Logfile of random's system information tool 1.14 (written by random/random)
Run by JihadKalafuna at 2016-11-07 15:50:15
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 580 GB (81%) free of 715 GB
Total RAM: 7637 MB (45% free)
X64
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:50:24, on 7.11.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
C:\Program Files\trend micro\JihadKalafuna_RSITx64.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [AppEx Accelerator UI] C:\Program Files\AMD Quick Stream\AMDQuickStream.exe -h
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [SpybotPostWindows10UpgradeReInstall] "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"
http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"
http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: Killer Network Manager.lnk = ?
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Windows\SysWOW64\MSIService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Qualcomm Atheros Killer Service V2 - Qualcomm Atheros - C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8081 bytes
======Enumerating Processes======
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 19396432
\??\C:\Windows\system32\conhost.exe
C:\Windows\system32\atieclxx.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\SysWOW64\MSIService.exe
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files\AMD Quick Stream\AMDQuickStream.exe" -h
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe" -minimize
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe"
"C:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe" "-cachedir=C:\Users\JihadKalafuna\AppData\Local\Steam\htmlcache" "-steampid=2752" "-buildid=1476379980" "-steamid=0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\JihadKalafuna\AppData\Local\Google\Chrome\User Data\Crashpad" --url=
https://clients2.google.com/cr/report --annotation=channel=-m --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=54.0.2840.71 --handshake-handle=0x84
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/ClientSideDetectionModel/Model0/DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/StrictSecureCookies/Default/SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_67/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_15/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=5,14,15,16,17,19,33,59 --gpu-vendor-id=0x1002 --gpu-device-id=0x9900 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=9.12.0.0 --gpu-driver-date=12-19-2012 --gpu-secondary-vendor-ids=0x1002 --gpu-secondary-device-ids=0x6800 --mojo-application-channel-token=81951DF9A41BE48A20FF580B04F4208C --mojo-platform-channel-handle=1060 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_67/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_15/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=0B13D59B56CB7ABD75C09E3768FEAE49 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=0B13D59B56CB7ABD75C09E3768FEAE49 --channel="2772.3.337205272\1543282604" --mojo-platform-channel-handle=3304 /prefetch:1
"C:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --enable-pinch --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Steam\bin\cef\cef.winxp\debug.log" --product-version="Valve Steam Client" --disable-spell-checking --enable-system-flash --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-gpu-compositing --channel="3564.0.982523448\201913127" --font-cache-shared-handle=1692 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_67/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_15/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=40DE60BE37BEF596C176E1D48F90A742 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=40DE60BE37BEF596C176E1D48F90A742 --channel="2772.15.141699106\1310655605" --mojo-platform-channel-handle=5684 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_67/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_15/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=5EFC42A88ECCEEFE348E5B2081B367DE --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=5EFC42A88ECCEEFE348E5B2081B367DE --channel="2772.16.1726657207\630081558" --mojo-platform-channel-handle=2896 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_67/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_15/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=47847BFB414DC2B626145D73C3F73C05 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=47847BFB414DC2B626145D73C3F73C05 --channel="2772.19.1746846620\316539086" --mojo-platform-channel-handle=3260 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/*PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/*SignInPasswordPromo/Default/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_67/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_15/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=AB5812E21E6490C0E9A747D11884B0D8 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=AB5812E21E6490C0E9A747D11884B0D8 --channel="2772.25.2037555005\1835921434" --mojo-platform-channel-handle=5000 /prefetch:1
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe7_ Global\UsGthrCtrlFltPipeMssGthrPipe7 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\JihadKalafuna\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\Check for updates (Spybot - Search & Destroy).job - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe /autoupdate /silent /autoclose /background
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\Refresh immunization (Spybot - Search & Destroy).job - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe /immunize /silent /autoclose
C:\Windows\tasks\Scan the system (Spybot - Search & Destroy).job - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe /scan /cleanclose
C:\Windows\system32\tasks\avast! Emergency Update - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\SafeZone scheduled Autoupdate 1477841384 - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\Setup\EOSNotify - %windir%\system32\EOSNotify.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\AVAST Software\Avast settings backup - C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs
=========Google Chrome=========
C:\Users\JihadKalafuna\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension bfeknfgchonpnofdjokchhdhdnddhglm 1 Dark Skin for Youtube™ 1.3.37
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension eofcbnmajmjmplflapaojjnihcjkigck 2 Avast SafePrice 12.0.102
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabulky Google 1.1
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension gomekmidlodglbbmalcneegieacbdmki 2 Avast Online Security 12.0.124
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.38
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.0
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.0
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5416.905.0.6
Homepage:
default_search_provider.search_url:
C:\Users\JihadKalafuna\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck]
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki]
"Path"=
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=
http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=
