
NVIDIA Graphics Driver 333.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 333.43 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9600.39053 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
SafeZone Stable 1.48.2066.101 (x32 Version: 1.48.2066.101 - Avast Software) Hidden
SHAREit (HKLM-x32\...\SHAREit_is1) (Version: 2.1.8.0 - Lenovo Group Limited)
SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1212 - SUPERAntiSpyware.com)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.16.0 - Synaptics Incorporated)
UESDK (HKLM-x32\...\{EB3F6640-58AE-4886-B8BA-466B6939A933}_is1) (Version: 1.0.3.6 - Lenovo)
User Manuals (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 3.0.0.3 - Lenovo)
User Manuals (x32 Version: 3.0.0.3 - Lenovo) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Driver Package - Lenovo (ACPIVPC) System (09/24/2013 19.29.2.34) (HKLM\...\EE9B1F2037C580F36D92FA431CC02BFF04C31F15) (Version: 09/24/2013 19.29.2.34 - Lenovo)
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (07/25/2013 10.30.0.288) (HKLM\...\6BCA401E9CBEED970D75F55FA5320F60D11984E9) (Version: 07/25/2013 10.30.0.288 - Lenovo)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2859240268-2567040217-3832528946-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Martin\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2859240268-2567040217-3832528946-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {299CB035-5CF1-4983-9DD3-48D55BD7669E} - System32\Tasks\OFFICE2013ACT => C:\ProgramData\Office2013\OFFICEICON.vbs [2013-06-03] ()
Task: {2C4C6BCC-3673-4259-BB77-5D1C16DD2EA3} - System32\Tasks\PDVDServ Task => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE [2013-03-09] (CyberLink Corp.)
Task: {319D02D6-794B-4BEF-93EF-927045D219F7} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {3205E1DE-F81D-45E8-B6D4-2D02DFF26B5C} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2016-01-08] ()
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {3C867CFF-906E-40E9-BFCB-0DD11F5BAC83} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {3F3577C2-C888-4144-A2DF-EA348AFDDBAC} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2016-01-08] (Lenovo)
Task: {45D584D9-6BE4-4E28-BBC3-39BB241F0947} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {4662BD74-068D-4BD6-B698-932409079AB7} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {607ED568-C12A-4415-81B6-23B52576A05C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {73AB0541-354F-4BCF-89CF-9017C5467D12} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {748E883D-063B-496A-8247-B61318132C0F} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2016-01-08] (Lenovo)
Task: {91CD2C57-FADC-421C-8350-CE603F06A1B8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-05-10] (AVAST Software)
Task: {92B62F16-79B0-4193-BB0A-1B3A138A0F6A} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [2015-12-14] ()
Task: {982565A6-02C6-4300-961C-CD59593DBD2B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-01-15] (Piriform Ltd)
Task: {A1AC5BC9-D3CB-42FE-8F1E-E8E5630E017E} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {A36B1E45-208C-49D1-BC26-A8D624E5319D} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A50B1683-2F8F-4A89-9EA3-3D136790B5A4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2016-10-12] (Microsoft Corporation)
Task: {B6D8612F-EF62-4BBF-A687-9BCA38925CA2} - System32\Tasks\Lenovo App Services => C:\ProgramData\Lenovo App Services\Engine\LenovoAppServices.exe [2016-10-06] (Lenovo)
Task: {BF4169D8-C811-4EEE-8796-30F518B4E188} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2016-01-08] (Lenovo)
Task: {C849E7CE-D696-46F2-83D2-AB97DB47A157} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> No File <==== ATTENTION
Task: {D18337C6-9950-421B-BA7E-6EE7D69A3919} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => Rundll32.exe C:\windows\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)"
Task: {D94A4546-2D9B-4D9D-862A-E00569F06319} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {DD3508C3-5E94-42AB-A44F-A0744252876E} - System32\Tasks\SafeZone scheduled Autoupdate 1462870297 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-04-15] (Avast Software)
Task: {E37EE0F2-564E-485D-8818-DFB2F7652DE2} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {E4EADF37-2C0E-4593-96F8-D06C937DFD4A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {E88AB299-D5EB-42BD-B282-F25502DB377B} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Martin\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-15] (Microsoft Corporation)
Task: {EF322C96-F14D-4891-BFEE-C6215F747406} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-07-27] (Synaptics Incorporated)
Task: {F384A8DA-DC69-4E89-85BB-5754DCD25AAD} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {F405D523-36F7-4A49-8F52-184EE961C881} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {F70B0A4E-5365-4287-83B3-31F28331EEF4} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {F9F60FD9-BD1B-40E5-B537-22994B183B31} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2016-01-08] ()

