Pomalejší notebook

Zpráva

klik6 · #1 Příspěvek od **klik6** » 07 lis 2016 18:25

Dobrý den, poprosil bych o kontrolu logu. Notebook je pomalejší asi havěť. Děkuji.

Logfile of random's system information tool 1.14 (written by random/random)
Run by HP250G4 at 2016-11-07 18:07:39
Microsoft Windows 10 Home
System drive C: has 386 GB (84%) free of 462 GB
Total RAM: 3938 MB (50% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:07:55, on 07.11.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0596)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
C:\Program Files (x86)\CyberLink\YouCam6\YouCamService6.exe
C:\Program Files\AVAST Software\SecureLine\SecureLine.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files\trend micro\HP250G4_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKLM\..\Run: [HPMessageService] C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
O4 - HKLM\..\Run: [isa] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
O4 - HKLM\..\Run: [PowerDVD14Agent] "C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\HP250G4\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\HP250G4\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\HP250G4\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\HP250G4\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BTDevManager - Unknown owner - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @oem18.inf,%ServiceDisplayName%;ESIF Upper Framework Service (esifsvc) - Intel Corporation - C:\WINDOWS\SysWOW64\esif_uf.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Registration Service (HPRegistrationSvc) - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Registration Service\HPRegistrationService.exe
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - c:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: Intel(R) Security Assist - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
O23 - Service: Intel(R) Security Assist Helper (isaHelperSvc) - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Avast SecureLine (SecureLine) - Unknown owner - C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9788 bytes

======Enumerating Processes======

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b016339c-316a-4024-81ca-c147dc646f04 -SystemEventPortName:HostProcess-39641a8c-4f25-48de-878f-5328e34e7093 -IoCancelEventPortName:HostProcess-f392f31f-61e6-45da-bdce-36443071c320 -NonStateChangingEventPortName:HostProcess-1e3de858-161c-4535-b78a-c430d6529b1d -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:6a3a1fe2-87aa-41ba-8784-a4e51eeb833b -DeviceGroupId:
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\igfxCUIService.exe
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Bonjour\mDNSResponder.exe"
"c:\Program Files (x86)\Hewlett-Packard\HP Registration Service\HPRegistrationService.exe"
"c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe"
C:\WINDOWS\SysWOW64\esif_uf.exe
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\CyberLink\Shared files\RichVideo64.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe"
C:\WINDOWS\system32\WLANExt.exe 2481502002320
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"c:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
"C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe"
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
C:\WINDOWS\System32\dwm.exe
"C:\WINDOWS\TEMP\DPTF\esif_assist_64.exe"
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\system32\sihost.exe
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\igfxEM.exe
C:\WINDOWS\system32\igfxHK.exe
C:\WINDOWS\Explorer.EXE
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe"
"C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe"
"C:\Program Files (x86)\CyberLink\YouCam6\YouCamService6.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\AVAST Software\SecureLine\SecureLine.exe" /nogui
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe"
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 93248747-60A1-31A9-FCB3-F81A712E51E9 -Reinvoke
C:\Windows\System32\InstallAgent.exe -Embedding
C:\WINDOWS\System32\fontdrvhost.exe
"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe"
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.570_none_7645b09c266beb53\TiWorker.exe -Embedding
"C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\HP250G4\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=-m --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=54.0.2840.87 --handshake-handle=0x154
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,MetricsReporting<MetricsAndCrashSampling,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/ClientSideDetectionModel/Model0/DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/InReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/ControlGroup/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/StrictSecureCookies/Default/SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_95/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --supports-dual-gpus=false --gpu-driver-bug-workarounds=5,15,19,33,50,59 --gpu-vendor-id=0x8086 --gpu-device-id=0x22b1 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.15.4248 --gpu-driver-date=6-29-2015 --mojo-application-channel-token=F2A9F2FBCC0F03E37968B219C35B2613 --mojo-platform-channel-handle=1160 --ignored=" --type=renderer " /prefetch:2
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1790289193-3195143582-3109998675-10019_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1790289193-3195143582-3109998675-10019 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,MetricsReporting<MetricsAndCrashSampling,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*MetricsAndCrashSampling/InReportingSample/*NetworkQualityEstimator/Enabled/*NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/ControlGroup/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_95/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=7D0D50D7858B472311CBD1A22EB3112E --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=7D0D50D7858B472311CBD1A22EB3112E --channel="4168.10.709383529\1461954286" --mojo-platform-channel-handle=804 /prefetch:1
C:\WINDOWS\system32\taskeng.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ua /installsource scheduler
C:\WINDOWS\system32\msiexec.exe /V
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe10_ Global\UsGthrCtrlFltPipeMssGthrPipe10 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 624 628 636 8192 632
"C:\Users\HP250G4\Downloads\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\Avast SecureLine - C:\Program Files\AVAST Software\SecureLine\SecureLine.exe /nogui
C:\WINDOWS\system32\tasks\avast! SL Update - C:\Program Files\AVAST Software\SecureLine\SLUpdate.exe
C:\WINDOWS\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\OneDrive Standalone Update Task - C:\Users\HP250G4\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
C:\WINDOWS\system32\tasks\User_Feed_Synchronization-{19E79C59-0604-495E-BCBD-4CAD1D91E77F} - C:\WINDOWS\system32\msfeedssync.exe sync
C:\WINDOWS\system32\tasks\YCMServiceAgent - C:\Program Files (x86)\CyberLink\YouCam6\YouCamService6.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SysResetDelayedCleanup - %windir%\system32\rundll32.exe ResetEng.dll,RjvDelayedCleanupEntryPoint
C:\WINDOWS\system32\tasks\Microsoft\Windows\WS\License Validation - rundll32.exe WSClient.dll,WSpTLR licensing
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - %systemroot%\System32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance - C:\Program Files\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup - C:\Program Files\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCleanup
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan - C:\Program Files\Windows Defender\MpCmdRun.exe Scan -ScheduleJob
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification - C:\Program Files\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdVerification
C:\WINDOWS\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - C:\WINDOWS\system32\MusNotification.exe Reboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot - %systemroot%\system32\usoclient.exe ResumeUpdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display - C:\windows\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot - C:\windows\system32\MusNotification.exe ReadyToReboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\WINDOWS\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\WINDOWS\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\SpaceMan.exe /Repair
C:\WINDOWS\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\WINDOWS\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\WINDOWS\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskFootprint\StorageSense - %windir%\system32\rundll32.exe %windir%\system32\StorageUsage.dll,GetStorageUsageInfo
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\WINDOWS\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\WINDOWS\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\WINDOWS\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\First Boot - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe /SetSchedule true
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -source HPSA
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /taskrestart
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /f
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis

=========Google Chrome=========

C:\Users\HP250G4\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabulky Google 1.1
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.38
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.0
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.0
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5416.905.0.6
Homepage:
default_search_provider.search_url:
C:\Users\HP250G4\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-07-24 8510680]
"BtServer"=C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [2015-07-09 229592]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-09-28 8944344]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\HP250G4\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]
"Uninstall C:\Users\HP250G4\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HPMessageService"=C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [2015-02-17 654088]
"isa"=C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [2015-02-26 330240]
"PowerDVD14Agent"=C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [2015-06-22 795336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"undockwithoutlogon"=1
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
"StubPath"=%SystemRoot%\inf\unregmp2.exe /ShowWMP
[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath"="C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.87\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-11-07 18:07:40 ----D---- C:\Program Files\trend micro
2016-11-07 18:07:39 ----D---- C:\rsit
2016-11-07 18:02:49 ----D---- C:\Program Files (x86)\Google
2016-11-07 17:11:01 ----D---- C:\WINDOWS\system32\SleepStudy
2016-11-06 20:39:45 ----D---- C:\Program Files\CCleaner
2016-10-21 21:01:05 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2016-10-21 20:41:15 ----D---- C:\Users\HP250G4\AppData\Roaming\Skype
2016-10-21 05:18:28 ----D---- C:\Users\HP250G4\AppData\Roaming\AVAST Software
2016-10-20 20:43:17 ----D---- C:\Users\HP250G4\AppData\Roaming\Macromedia
2016-10-20 20:39:23 ----D---- C:\Users\HP250G4\AppData\Roaming\Hewlett-Packard
2016-10-20 20:33:16 ----D---- C:\Users\HP250G4\AppData\Roaming\Adobe
2016-10-20 20:32:47 ----D---- C:\Users\HP250G4\AppData\Roaming\Synaptics
2016-10-20 20:28:13 ----SHD---- C:\ProgramData\Šablony
2016-10-20 20:28:13 ----SHD---- C:\ProgramData\Plocha
2016-10-20 20:28:13 ----SHD---- C:\ProgramData\Nabídka Start
2016-10-20 20:28:13 ----SHD---- C:\ProgramData\Dokumenty
2016-10-20 20:28:13 ----SHD---- C:\ProgramData\Data aplikací
2016-10-20 20:26:07 ----SD---- C:\Users\HP250G4\AppData\Roaming\Microsoft
2016-10-20 20:25:10 ----DC---- C:\WINDOWS\Panther
2016-10-20 20:25:10 ----D---- C:\WINDOWS\InfusedApps
2016-10-20 20:24:12 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2016-10-20 20:23:46 ----D---- C:\Windows.old
2016-10-20 20:22:53 ----D---- C:\WINDOWS\system32\Microsoft
2016-10-20 20:20:03 ----D---- C:\Program Files\Synaptics
2016-10-20 20:19:50 ----D---- C:\WINDOWS\SYSWOW64\sda
2016-10-20 20:17:43 ----D---- C:\WINDOWS\Setup
2016-10-20 20:17:19 ----ASH---- C:\hiberfil.sys
2016-10-20 20:06:22 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2016-10-20 20:06:22 ----D---- C:\WINDOWS\OCR
2016-10-20 20:06:19 ----D---- C:\Program Files\Reference Assemblies
2016-10-20 20:06:19 ----D---- C:\Program Files\MSBuild
2016-10-20 20:06:19 ----D---- C:\Program Files (x86)\Reference Assemblies
2016-10-20 20:06:19 ----D---- C:\Program Files (x86)\MSBuild
2016-10-20 20:05:11 ----A---- C:\WINDOWS\system32\perfi005.dat
2016-10-20 20:05:11 ----A---- C:\WINDOWS\system32\perfh005.dat
2016-10-20 20:05:11 ----A---- C:\WINDOWS\system32\perfd005.dat
2016-10-20 20:05:11 ----A---- C:\WINDOWS\system32\perfc005.dat
2016-10-20 20:04:31 ----D---- C:\WINDOWS\SYSWOW64\winrm
2016-10-20 20:04:30 ----D---- C:\WINDOWS\SYSWOW64\WCN
2016-10-20 20:04:30 ----D---- C:\WINDOWS\SYSWOW64\sysprep
2016-10-20 20:04:30 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2016-10-20 20:04:30 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2016-10-20 20:04:29 ----D---- C:\WINDOWS\SYSWOW64\en
2016-10-20 20:04:29 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2016-10-20 20:04:29 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-US
2016-10-20 20:04:29 ----D---- C:\WINDOWS\SYSWOW64\drivers\cs-CZ
2016-10-20 20:04:28 ----D---- C:\WINDOWS\SYSWOW64\cs
2016-10-20 20:04:28 ----D---- C:\WINDOWS\SYSWOW64\0409
2016-10-20 20:04:28 ----D---- C:\WINDOWS\system32\winrm
2016-10-20 20:04:28 ----D---- C:\WINDOWS\system32\WCN
2016-10-20 20:04:28 ----D---- C:\WINDOWS\system32\slmgr
2016-10-20 20:04:28 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2016-10-20 20:04:27 ----D---- C:\WINDOWS\system32\en
2016-10-20 20:04:27 ----D---- C:\WINDOWS\system32\drivers\en-US
2016-10-20 20:04:27 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2016-10-20 20:04:25 ----D---- C:\WINDOWS\system32\cs
2016-10-20 20:04:25 ----D---- C:\WINDOWS\system32\0409
2016-10-20 20:04:24 ----D---- C:\WINDOWS\en-US
2016-10-20 20:04:24 ----D---- C:\WINDOWS\DigitalLocker
2016-10-20 20:04:24 ----D---- C:\WINDOWS\cs-CZ
2016-10-20 19:58:50 ----A---- C:\WINDOWS\system32\perfi009.dat
2016-10-20 19:58:50 ----A---- C:\WINDOWS\system32\perfh009.dat
2016-10-20 19:58:50 ----A---- C:\WINDOWS\system32\perfd009.dat
2016-10-20 19:58:50 ----A---- C:\WINDOWS\system32\perfc009.dat
2016-10-20 19:58:11 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-10-20 19:54:58 ----A---- C:\WINDOWS\SYSWOW64\NOISE.DAT
2016-10-20 19:54:58 ----A---- C:\WINDOWS\SYSWOW64\msclmd.dll
2016-10-20 19:54:57 ----A---- C:\WINDOWS\SYSWOW64\dssec.dat
2016-10-20 19:54:44 ----A---- C:\WINDOWS\system32\NOISE.DAT
2016-10-20 19:54:43 ----A---- C:\WINDOWS\system32\msclmd.dll
2016-10-20 19:54:42 ----A---- C:\WINDOWS\system32\dssec.dat
2016-10-20 19:54:35 ----RSH---- C:\WINDOWS\fonts\StaticCache.dat
2016-10-20 19:54:34 ----A---- C:\WINDOWS\fonts\desktop.ini
2016-10-20 19:54:33 ----ASH---- C:\Program Files (x86)\desktop.ini
2016-10-20 19:54:31 ----ASH---- C:\Program Files\desktop.ini
2016-10-20 19:54:29 ----D---- C:\WINDOWS\Web
2016-10-20 19:54:29 ----D---- C:\WINDOWS\Vss
2016-10-20 19:54:29 ----D---- C:\WINDOWS\twain_32
2016-10-20 19:54:29 ----D---- C:\WINDOWS\tracing
2016-10-20 19:54:29 ----D---- C:\WINDOWS\Temp
2016-10-20 19:54:28 ----SD---- C:\WINDOWS\SYSWOW64\Nui
2016-10-20 19:54:28 ----SD---- C:\WINDOWS\SYSWOW64\F12
2016-10-20 19:54:28 ----SD---- C:\WINDOWS\SYSWOW64\DiagSvcs
2016-10-20 19:54:28 ----SD---- C:\WINDOWS\SYSWOW64\Configuration
2016-10-20 19:54:28 ----SD---- C:\WINDOWS\system32\Nui
2016-10-20 19:54:28 ----SD---- C:\WINDOWS\system32\F12
2016-10-20 19:54:28 ----SD---- C:\WINDOWS\system32\dsc
2016-10-20 19:54:28 ----D---- C:\WINDOWS\TAPI
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\zh-HK
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\WinMetadata
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\WindowsPowerShell
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\wbem
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\Tasks
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\sru
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-CS
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\sppui
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\spp
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\Speech_OneCore
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\Speech
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\SMI
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\setup
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\restore
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\Recovery
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\RasToast
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\ras
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\oobe
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\networklist
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\NDF
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\MUI
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\MsDtc
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\MSDRM
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\MailContactsCalendarSync
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\LogFiles
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\Licenses
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\Ipmi
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\InstallShield
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\InputMethod
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\IME
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\icsxml
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicyUsers
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicy
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\FxsTmp
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\fr-CA
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\es-MX
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\DriverStore
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\drivers
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\downlevel
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\config
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\Com
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\catroot
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\Bthprops
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\AppLocker
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SYSWOW64\AdvancedInstallers
2016-10-20 19:54:28 ----D---- C:\WINDOWS\syswow64
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SystemResources
2016-10-20 19:54:28 ----D---- C:\WINDOWS\SystemApps
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\zh-TW
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\zh-HK
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\zh-CN
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\WinMetadata
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\winevt
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\WinBioDatabase
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\WDI
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\wbem
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\uk-UA
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\tr-TR
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\th-TH
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\Tasks
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\sv-SE
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\sru
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\sppui
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\spp
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\spool
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\Speech_OneCore
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\Speech
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\sl-SI
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\sk-SK
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\setup
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\SecureBootUpdates
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\ru-RU
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\ro-RO
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\restore
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\Recovery
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\RasToast
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\ras
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\pt-PT
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\pt-BR
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\ProximityToast
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\PointOfService
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\pl-PL
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\oobe
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\nl-NL
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\networklist
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\NDF
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\nb-NO
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\MUI
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\MsDtc
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\MSDRM
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\migwiz
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\migration
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\MailContactsCalendarSync
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\Macromed
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\lv-LV
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\lt-LT
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\LogFiles
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\Licenses
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\ko-KR
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\ja-JP
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\it-IT
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\Ipmi
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\InputMethod
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\inetsrv
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\IME
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\icsxml
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\ias
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\hu-HU
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\hr-HR
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\he-IL
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\FxsTmp
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\fr-FR
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\fr-CA
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\fi-FI
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\et-EE
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\es-MX
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\es-ES
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\en-US
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\en-GB
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\el-GR
2016-10-20 19:54:28 ----D---- C:\WINDOWS\system32\drivers\etc
2016-10-20 19:54:27 ----SHD---- C:\WINDOWS\Installer
2016-10-20 19:54:27 ----SHD---- C:\Program Files\Windows Sidebar
2016-10-20 19:54:27 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2016-10-20 19:54:27 ----SD---- C:\WINDOWS\system32\DiagSvcs
2016-10-20 19:54:27 ----SD---- C:\WINDOWS\system32\Configuration
2016-10-20 19:54:27 ----SD---- C:\WINDOWS\Downloaded Program Files
2016-10-20 19:54:27 ----SD---- C:\ProgramData\Microsoft
2016-10-20 19:54:27 ----SD---- C:\Program Files\WindowsPowerShell
2016-10-20 19:54:27 ----SD---- C:\Program Files (x86)\WindowsPowerShell
2016-10-20 19:54:27 ----RSD---- C:\WINDOWS\Media
2016-10-20 19:54:27 ----RSD---- C:\WINDOWS\Fonts
2016-10-20 19:54:27 ----RSD---- C:\WINDOWS\assembly
2016-10-20 19:54:27 ----RD---- C:\WINDOWS\PurchaseDialog
2016-10-20 19:54:27 ----RD---- C:\WINDOWS\PrintDialog
2016-10-20 19:54:27 ----RD---- C:\WINDOWS\Offline Web Pages