http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-13 81024]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-30 790552]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-13 69760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-30 664848]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-05-21 13538376]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2016-10-13 2860832]
"AppEx Accelerator UI"=C:\Program Files\AMD Quick Stream\AMDQuickStream.exe [2014-03-31 482528]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2016-10-06 4557504]
"SpybotPostWindows10UpgradeReInstall"=C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [2015-07-28 1011200]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-10-30 9099440]
"Raptr"=C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [2016-09-28 58584]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2014-06-24 4101576]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Killer Network Manager.lnk - C:\Windows\Installer\{71ACF663-CC95-429F-8C5C-0A1DC4EE8E78}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath"="C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.71\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.vorbis"=vorbis.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-11-07 15:50:15 ----D---- C:\rsit
2016-11-07 15:50:15 ----D---- C:\Program Files\trend micro
2016-11-06 17:39:08 ----D---- C:\AdwCleaner
2016-11-06 15:39:08 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2016-11-06 15:38:42 ----D---- C:\ProgramData\Malwarebytes
2016-11-06 15:38:42 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-11-06 15:38:42 ----A---- C:\Windows\system32\drivers\mwac.sys
2016-11-06 15:38:42 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2016-11-06 15:38:42 ----A---- C:\Windows\system32\drivers\mbam.sys
2016-11-06 15:33:46 ----A---- C:\Windows\system32\sdnclean64.exe
2016-11-06 15:33:44 ----D---- C:\ProgramData\Spybot - Search & Destroy
2016-11-06 15:33:40 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-11-06 15:11:28 ----D---- C:\Program Files\Core Temp
2016-11-06 13:21:15 ----D---- C:\Program Files\CPUID
2016-11-06 12:37:01 ----D---- C:\ProgramData\ATI
2016-11-06 12:33:45 ----D---- C:\Program Files (x86)\AMD AVT
2016-11-06 12:33:42 ----D---- C:\Program Files (x86)\AMD
2016-11-06 12:33:40 ----D---- C:\Program Files (x86)\AMD APP
2016-11-06 12:31:50 ----D---- C:\Program Files (x86)\ATI Technologies
2016-11-06 12:31:47 ----A---- C:\Windows\SYSWOW64\atiuxpag.dll
2016-11-06 12:31:47 ----A---- C:\Windows\SYSWOW64\atiumdva.dll
2016-11-06 12:31:47 ----A---- C:\Windows\system32\drivers\AtihdW76.sys
2016-11-06 12:31:47 ----A---- C:\Windows\system32\drivers\amdkmpfd.sys
2016-11-06 12:31:47 ----A---- C:\Windows\system32\coinst_9.012.dll
2016-11-06 12:31:47 ----A---- C:\Windows\system32\ativvaxy_cik_nd.dat
2016-11-06 12:31:47 ----A---- C:\Windows\system32\ativvaxy_cik.dat
2016-11-06 12:31:47 ----A---- C:\Windows\system32\ativce02.dat
2016-11-06 12:31:47 ----A---- C:\Windows\system32\atiuxp64.dll
2016-11-06 12:31:46 ----A---- C:\Windows\SYSWOW64\atiumdag.dll
2016-11-06 12:31:46 ----A---- C:\Windows\SYSWOW64\atiu9pag.dll
2016-11-06 12:31:46 ----A---- C:\Windows\SYSWOW64\atisamu32.dll
2016-11-06 12:31:46 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2016-11-06 12:31:46 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2016-11-06 12:31:46 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2016-11-06 12:31:46 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2016-11-06 12:31:46 ----A---- C:\Windows\SYSWOW64\atidxx32.dll
2016-11-06 12:31:46 ----A---- C:\Windows\SYSWOW64\aticfx32.dll
2016-11-06 12:31:46 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2016-11-06 12:31:46 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2016-11-06 12:31:46 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2016-11-06 12:31:46 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2016-11-06 12:31:46 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atiumd6a.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atiumd64.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atiu9p64.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atitmm64.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atisamu64.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atio6axx.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atimuixx.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atimpc64.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atiicdxx.dat
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atiglpxx.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atig6txx.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atig6pxx.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atiesrxx.exe
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atieclxx.exe
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atidxx64.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atidemgy.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\aticfx64.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\aticalrt64.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\aticaldd64.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\aticalcl64.dll
2016-11-06 12:31:46 ----A---- C:\Windows\system32\atiapfxx.exe
2016-11-06 12:31:46 ----A---- C:\Windows\system32\amdpcom64.dll
2016-11-06 12:31:45 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2016-11-06 12:31:45 ----A---- C:\Windows\SYSWOW64\amdave32.dll
2016-11-06 12:31:45 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2016-11-06 12:31:45 ----A---- C:\Windows\system32\atiadlxx.dll
2016-11-06 12:31:45 ----A---- C:\Windows\system32\amdave64.dll
2016-11-06 12:31:32 ----D---- C:\Program Files\ATI Technologies
2016-11-06 12:31:31 ----D---- C:\Program Files\ATI
2016-11-06 04:23:12 ----D---- C:\Program Files (x86)\Qualcomm Atheros WiFi Driver Installation
2016-11-06 04:23:12 ----A---- C:\Windows\system32\drivers\athrx.sys
2016-11-06 04:23:12 ----A---- C:\Windows\system32\athrx.sys
2016-11-06 04:14:18 ----D---- C:\ProgramData\Qualcomm
2016-11-06 04:13:37 ----D---- C:\Program Files\Qualcomm Atheros
2016-11-06 03:43:31 ----A---- C:\Windows\system32\drivers\amdxhc.sys
2016-11-06 03:43:31 ----A---- C:\Windows\system32\drivers\amdhub30.sys
2016-11-06 03:43:31 ----A---- C:\Windows\system32\drivers\amd_xata.sys
2016-11-06 03:43:31 ----A---- C:\Windows\system32\drivers\amd_sata.sys
2016-11-06 03:42:01 ----A---- C:\Windows\system32\drivers\usbfilter.sys
2016-11-06 03:33:53 ----D---- C:\ATI
2016-11-06 03:31:38 ----D---- C:\Program Files\AMD Quick Stream
2016-11-06 03:29:05 ----D---- C:\Program Files\AMD
2016-11-06 02:58:14 ----D---- C:\Program Files\DIFX
2016-11-06 02:16:50 ----D---- C:\Users\JihadKalafuna\AppData\Roaming\Project Reality
2016-11-05 21:56:42 ----HDC---- C:\ProgramData\{F036CC43-6BE8-4CBD-91C3-76F4BC8FFD6F}
2016-11-05 19:25:06 ----D---- C:\Users\JihadKalafuna\AppData\Roaming\AMD
2016-11-05 19:22:11 ----D---- C:\Users\JihadKalafuna\AppData\Roaming\iZotope
2016-11-05 19:12:57 ----D---- C:\Program Files\Common Files\VST3
2016-11-05 19:11:40 ----D---- C:\Program Files (x86)\iZotope
2016-11-05 19:04:45 ----HDC---- C:\ProgramData\{D3CD7CDD-9759-4CF4-BE92-BA89914360B5}
2016-11-05 19:03:14 ----D---- C:\ProgramData\Native Instruments
2016-11-05 19:03:14 ----D---- C:\Program Files\Common Files\Native Instruments