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-09-29 22:32 - 2016-09-15 19:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-02 18:17 - 2015-07-23 03:10 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-05-28 06:11 - 2012-04-24 12:43 - 00390632 ____N () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2016-09-29 22:32 - 2016-09-15 19:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-02 20:15 - 2016-09-02 20:15 - 01864384 _____ () C:\Users\Martin\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\ClientTelemetry.dll
2016-09-15 19:29 - 2016-09-07 06:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-10-11 21:48 - 2016-10-05 11:35 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-10-11 21:49 - 2016-10-05 11:21 - 09760256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-10-11 21:49 - 2016-10-05 11:13 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-10-11 21:49 - 2016-10-05 11:13 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-10-11 21:49 - 2016-10-05 11:13 - 02424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-10-11 21:49 - 2016-10-05 11:14 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2014-03-26 21:50 - 2015-05-28 06:21 - 00058864 _____ () C:\Program Files (x86)\Lenovo\Energy Manager\kbdhook.dll
2016-08-09 19:50 - 2010-10-26 12:40 - 00049056 _____ () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
2015-05-28 06:02 - 2014-07-10 02:19 - 00592880 _____ () C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
2016-09-28 18:24 - 2016-09-28 18:24 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-09-28 18:24 - 2016-09-28 18:24 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-09-28 18:24 - 2016-09-28 18:24 - 35250688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-05-10 10:49 - 2016-05-10 10:49 - 00123344 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-05-10 10:49 - 2016-05-10 10:49 - 00135816 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-10-19 14:45 - 2016-10-19 14:45 - 03121496 _____ () C:\Program Files\AVAST Software\Avast\defs\16101900\algo.dll
2016-05-10 10:49 - 2016-05-10 10:49 - 00309912 _____ () C:\Program Files\AVAST Software\Avast\browser_pass.dll
2016-05-10 10:49 - 2016-05-10 10:49 - 00479680 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-09-02 20:15 - 2016-09-02 20:15 - 01383616 _____ () C:\Users\Martin\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\ClientTelemetry.dll
2016-09-02 20:15 - 2016-09-02 20:15 - 00118976 _____ () C:\Users\Martin\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileSyncViews.dll
2016-02-07 12:36 - 2016-02-07 12:36 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2859240268-2567040217-3832528946-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img0.jpg
DNS Servers: 95.47.178.167 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\Services: !SASCORE => 2
MSCONFIG\Services: Bluetooth Device Monitor => 2
MSCONFIG\Services: Bluetooth OBEX Service => 2
MSCONFIG\Services: BthHFSrv => 3
MSCONFIG\Services: NvNetworkService => 2
MSCONFIG\Services: NvStreamSvc => 2
HKLM\...\StartupApproved\Run: => "PhoneCompanion"
HKLM\...\StartupApproved\Run: => "SmartAudio"
HKLM\...\StartupApproved\Run32: => "CLMLServer_For_P2G8"