2016-10-20 19:54:27 ----RD---- C:\WINDOWS\MiracastView
2016-10-20 19:54:27 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-10-20 19:54:27 ----RD---- C:\WINDOWS\DevicesFlow
2016-10-20 19:54:27 ----RD---- C:\WINDOWS\DesktopTileResources
2016-10-20 19:54:27 ----HD---- C:\WINDOWS\ELAMBKUP
2016-10-20 19:54:27 ----HD---- C:\ProgramData
2016-10-20 19:54:27 ----HD---- C:\Program Files\WindowsApps
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\Sysprep
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\downlevel
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\Dism
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\de-DE
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\da-DK
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\cs-CZ
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\Com
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\CodeIntegrity
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\catroot2
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\Bthprops
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\Boot
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\bg-BG
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\ar-SA
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\appraiser
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\AppLocker
2016-10-20 19:54:27 ----D---- C:\WINDOWS\system32\AdvancedInstallers
2016-10-20 19:54:27 ----D---- C:\WINDOWS\System
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Speech_OneCore
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Speech
2016-10-20 19:54:27 ----D---- C:\WINDOWS\SKB
2016-10-20 19:54:27 ----D---- C:\WINDOWS\schemas
2016-10-20 19:54:27 ----D---- C:\WINDOWS\SchCache
2016-10-20 19:54:27 ----D---- C:\WINDOWS\security
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Resources
2016-10-20 19:54:27 ----D---- C:\WINDOWS\rescache
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Registration
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Provisioning
2016-10-20 19:54:27 ----D---- C:\WINDOWS\prefetch
2016-10-20 19:54:27 ----D---- C:\WINDOWS\PolicyDefinitions
2016-10-20 19:54:27 ----D---- C:\WINDOWS\PLA
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Performance
2016-10-20 19:54:27 ----D---- C:\WINDOWS\ModemLogs
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Migration
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Microsoft.NET
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Logs
2016-10-20 19:54:27 ----D---- C:\WINDOWS\LiveKernelReports
2016-10-20 19:54:27 ----D---- C:\WINDOWS\L2Schemas
2016-10-20 19:54:27 ----D---- C:\WINDOWS\InputMethod
2016-10-20 19:54:27 ----D---- C:\WINDOWS\IME
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Help
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Globalization
2016-10-20 19:54:27 ----D---- C:\WINDOWS\diagnostics
2016-10-20 19:54:27 ----D---- C:\WINDOWS\debug
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Cursors
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Branding
2016-10-20 19:54:27 ----D---- C:\WINDOWS\Boot
2016-10-20 19:54:27 ----D---- C:\WINDOWS\bcastdvr
2016-10-20 19:54:27 ----D---- C:\WINDOWS\AppReadiness
2016-10-20 19:54:27 ----D---- C:\WINDOWS\AppPatch
2016-10-20 19:54:27 ----D---- C:\WINDOWS\appcompat
2016-10-20 19:54:27 ----D---- C:\WINDOWS\addins
2016-10-20 19:54:27 ----D---- C:\ProgramData\USOPrivate
2016-10-20 19:54:27 ----D---- C:\ProgramData\SoftwareDistribution
2016-10-20 19:54:27 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2016-10-20 19:54:27 ----D---- C:\ProgramData\Comms
2016-10-20 19:54:27 ----D---- C:\Program Files\Windows Portable Devices
2016-10-20 19:54:27 ----D---- C:\Program Files\Windows Photo Viewer
2016-10-20 19:54:27 ----D---- C:\Program Files\Windows NT
2016-10-20 19:54:27 ----D---- C:\Program Files\Windows Multimedia Platform
2016-10-20 19:54:27 ----D---- C:\Program Files\Windows Media Player
2016-10-20 19:54:27 ----D---- C:\Program Files\Windows Mail
2016-10-20 19:54:27 ----D---- C:\Program Files\Windows Defender
2016-10-20 19:54:27 ----D---- C:\Program Files\Internet Explorer
2016-10-20 19:54:27 ----D---- C:\Program Files\Common Files\System
2016-10-20 19:54:27 ----D---- C:\Program Files\Common Files\Services
2016-10-20 19:54:27 ----D---- C:\Program Files\Common Files\microsoft shared
2016-10-20 19:54:27 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-10-20 19:54:27 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2016-10-20 19:54:27 ----D---- C:\Program Files (x86)\Windows NT
2016-10-20 19:54:27 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-10-20 19:54:27 ----D---- C:\Program Files (x86)\Windows Media Player
2016-10-20 19:54:27 ----D---- C:\Program Files (x86)\Windows Mail
2016-10-20 19:54:27 ----D---- C:\Program Files (x86)\Windows Defender
2016-10-20 19:54:27 ----D---- C:\Program Files (x86)\Microsoft.NET
2016-10-20 19:54:27 ----D---- C:\Program Files (x86)\Internet Explorer
2016-10-20 19:54:27 ----D---- C:\PerfLogs
2016-10-20 19:53:49 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-10-20 19:53:47 ----D---- C:\WINDOWS\system32\drivers
2016-10-20 19:51:30 ----D---- C:\WINDOWS\INF
2016-10-20 19:39:03 ----D---- C:\ProgramData\SRS Labs
2016-10-20 19:38:58 ----D---- C:\WINDOWS\CbsTemp
2016-10-20 19:38:47 ----D---- C:\WINDOWS\system32\SRSLabs
2016-10-20 19:38:36 ----D---- C:\Program Files\Realtek
2016-10-20 19:38:35 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2016-10-20 19:38:23 ----A---- C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2016-10-20 19:38:23 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-10-20 19:38:18 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2016-10-20 19:38:18 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2016-10-20 19:36:16 ----D---- C:\Program Files\Intel
2016-10-20 19:35:07 ----HD---- C:\Program Files\Uninstall Information
2016-10-20 19:35:07 ----D---- C:\ProgramData\USOShared
2016-10-20 19:34:40 ----D---- C:\Program Files (x86)\Intel
2016-10-20 19:33:53 ----D---- C:\WINDOWS\SoftwareDistribution
2016-10-20 19:32:28 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2016-10-20 19:30:36 ----AS---- C:\WINDOWS\bootstat.dat
2016-10-20 19:28:00 ----D---- C:\WINDOWS\ServiceProfiles
2016-10-20 19:27:47 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2016-10-20 19:12:06 ----RD---- C:\Users
2016-10-20 19:12:06 ----RD---- C:\Program Files (x86)
2016-10-20 19:12:06 ----RD---- C:\Program Files
2016-10-20 19:12:06 ----D---- C:\WINDOWS\WinSxS
2016-10-20 19:12:06 ----D---- C:\WINDOWS\system32\SMI
2016-10-20 19:12:06 ----D---- C:\WINDOWS\system32\DriverStore
2016-10-20 19:12:06 ----D---- C:\WINDOWS\system32\config
2016-10-20 19:12:06 ----D---- C:\WINDOWS\system32\CatRoot
2016-10-20 19:12:06 ----D---- C:\WINDOWS\System32
2016-10-20 19:12:06 ----D---- C:\WINDOWS\servicing
2016-10-20 19:12:06 ----D---- C:\Windows
2016-10-20 19:12:06 ----D---- C:\Program Files\Common Files
2016-10-20 19:12:06 ----D---- C:\Program Files (x86)\Common Files
2016-10-20 19:11:26 ----HD---- C:\$Windows.~BT
2016-10-20 18:09:07 ----HD---- C:\$SysReset
2016-10-12 20:11:13 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2016-10-12 20:11:12 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-10-12 20:11:08 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-10-12 20:11:05 ----A---- C:\WINDOWS\system32\sppsvc.exe
2016-10-12 20:11:03 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-10-12 20:11:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-10-12 20:10:53 ----A---- C:\WINDOWS\system32\shell32.dll
2016-10-12 20:10:48 ----A---- C:\WINDOWS\system32\mos.dll
2016-10-12 20:10:46 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-10-12 20:10:43 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-10-12 20:10:40 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-10-12 20:10:38 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-10-12 20:10:37 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-10-12 20:10:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-10-12 20:10:31 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-10-12 20:10:27 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-10-12 20:10:27 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-10-12 20:10:27 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-10-12 20:10:26 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-10-12 20:10:25 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-10-12 20:10:23 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-10-12 20:10:20 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-10-12 20:10:17 ----A---- C:\WINDOWS\system32\tquery.dll
2016-10-12 20:10:16 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-10-12 20:10:15 ----A---- C:\WINDOWS\system32\drivers\ClipSp.sys
2016-10-12 20:10:12 ----A---- C:\WINDOWS\system32\twinui.dll
2016-10-12 20:10:10 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-10-12 20:10:08 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-10-12 20:10:07 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-10-12 20:10:05 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2016-10-12 20:10:04 ----A---- C:\WINDOWS\system32\Wpc.dll
2016-10-12 20:10:04 ----A---- C:\WINDOWS\system32\combase.dll
2016-10-12 20:10:03 ----A---- C:\WINDOWS\system32\wmp.dll
2016-10-12 20:10:00 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-10-12 20:09:58 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-10-12 20:09:56 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-10-12 20:09:54 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-10-12 20:09:50 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-10-12 20:09:49 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-10-12 20:09:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-10-12 20:09:46 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2016-10-12 20:09:46 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2016-10-12 20:09:46 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-10-12 20:09:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-10-12 20:09:44 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-10-12 20:09:43 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-10-12 20:09:43 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-10-12 20:09:42 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-10-12 20:09:41 ----A---- C:\WINDOWS\system32\mssrch.dll
2016-10-12 20:09:39 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-10-12 20:09:35 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsRaw.dll
2016-10-12 20:09:31 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-10-12 20:09:30 ----A---- C:\WINDOWS\SYSWOW64\xpsservices.dll
2016-10-12 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2016-10-12 20:09:29 ----A---- C:\WINDOWS\system32\mmcndmgr.dll
2016-10-12 20:09:28 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-10-12 20:09:27 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2016-10-12 20:09:27 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-10-12 20:09:24 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-10-12 20:09:24 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-10-12 20:09:23 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-10-12 20:09:21 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-10-12 20:09:19 ----A---- C:\WINDOWS\system32\winresume.exe
2016-10-12 20:09:18 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2016-10-12 20:09:18 ----A---- C:\WINDOWS\system32\winload.exe
2016-10-12 20:09:16 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2016-10-12 20:09:15 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-10-12 20:09:15 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-10-12 20:09:14 ----A---- C:\WINDOWS\explorer.exe
2016-10-12 20:09:12 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-10-12 20:09:10 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2016-10-12 20:09:09 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-10-12 20:09:07 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-10-12 20:09:05 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-10-12 20:09:03 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-10-12 20:09:02 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-10-12 20:09:01 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2016-10-12 20:09:00 ----A---- C:\WINDOWS\SYSWOW64\mmcndmgr.dll
2016-10-12 20:09:00 ----A---- C:\WINDOWS\system32\OpcServices.dll
2016-10-12 20:08:59 ----A---- C:\WINDOWS\system32\mmc.exe
2016-10-12 20:08:59 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-10-12 20:08:58 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2016-10-12 20:08:58 ----A---- C:\WINDOWS\system32\InputService.dll
2016-10-12 20:08:57 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2016-10-12 20:08:57 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-10-12 20:08:56 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-10-12 20:08:55 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2016-10-12 20:08:52 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Phone.dll
2016-10-12 20:08:52 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-10-12 20:08:51 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-10-12 20:08:48 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-10-12 20:08:48 ----A---- C:\WINDOWS\system32\msdtctm.dll
2016-10-12 20:08:47 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2016-10-12 20:08:47 ----A---- C:\WINDOWS\system32\storagewmi.dll
2016-10-12 20:08:46 ----A---- C:\WINDOWS\SYSWOW64\mmc.exe
2016-10-12 20:08:46 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-10-12 20:08:45 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-10-12 20:08:44 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2016-10-12 20:08:44 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2016-10-12 20:08:44 ----A---- C:\WINDOWS\system32\devinv.dll
2016-10-12 20:08:42 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2016-10-12 20:08:42 ----A---- C:\WINDOWS\system32\authui.dll
2016-10-12 20:08:41 ----A---- C:\WINDOWS\system32\Pimstore.dll
2016-10-12 20:08:40 ----A---- C:\WINDOWS\system32\winmde.dll
2016-10-12 20:08:40 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-10-12 20:08:39 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-10-12 20:08:39 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-10-12 20:08:37 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-10-12 20:08:36 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2016-10-12 20:08:36 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-10-12 20:08:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-10-12 20:08:34 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-10-12 20:08:34 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-10-12 20:08:33 ----A---- C:\WINDOWS\system32\winipcsecproc.dll
2016-10-12 20:08:33 ----A---- C:\WINDOWS\system32\qmgr.dll
2016-10-12 20:08:33 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-10-12 20:08:31 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-10-12 20:08:30 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-10-12 20:08:29 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-10-12 20:08:28 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll
2016-10-12 20:08:28 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-10-12 20:08:27 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2016-10-12 20:08:27 ----A---- C:\WINDOWS\system32\UserDataService.dll
2016-10-12 20:08:26 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2016-10-12 20:08:26 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-10-12 20:08:25 ----A---- C:\WINDOWS\system32\wininet.dll
2016-10-12 20:08:25 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-10-12 20:08:24 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2016-10-12 20:08:24 ----A---- C:\WINDOWS\system32\VSSVC.exe
2016-10-12 20:08:24 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2016-10-12 20:08:23 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-10-12 20:08:22 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-10-12 20:08:21 ----A---- C:\WINDOWS\SYSWOW64\pla.dll
2016-10-12 20:08:20 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-10-12 20:08:20 ----A---- C:\WINDOWS\system32\msctf.dll
2016-10-12 20:08:19 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-10-12 20:08:18 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-10-12 20:08:18 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-10-12 20:08:17 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2016-10-12 20:08:17 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2016-10-12 20:08:16 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2016-10-12 20:08:16 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2016-10-12 20:08:16 ----A---- C:\WINDOWS\system32\webservices.dll
2016-10-12 20:08:16 ----A---- C:\WINDOWS\system32\oleaut32.dll
2016-10-12 20:08:15 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-10-12 20:08:14 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2016-10-12 20:08:14 ----A---- C:\WINDOWS\system32\winhttp.dll
2016-10-12 20:08:13 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-10-12 20:08:13 ----A---- C:\WINDOWS\system32\PhoneService.dll
2016-10-12 20:08:12 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2016-10-12 20:08:12 ----A---- C:\WINDOWS\system32\ole32.dll
2016-10-12 20:08:12 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-10-12 20:08:11 ----A---- C:\WINDOWS\system32\WindowsCodecsRaw.dll
2016-10-12 20:08:11 ----A---- C:\WINDOWS\system32\w32time.dll
2016-10-12 20:08:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-10-12 20:08:06 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-10-12 20:08:06 ----A---- C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2016-10-12 20:08:05 ----A---- C:\WINDOWS\SYSWOW64\winipcsecproc.dll
2016-10-12 20:08:05 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-10-12 20:08:05 ----A---- C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-10-12 20:08:04 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-10-12 20:08:04 ----A---- C:\WINDOWS\system32\diagperf.dll
2016-10-12 20:08:03 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2016-10-12 20:08:03 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-10-12 20:08:03 ----A---- C:\WINDOWS\SYSWOW64\comuid.dll
2016-10-12 20:08:03 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-10-12 20:08:02 ----A---- C:\WINDOWS\SYSWOW64\MsSpellCheckingFacility.dll
2016-10-12 20:08:02 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-10-12 20:08:01 ----A---- C:\WINDOWS\SYSWOW64\Pimstore.dll
2016-10-12 20:08:01 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-10-12 20:08:01 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-10-12 20:08:00 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-10-12 20:08:00 ----A---- C:\WINDOWS\system32\wmdrmdev.dll
2016-10-12 20:08:00 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-10-12 20:08:00 ----A---- C:\WINDOWS\system32\vssapi.dll
2016-10-12 20:07:59 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2016-10-12 20:07:59 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2016-10-12 20:07:59 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-10-12 20:07:58 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-10-12 20:07:57 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2016-10-12 20:07:56 ----A---- C:\WINDOWS\system32\winmsipc.dll
2016-10-12 20:07:56 ----A---- C:\WINDOWS\system32\invagent.dll
2016-10-12 20:07:54 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-10-12 20:07:54 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2016-10-12 20:07:54 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2016-10-12 20:07:53 ----A---- C:\WINDOWS\system32\xpsservices.dll
2016-10-12 20:07:52 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2016-10-12 20:07:52 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2016-10-12 20:07:51 ----A---- C:\WINDOWS\system32\usercpl.dll
2016-10-12 20:07:51 ----A---- C:\WINDOWS\system32\twinapi.dll
2016-10-12 20:07:50 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2016-10-12 20:07:50 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-10-12 20:07:49 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2016-10-12 20:07:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2016-10-12 20:07:48 ----A---- C:\WINDOWS\system32\comuid.dll
2016-10-12 20:07:47 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2016-10-12 20:07:46 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2016-10-12 20:07:46 ----A---- C:\WINDOWS\system32\aepic.dll
2016-10-12 20:07:45 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2016-10-12 20:07:45 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2016-10-12 20:07:44 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-10-12 20:07:44 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-10-12 20:07:42 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-10-12 20:07:42 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-10-12 20:07:41 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2016-10-12 20:07:41 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-10-12 20:07:41 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-10-12 20:07:41 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2016-10-12 20:07:40 ----A---- C:\WINDOWS\system32\termsrv.dll
2016-10-12 20:07:39 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2016-10-12 20:07:39 ----A---- C:\WINDOWS\system32\MSAJApi.dll
2016-10-12 20:07:39 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2016-10-12 20:07:38 ----A---- C:\WINDOWS\system32\WpcMon.exe
2016-10-12 20:07:38 ----A---- C:\WINDOWS\system32\wmpmde.dll
2016-10-12 20:07:37 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2016-10-12 20:07:37 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2016-10-12 20:07:37 ----A---- C:\WINDOWS\system32\PhoneOm.dll
2016-10-12 20:07:37 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-10-12 20:07:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2016-10-12 20:07:36 ----A---- C:\WINDOWS\system32\pnidui.dll
2016-10-12 20:07:35 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2016-10-12 20:07:35 ----A---- C:\WINDOWS\system32\gameux.dll
2016-10-12 20:07:34 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-10-12 20:07:33 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-10-12 20:07:33 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-10-12 20:07:33 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-10-12 20:07:32 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-10-12 20:07:32 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-10-12 20:07:32 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2016-10-12 20:07:31 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2016-10-12 20:07:31 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2016-10-12 20:07:30 ----A---- C:\WINDOWS\system32\wwanconn.dll
2016-10-12 20:07:29 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2016-10-12 20:07:29 ----A---- C:\WINDOWS\system32\WlanMM.dll
2016-10-12 20:07:29 ----A---- C:\WINDOWS\system32\pcasvc.dll
2016-10-12 20:07:28 ----A---- C:\WINDOWS\SYSWOW64\PhoneOm.dll
2016-10-12 20:07:28 ----A---- C:\WINDOWS\system32\wlidprov.dll
2016-10-12 20:07:27 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2016-10-12 20:07:26 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2016-10-12 20:07:26 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-10-12 20:07:26 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2016-10-12 20:07:25 ----A---- C:\WINDOWS\SYSWOW64\wdc.dll
2016-10-12 20:07:25 ----A---- C:\WINDOWS\system32\wpnapps.dll
2016-10-12 20:07:25 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-10-12 20:07:24 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-10-12 20:07:24 ----A---- C:\WINDOWS\SYSWOW64\hnetcfg.dll
2016-10-12 20:07:24 ----A---- C:\WINDOWS\system32\d3d9.dll
2016-10-12 20:07:23 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2016-10-12 20:07:23 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2016-10-12 20:07:23 ----A---- C:\WINDOWS\system32\tdh.dll
2016-10-12 20:07:22 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-10-12 20:07:22 ----A---- C:\WINDOWS\system32\WSShared.dll
2016-10-12 20:07:22 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-10-12 20:07:22 ----A---- C:\WINDOWS\system32\clusapi.dll
2016-10-12 20:07:21 ----A---- C:\WINDOWS\SYSWOW64\winmsipc.dll
2016-10-12 20:07:21 ----A---- C:\WINDOWS\SYSWOW64\Geolocation.dll
2016-10-12 20:07:21 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2016-10-12 20:07:21 ----A---- C:\WINDOWS\system32\NMAA.dll
2016-10-12 20:07:20 ----A---- C:\WINDOWS\SYSWOW64\MSAJApi.dll
2016-10-12 20:07:20 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2016-10-12 20:07:19 ----A---- C:\WINDOWS\system32\Geolocation.dll
2016-10-12 20:07:19 ----A---- C:\WINDOWS\system32\dbgeng.dll
2016-10-12 20:07:19 ----A---- C:\WINDOWS\system32\BCP47Langs.dll
2016-10-12 20:07:18 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2016-10-12 20:07:18 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2016-10-12 20:07:17 ----A---- C:\WINDOWS\system32\hnetcfg.dll
2016-10-12 20:07:17 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2016-10-12 20:07:16 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-10-12 20:07:15 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-10-12 20:07:14 ----A---- C:\WINDOWS\system32\rdpcore.dll
2016-10-12 20:07:13 ----A---- C:\WINDOWS\system32\rpcss.dll
2016-10-12 20:07:13 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-10-12 20:07:12 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2016-10-12 20:07:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2016-10-12 20:07:11 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-10-12 20:07:11 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-10-12 20:07:10 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2016-10-12 20:07:10 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-10-12 20:07:09 ----A---- C:\WINDOWS\system32\ntshrui.dll
2016-10-12 20:07:09 ----A---- C:\WINDOWS\system32\D3D12.dll
2016-10-12 20:07:08 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-10-12 20:07:08 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2016-10-12 20:07:08 ----A---- C:\WINDOWS\system32\moshostcore.dll
2016-10-12 20:07:07 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-10-12 20:07:06 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2016-10-12 20:07:05 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2016-10-12 20:07:05 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2016-10-12 20:07:04 ----A---- C:\WINDOWS\SYSWOW64\filemgmt.dll
2016-10-12 20:07:04 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2016-10-12 20:07:03 ----A---- C:\WINDOWS\system32\wmdrmsdk.dll
2016-10-12 20:07:03 ----A---- C:\WINDOWS\system32\ShareHost.dll
2016-10-12 20:07:02 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-10-12 20:07:01 ----A---- C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2016-10-12 20:07:01 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-10-12 20:07:00 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-10-12 20:07:00 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-10-12 20:07:00 ----A---- C:\WINDOWS\system32\certca.dll
2016-10-12 20:06:59 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2016-10-12 20:06:59 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2016-10-12 20:06:59 ----A---- C:\WINDOWS\system32\mprddm.dll
2016-10-12 20:06:59 ----A---- C:\WINDOWS\system32\mf.dll
2016-10-12 20:06:58 ----A---- C:\WINDOWS\SYSWOW64\wmdrmdev.dll
2016-10-12 20:06:58 ----A---- C:\WINDOWS\system32\swprv.dll
2016-10-12 20:06:58 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-10-12 20:06:57 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-10-12 20:06:57 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2016-10-12 20:06:57 ----A---- C:\WINDOWS\system32\nettrace.dll
2016-10-12 20:06:56 ----A---- C:\WINDOWS\system32\wsp_health.dll
2016-10-12 20:06:56 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-10-12 20:06:55 ----A---- C:\WINDOWS\SYSWOW64\BCP47Langs.dll
2016-10-12 20:06:55 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2016-10-12 20:06:55 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2016-10-12 20:06:54 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2016-10-12 20:06:54 ----A---- C:\WINDOWS\system32\sspicli.dll
2016-10-12 20:06:54 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-10-12 20:06:53 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2016-10-12 20:06:53 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2016-10-12 20:06:53 ----A---- C:\WINDOWS\system32\uDWM.dll
2016-10-12 20:06:52 ----A---- C:\WINDOWS\system32\vds.exe
2016-10-12 20:06:52 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll
2016-10-12 20:06:52 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-10-12 20:06:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2016-10-12 20:06:51 ----A---- C:\WINDOWS\SYSWOW64\mscms.dll
2016-10-12 20:06:51 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-10-12 20:06:51 ----A---- C:\WINDOWS\system32\wer.dll
2016-10-12 20:06:50 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2016-10-12 20:06:50 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-10-12 20:06:50 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2016-10-12 20:06:50 ----A---- C:\WINDOWS\system32\defragsvc.dll
2016-10-12 20:06:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2016-10-12 20:06:49 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-10-12 20:06:49 ----A---- C:\WINDOWS\system32\hgcpl.dll
2016-10-12 20:06:49 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2016-10-12 20:06:48 ----A---- C:\WINDOWS\system32\wiaservc.dll
2016-10-12 20:06:48 ----A---- C:\WINDOWS\system32\mispace.dll
2016-10-12 20:06:47 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2016-10-12 20:06:47 ----A---- C:\WINDOWS\system32\msxml3.dll
2016-10-12 20:06:47 ----A---- C:\WINDOWS\system32\apphelp.dll
2016-10-12 20:06:46 ----A---- C:\WINDOWS\system32\printfilterpipelinesvc.exe