2016-11-05 19:03:14 ----D---- C:\Program Files\Common Files\Avid
2016-11-03 21:34:00 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2016-11-03 21:33:59 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2016-11-03 21:33:59 ----A---- C:\Windows\SYSWOW64\pbsvc.exe
2016-11-03 21:19:36 ----D---- C:\Program Files (x86)\Project Reality
2016-11-02 22:24:49 ----D---- C:\ProgramData\Bohemia Interactive
2016-11-01 17:13:34 ----D---- C:\Users\JihadKalafuna\AppData\Roaming\IgniteVST
2016-11-01 16:16:18 ----D---- C:\Program Files\divocina
2016-11-01 15:14:27 ----A---- C:\Windows\SYSWOW64\SYNSOEMU.DLL
2016-11-01 15:07:59 ----A---- C:\Windows\system32\drivers\dtliteusbbus.sys
2016-11-01 15:07:35 ----A---- C:\Windows\system32\drivers\dtlitescsibus.sys
2016-11-01 15:07:34 ----D---- C:\Users\JihadKalafuna\AppData\Roaming\DAEMON Tools Lite
2016-11-01 15:07:31 ----D---- C:\Program Files\DAEMON Tools Lite
2016-11-01 15:07:19 ----D---- C:\ProgramData\DAEMON Tools Lite
2016-11-01 14:40:51 ----D---- C:\Program Files (x86)\ASIO4ALL v2
2016-11-01 14:40:27 ----D---- C:\Program Files\Common Files\VST2
2016-11-01 14:40:27 ----D---- C:\Program Files\Common Files\Propellerhead Software
2016-11-01 14:40:27 ----D---- C:\Program Files (x86)\VstPlugins
2016-11-01 14:39:40 ----D---- C:\Users\JihadKalafuna\AppData\Roaming\Image-Line
2016-11-01 14:39:38 ----D---- C:\Program Files\Image-Line
2016-11-01 14:34:08 ----D---- C:\Program Files (x86)\Image-Line
2016-11-01 14:15:54 ----A---- C:\Windows\system32\wups2.dll
2016-11-01 14:15:54 ----A---- C:\Windows\system32\wucltux.dll
2016-11-01 14:15:54 ----A---- C:\Windows\system32\wuaueng.dll
2016-11-01 14:15:54 ----A---- C:\Windows\system32\wuauclt.exe
2016-11-01 14:15:45 ----A---- C:\Windows\SYSWOW64\wups.dll
2016-11-01 14:15:45 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-11-01 14:15:45 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-11-01 14:15:45 ----A---- C:\Windows\system32\wups.dll
2016-11-01 14:15:45 ----A---- C:\Windows\system32\wudriver.dll
2016-11-01 14:15:45 ----A---- C:\Windows\system32\wuapi.dll
2016-11-01 14:15:40 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-11-01 14:15:40 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-11-01 14:15:40 ----A---- C:\Windows\system32\wuwebv.dll
2016-11-01 14:15:40 ----A---- C:\Windows\system32\wuapp.exe
2016-10-31 21:02:53 ----D---- C:\Users\JihadKalafuna\AppData\Roaming\TS3Client
2016-10-31 20:55:28 ----D---- C:\Users\JihadKalafuna\AppData\Roaming\vlc
2016-10-31 20:53:55 ----D---- C:\Program Files (x86)\VideoLAN
2016-10-31 20:26:45 ----D---- C:\ProgramData\Gaijin
2016-10-31 15:20:51 ----D---- C:\Windows\system32\SPReview
2016-10-31 15:19:35 ----D---- C:\Windows\system32\EventProviders
2016-10-31 15:17:39 ----A---- C:\Windows\system32\netfxperf.dll
2016-10-31 15:17:39 ----A---- C:\Windows\system32\dfshim.dll
2016-10-31 15:17:38 ----A---- C:\Windows\system32\mshtml.dll
2016-10-31 15:17:34 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2016-10-31 15:17:30 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2016-10-31 15:17:30 ----A---- C:\Windows\system32\mstscax.dll
2016-10-31 15:17:30 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2016-10-31 15:17:30 ----A---- C:\Windows\system32\d3d10warp.dll
2016-10-31 15:17:29 ----A---- C:\Windows\system32\ieframe.dll
2016-10-31 15:17:28 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2016-10-31 15:17:27 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-10-31 15:17:26 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2016-10-31 15:17:25 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2016-10-31 15:17:25 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2016-10-31 15:17:25 ----A---- C:\Windows\system32\sysmain.dll
2016-10-31 15:17:25 ----A---- C:\Windows\system32\drivers\tcpip.sys
2016-10-31 15:17:24 ----A---- C:\Windows\system32\XpsPrint.dll
2016-10-31 15:17:24 ----A---- C:\Windows\system32\shell32.dll
2016-10-31 15:17:23 ----A---- C:\Windows\system32\wmp.dll
2016-10-31 15:17:23 ----A---- C:\Windows\system32\tquery.dll
2016-10-31 15:17:23 ----A---- C:\Windows\system32\MSVidCtl.dll
2016-10-31 15:17:22 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2016-10-31 15:17:22 ----A---- C:\Windows\system32\ntdll.dll
2016-10-31 15:17:22 ----A---- C:\Windows\system32\mssrch.dll
2016-10-31 15:17:22 ----A---- C:\Windows\system32\mscoree.dll
2016-10-31 15:17:22 ----A---- C:\Windows\system32\d2d1.dll
2016-10-31 15:17:21 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2016-10-31 15:17:21 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2016-10-31 15:17:21 ----A---- C:\Windows\system32\secproc_isv.dll
2016-10-31 15:17:21 ----A---- C:\Windows\system32\secproc.dll
2016-10-31 15:17:21 ----A---- C:\Windows\system32\RMActivate_isv.exe
2016-10-31 15:17:21 ----A---- C:\Windows\system32\RMActivate.exe
2016-10-31 15:17:21 ----A---- C:\Windows\system32\mmcndmgr.dll
2016-10-31 15:17:21 ----A---- C:\Windows\system32\mf.dll
2016-10-31 15:17:20 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-10-31 15:17:20 ----A---- C:\Windows\system32\xpsservices.dll
2016-10-31 15:17:20 ----A---- C:\Windows\system32\jscript.dll
2016-10-31 15:17:19 ----A---- C:\Windows\SYSWOW64\secproc.dll
2016-10-31 15:17:19 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2016-10-31 15:17:19 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2016-10-31 15:17:19 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-10-31 15:17:19 ----A---- C:\Windows\system32\schedsvc.dll
2016-10-31 15:17:19 ----A---- C:\Windows\system32\rpcrt4.dll
2016-10-31 15:17:19 ----A---- C:\Windows\system32\ole32.dll
2016-10-31 15:17:18 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2016-10-31 15:17:18 ----A---- C:\Windows\system32\wininet.dll
2016-10-31 15:17:18 ----A---- C:\Windows\system32\spwizui.dll
2016-10-31 15:17:18 ----A---- C:\Windows\system32\iertutil.dll
2016-10-31 15:17:17 ----A---- C:\Windows\system32\urlmon.dll
2016-10-31 15:17:17 ----A---- C:\Windows\system32\taskschd.dll
2016-10-31 15:17:17 ----A---- C:\Windows\system32\esent.dll
2016-10-31 15:17:17 ----A---- C:\Windows\system32\drivers\ntfs.sys
2016-10-31 15:17:16 ----A---- C:\Windows\system32\RacEngn.dll
2016-10-31 15:17:16 ----A---- C:\Windows\system32\diagperf.dll
2016-10-31 15:17:15 ----A---- C:\Windows\SYSWOW64\mf.dll
2016-10-31 15:17:15 ----A---- C:\Windows\system32\wevtsvc.dll
2016-10-31 15:17:15 ----A---- C:\Windows\system32\vssapi.dll
2016-10-31 15:17:15 ----A---- C:\Windows\system32\msxml3.dll
2016-10-31 15:17:15 ----A---- C:\Windows\system32\ExplorerFrame.dll
2016-10-31 15:17:14 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2016-10-31 15:17:14 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-10-31 15:17:14 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2016-10-31 15:17:14 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2016-10-31 15:17:14 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2016-10-31 15:17:13 ----A---- C:\Windows\SYSWOW64\wmp.dll
2016-10-31 15:17:13 ----A---- C:\Windows\system32\UIRibbon.dll
2016-10-31 15:17:13 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2016-10-31 15:17:13 ----A---- C:\Windows\explorer.exe
2016-10-31 15:17:12 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2016-10-31 15:17:12 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2016-10-31 15:17:12 ----A---- C:\Windows\SYSWOW64\esent.dll