HKLM\...\StartupApproved\Run32: => "CLVirtualDrive"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{0075AA0B-E8DE-4A0C-AF54-9EFD18C9A4F6}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{130E7812-ACEE-4CAF-88E3-2FC0B536624B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{57ABB03B-B438-43AB-8AAA-8E2AC9A79AB1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{9633FDA5-A32A-411D-860B-5CE67A8364A4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{E8C0842B-64EF-403B-B030-1AE5C0AFED2C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{260FB924-3F00-4A34-9163-A24D25A25EFB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{DCB202A2-85C5-4665-A223-74C5C3184062}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe
FirewallRules: [{A4588278-AE45-4E7B-AE89-B3CA5375F7DD}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe
FirewallRules: [{6D60E670-2847-42B6-9207-97DFBB5BB008}] => (Allow) C:\Program Files\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{D59EDAEF-7E66-4FE3-A2A0-F7AB84374315}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{F2D3F566-F030-4814-A85B-ECF8E0A8B48A}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{51A48944-5C0B-44AF-86B8-A07D81AB97DF}] => (Allow) C:\Program Files (x86)\Lenovo\Lenovo Photo Master\subsys\AdvPhotoEditor\PhotoDirector5.exe
FirewallRules: [{43B67011-525F-4D76-BD47-DFACD0AD7050}] => (Allow) LPort=55100
FirewallRules: [{05A2D8BF-0A54-441C-AC23-FE497F439D23}] => (Allow) C:\Program Files\Lenovo PhotoMasterImport\PhotoMasterImport.exe
FirewallRules: [{B54A3A69-B2C5-413A-82F6-83D52DE9E32F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2D7FB849-B058-4E2C-B3C6-6CB3FB531E9A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{BE994D9B-2EE1-4D3A-84CD-DCE5BF38A28E}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{D5F8E883-BC5C-465E-9634-49BCBBA4C1D4}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{4FE9A735-6C3A-49F1-A3F2-F29A1A6B409A}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{94E505AB-2EC2-48CB-A241-0551FAF57F90}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{92798587-95D8-4E3B-A607-C6D6EED788CF}C:\users\martin\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\martin\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{0139C7D0-5DCE-4104-93AF-F1064BC3DE3F}C:\users\martin\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\martin\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{674B1A9F-AE08-41E0-AD3D-9193BF132102}] => (Block) C:\users\martin\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{C6CA542A-1F98-4224-944F-22A1E350176B}] => (Block) C:\users\martin\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{5371F068-CA70-425F-9ED0-1FBA7889A2FA}C:\hry\battlefield 4\bf4_x86.exe] => (Allow) C:\hry\battlefield 4\bf4_x86.exe
FirewallRules: [UDP Query User{1919AEBA-8664-49F4-94FF-BB29E01A3F8D}C:\hry\battlefield 4\bf4_x86.exe] => (Allow) C:\hry\battlefield 4\bf4_x86.exe
FirewallRules: [{C093473E-6876-4598-86F7-AF03F31A6D85}] => (Block) C:\hry\battlefield 4\bf4_x86.exe
FirewallRules: [{94DE81B0-5DAC-4A72-A462-8A094E6B454E}] => (Block) C:\hry\battlefield 4\bf4_x86.exe
FirewallRules: [TCP Query User{886CDA3B-15CF-4A65-A222-4BA2C4022433}C:\hry\battlefield 4\bf4.exe] => (Allow) C:\hry\battlefield 4\bf4.exe
FirewallRules: [UDP Query User{67BEE1A8-3726-4DC6-A36D-A9AB230AFDDD}C:\hry\battlefield 4\bf4.exe] => (Allow) C:\hry\battlefield 4\bf4.exe
FirewallRules: [{B5DD9B46-0E18-4C21-ACFB-BB95C254BCBE}] => (Block) C:\hry\battlefield 4\bf4.exe
FirewallRules: [{27BBE77D-B627-4A27-A294-15AEE290ADC2}] => (Block) C:\hry\battlefield 4\bf4.exe