klik6 · #2 Příspěvek od **klik6** » 07 lis 2016 18:27

pokračování logu:

2016-10-12 20:06:45 ----A---- C:\WINDOWS\system32\wbemcomn.dll
2016-10-12 20:06:45 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2016-10-12 20:06:45 ----A---- C:\WINDOWS\system32\drivers\ufxsynopsys.sys
2016-10-12 20:06:45 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2016-10-12 20:06:44 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-10-12 20:06:43 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-10-12 20:06:43 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-10-12 20:06:42 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2016-10-12 20:06:42 ----A---- C:\WINDOWS\system32\resutils.dll
2016-10-12 20:06:42 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-10-12 20:06:42 ----A---- C:\WINDOWS\system32\MusNotification.exe
2016-10-12 20:06:42 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-10-12 20:06:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2016-10-12 20:06:41 ----A---- C:\WINDOWS\system32\wpx.dll
2016-10-12 20:06:41 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-10-12 20:06:40 ----A---- C:\WINDOWS\system32\propsys.dll
2016-10-12 20:06:40 ----A---- C:\WINDOWS\system32\pla.dll
2016-10-12 20:06:39 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-10-12 20:06:39 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2016-10-12 20:06:39 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2016-10-12 20:06:39 ----A---- C:\WINDOWS\system32\SHCore.dll
2016-10-12 20:06:38 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-10-12 20:06:38 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-10-12 20:06:37 ----A---- C:\WINDOWS\system32\quartz.dll
2016-10-12 20:06:37 ----A---- C:\WINDOWS\system32\mstsc.exe
2016-10-12 20:06:37 ----A---- C:\WINDOWS\system32\ApplicationFrame.dll
2016-10-12 20:06:36 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-10-12 20:06:35 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-10-12 20:06:34 ----A---- C:\WINDOWS\SYSWOW64\wmploc.DLL
2016-10-12 20:06:33 ----A---- C:\WINDOWS\system32\wmploc.DLL
2016-10-12 20:06:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2016-10-12 20:06:31 ----A---- C:\WINDOWS\SYSWOW64\certca.dll
2016-10-12 20:06:31 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2016-10-12 20:06:31 ----A---- C:\WINDOWS\system32\moshost.dll
2016-10-12 20:06:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2016-10-12 20:06:30 ----A---- C:\WINDOWS\SYSWOW64\wbemcomn.dll
2016-10-12 20:06:29 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2016-10-12 20:06:29 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2016-10-12 20:06:29 ----A---- C:\WINDOWS\system32\kernel32.dll
2016-10-12 20:06:29 ----A---- C:\WINDOWS\system32\eappcfg.dll
2016-10-12 20:06:28 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-10-12 20:06:28 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2016-10-12 20:06:28 ----A---- C:\WINDOWS\system32\SecureTimeAggregator.dll
2016-10-12 20:06:28 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2016-10-12 20:06:27 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-10-12 20:06:27 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2016-10-12 20:06:27 ----A---- C:\WINDOWS\system32\DMRServer.dll
2016-10-12 20:06:26 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2016-10-12 20:06:26 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2016-10-12 20:06:26 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-10-12 20:06:25 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2016-10-12 20:06:25 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-10-12 20:06:25 ----A---- C:\WINDOWS\system32\wmpeffects.dll
2016-10-12 20:06:25 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-10-12 20:06:24 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2016-10-12 20:06:24 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2016-10-12 20:06:24 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2016-10-12 20:06:23 ----A---- C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2016-10-12 20:06:23 ----A---- C:\WINDOWS\system32\APHostService.dll
2016-10-12 20:06:22 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2016-10-12 20:06:22 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-10-12 20:06:22 ----A---- C:\WINDOWS\system32\lsass.exe
2016-10-12 20:06:22 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-10-12 20:06:21 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2016-10-12 20:06:21 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-10-12 20:06:21 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-10-12 20:06:20 ----A---- C:\WINDOWS\SYSWOW64\wmdrmsdk.dll
2016-10-12 20:06:20 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-10-12 20:06:20 ----A---- C:\WINDOWS\system32\mfps.dll
2016-10-12 20:06:19 ----A---- C:\WINDOWS\SYSWOW64\shsetup.dll
2016-10-12 20:06:19 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-10-12 20:06:19 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-10-12 20:06:19 ----A---- C:\WINDOWS\system32\icsvc.dll
2016-10-12 20:06:19 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-10-12 20:06:18 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2016-10-12 20:06:18 ----A---- C:\WINDOWS\system32\wbengine.exe
2016-10-12 20:06:18 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-10-12 20:06:17 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-10-12 20:06:17 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-10-12 20:06:16 ----A---- C:\WINDOWS\SYSWOW64\wmpeffects.dll
2016-10-12 20:06:16 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-10-12 20:06:16 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-10-12 20:06:16 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2016-10-12 20:06:15 ----A---- C:\WINDOWS\system32\upnphost.dll
2016-10-12 20:06:15 ----A---- C:\WINDOWS\system32\netman.dll
2016-10-12 20:06:15 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-10-12 20:06:14 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-10-12 20:06:14 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2016-10-12 20:06:13 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-10-12 20:06:13 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-10-12 20:06:13 ----A---- C:\WINDOWS\system32\drvstore.dll
2016-10-12 20:06:12 ----A---- C:\WINDOWS\SYSWOW64\upnphost.dll
2016-10-12 20:06:12 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-10-12 20:06:12 ----A---- C:\WINDOWS\system32\shsetup.dll
2016-10-12 20:06:12 ----A---- C:\WINDOWS\system32\MosStorage.dll
2016-10-12 20:06:11 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2016-10-12 20:06:11 ----A---- C:\WINDOWS\SYSWOW64\cryptui.dll
2016-10-12 20:06:11 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-10-12 20:06:11 ----A---- C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2016-10-12 20:06:11 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2016-10-12 20:06:11 ----A---- C:\WINDOWS\system32\DafPrintProvider.dll
2016-10-12 20:06:11 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2016-10-12 20:06:10 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2016-10-12 20:06:10 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2016-10-12 20:06:10 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2016-10-12 20:06:10 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2016-10-12 20:06:09 ----A---- C:\WINDOWS\system32\ExecModelClient.dll
2016-10-12 20:06:09 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-10-12 20:06:09 ----A---- C:\WINDOWS\system32\dcomp.dll
2016-10-12 20:06:08 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-10-12 20:06:08 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-10-12 20:06:08 ----A---- C:\WINDOWS\system32\usocore.dll
2016-10-12 20:06:08 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2016-10-12 20:06:08 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-10-12 20:06:07 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-10-12 20:06:07 ----A---- C:\WINDOWS\system32\SensorService.dll
2016-10-12 20:06:07 ----A---- C:\WINDOWS\system32\azroles.dll
2016-10-12 20:06:06 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2016-10-12 20:06:06 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-10-12 20:06:06 ----A---- C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-10-12 20:06:05 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-10-12 20:06:05 ----A---- C:\WINDOWS\system32\setupapi.dll
2016-10-12 20:06:05 ----A---- C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-10-12 20:06:05 ----A---- C:\WINDOWS\system32\csrsrv.dll
2016-10-12 20:06:04 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-10-12 20:06:04 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-10-12 20:06:04 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-10-12 20:06:03 ----A---- C:\WINDOWS\system32\sppcext.dll
2016-10-12 20:06:03 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-10-12 20:06:02 ----A---- C:\WINDOWS\SYSWOW64\drvstore.dll
2016-10-12 20:06:02 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-10-12 20:06:02 ----A---- C:\WINDOWS\system32\cryptui.dll
2016-10-12 20:06:01 ----A---- C:\WINDOWS\system32\filemgmt.dll
2016-10-12 20:06:01 ----A---- C:\WINDOWS\system32\das.dll
2016-10-12 20:06:00 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-10-12 20:06:00 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-10-12 20:06:00 ----A---- C:\WINDOWS\system32\wusa.exe
2016-10-12 20:06:00 ----A---- C:\WINDOWS\system32\winipcsecproc_ssp.dll
2016-10-12 20:05:59 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2016-10-12 20:05:59 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-10-12 20:05:59 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-10-12 20:05:59 ----A---- C:\WINDOWS\system32\netcfgx.dll
2016-10-12 20:05:59 ----A---- C:\WINDOWS\system32\mssprxy.dll
2016-10-12 20:05:59 ----A---- C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2016-10-12 20:05:58 ----A---- C:\WINDOWS\SYSWOW64\XpsDocumentTargetPrint.dll
2016-10-12 20:05:58 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2016-10-12 20:05:58 ----A---- C:\WINDOWS\system32\musdialoghandlers.dll
2016-10-12 20:05:58 ----A---- C:\WINDOWS\system32\apprepsync.dll
2016-10-12 20:05:57 ----A---- C:\WINDOWS\system32\sdengin2.dll
2016-10-12 20:05:56 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2016-10-12 20:05:56 ----A---- C:\WINDOWS\system32\drivers\tm.sys
2016-10-12 20:05:55 ----A---- C:\WINDOWS\SYSWOW64\winipcsecproc_ssp.dll
2016-10-12 20:05:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Cortana.ProxyStub.dll
2016-10-12 20:05:55 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2016-10-12 20:05:55 ----A---- C:\WINDOWS\SYSWOW64\taskschd.dll
2016-10-12 20:05:54 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2016-10-12 20:05:54 ----A---- C:\WINDOWS\system32\sppobjs.dll
2016-10-12 20:05:54 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2016-10-12 20:05:53 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2016-10-12 20:05:53 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2016-10-12 20:05:53 ----A---- C:\WINDOWS\SYSWOW64\cic.dll
2016-10-12 20:05:53 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2016-10-12 20:05:52 ----A---- C:\WINDOWS\system32\evr.dll
2016-10-12 20:05:51 ----A---- C:\WINDOWS\system32\WSService.dll
2016-10-12 20:05:51 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-10-12 20:05:51 ----A---- C:\WINDOWS\system32\localspl.dll