2016-10-31 15:17:12 ----A---- C:\Windows\system32\WsmSvc.dll
2016-10-31 15:17:12 ----A---- C:\Windows\system32\WMVCORE.DLL
2016-10-31 15:17:12 ----A---- C:\Windows\system32\win32k.sys
2016-10-31 15:17:11 ----A---- C:\Windows\SYSWOW64\tquery.dll
2016-10-31 15:17:11 ----A---- C:\Windows\system32\WinSAT.exe
2016-10-31 15:17:11 ----A---- C:\Windows\system32\spreview.exe
2016-10-31 15:17:11 ----A---- C:\Windows\system32\spinstall.exe
2016-10-31 15:17:11 ----A---- C:\Windows\system32\rdpdd.dll
2016-10-31 15:17:11 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2016-10-31 15:17:11 ----A---- C:\Windows\system32\PresentationHost.exe
2016-10-31 15:17:11 ----A---- C:\Windows\system32\MPSSVC.dll
2016-10-31 15:17:11 ----A---- C:\Windows\system32\DWrite.dll
2016-10-31 15:17:11 ----A---- C:\Windows\system32\CPFilters.dll
2016-10-31 15:17:11 ----A---- C:\Windows\system32\CertEnroll.dll
2016-10-31 15:17:10 ----A---- C:\Windows\system32\WMVDECOD.DLL
2016-10-31 15:17:10 ----A---- C:\Windows\system32\d3d9.dll
2016-10-31 15:17:09 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2016-10-31 15:17:09 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2016-10-31 15:17:09 ----A---- C:\Windows\system32\SearchFolder.dll
2016-10-31 15:17:09 ----A---- C:\Windows\system32\msxml6.dll
2016-10-31 15:17:09 ----A---- C:\Windows\system32\kernel32.dll
2016-10-31 15:17:09 ----A---- C:\Windows\system32\kerberos.dll
2016-10-31 15:17:09 ----A---- C:\Windows\system32\IKEEXT.DLL
2016-10-31 15:17:09 ----A---- C:\Windows\system32\gpsvc.dll
2016-10-31 15:17:09 ----A---- C:\Windows\system32\FntCache.dll
2016-10-31 15:17:09 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2016-10-31 15:17:08 ----A---- C:\Windows\system32\VSSVC.exe
2016-10-31 15:17:08 ----A---- C:\Windows\system32\mstime.dll
2016-10-31 15:17:08 ----A---- C:\Windows\system32\dwmcore.dll
2016-10-31 15:17:08 ----A---- C:\Windows\system32\drivers\http.sys
2016-10-31 15:17:08 ----A---- C:\Windows\system32\dbgeng.dll
2016-10-31 15:17:07 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-10-31 15:17:07 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2016-10-31 15:17:07 ----A---- C:\Windows\system32\drivers\ndis.sys
2016-10-31 15:17:07 ----A---- C:\Windows\system32\crypt32.dll
2016-10-31 15:17:06 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-10-31 15:17:06 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-10-31 15:17:06 ----A---- C:\Windows\system32\TSWorkspace.dll
2016-10-31 15:17:06 ----A---- C:\Windows\system32\schannel.dll
2016-10-31 15:17:06 ----A---- C:\Windows\system32\qmgr.dll
2016-10-31 15:17:06 ----A---- C:\Windows\system32\lsasrv.dll
2016-10-31 15:17:06 ----A---- C:\Windows\system32\KernelBase.dll
2016-10-31 15:17:06 ----A---- C:\Windows\system32\drivers\afd.sys
2016-10-31 15:17:06 ----A---- C:\Windows\system32\audiosrv.dll
2016-10-31 15:17:06 ----A---- C:\Windows\system32\actxprxy.dll
2016-10-31 15:17:05 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2016-10-31 15:17:05 ----A---- C:\Windows\system32\termsrv.dll
2016-10-31 15:17:05 ----A---- C:\Windows\system32\sqmapi.dll
2016-10-31 15:17:05 ----A---- C:\Windows\system32\netlogon.dll
2016-10-31 15:17:05 ----A---- C:\Windows\system32\mstsc.exe
2016-10-31 15:17:05 ----A---- C:\Windows\system32\imapi2fs.dll
2016-10-31 15:17:05 ----A---- C:\Windows\system32\drivers\srv2.sys
2016-10-31 15:17:05 ----A---- C:\Windows\system32\drivers\srv.sys
2016-10-31 15:17:04 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2016-10-31 15:17:04 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2016-10-31 15:17:04 ----A---- C:\Windows\SYSWOW64\explorer.exe
2016-10-31 15:17:04 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2016-10-31 15:17:04 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2016-10-31 15:17:04 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2016-10-31 15:17:04 ----A---- C:\Windows\system32\winhttp.dll
2016-10-31 15:17:04 ----A---- C:\Windows\system32\setupapi.dll
2016-10-31 15:17:04 ----A---- C:\Windows\system32\rpcss.dll
2016-10-31 15:17:04 ----A---- C:\Windows\system32\QAGENTRT.DLL
2016-10-31 15:17:04 ----A---- C:\Windows\system32\propsys.dll
2016-10-31 15:17:04 ----A---- C:\Windows\system32\msv1_0.dll
2016-10-31 15:17:04 ----A---- C:\Windows\system32\d3d11.dll
2016-10-31 15:17:03 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2016-10-31 15:17:03 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2016-10-31 15:17:03 ----A---- C:\Windows\system32\werconcpl.dll
2016-10-31 15:17:03 ----A---- C:\Windows\system32\wbengine.exe
2016-10-31 15:17:03 ----A---- C:\Windows\system32\taskeng.exe
2016-10-31 15:17:03 ----A---- C:\Windows\system32\oleaut32.dll
2016-10-31 15:17:03 ----A---- C:\Windows\system32\odbc32.dll
2016-10-31 15:17:03 ----A---- C:\Windows\system32\msfeeds.dll
2016-10-31 15:17:03 ----A---- C:\Windows\system32\dnsapi.dll
2016-10-31 15:17:03 ----A---- C:\Windows\system32\authui.dll
2016-10-31 15:17:02 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2016-10-31 15:17:02 ----A---- C:\Windows\system32\WSDApi.dll
2016-10-31 15:17:02 ----A---- C:\Windows\system32\user32.dll
2016-10-31 15:17:02 ----A---- C:\Windows\system32\drivers\nvstor.sys
2016-10-31 15:17:02 ----A---- C:\Windows\system32\drivers\netio.sys
2016-10-31 15:17:02 ----A---- C:\Windows\system32\dhcpcore.dll
2016-10-31 15:17:01 ----A---- C:\Windows\SYSWOW64\wer.dll
2016-10-31 15:17:01 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-10-31 15:17:01 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2016-10-31 15:17:01 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-10-31 15:17:01 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-10-31 15:17:01 ----A---- C:\Windows\system32\webio.dll
2016-10-31 15:17:01 ----A---- C:\Windows\system32\vbscript.dll
2016-10-31 15:17:01 ----A---- C:\Windows\system32\tsmf.dll
2016-10-31 15:17:01 ----A---- C:\Windows\system32\scavengeui.dll
2016-10-31 15:17:01 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2016-10-31 15:17:01 ----A---- C:\Windows\system32\ncsi.dll
2016-10-31 15:17:01 ----A---- C:\Windows\system32\msdrm.dll
2016-10-31 15:17:01 ----A---- C:\Windows\system32\localspl.dll
2016-10-31 15:17:01 ----A---- C:\Windows\system32\drivers\tdx.sys
2016-10-31 15:17:01 ----A---- C:\Windows\system32\drivers\nvraid.sys
2016-10-31 15:17:01 ----A---- C:\Windows\system32\drivers\netbt.sys
2016-10-31 15:17:01 ----A---- C:\Windows\system32\certmgr.dll
2016-10-31 15:17:00 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2016-10-31 15:17:00 ----A---- C:\Windows\system32\shlwapi.dll
2016-10-31 15:17:00 ----A---- C:\Windows\system32\netshell.dll
2016-10-31 15:17:00 ----A---- C:\Windows\system32\msdtctm.dll
2016-10-31 15:17:00 ----A---- C:\Windows\system32\framedynos.dll
2016-10-31 15:16:59 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2016-10-31 15:16:59 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2016-10-31 15:16:59 ----A---- C:\Windows\SYSWOW64\mstime.dll
2016-10-31 15:16:59 ----A---- C:\Windows\system32\ws2_32.dll
2016-10-31 15:16:59 ----A---- C:\Windows\system32\wmicmiplugin.dll
2016-10-31 15:16:59 ----A---- C:\Windows\system32\winlogon.exe
2016-10-31 15:16:59 ----A---- C:\Windows\system32\usp10.dll
2016-10-31 15:16:59 ----A---- C:\Windows\system32\umpnpmgr.dll