==================== Restore Points =========================

16-09-2016 14:04:40 Windows Update
01-10-2016 15:00:51 Windows Update
12-10-2016 12:06:12 Windows Update
12-10-2016 12:08:09 Windows Update
19-10-2016 18:43:13 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/19/2016 06:43:38 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Cryptographic Services zlyhala pri spracovávaní volania OnIdentity() v objekte System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (10/18/2016 03:02:43 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "c:\program files\avast software\avast\x64\CrtCheck.exe".
Dependent Assembly Avast.VC140.CRT,processorArchitecture="amd64",publicKeyToken="fcc99ee6193ebbca",type="win32",version="14.0.23918.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (10/18/2016 03:02:41 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "c:\program files\avast software\avast\CrtCheck.exe".
Dependent Assembly Avast.VC140.CRT,processorArchitecture="x86",publicKeyToken="fcc99ee6193ebbca",type="win32",version="14.0.23918.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (10/18/2016 03:02:34 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "c:\programdata\lenovo app services\Uninstall.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_2d0f50fcbdb171b8.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_74bc87d3d22d9abe.manifest.

Error: (10/12/2016 05:02:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: LSCTaskService.exe, verzia: 2.8.7.21671, časová značka: 0x567981ff
Názov chybujúceho modulu: ntdll.dll, verzia: 10.0.14393.206, časová značka: 0x57dac931
Kód výnimky: 0xc0000374
Odstup chyby: 0x00000000000f73f3
Identifikácia chybujúceho procesu: 0x17f4
Čas spustenia chybujúcej aplikácie: 0x01d22499aa84da43
Cesta chybujúcej aplikácie: C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCTaskService.exe
Cesta chybujúceho modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
Identifikácia hlásenia: 3238c672-fe55-4f7a-a6e0-49b84ada184e
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (10/12/2016 04:43:41 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (10/12/2016 12:08:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Cryptographic Services zlyhala pri spracovávaní volania OnIdentity() v objekte System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (10/12/2016 12:06:36 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Cryptographic Services zlyhala pri spracovávaní volania OnIdentity() v objekte System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (10/10/2016 12:38:38 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (10/08/2016 02:10:15 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.


System errors:
=============
Error: (10/19/2016 07:23:46 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (10/19/2016 07:22:47 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba CCSDK sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (10/19/2016 07:22:46 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Presentation Foundation Font Cache 3.0.0.0 sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 0 ms bude vykonaná nasledujúca opravná akcia: Restart the service.

Error: (10/19/2016 07:22:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Lenovo WiFiHotspot Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (10/19/2016 07:22:46 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 30000 ms bude vykonaná nasledujúca opravná akcia: Restart the service.

Error: (10/19/2016 07:22:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Conexant Audio Message Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (10/19/2016 07:22:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Conexant SmartAudio service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (10/19/2016 07:22:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba SynTPEnh Caller Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (10/19/2016 07:22:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Lenovo System Agent Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (10/19/2016 07:22:45 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Cyberlink RichVideo64 Service(CRVS) sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.


==================== Memory info ===========================

Processor: Intel(R) Pentium(R) CPU N3540 @ 2.16GHz
Percentage of memory in use: 37%
Total physical RAM: 3979.21 MB
Available physical RAM: 2494.69 MB
Total Virtual: 6091.21 MB
Available Virtual: 4550.25 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:891.13 GB) (Free:645.73 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:20.11 GB) NTFS
Drive e: () (Removable) (Total:7.41 GB) (Free:0.01 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 2B940FBE)

Partition: GPT.