2016-10-12 20:05:50 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-10-12 20:05:50 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2016-10-12 20:05:50 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2016-10-12 20:05:50 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2016-10-12 20:05:49 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-10-12 20:05:49 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2016-10-12 20:05:49 ----A---- C:\WINDOWS\system32\ClipUp.exe
2016-10-12 20:05:48 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2016-10-12 20:05:48 ----A---- C:\WINDOWS\SYSWOW64\azroleui.dll
2016-10-12 20:05:48 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2016-10-12 20:05:47 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-10-12 20:05:46 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2016-10-12 20:05:46 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-10-12 20:05:46 ----A---- C:\WINDOWS\system32\hal.dll
2016-10-12 20:05:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Enumeration.dll
2016-10-12 20:05:45 ----A---- C:\WINDOWS\system32\winipcfile.dll
2016-10-12 20:05:45 ----A---- C:\WINDOWS\system32\MicrosoftAccountCloudAP.dll
2016-10-12 20:05:45 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2016-10-12 20:05:45 ----A---- C:\WINDOWS\system32\AudioEng.dll
2016-10-12 20:05:44 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2016-10-12 20:05:43 ----A---- C:\WINDOWS\SYSWOW64\MrmIndexer.dll
2016-10-12 20:05:43 ----A---- C:\WINDOWS\system32\puiobj.dll
2016-10-12 20:05:42 ----A---- C:\WINDOWS\SYSWOW64\DafPrintProvider.dll
2016-10-12 20:05:42 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-10-12 20:05:42 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2016-10-12 20:05:41 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-10-12 20:05:41 ----A---- C:\WINDOWS\system32\mmcshext.dll
2016-10-12 20:05:41 ----A---- C:\WINDOWS\system32\mmcbase.dll
2016-10-12 20:05:40 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-10-12 20:05:40 ----A---- C:\WINDOWS\system32\fdProxy.dll
2016-10-12 20:05:40 ----A---- C:\WINDOWS\system32\AppxApplicabilityEngine.dll
2016-10-12 20:05:39 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2016-10-12 20:05:39 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-10-12 20:05:39 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-10-12 20:05:39 ----A---- C:\WINDOWS\system32\SRH.dll
2016-10-12 20:05:38 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-10-12 20:05:38 ----A---- C:\WINDOWS\system32\wimserv.exe
2016-10-12 20:05:38 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2016-10-12 20:05:37 ----A---- C:\WINDOWS\system32\themecpl.dll
2016-10-12 20:05:37 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2016-10-12 20:05:37 ----A---- C:\WINDOWS\system32\sppwinob.dll
2016-10-12 20:05:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.LowLevel.dll
2016-10-12 20:05:36 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2016-10-12 20:05:36 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2016-10-12 20:05:35 ----A---- C:\WINDOWS\SYSWOW64\mmcbase.dll
2016-10-12 20:05:35 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2016-10-12 20:05:33 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2016-10-12 20:05:33 ----A---- C:\WINDOWS\system32\DbgModel.dll
2016-10-12 20:05:32 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-10-12 20:05:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2016-10-12 20:05:31 ----A---- C:\WINDOWS\SYSWOW64\mmcshext.dll
2016-10-12 20:05:31 ----A---- C:\WINDOWS\system32\spcompat.dll
2016-10-12 20:05:31 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2016-10-12 20:05:31 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2016-10-12 20:05:31 ----A---- C:\WINDOWS\system32\azroleui.dll
2016-10-12 20:05:30 ----A---- C:\WINDOWS\SYSWOW64\VoipRT.dll
2016-10-12 20:05:30 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2016-10-12 20:05:30 ----A---- C:\WINDOWS\system32\WindowsCodecsExt.dll
2016-10-12 20:05:30 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-10-12 20:05:30 ----A---- C:\WINDOWS\system32\WebClnt.dll
2016-10-12 20:05:30 ----A---- C:\WINDOWS\system32\vss_ps.dll
2016-10-12 20:05:30 ----A---- C:\WINDOWS\system32\rasgcw.dll
2016-10-12 20:05:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2016-10-12 20:05:29 ----A---- C:\WINDOWS\SYSWOW64\usbceip.dll
2016-10-12 20:05:29 ----A---- C:\WINDOWS\system32\VoipRT.dll
2016-10-12 20:05:29 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2016-10-12 20:05:29 ----A---- C:\WINDOWS\system32\dbghelp.dll
2016-10-12 20:05:28 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-10-12 20:05:28 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-10-12 20:05:28 ----A---- C:\WINDOWS\system32\wdc.dll
2016-10-12 20:05:28 ----A---- C:\WINDOWS\system32\wcncsvc.dll
2016-10-12 20:05:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-10-12 20:05:27 ----A---- C:\WINDOWS\system32\udhisapi.dll
2016-10-12 20:05:27 ----A---- C:\WINDOWS\system32\mprdim.dll
2016-10-12 20:05:23 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-10-12 20:05:23 ----A---- C:\WINDOWS\SYSWOW64\prnntfy.dll
2016-10-12 20:05:23 ----A---- C:\WINDOWS\system32\wpncore.dll
2016-10-12 20:05:22 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsExt.dll
2016-10-12 20:05:22 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2016-10-12 20:05:22 ----A---- C:\WINDOWS\system32\adsmsext.dll
2016-10-12 20:05:21 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2016-10-12 20:05:21 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2016-10-12 20:05:21 ----A---- C:\WINDOWS\system32\wifitask.exe
2016-10-12 20:05:21 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2016-10-12 20:05:21 ----A---- C:\WINDOWS\system32\SettingsHandlers_Geolocation.dll
2016-10-12 20:05:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2016-10-12 20:05:20 ----A---- C:\WINDOWS\SYSWOW64\adsmsext.dll
2016-10-12 20:05:20 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2016-10-12 20:05:20 ----A---- C:\WINDOWS\system32\davclnt.dll
2016-10-12 20:05:19 ----A---- C:\WINDOWS\SYSWOW64\srpapi.dll
2016-10-12 20:05:19 ----A---- C:\WINDOWS\system32\offreg.dll
2016-10-12 20:05:19 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-10-12 20:05:19 ----A---- C:\WINDOWS\system32\bcdedit.exe
2016-10-12 20:05:18 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2016-10-12 20:05:18 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2016-10-12 20:05:18 ----A---- C:\WINDOWS\system32\WsmAuto.dll
2016-10-12 20:05:18 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2016-10-12 20:05:18 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-10-12 20:05:17 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2016-10-12 20:05:17 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2016-10-12 20:05:17 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2016-10-12 20:05:16 ----A---- C:\WINDOWS\system32\wwanmm.dll
2016-10-12 20:05:15 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2016-10-12 20:05:15 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2016-10-12 20:05:15 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2016-10-12 20:05:15 ----A---- C:\WINDOWS\system32\upnpcont.exe
2016-10-12 20:05:15 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2016-10-12 20:05:14 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2016-10-12 20:05:14 ----A---- C:\WINDOWS\system32\WalletService.dll
2016-10-12 20:05:14 ----A---- C:\WINDOWS\system32\sti.dll
2016-10-12 20:05:14 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-10-12 20:05:14 ----A---- C:\WINDOWS\system32\drivers\MTConfig.sys
2016-10-12 20:05:13 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2016-10-12 20:05:13 ----A---- C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-10-12 20:05:13 ----A---- C:\WINDOWS\system32\authfwcfg.dll
2016-10-12 20:05:12 ----A---- C:\WINDOWS\SYSWOW64\azroles.dll
2016-10-12 20:05:12 ----A---- C:\WINDOWS\system32\Windows.Storage.Search.dll
2016-10-12 20:05:12 ----A---- C:\WINDOWS\system32\comdlg32.dll
2016-10-12 20:05:11 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-10-12 20:05:11 ----A---- C:\WINDOWS\SYSWOW64\syncutil.dll
2016-10-12 20:05:11 ----A---- C:\WINDOWS\system32\MrmIndexer.dll
2016-10-12 20:05:10 ----A---- C:\WINDOWS\SYSWOW64\certmgr.dll
2016-10-12 20:05:10 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-10-12 20:05:10 ----A---- C:\WINDOWS\system32\gpedit.dll
2016-10-12 20:05:10 ----A---- C:\WINDOWS\system32\cic.dll
2016-10-12 20:05:10 ----A---- C:\WINDOWS\system32\apprepapi.dll
2016-10-12 20:05:09 ----A---- C:\WINDOWS\SYSWOW64\fwcfg.dll
2016-10-12 20:05:09 ----A---- C:\WINDOWS\SYSWOW64\DbgModel.dll
2016-10-12 20:05:09 ----A---- C:\WINDOWS\system32\WcnApi.dll
2016-10-12 20:05:09 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-10-12 20:05:08 ----A---- C:\WINDOWS\SYSWOW64\gpedit.dll
2016-10-12 20:05:08 ----A---- C:\WINDOWS\system32\wmpshell.dll
2016-10-12 20:05:08 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-10-12 20:05:08 ----A---- C:\WINDOWS\system32\CPFilters.dll
2016-10-12 20:05:08 ----A---- C:\WINDOWS\system32\autochk.exe
2016-10-12 20:05:07 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2016-10-12 20:05:07 ----A---- C:\WINDOWS\system32\ieui.dll
2016-10-12 20:05:06 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2016-10-12 20:05:06 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2016-10-12 20:05:06 ----A---- C:\WINDOWS\system32\WmpDui.dll
2016-10-12 20:05:06 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-10-12 20:05:05 ----A---- C:\WINDOWS\system32\mcbuilder.exe
2016-10-12 20:05:05 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-10-12 20:05:05 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2016-10-12 20:05:04 ----A---- C:\WINDOWS\system32\duser.dll
2016-10-12 20:05:04 ----A---- C:\WINDOWS\system32\dui70.dll
2016-10-12 20:05:04 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2016-10-12 20:05:03 ----A---- C:\WINDOWS\system32\GamePanel.exe
2016-10-12 20:05:03 ----A---- C:\WINDOWS\system32\efswrt.dll
2016-10-12 20:05:02 ----A---- C:\WINDOWS\SYSWOW64\WlanMM.dll
2016-10-12 20:05:02 ----A---- C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2016-10-12 20:05:01 ----A---- C:\WINDOWS\SYSWOW64\wmpdxm.dll
2016-10-12 20:05:01 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-10-12 20:05:01 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2016-10-12 20:05:01 ----A---- C:\WINDOWS\system32\netlogon.dll
2016-10-12 20:05:01 ----A---- C:\WINDOWS\system32\adtschema.dll
2016-10-12 20:05:00 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2016-10-12 20:05:00 ----A---- C:\WINDOWS\system32\netplwiz.dll
2016-10-12 20:05:00 ----A---- C:\WINDOWS\system32\certcli.dll
2016-10-12 20:04:59 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2016-10-12 20:04:59 ----A---- C:\WINDOWS\system32\netshell.dll
2016-10-12 20:04:59 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2016-10-12 20:04:58 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2016-10-12 20:04:58 ----A---- C:\WINDOWS\system32\werconcpl.dll
2016-10-12 20:04:57 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2016-10-12 20:04:55 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-10-12 20:04:55 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2016-10-12 20:04:55 ----A---- C:\WINDOWS\system32\syncutil.dll
2016-10-12 20:04:54 ----A---- C:\WINDOWS\SYSWOW64\wmpshell.dll
2016-10-12 20:04:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-10-12 20:04:54 ----A---- C:\WINDOWS\system32\easwrt.dll
2016-10-12 20:04:54 ----A---- C:\WINDOWS\system32\DictationManager.dll
2016-10-12 20:04:53 ----A---- C:\WINDOWS\system32\DiagCpl.dll