2016-10-31 15:16:59 ----A---- C:\Windows\system32\quartz.dll
2016-10-31 15:16:59 ----A---- C:\Windows\system32\nlasvc.dll
2016-10-31 15:16:59 ----A---- C:\Windows\system32\netcfgx.dll
2016-10-31 15:16:59 ----A---- C:\Windows\system32\lsm.exe
2016-10-31 15:16:59 ----A---- C:\Windows\system32\drivers\srvnet.sys
2016-10-31 15:16:59 ----A---- C:\Windows\system32\drivers\cng.sys
2016-10-31 15:16:58 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2016-10-31 15:16:58 ----A---- C:\Windows\SYSWOW64\quartz.dll
2016-10-31 15:16:58 ----A---- C:\Windows\system32\wmpps.dll
2016-10-31 15:16:58 ----A---- C:\Windows\system32\dxgi.dll
2016-10-31 15:16:58 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2016-10-31 15:16:58 ----A---- C:\Windows\system32\drivers\amdsata.sys
2016-10-31 15:16:58 ----A---- C:\Windows\system32\d3d10_1core.dll
2016-10-31 15:16:58 ----A---- C:\Windows\system32\comdlg32.dll
2016-10-31 15:16:58 ----A---- C:\Windows\system32\apphelp.dll
2016-10-31 15:16:57 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2016-10-31 15:16:57 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2016-10-31 15:16:57 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2016-10-31 15:16:57 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2016-10-31 15:16:57 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-10-31 15:16:57 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-10-31 15:16:57 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2016-10-31 15:16:57 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2016-10-31 15:16:57 ----A---- C:\Windows\system32\wpdshext.dll
2016-10-31 15:16:57 ----A---- C:\Windows\system32\Query.dll
2016-10-31 15:16:57 ----A---- C:\Windows\system32\QAGENT.DLL
2016-10-31 15:16:57 ----A---- C:\Windows\system32\mswsock.dll
2016-10-31 15:16:57 ----A---- C:\Windows\system32\drvstore.dll
2016-10-31 15:16:57 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2016-10-31 15:16:57 ----A---- C:\Windows\system32\BFE.DLL
2016-10-31 15:16:57 ----A---- C:\Windows\system32\azroles.dll
2016-10-31 15:16:56 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2016-10-31 15:16:56 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2016-10-31 15:16:56 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2016-10-31 15:16:56 ----A---- C:\Windows\system32\winload.exe
2016-10-31 15:16:56 ----A---- C:\Windows\system32\win32spl.dll
2016-10-31 15:16:56 ----A---- C:\Windows\system32\Vault.dll
2016-10-31 15:16:56 ----A---- C:\Windows\system32\samsrv.dll
2016-10-31 15:16:56 ----A---- C:\Windows\system32\mssvp.dll
2016-10-31 15:16:56 ----A---- C:\Windows\system32\lpksetup.exe
2016-10-31 15:16:56 ----A---- C:\Windows\system32\EncDec.dll
2016-10-31 15:16:56 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2016-10-31 15:16:56 ----A---- C:\Windows\system32\cmd.exe
2016-10-31 15:16:55 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2016-10-31 15:16:55 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2016-10-31 15:16:55 ----A---- C:\Windows\SYSWOW64\webio.dll
2016-10-31 15:16:55 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2016-10-31 15:16:55 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2016-10-31 15:16:55 ----A---- C:\Windows\system32\WindowsCodecs.dll
2016-10-31 15:16:55 ----A---- C:\Windows\system32\WebClnt.dll
2016-10-31 15:16:55 ----A---- C:\Windows\system32\sxs.dll
2016-10-31 15:16:55 ----A---- C:\Windows\system32\sbe.dll
2016-10-31 15:16:55 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2016-10-31 15:16:55 ----A---- C:\Windows\system32\dnsrslvr.dll
2016-10-31 15:16:54 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2016-10-31 15:16:54 ----A---- C:\Windows\SYSWOW64\upnp.dll
2016-10-31 15:16:54 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-10-31 15:16:54 ----A---- C:\Windows\SYSWOW64\Query.dll
2016-10-31 15:16:54 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2016-10-31 15:16:54 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2016-10-31 15:16:54 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-10-31 15:16:54 ----A---- C:\Windows\system32\Wldap32.dll
2016-10-31 15:16:54 ----A---- C:\Windows\system32\taskcomp.dll
2016-10-31 15:16:54 ----A---- C:\Windows\system32\pnidui.dll
2016-10-31 15:16:54 ----A---- C:\Windows\system32\mfds.dll
2016-10-31 15:16:54 ----A---- C:\Windows\system32\mcbuilder.exe
2016-10-31 15:16:54 ----A---- C:\Windows\system32\ipsmsnap.dll
2016-10-31 15:16:54 ----A---- C:\Windows\system32\hgprint.dll
2016-10-31 15:16:54 ----A---- C:\Windows\system32\drivers\storport.sys
2016-10-31 15:16:53 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2016-10-31 15:16:53 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2016-10-31 15:16:53 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-10-31 15:16:53 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2016-10-31 15:16:53 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2016-10-31 15:16:53 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-10-31 15:16:53 ----A---- C:\Windows\system32\winsta.dll
2016-10-31 15:16:53 ----A---- C:\Windows\system32\winresume.exe
2016-10-31 15:16:53 ----A---- C:\Windows\system32\webservices.dll
2016-10-31 15:16:53 ----A---- C:\Windows\system32\sqlsrv32.dll
2016-10-31 15:16:53 ----A---- C:\Windows\system32\spoolsv.exe
2016-10-31 15:16:53 ----A---- C:\Windows\system32\SessEnv.dll
2016-10-31 15:16:53 ----A---- C:\Windows\system32\iepeers.dll
2016-10-31 15:16:53 ----A---- C:\Windows\system32\fveapi.dll
2016-10-31 15:16:53 ----A---- C:\Windows\system32\dot3api.dll
2016-10-31 15:16:52 ----A---- C:\Windows\SYSWOW64\usp10.dll
2016-10-31 15:16:52 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2016-10-31 15:16:52 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2016-10-31 15:16:52 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2016-10-31 15:16:52 ----A---- C:\Windows\system32\prncache.dll
2016-10-31 15:16:52 ----A---- C:\Windows\system32\mcmde.dll
2016-10-31 15:16:52 ----A---- C:\Windows\system32\gdi32.dll
2016-10-31 15:16:52 ----A---- C:\Windows\system32\drivers\volsnap.sys
2016-10-31 15:16:52 ----A---- C:\Windows\system32\drivers\msrpc.sys
2016-10-31 15:16:51 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2016-10-31 15:16:51 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2016-10-31 15:16:51 ----A---- C:\Windows\SYSWOW64\userenv.dll
2016-10-31 15:16:51 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-10-31 15:16:51 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2016-10-31 15:16:51 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2016-10-31 15:16:51 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2016-10-31 15:16:51 ----A---- C:\Windows\system32\WMNetMgr.dll
2016-10-31 15:16:51 ----A---- C:\Windows\system32\wlanpref.dll
2016-10-31 15:16:51 ----A---- C:\Windows\system32\wintrust.dll
2016-10-31 15:16:51 ----A---- C:\Windows\system32\vpnike.dll
2016-10-31 15:16:51 ----A---- C:\Windows\system32\userenv.dll
2016-10-31 15:16:51 ----A---- C:\Windows\system32\schtasks.exe
2016-10-31 15:16:51 ----A---- C:\Windows\system32\photowiz.dll
2016-10-31 15:16:51 ----A---- C:\Windows\system32\evr.dll
2016-10-31 15:16:51 ----A---- C:\Windows\system32\drivers\rdbss.sys