==================== End of Addition.txt ============================

Otevřte poznámkový blok a zkopírujte do něj:

Start
Task: {319D02D6-794B-4BEF-93EF-927045D219F7} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {3C867CFF-906E-40E9-BFCB-0DD11F5BAC83} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {45D584D9-6BE4-4E28-BBC3-39BB241F0947} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {4662BD74-068D-4BD6-B698-932409079AB7} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {607ED568-C12A-4415-81B6-23B52576A05C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {73AB0541-354F-4BCF-89CF-9017C5467D12} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {A1AC5BC9-D3CB-42FE-8F1E-E8E5630E017E} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {A36B1E45-208C-49D1-BC26-A8D624E5319D} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {C849E7CE-D696-46F2-83D2-AB97DB47A157} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> No File <==== ATTENTION
Task: {D94A4546-2D9B-4D9D-862A-E00569F06319} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {E37EE0F2-564E-485D-8818-DFB2F7652DE2} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {E4EADF37-2C0E-4593-96F8-D06C937DFD4A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {F384A8DA-DC69-4E89-85BB-5754DCD25AAD} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {F405D523-36F7-4A49-8F52-184EE961C881} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {F70B0A4E-5365-4287-83B3-31F28331EEF4} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
SearchScopes: HKU\S-1-5-21-2859240268-2567040217-3832528946-1001 -> DefaultScope {CBDCB047-04D4-4C19-B904-114524D2313F} URL =
SearchScopes: HKU\S-1-5-21-2859240268-2567040217-3832528946-1001 -> {CBDCB047-04D4-4C19-B904-114524D2313F} URL =
C:\WINDOWS\system32\ApnDatabase.xml
C:\ProgramData\DP45977C.lfl
C:\Users\Martin\AppData\Local\Temp
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 17-10-2016
Ran by Martin (19-10-2016 21:04:57) Run:1
Running from C:\Users\Martin\Desktop
Loaded Profiles: Martin (Available Profiles: Martin)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
Task: {319D02D6-794B-4BEF-93EF-927045D219F7} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {3C867CFF-906E-40E9-BFCB-0DD11F5BAC83} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {45D584D9-6BE4-4E28-BBC3-39BB241F0947} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {4662BD74-068D-4BD6-B698-932409079AB7} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {607ED568-C12A-4415-81B6-23B52576A05C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {73AB0541-354F-4BCF-89CF-9017C5467D12} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {A1AC5BC9-D3CB-42FE-8F1E-E8E5630E017E} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {A36B1E45-208C-49D1-BC26-A8D624E5319D} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {C849E7CE-D696-46F2-83D2-AB97DB47A157} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> No File <==== ATTENTION
Task: {D94A4546-2D9B-4D9D-862A-E00569F06319} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {E37EE0F2-564E-485D-8818-DFB2F7652DE2} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {E4EADF37-2C0E-4593-96F8-D06C937DFD4A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {F384A8DA-DC69-4E89-85BB-5754DCD25AAD} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {F405D523-36F7-4A49-8F52-184EE961C881} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {F70B0A4E-5365-4287-83B3-31F28331EEF4} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
SearchScopes: HKU\S-1-5-21-2859240268-2567040217-3832528946-1001 -> DefaultScope {CBDCB047-04D4-4C19-B904-114524D2313F} URL =
SearchScopes: HKU\S-1-5-21-2859240268-2567040217-3832528946-1001 -> {CBDCB047-04D4-4C19-B904-114524D2313F} URL =
C:\WINDOWS\system32\ApnDatabase.xml
C:\ProgramData\DP45977C.lfl
C:\Users\Martin\AppData\Local\Temp
End
*****************