2016-10-12 20:04:53 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2016-10-12 20:04:52 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2016-10-12 20:04:52 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2016-10-12 20:04:52 ----A---- C:\WINDOWS\system32\scapi.dll
2016-10-12 20:04:52 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-10-12 20:04:52 ----A---- C:\WINDOWS\system32\fdWCN.dll
2016-10-12 20:04:51 ----A---- C:\WINDOWS\system32\dlnashext.dll
2016-10-12 20:04:50 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-10-12 20:04:50 ----A---- C:\WINDOWS\system32\XboxNetApiSvc.dll
2016-10-12 20:04:50 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-10-12 20:04:50 ----A---- C:\WINDOWS\system32\StikyNot.exe
2016-10-12 20:04:50 ----A---- C:\WINDOWS\system32\puiapi.dll
2016-10-12 20:04:49 ----A---- C:\WINDOWS\SYSWOW64\puiapi.dll
2016-10-12 20:04:49 ----A---- C:\WINDOWS\SYSWOW64\PhotoScreensaver.scr
2016-10-12 20:04:49 ----A---- C:\WINDOWS\system32\usermgr.dll
2016-10-12 20:04:49 ----A---- C:\WINDOWS\system32\eapphost.dll
2016-10-12 20:04:48 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2016-10-12 20:04:48 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2016-10-12 20:04:47 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-10-12 20:04:47 ----A---- C:\WINDOWS\system32\ipsecsnp.dll
2016-10-12 20:04:46 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2016-10-12 20:04:46 ----A---- C:\WINDOWS\SYSWOW64\oemlicense.dll
2016-10-12 20:04:46 ----A---- C:\WINDOWS\system32\vdsutil.dll
2016-10-12 20:04:46 ----A---- C:\WINDOWS\system32\PhotoScreensaver.scr
2016-10-12 20:04:46 ----A---- C:\WINDOWS\system32\oemlicense.dll
2016-10-12 20:04:46 ----A---- C:\WINDOWS\system32\LegacyNetUXHost.exe
2016-10-12 20:04:46 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-10-12 20:04:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2016-10-12 20:04:45 ----A---- C:\WINDOWS\system32\netcenter.dll
2016-10-12 20:04:44 ----A---- C:\WINDOWS\SYSWOW64\SmartcardCredentialProvider.dll
2016-10-12 20:04:44 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2016-10-12 20:04:43 ----A---- C:\WINDOWS\system32\Display.dll
2016-10-12 20:04:43 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2016-10-12 20:04:43 ----A---- C:\WINDOWS\system32\aitstatic.exe
2016-10-12 20:04:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2016-10-12 20:04:42 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2016-10-12 20:04:42 ----A---- C:\WINDOWS\SYSWOW64\AppLockerCSP.dll
2016-10-12 20:04:42 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2016-10-12 20:04:41 ----A---- C:\WINDOWS\system32\wiarpc.dll
2016-10-12 20:04:40 ----A---- C:\WINDOWS\system32\zipfldr.dll
2016-10-12 20:04:40 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-10-12 20:04:37 ----A---- C:\WINDOWS\SYSWOW64\udhisapi.dll
2016-10-12 20:04:37 ----A---- C:\WINDOWS\system32\wlanui.dll
2016-10-12 20:04:37 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-10-12 20:04:35 ----A---- C:\WINDOWS\system32\eapsvc.dll
2016-10-12 20:04:34 ----A---- C:\WINDOWS\system32\themeui.dll
2016-10-12 20:04:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-10-12 20:04:33 ----A---- C:\WINDOWS\system32\msdt.exe
2016-10-12 20:04:33 ----A---- C:\WINDOWS\system32\deviceassociation.dll
2016-10-12 20:04:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.Search.dll
2016-10-12 20:04:32 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-10-12 20:04:32 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-10-12 20:04:32 ----A---- C:\WINDOWS\system32\edputil.dll
2016-10-12 20:04:32 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-10-12 20:04:31 ----A---- C:\WINDOWS\SYSWOW64\authfwcfg.dll
2016-10-12 20:04:31 ----A---- C:\WINDOWS\system32\WUDFx.dll
2016-10-12 20:04:31 ----A---- C:\WINDOWS\system32\mscms.dll
2016-10-12 20:04:31 ----A---- C:\WINDOWS\system32\DevDispItemProvider.dll
2016-10-12 20:04:30 ----A---- C:\WINDOWS\SYSWOW64\DevDispItemProvider.dll
2016-10-12 20:04:30 ----A---- C:\WINDOWS\system32\configurationclient.dll
2016-10-12 20:04:30 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-10-12 20:04:28 ----A---- C:\WINDOWS\system32\msi.dll
2016-10-12 20:04:27 ----A---- C:\WINDOWS\system32\WLanConn.dll
2016-10-12 20:04:27 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-10-12 20:04:26 ----A---- C:\WINDOWS\SYSWOW64\WLanConn.dll
2016-10-12 20:04:26 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2016-10-12 20:04:26 ----A---- C:\WINDOWS\system32\WSSync.dll
2016-10-12 20:04:26 ----A---- C:\WINDOWS\system32\wsmprovhost.exe
2016-10-12 20:04:26 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-10-12 20:04:26 ----A---- C:\WINDOWS\system32\vsstrace.dll
2016-10-12 20:04:25 ----A---- C:\WINDOWS\SYSWOW64\WSSync.dll
2016-10-12 20:04:25 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-10-12 20:04:25 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2016-10-12 20:04:25 ----A---- C:\WINDOWS\system32\SmartCardSimulator.dll
2016-10-12 20:04:25 ----A---- C:\WINDOWS\system32\pnpclean.dll
2016-10-12 20:04:25 ----A---- C:\WINDOWS\system32\fhcfg.dll
2016-10-12 20:04:24 ----A---- C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-10-12 20:04:24 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-10-12 20:04:24 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-10-12 20:04:24 ----A---- C:\WINDOWS\system32\dafWCN.dll
2016-10-12 20:04:23 ----A---- C:\WINDOWS\system32\FingerprintEnrollment.dll
2016-10-12 20:04:23 ----A---- C:\WINDOWS\system32\credprovs.dll
2016-10-12 20:04:23 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-10-12 20:04:22 ----A---- C:\WINDOWS\system32\rasapi32.dll
2016-10-12 20:04:21 ----A---- C:\WINDOWS\SYSWOW64\WsmWmiPl.dll
2016-10-12 20:04:21 ----A---- C:\WINDOWS\SYSWOW64\upnpcont.exe
2016-10-12 20:04:21 ----A---- C:\WINDOWS\SYSWOW64\duser.dll
2016-10-12 20:04:21 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-10-12 20:04:21 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2016-10-12 20:04:21 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-10-12 20:04:20 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-10-12 20:04:20 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2016-10-12 20:04:20 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2016-10-12 20:04:20 ----A---- C:\WINDOWS\system32\dot3ui.dll
2016-10-12 20:04:19 ----A---- C:\WINDOWS\SYSWOW64\licensingdiag.exe
2016-10-12 20:04:19 ----A---- C:\WINDOWS\SYSWOW64\dot3ui.dll
2016-10-12 20:04:19 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-10-12 20:04:18 ----A---- C:\WINDOWS\system32\Windows.Graphics.dll
2016-10-12 20:04:18 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-10-12 20:04:18 ----A---- C:\WINDOWS\system32\licensingdiag.exe
2016-10-12 20:04:18 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2016-10-12 20:04:18 ----A---- C:\WINDOWS\system32\fhsvc.dll
2016-10-12 20:04:18 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-10-12 20:04:17 ----A---- C:\WINDOWS\SYSWOW64\WmpDui.dll
2016-10-12 20:04:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-10-12 20:04:17 ----A---- C:\WINDOWS\system32\SyncController.dll
2016-10-12 20:04:17 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2016-10-12 20:04:17 ----A---- C:\WINDOWS\system32\fwcfg.dll
2016-10-12 20:04:17 ----A---- C:\WINDOWS\system32\aadtb.dll
2016-10-12 20:04:16 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2016-10-12 20:04:16 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2016-10-12 20:04:16 ----A---- C:\WINDOWS\system32\IconCodecService.dll
2016-10-12 20:04:15 ----A---- C:\WINDOWS\SYSWOW64\SyncController.dll
2016-10-12 20:04:15 ----A---- C:\WINDOWS\system32\SettingMonitor.dll
2016-10-12 20:04:15 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2016-10-12 20:04:15 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-10-12 20:04:14 ----A---- C:\WINDOWS\SYSWOW64\msobjs.dll
2016-10-12 20:04:14 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-10-12 20:04:14 ----A---- C:\WINDOWS\system32\sppinst.dll
2016-10-12 20:04:14 ----A---- C:\WINDOWS\system32\pngfilt.dll
2016-10-12 20:04:14 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2016-10-12 20:04:14 ----A---- C:\WINDOWS\system32\msobjs.dll
2016-10-12 20:04:14 ----A---- C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2016-10-12 20:04:14 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2016-10-12 20:04:13 ----A---- C:\WINDOWS\SYSWOW64\WsmAuto.dll
2016-10-12 20:04:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.ps.dll
2016-10-12 20:04:13 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2016-10-12 20:04:13 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2016-10-12 20:04:13 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2016-10-12 20:04:12 ----A---- C:\WINDOWS\SYSWOW64\wsmprovhost.exe
2016-10-12 20:04:12 ----A---- C:\WINDOWS\SYSWOW64\vsstrace.dll
2016-10-12 20:04:12 ----A---- C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2016-10-12 20:04:12 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2016-10-12 20:04:12 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2016-10-12 20:04:11 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-10-12 20:04:11 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2016-10-12 20:04:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2016-10-12 20:04:10 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-10-12 20:04:10 ----A---- C:\WINDOWS\system32\WsmAgent.dll
2016-10-12 20:04:10 ----A---- C:\WINDOWS\system32\prnntfy.dll
2016-10-12 20:04:10 ----A---- C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2016-10-12 20:04:10 ----A---- C:\WINDOWS\system32\mqsnap.dll
2016-10-12 20:04:10 ----A---- C:\WINDOWS\system32\dialserver.dll
2016-10-12 20:04:10 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2016-10-12 20:04:09 ----A---- C:\WINDOWS\SYSWOW64\WsmAgent.dll
2016-10-12 20:04:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.AllJoyn.dll
2016-10-12 20:04:07 ----A---- C:\WINDOWS\SYSWOW64\sti.dll
2016-10-12 20:04:07 ----A---- C:\WINDOWS\SYSWOW64\deviceassociation.dll
2016-10-12 20:04:07 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2016-10-12 20:04:07 ----A---- C:\WINDOWS\system32\ImplatSetup.dll
2016-10-12 20:04:07 ----A---- C:\WINDOWS\system32\CheckNetIsolation.exe
2016-10-12 20:04:06 ----A---- C:\WINDOWS\SYSWOW64\CheckNetIsolation.exe
2016-10-12 20:04:06 ----A---- C:\WINDOWS\system32\mspaint.exe
2016-10-12 20:04:05 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2016-10-12 20:04:05 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2016-10-12 20:04:04 ----A---- C:\WINDOWS\system32\wificonnapi.dll
2016-10-12 20:04:03 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2016-10-12 20:04:03 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-10-12 20:04:03 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2016-10-12 20:04:03 ----A---- C:\WINDOWS\system32\RADCUI.dll
2016-10-12 20:04:02 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2016-10-12 20:04:02 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2016-10-12 20:04:02 ----A---- C:\WINDOWS\system32\odbcconf.dll
2016-10-12 20:04:01 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2016-10-12 20:04:01 ----A---- C:\WINDOWS\system32\winsrv.dll
2016-10-12 20:04:00 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2016-10-12 20:04:00 ----A---- C:\WINDOWS\SYSWOW64\IdCtrls.dll
2016-10-12 20:04:00 ----A---- C:\WINDOWS\SYSWOW64\DictationManager.dll
2016-10-12 20:04:00 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-10-12 20:04:00 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2016-10-12 20:01:33 ----A---- C:\WINDOWS\SYSWOW64\mqcertui.dll
2016-10-12 19:54:57 ----A---- C:\WINDOWS\system32\mqcertui.dll