2016-10-31 15:16:51 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2016-10-31 15:16:50 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2016-10-31 15:16:50 ----A---- C:\Windows\SYSWOW64\cmd.exe
2016-10-31 15:16:50 ----A---- C:\Windows\system32\wmpmde.dll
2016-10-31 15:16:50 ----A---- C:\Windows\system32\wmpeffects.dll
2016-10-31 15:16:50 ----A---- C:\Windows\system32\SyncCenter.dll
2016-10-31 15:16:50 ----A---- C:\Windows\system32\sppobjs.dll
2016-10-31 15:16:50 ----A---- C:\Windows\system32\IPSECSVC.DLL
2016-10-31 15:16:50 ----A---- C:\Windows\system32\FXSSVC.exe
2016-10-31 15:16:50 ----A---- C:\Windows\system32\framedyn.dll
2016-10-31 15:16:50 ----A---- C:\Windows\system32\AudioSes.dll
2016-10-31 15:16:50 ----A---- C:\Windows\system32\aepdu.dll
2016-10-31 15:16:49 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2016-10-31 15:16:49 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2016-10-31 15:16:49 ----A---- C:\Windows\SYSWOW64\propsys.dll
2016-10-31 15:16:49 ----A---- C:\Windows\SYSWOW64\mfds.dll
2016-10-31 15:16:49 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2016-10-31 15:16:49 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2016-10-31 15:16:49 ----A---- C:\Windows\system32\WMPEncEn.dll
2016-10-31 15:16:49 ----A---- C:\Windows\system32\WinSATAPI.dll
2016-10-31 15:16:49 ----A---- C:\Windows\system32\srvsvc.dll
2016-10-31 15:16:49 ----A---- C:\Windows\system32\shsvcs.dll
2016-10-31 15:16:49 ----A---- C:\Windows\system32\mfreadwrite.dll
2016-10-31 15:16:49 ----A---- C:\Windows\system32\fde.dll
2016-10-31 15:16:49 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-10-31 15:16:49 ----A---- C:\Windows\system32\aeinv.dll
2016-10-31 15:16:48 ----A---- C:\Windows\SYSWOW64\user32.dll
2016-10-31 15:16:48 ----A---- C:\Windows\system32\stobject.dll
2016-10-31 15:16:48 ----A---- C:\Windows\system32\netdiagfx.dll
2016-10-31 15:16:48 ----A---- C:\Windows\system32\localsec.dll
2016-10-31 15:16:48 ----A---- C:\Windows\system32\iphlpsvc.dll
2016-10-31 15:16:48 ----A---- C:\Windows\system32\imapi2.dll
2016-10-31 15:16:48 ----A---- C:\Windows\system32\drivers\udfs.sys
2016-10-31 15:16:48 ----A---- C:\Windows\system32\credui.dll
2016-10-31 15:16:48 ----A---- C:\Windows\system32\cdd.dll
2016-10-31 15:16:48 ----A---- C:\Windows\system32\bcryptprimitives.dll
2016-10-31 15:16:47 ----A---- C:\Windows\SYSWOW64\themeui.dll
2016-10-31 15:16:47 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2016-10-31 15:16:47 ----A---- C:\Windows\SYSWOW64\azroles.dll
2016-10-31 15:16:47 ----A---- C:\Windows\system32\tcpipcfg.dll
2016-10-31 15:16:47 ----A---- C:\Windows\system32\spp.dll
2016-10-31 15:16:47 ----A---- C:\Windows\system32\scansetting.dll
2016-10-31 15:16:47 ----A---- C:\Windows\system32\QSHVHOST.DLL
2016-10-31 15:16:47 ----A---- C:\Windows\system32\profsvc.dll
2016-10-31 15:16:47 ----A---- C:\Windows\system32\printui.dll
2016-10-31 15:16:47 ----A---- C:\Windows\system32\netid.dll
2016-10-31 15:16:47 ----A---- C:\Windows\system32\mspbda.dll
2016-10-31 15:16:47 ----A---- C:\Windows\system32\msinfo32.exe
2016-10-31 15:16:47 ----A---- C:\Windows\system32\inetpp.dll
2016-10-31 15:16:47 ----A---- C:\Windows\system32\gameux.dll
2016-10-31 15:16:47 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-10-31 15:16:47 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2016-10-31 15:16:47 ----A---- C:\Windows\system32\davclnt.dll
2016-10-31 15:16:47 ----A---- C:\Windows\system32\biocpl.dll
2016-10-31 15:16:46 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2016-10-31 15:16:46 ----A---- C:\Windows\SYSWOW64\spp.dll
2016-10-31 15:16:46 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2016-10-31 15:16:46 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-10-31 15:16:46 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2016-10-31 15:16:46 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2016-10-31 15:16:46 ----A---- C:\Windows\SYSWOW64\credui.dll
2016-10-31 15:16:46 ----A---- C:\Windows\system32\wusa.exe
2016-10-31 15:16:46 ----A---- C:\Windows\system32\wiaservc.dll
2016-10-31 15:16:46 ----A---- C:\Windows\system32\vds.exe
2016-10-31 15:16:46 ----A---- C:\Windows\system32\pla.dll
2016-10-31 15:16:46 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2016-10-31 15:16:46 ----A---- C:\Windows\system32\msdri.dll
2016-10-31 15:16:46 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2016-10-31 15:16:46 ----A---- C:\Windows\system32\inetcomm.dll
2016-10-31 15:16:46 ----A---- C:\Windows\system32\conhost.exe
2016-10-31 15:16:46 ----A---- C:\Windows\system32\aitagent.exe
2016-10-31 15:16:46 ----A---- C:\Windows\splwow64.exe
2016-10-31 15:16:45 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2016-10-31 15:16:45 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2016-10-31 15:16:45 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2016-10-31 15:16:45 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2016-10-31 15:16:45 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2016-10-31 15:16:45 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2016-10-31 15:16:45 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2016-10-31 15:16:45 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2016-10-31 15:16:45 ----A---- C:\Windows\system32\XpsRasterService.dll
2016-10-31 15:16:45 ----A---- C:\Windows\system32\wisptis.exe
2016-10-31 15:16:45 ----A---- C:\Windows\system32\rpchttp.dll
2016-10-31 15:16:45 ----A---- C:\Windows\system32\PkgMgr.exe
2016-10-31 15:16:45 ----A---- C:\Windows\system32\ocsetup.exe
2016-10-31 15:16:45 ----A---- C:\Windows\system32\msi.dll
2016-10-31 15:16:45 ----A---- C:\Windows\system32\mscms.dll
2016-10-31 15:16:45 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2016-10-31 15:16:45 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2016-10-31 15:16:45 ----A---- C:\Windows\system32\drivers\pci.sys
2016-10-31 15:16:45 ----A---- C:\Windows\system32\cryptsvc.dll
2016-10-31 15:16:44 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2016-10-31 15:16:44 ----A---- C:\Windows\SYSWOW64\evr.dll
2016-10-31 15:16:44 ----A---- C:\Windows\SYSWOW64\calc.exe
2016-10-31 15:16:44 ----A---- C:\Windows\system32\sppwinob.dll
2016-10-31 15:16:44 ----A---- C:\Windows\system32\ocsetapi.dll
2016-10-31 15:16:44 ----A---- C:\Windows\system32\DXP.dll
2016-10-31 15:16:44 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-10-31 15:16:43 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2016-10-31 15:16:43 ----A---- C:\Windows\SYSWOW64\sxs.dll
2016-10-31 15:16:43 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2016-10-31 15:16:43 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2016-10-31 15:16:43 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2016-10-31 15:16:43 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2016-10-31 15:16:43 ----A---- C:\Windows\system32\wpdbusenum.dll
2016-10-31 15:16:43 ----A---- C:\Windows\system32\wcncsvc.dll
2016-10-31 15:16:43 ----A---- C:\Windows\system32\upnp.dll
2016-10-31 15:16:43 ----A---- C:\Windows\system32\thumbcache.dll
2016-10-31 15:16:43 ----A---- C:\Windows\system32\t2embed.dll
2016-10-31 15:16:43 ----A---- C:\Windows\system32\Robocopy.exe
2016-10-31 15:16:43 ----A---- C:\Windows\system32\rdpcore.dll
2016-10-31 15:16:43 ----A---- C:\Windows\system32\ntshrui.dll
2016-10-31 15:16:43 ----A---- C:\Windows\system32\mprapi.dll