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{319D02D6-794B-4BEF-93EF-927045D219F7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{319D02D6-794B-4BEF-93EF-927045D219F7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3C867CFF-906E-40E9-BFCB-0DD11F5BAC83}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3C867CFF-906E-40E9-BFCB-0DD11F5BAC83}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{45D584D9-6BE4-4E28-BBC3-39BB241F0947}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{45D584D9-6BE4-4E28-BBC3-39BB241F0947}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4662BD74-068D-4BD6-B698-932409079AB7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4662BD74-068D-4BD6-B698-932409079AB7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{607ED568-C12A-4415-81B6-23B52576A05C}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{607ED568-C12A-4415-81B6-23B52576A05C}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{73AB0541-354F-4BCF-89CF-9017C5467D12}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73AB0541-354F-4BCF-89CF-9017C5467D12}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A1AC5BC9-D3CB-42FE-8F1E-E8E5630E017E}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A1AC5BC9-D3CB-42FE-8F1E-E8E5630E017E}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A36B1E45-208C-49D1-BC26-A8D624E5319D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A36B1E45-208C-49D1-BC26-A8D624E5319D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C849E7CE-D696-46F2-83D2-AB97DB47A157}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C849E7CE-D696-46F2-83D2-AB97DB47A157}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-Weekend" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D94A4546-2D9B-4D9D-862A-E00569F06319}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D94A4546-2D9B-4D9D-862A-E00569F06319}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E37EE0F2-564E-485D-8818-DFB2F7652DE2}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E37EE0F2-564E-485D-8818-DFB2F7652DE2}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E4EADF37-2C0E-4593-96F8-D06C937DFD4A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E4EADF37-2C0E-4593-96F8-D06C937DFD4A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F384A8DA-DC69-4E89-85BB-5754DCD25AAD}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F384A8DA-DC69-4E89-85BB-5754DCD25AAD}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\rundetector" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F405D523-36F7-4A49-8F52-184EE961C881}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F405D523-36F7-4A49-8F52-184EE961C881}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F70B0A4E-5365-4287-83B3-31F28331EEF4}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F70B0A4E-5365-4287-83B3-31F28331EEF4}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => key removed successfully
HKU\S-1-5-21-2859240268-2567040217-3832528946-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-2859240268-2567040217-3832528946-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CBDCB047-04D4-4C19-B904-114524D2313F}" => key removed successfully
HKCR\CLSID\{CBDCB047-04D4-4C19-B904-114524D2313F} => key not found.
C:\WINDOWS\system32\ApnDatabase.xml => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
C:\Users\Martin\AppData\Local\Temp => moved successfully

==== End of Fixlog 21:04:58 ====

Smazáno. Nastala nějaká změna?

Ano,dakujem pekne,nb je rychlejsi ale stale to nieje ono,este by sa dalo nieco?

Udělejte kompletrní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Malwarebytes Anti-Malware
www.malwarebytes.org

Dátum kontroly: 19.10.2016
Čas kontroly: 22:40
Protokol: kontrola.txt
Správca: Áno

Verzia: 2.2.1.1043
Dazabáza malware: v2016.10.19.12
Databáza rootkitov: v2016.09.26.02
Licencia: Skúšobná verzia
Ochrana pred škodlivým softvérom: Zapnuté
Ochrana pred škodlivými webstránkami: Zapnuté
Vlastná ochrana: Vypnuté

OS: Windows 10
CPU: x64
Súborový systém: NTFS
Používateľ: Martin

Typ kontroly: Kontrola hrozieb
Výsledok: Dokončená
Skontrolovaných objektov: 307350
Uplynulý čas: 10 min, 1 s

Pamäť: Zapnuté
Pri spustení: Zapnuté
Súborový systém: Zapnuté
Archívy: Zapnuté
Rootkity: Vypnuté
Heuristika: Zapnuté
PUP: Zapnuté
PUM: Zapnuté

Procesy: 0
(Žiadne škodlivé položky neboli zistené)

Moduly: 0
(Žiadne škodlivé položky neboli zistené)

Kľúče databázy Registry: 0
(Žiadne škodlivé položky neboli zistené)

Hodnoty databázy Registry: 0
(Žiadne škodlivé položky neboli zistené)

Údaj databázy Registry: 0

Log je OK, problém malware to již není. Zkuste defragmentovat disk.

Velmi pekne dakujem za pomoc.Uz je to lepsie. Moze sa Adw cleaner pouzivat bezne?