2016-10-31 15:16:43 ----A---- C:\Windows\system32\eapphost.dll
2016-10-31 15:16:43 ----A---- C:\Windows\system32\eapp3hst.dll
2016-10-31 15:16:43 ----A---- C:\Windows\system32\drivers\volmgr.sys
2016-10-31 15:16:43 ----A---- C:\Windows\system32\drivers\msdsm.sys
2016-10-31 15:16:43 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2016-10-31 15:16:43 ----A---- C:\Windows\system32\ci.dll
2016-10-31 15:16:43 ----A---- C:\Windows\system32\cfgmgr32.dll
2016-10-31 15:16:42 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2016-10-31 15:16:42 ----A---- C:\Windows\SYSWOW64\stobject.dll
2016-10-31 15:16:42 ----A---- C:\Windows\SYSWOW64\netshell.dll
2016-10-31 15:16:42 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-10-31 15:16:42 ----A---- C:\Windows\system32\scecli.dll
2016-10-31 15:16:42 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2016-10-31 15:16:42 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2016-10-31 15:16:42 ----A---- C:\Windows\system32\hal.dll
2016-10-31 15:16:42 ----A---- C:\Windows\system32\DxpTaskSync.dll
2016-10-31 15:16:42 ----A---- C:\Windows\system32\dwmredir.dll
2016-10-31 15:16:42 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-10-31 15:16:42 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-10-31 15:16:42 ----A---- C:\Windows\system32\drivers\fvevol.sys
2016-10-31 15:16:42 ----A---- C:\Windows\system32\atmfd.dll
2016-10-31 15:16:41 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2016-10-31 15:16:41 ----A---- C:\Windows\SYSWOW64\prncache.dll
2016-10-31 15:16:41 ----A---- C:\Windows\SYSWOW64\printui.dll
2016-10-31 15:16:41 ----A---- C:\Windows\SYSWOW64\msi.dll
2016-10-31 15:16:41 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2016-10-31 15:16:41 ----A---- C:\Windows\system32\themeui.dll
2016-10-31 15:16:41 ----A---- C:\Windows\system32\sspicli.dll
2016-10-31 15:16:41 ----A---- C:\Windows\system32\puiobj.dll
2016-10-31 15:16:41 ----A---- C:\Windows\system32\onex.dll
2016-10-31 15:16:41 ----A---- C:\Windows\system32\nlaapi.dll
2016-10-31 15:16:41 ----A---- C:\Windows\system32\msasn1.dll
2016-10-31 15:16:41 ----A---- C:\Windows\system32\iasrad.dll
2016-10-31 15:16:41 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2016-10-31 15:16:41 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2016-10-31 15:16:41 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2016-10-31 15:16:41 ----A---- C:\Windows\system32\drivers\amdxata.sys
2016-10-31 15:16:40 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2016-10-31 15:16:40 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-10-31 15:16:40 ----A---- C:\Windows\SYSWOW64\net1.exe
2016-10-31 15:16:40 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2016-10-31 15:16:40 ----A---- C:\Windows\system32\wow64.dll
2016-10-31 15:16:40 ----A---- C:\Windows\system32\wdc.dll
2016-10-31 15:16:40 ----A---- C:\Windows\system32\iedkcs32.dll
2016-10-31 15:16:40 ----A---- C:\Windows\system32\aaclient.dll
2016-10-31 15:16:39 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2016-10-31 15:16:39 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2016-10-31 15:16:39 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2016-10-31 15:16:39 ----A---- C:\Windows\system32\wlangpui.dll
2016-10-31 15:16:39 ----A---- C:\Windows\system32\wiadefui.dll
2016-10-31 15:16:39 ----A---- C:\Windows\system32\VAN.dll
2016-10-31 15:16:39 ----A---- C:\Windows\system32\StructuredQuery.dll
2016-10-31 15:16:39 ----A---- C:\Windows\system32\sdengin2.dll
2016-10-31 15:16:39 ----A---- C:\Windows\system32\scesrv.dll
2016-10-31 15:16:39 ----A---- C:\Windows\system32\samcli.dll
2016-10-31 15:16:39 ----A---- C:\Windows\system32\rasmans.dll
2016-10-31 15:16:39 ----A---- C:\Windows\system32\netcenter.dll
2016-10-31 15:16:39 ----A---- C:\Windows\system32\msftedit.dll
2016-10-31 15:16:39 ----A---- C:\Windows\system32\dskquoui.dll
2016-10-31 15:16:39 ----A---- C:\Windows\system32\drivers\usbport.sys
2016-10-31 15:16:39 ----A---- C:\Windows\system32\drivers\partmgr.sys
2016-10-31 15:16:38 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2016-10-31 15:16:38 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2016-10-31 15:16:38 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2016-10-31 15:16:38 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2016-10-31 15:16:38 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2016-10-31 15:16:38 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2016-10-31 15:16:38 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2016-10-31 15:16:38 ----A---- C:\Windows\system32\wscapi.dll
2016-10-31 15:16:38 ----A---- C:\Windows\system32\TabSvc.dll
2016-10-31 15:16:38 ----A---- C:\Windows\system32\srchadmin.dll
2016-10-31 15:16:38 ----A---- C:\Windows\system32\SndVol.exe
2016-10-31 15:16:38 ----A---- C:\Windows\system32\regapi.dll
2016-10-31 15:16:38 ----A---- C:\Windows\system32\QUTIL.DLL
2016-10-31 15:16:38 ----A---- C:\Windows\system32\iasacct.dll
2016-10-31 15:16:38 ----A---- C:\Windows\system32\drivers\termdd.sys
2016-10-31 15:16:38 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2016-10-31 15:16:38 ----A---- C:\Windows\system32\consent.exe
2016-10-31 15:16:37 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2016-10-31 15:16:37 ----A---- C:\Windows\SYSWOW64\webservices.dll
2016-10-31 15:16:37 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2016-10-31 15:16:37 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2016-10-31 15:16:37 ----A---- C:\Windows\SYSWOW64\fde.dll
2016-10-31 15:16:37 ----A---- C:\Windows\system32\WUDFSvc.dll
2016-10-31 15:16:37 ----A---- C:\Windows\system32\wksprt.exe
2016-10-31 15:16:37 ----A---- C:\Windows\system32\taskhost.exe
2016-10-31 15:16:37 ----A---- C:\Windows\system32\setupcl.exe
2016-10-31 15:16:37 ----A---- C:\Windows\system32\rastls.dll
2016-10-31 15:16:37 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2016-10-31 15:16:37 ----A---- C:\Windows\system32\drivers\msahci.sys
2016-10-31 15:16:37 ----A---- C:\Windows\system32\drivers\acpi.sys
2016-10-31 15:16:36 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2016-10-31 15:16:36 ----A---- C:\Windows\SYSWOW64\pla.dll
2016-10-31 15:16:36 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2016-10-31 15:16:36 ----A---- C:\Windows\system32\tapisrv.dll
2016-10-31 15:16:36 ----A---- C:\Windows\system32\netiohlp.dll
2016-10-31 15:16:36 ----A---- C:\Windows\system32\msconfig.exe
2016-10-31 15:16:36 ----A---- C:\Windows\system32\mimefilt.dll
2016-10-31 15:16:36 ----A---- C:\Windows\system32\lsmproxy.dll
2016-10-31 15:16:36 ----A---- C:\Windows\system32\ListSvc.dll
2016-10-31 15:16:36 ----A---- C:\Windows\system32\hgcpl.dll
2016-10-31 15:16:36 ----A---- C:\Windows\system32\drivers\raspptp.sys
2016-10-31 15:16:36 ----A---- C:\Windows\system32\drivers\ks.sys
2016-10-31 15:16:36 ----A---- C:\Windows\system32\clusapi.dll
2016-10-31 15:16:36 ----A---- C:\Windows\system32\basecsp.dll
2016-10-31 15:16:35 ----A---- C:\Windows\SYSWOW64\winsta.dll
2016-10-31 15:16:35 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2016-10-31 15:16:35 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2016-10-31 15:16:35 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2016-10-31 15:16:35 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2016-10-31 15:16:35 ----A---- C:\Windows\system32\winsrv.dll
2016-10-31 15:16:35 ----A---- C:\Windows\system32\WFS.exe
2016-10-31 15:16:35 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2016-10-31 15:16:35 ----A---- C:\Windows\system32\riched20.dll
2016-10-31 15:16:35 ----A---- C:\Windows\system32\mtxclu.dll
2016-10-31 15:16:35 ----A---- C:\Windows\system32\fdeploy.dll
2016-10-31 15:16:35 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2016-10-31 15:16:35 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2016-10-31 15:16:35 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2016-10-31 15:16:35 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2016-10-31 15:16:34 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2016-10-31 15:16:34 ----A---- C:\Windows\SYSWOW64\gameux.dll
2016-10-31 15:16:34 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2016-10-31 15:16:34 ----A---- C:\Windows\system32\RpcRtRemote.dll
2016-10-31 15:16:34 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-10-31 15:16:34 ----A---- C:\Windows\system32\dnscmmc.dll
2016-10-31 15:16:33 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2016-10-31 15:16:33 ----A---- C:\Windows\SYSWOW64\winmm.dll
2016-10-31 15:16:33 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2016-10-31 15:16:33 ----A---- C:\Windows\SYSWOW64\samcli.dll
2016-10-31 15:16:33 ----A---- C:\Windows\SYSWOW64\onex.dll
2016-10-31 15:16:33 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2016-10-31 15:16:33 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2016-10-31 15:16:33 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2016-10-31 15:16:33 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2016-10-31 15:16:33 ----A---- C:\Windows\SYSWOW64\autochk.exe
2016-10-31 15:16:33 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2016-10-31 15:16:33 ----A---- C:\Windows\system32\wkssvc.dll
2016-10-31 15:16:33 ----A---- C:\Windows\system32\vpnikeapi.dll
2016-10-31 15:16:33 ----A---- C:\Windows\system32\themecpl.dll
2016-10-31 15:16:33 ----A---- C:\Windows\system32\sharemediacpl.dll
2016-10-31 15:16:33 ----A---- C:\Windows\system32\SensorsCpl.dll
2016-10-31 15:16:33 ----A---- C:\Windows\system32\powercpl.dll
2016-10-31 15:16:33 ----A---- C:\Windows\system32\netjoin.dll
2016-10-31 15:16:33 ----A---- C:\Windows\system32\nci.dll
2016-10-31 15:16:33 ----A---- C:\Windows\system32\Narrator.exe
2016-10-31 15:16:33 ----A---- C:\Windows\system32\logoncli.dll
2016-10-31 15:16:33 ----A---- C:\Windows\system32\licmgr10.dll
2016-10-31 15:16:33 ----A---- C:\Windows\system32\Faultrep.dll
2016-10-31 15:16:33 ----A---- C:\Windows\system32\eudcedit.exe
2016-10-31 15:16:33 ----A---- C:\Windows\system32\drivers\usbehci.sys
2016-10-31 15:16:33 ----A---- C:\Windows\system32\comctl32.dll
2016-10-31 15:16:32 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2016-10-31 15:16:32 ----A---- C:\Windows\SYSWOW64\regapi.dll
2016-10-31 15:16:32 ----A---- C:\Windows\SYSWOW64\proquota.exe
2016-10-31 15:16:32 ----A---- C:\Windows\SYSWOW64\msutb.dll
2016-10-31 15:16:32 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2016-10-31 15:16:32 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2016-10-31 15:16:32 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2016-10-31 15:16:32 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2016-10-31 15:16:32 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2016-10-31 15:16:32 ----A---- C:\Windows\system32\sppcomapi.dll
2016-10-31 15:16:32 ----A---- C:\Windows\system32\nshipsec.dll
2016-10-31 15:16:32 ----A---- C:\Windows\system32\cabview.dll
2016-10-31 15:16:32 ----A---- C:\Windows\system32\autochk.exe
2016-10-31 15:16:32 ----A---- C:\Windows\system32\autofmt.exe
2016-10-31 15:16:32 ----A---- C:\Windows\system32\autoconv.exe
2016-10-31 15:16:31 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2016-10-31 15:16:31 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2016-10-31 15:16:31 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2016-10-31 15:16:31 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2016-10-31 15:16:31 ----A---- C:\Windows\SYSWOW64\sbe.dll
2016-10-31 15:16:31 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2016-10-31 15:16:31 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2016-10-31 15:16:31 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2016-10-31 15:16:31 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2016-10-31 15:16:31 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2016-10-31 15:16:31 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2016-10-31 15:16:31 ----A---- C:\Windows\system32\wwanconn.dll
2016-10-31 15:16:31 ----A---- C:\Windows\system32\wpd_ci.dll
2016-10-31 15:16:31 ----A---- C:\Windows\system32\wlanui.dll
2016-10-31 15:16:31 ----A---- C:\Windows\system32\shsetup.dll
2016-10-31 15:16:31 ----A---- C:\Windows\system32\sdclt.exe
2016-10-31 15:16:31 ----A---- C:\Windows\system32\prntvpt.dll
2016-10-31 15:16:31 ----A---- C:\Windows\system32\mscorier.dll
2016-10-31 15:16:31 ----A---- C:\Windows\system32\fms.dll
2016-10-31 15:16:31 ----A---- C:\Windows\system32\drivers\winusb.sys
2016-10-31 15:16:31 ----A---- C:\Windows\system32\drivers\wanarp.sys
2016-10-31 15:16:31 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2016-10-31 15:16:31 ----A---- C:\Windows\system32\drivers\scsiport.sys
2016-10-31 15:16:31 ----A---- C:\Windows\system32\bcdsrv.dll
2016-10-31 15:16:31 ----A---- C:\Windows\system32\audiodg.exe
2016-10-31 15:16:30 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2016-10-31 15:16:30 ----A---- C:\Windows\SYSWOW64\netid.dll
2016-10-31 15:16:30 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2016-10-31 15:16:30 ----A---- C:\Windows\system32\SmiEngine.dll
2016-10-31 15:16:30 ----A---- C:\Windows\system32\qedit.dll
2016-10-31 15:16:30 ----A---- C:\Windows\system32\mprddm.dll
2016-10-31 15:16:30 ----A---- C:\Windows\system32\FXSCOVER.exe
2016-10-31 15:16:30 ----A---- C:\Windows\system32\fontext.dll
2016-10-31 15:16:30 ----A---- C:\Windows\system32\dps.dll
2016-10-31 15:16:30 ----A---- C:\Windows\system32\Display.dll
2016-10-31 15:16:30 ----A---- C:\Windows\system32\AxInstSv.dll
2016-10-31 15:16:29 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2016-10-31 15:16:29 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2016-10-31 15:16:29 ----A---- C:\Windows\SYSWOW64\wdc.dll
2016-10-31 15:16:29 ----A---- C:\Windows\SYSWOW64\Vault.dll
2016-10-31 15:16:29 ----A---- C:\Windows\SYSWOW64\untfs.dll
2016-10-31 15:16:29 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2016-10-31 15:16:29 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2016-10-31 15:16:29 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2016-10-31 15:16:29 ----A---- C:\Windows\SYSWOW64\rastls.dll
2016-10-31 15:16:29 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2016-10-31 15:16:29 ----A---- C:\Windows\SYSWOW64\nci.dll
2016-10-31 15:16:29 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2016-10-31 15:16:29 ----A---- C:\Windows\system32\wmpsrcwp.dll
2016-10-31 15:16:29 ----A---- C:\Windows\system32\usercpl.dll
2016-10-31 15:16:29 ----A---- C:\Windows\system32\rtutils.dll
2016-10-31 15:16:29 ----A---- C:\Windows\system32\mblctr.exe
2016-10-31 15:16:29 ----A---- C:\Windows\system32\fontsub.dll
2016-10-31 15:16:29 ----A---- C:\Windows\system32\drivers\hidclass.sys