======List of files/folders modified in the last 1 month======

2016-11-07 18:07:05 ----SHD---- C:\Config.Msi
2016-11-07 18:02:59 ----D---- C:\WINDOWS\Tasks
2016-11-06 21:20:37 ----SHD---- C:\System Volume Information
2016-11-06 21:10:57 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-10-21 05:16:01 ----D---- C:\ProgramData\mcafee
2016-10-20 20:39:37 ----D---- C:\ProgramData\Hewlett-Packard
2016-10-20 20:37:58 ----D---- C:\ProgramData\CyberLink
2016-10-20 20:23:46 ----SHD---- C:\Recovery
2016-10-20 20:11:17 ----D---- C:\WINDOWS\SYSWOW64\Adobe
2016-10-20 20:10:34 ----D---- C:\WINDOWS\Hewlett-Packard
2016-10-20 20:10:13 ----AHD---- C:\SYSTEM.SAV
2016-10-20 20:10:12 ----D---- C:\SWSetup
2016-10-20 20:09:58 ----D---- C:\ProgramData\{C6FA530F-BB98-4D9F-BA00-45FD0698077C}
2016-10-20 20:09:57 ----D---- C:\ProgramData\Temp
2016-10-20 20:09:56 ----D---- C:\ProgramData\Synaptics
2016-10-20 20:09:56 ----D---- C:\ProgramData\SUPPORTDIR
2016-10-20 20:09:56 ----D---- C:\ProgramData\Realtek
2016-10-20 20:09:56 ----D---- C:\ProgramData\Package Cache
2016-10-20 20:09:55 ----D---- C:\ProgramData\Microsoft OneDrive
2016-10-20 20:08:26 ----D---- C:\ProgramData\Intel
2016-10-20 20:08:26 ----D---- C:\ProgramData\install_clap
2016-10-20 20:07:17 ----D---- C:\ProgramData\AVAST Software
2016-10-20 20:07:17 ----D---- C:\ProgramData\Apple
2016-10-20 20:07:16 ----D---- C:\Program Files (x86)\Realtek
2016-10-20 20:06:58 ----RD---- C:\Program Files (x86)\Online Services
2016-10-20 20:06:54 ----D---- C:\Program Files (x86)\NSIS Uninstall Information
2016-10-20 20:06:46 ----D---- C:\Program Files (x86)\Microsoft Office
2016-10-20 20:06:36 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-10-20 20:06:11 ----D---- C:\Program Files (x86)\Hewlett-Packard
2016-10-20 20:02:20 ----D---- C:\Program Files (x86)\CyberLink
2016-10-20 19:57:41 ----D---- C:\Program Files (x86)\Cisco
2016-10-20 19:57:40 ----D---- C:\Program Files (x86)\Bonjour
2016-10-20 19:57:39 ----D---- C:\Program Files\Windows Journal
2016-10-20 19:57:38 ----RD---- C:\Program Files\Online Services
2016-10-20 19:56:44 ----D---- C:\Program Files\HP
2016-10-20 19:56:44 ----D---- C:\Program Files\Hewlett-Packard
2016-10-20 19:56:24 ----D---- C:\Program Files\CyberLink
2016-10-20 19:49:09 ----D---- C:\Program Files\Bonjour
2016-10-20 19:49:00 ----D---- C:\Program Files\AVAST Software
2016-10-20 19:49:00 ----D---- C:\inetpub
2016-10-12 19:33:21 ----A---- C:\WINDOWS\SYSWOW64\mqsnap.dll

File C:\WINDOWS\system32\winlogon.exe is digitally signed
File C:\WINDOWS\system32\wininit.exe is digitally signed
File C:\WINDOWS\explorer.exe is digitally signed
File C:\WINDOWS\SysWOW64\explorer.exe is digitally signed
File C:\WINDOWS\system32\svchost.exe is digitally signed
File C:\WINDOWS\SysWOW64\svchost.exe is digitally signed
File C:\WINDOWS\system32\services.exe is digitally signed
File C:\WINDOWS\system32\User32.dll is digitally signed
File C:\WINDOWS\SysWOW64\User32.dll is digitally signed
File C:\WINDOWS\system32\userinit.exe is digitally signed
File C:\WINDOWS\SysWOW64\userinit.exe is digitally signed
File C:\WINDOWS\system32\rpcss.dll is digitally signed
File C:\WINDOWS\system32\Drivers\volsnap.sys is digitally signed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2016-08-03 112640]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2016-03-29 245760]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2016-08-03 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2016-08-03 84992]
R3 dptf_acpi;dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [2015-08-18 55816]
R3 dptf_cpu;dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [2015-08-18 53752]
R3 esif_lf;esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [2015-08-18 261624]
R3 igfxLP;igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [2015-07-13 5744568]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2016-08-03 181248]
R3 rt640x64;@oem4.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-06-18 895256]
R3 RtkBtFilter;@oem17.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2015-07-16 600832]
R3 RTWlanE;@oem23.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\WINDOWS\System32\drivers\rtwlane.sys [2015-08-28 4629744]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [2016-10-05 79960]
R3 SynTP;@oem21.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\System32\drivers\SynTP.sys [2016-10-05 872024]
R3 TXEIx64;@oem20.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\WINDOWS\System32\drivers\TXEIx64.sys [2015-06-26 146232]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2015-10-30 221184]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2016-08-03 954368]
S3 clwvd6;@oem8.inf,%clwvd.DeviceDesc% Service;CyberLink WebCam Virtual Driver 6.0 Service; C:\WINDOWS\system32\DRIVERS\clwvd6.sys [2013-10-29 41704]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-10-30 31232]
S3 RTSUER;@oem5.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-05-21 411712]
S3 SmbDrv;SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [2016-01-30 42184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 BTDevManager;BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [2015-07-20 121560]
R2 esifsvc;@oem18.inf,%ServiceDisplayName%;ESIF Upper Framework Service; C:\WINDOWS\SysWOW64\esif_uf.exe [2015-08-18 1385640]
R2 HPRegistrationSvc;HP Registration Service; c:\Program Files (x86)\Hewlett-Packard\HP Registration Service\HPRegistrationService.exe [2015-07-02 251632]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; c:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2015-07-11 24888]
R2 HPWMISVC;HPWMISVC; c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [2015-02-17 608520]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface; C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe [2015-04-21 174368]
R2 OneSyncSvc_2a9a26;Hostitel synchronizace_2a9a26; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2014-04-14 389896]
R2 SecureLine;Avast SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [2016-10-20 592392]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2016-10-05 269400]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 Intel(R) Security Assist;Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [2015-02-26 330240]
R3 PimIndexMaintenanceSvc_2a9a26;Data kontaktů_2a9a26; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R3 UnistoreSvc_2a9a26;Úložiště uživatelských dat_2a9a26; C:\WINDOWS\System32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
S2 isaHelperSvc;Intel(R) Security Assist Helper; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [2015-02-26 7680]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2015-04-28 1102472]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2015-05-22 881152]
S3 MessagingService_2a9a26;Služba zasílání zpráv_2a9a26; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=

-----------------EOF-----------------

Roli píše:Odebráno z CODE pro lepší čitelnost

#3 Příspěvek od **Roli** » 07 lis 2016 19:44

Zdravím, stáhni a spusť AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem jej spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po dokončení skenu klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zkopíruj Report.

Dále použij Mbam z mého podpisu a dej mi sem z něj log po smazání nepořádku.

Spusť skener Cure It podle TOHOTO návodu

po skončení skenu mi sem nakopíruj výsledky - stačí konec logu se souhrnem.

(Upozornění je úchylně pomalý a je zapotřebí ho sledovat občas se na něco ptá)

klik6 · #4 Příspěvek od **klik6** » 07 lis 2016 20:03

# AdwCleaner v6.030 - Log soubor vytvořen 07/11/2016 na 19:56:00
# Aktualizováno dne 19/10/2016 z Malwarebytes
# Databáze : 2016-11-07.1 [Server]
# Operační systém : Windows 10 Home (X64)
# Uživatelské jméno : HP250G4 - DESKTOP-4G99PUG
# Beží od : C:\Users\HP250G4\Downloads\adwcleaner.exe
# Mod: Čištění
# Podpora : hxxps://www.malwarebytes.com/support

***** [ Služby ] *****

***** [ Adresáře ] *****

***** [ Soubory ] *****

[-] Soubor smazán:C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Booking.com.lnk

***** [ DLL ] *****

***** [ WMI ] *****

***** [ Zástupce ] *****

***** [ Plánovač úloh ] *****

***** [ Registry ] *****

***** [ Prohlížeče ] *****

*************************

:: "Tracing" klíč smazán
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [890 Bajtů] - [07/11/2016 19:56:00]
C:\AdwCleaner\AdwCleaner[S0].txt - [1426 Bajtů] - [07/11/2016 19:55:32]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1037 Bajtů] ##########

klik6 · #5 Příspěvek od **klik6** » 08 lis 2016 14:59

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Datum skenování: 07.11.2016
Čas skenování: 20:07
Protokol: mb.txt
Správce: Ano

Verze: 2.2.1.1043
Databáze malwaru: v2016.11.07.07
Databáze rootkitů: v2016.10.31.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 10
CPU: x64
Souborový systém: NTFS
Uživatel: HP250G4

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 514897
Uplynulý čas: 5 hod, 17 min, 9 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

(end)

Roli píše:Opět odebráno z CODE pro lepší čitelnost

klik6 · #6 Příspěvek od **klik6** » 08 lis 2016 16:53

CUREIT:

Total 21243110220 bytes in 30415 files scanned (34738 objects)
Total 30386 files (34703 objects) are clean
There are no infected objects detected
Total 35 files are raised error condition
Scan time is 00:19:35.046

Stačí to? Nevím jestli jsem cureit použil správně - v návodu nevidím obrázky a ovládání podle popisu se mi zdálo jinší (asi novější verze cureit)

klik6 · #7 Příspěvek od **klik6** » 09 lis 2016 14:56

#8 Příspěvek od **Roli** » 09 lis 2016 19:24

klik6 píše:
Stačí to? Nevím jestli jsem cureit použil správně - v návodu nevidím obrázky a ovládání podle popisu se mi zdálo jinší (asi novější verze cureit)

Stačí a je to správně.

Jěště Tě poprosím nedávej logy do CODE fakt se to strašně blbě čte.

Mbam odinstaluj a pak písní jak se PC chová a co ta jeho rychlosdt.

klik6 · #9 Příspěvek od **klik6** » 09 lis 2016 19:42

Už to nebudu dávat do "code" pardon.

Zdá se mi, že to ještě není ono. Jde nějak odstranit (podle mě zbytečný) hp support asistant?

#10 Příspěvek od **Roli** » 09 lis 2016 19:51

klik6 píše:Zdá se mi, že to ještě není ono. Jde nějak odstranit (podle mě zbytečný) hp support asistant?

Měl by jít odinstalovat nebo aspoň zakázat ve službách.

klik6 · #11 Příspěvek od **klik6** » 09 lis 2016 19:53

Dobrá, děkuju. Ještě něco budeme testovat, pořád mi nepřijde moc rychlý.

klik6 · #12 Příspěvek od **klik6** » 09 lis 2016 19:55

klik6 píše:Dobrá, děkuju. Ještě něco budeme testovat, pořád mi nepřijde moc rychlý.

například když kliknu pravým tlačítkem na jakoukoli ikonu, tak trvá tak 3 vteřiny než se zobrazí nabídka

#13 Příspěvek od **Roli** » 10 lis 2016 16:43

klik6 píše:Dobrá, děkuju. Ještě něco budeme testovat, pořád mi nepřijde moc rychlý.

Jasně mrknem na hardware

Stáhni HD Tune a otestuj HDD.

Benchmark - Test disku Klikni na tlačítko Start a vyčkej dokud se nezaplní celý graf. Poté se dozvíš přenosovou rychlost a přístupový čas pevného disku.

Info Přesná kapacita, souborový systém, podporované funkce, verze firmware, sériové číslo a typ zapojení disků.

Health - Kondice Seznam důležitých parametrů a jejich hodnoty. Ideální je mít všude OK.

Když je nějaká položka žlutá pravděpodobně brzy změní status na failed. Když je červená má status failed, to by znamenalo výměnu disku.

Error Scan - Hledání chyb Klikni na tlačítko Start a program prozkoumá disk zda na něm nejsou vadné bloky.

Pokud na konci testu jsou všechny zelené, je vše v pořádku. Když je byť jeden z nich červený, doporučuji zazálohovat data a počítat s výměnou disku.

Teplota Teploměr nahoře a číslo vedle něj znázorňují teplotu disku. Normální hodnota je pod 50°C. Teplota ale nesmí přesáhnout 60°C, program upozorní když dosáhne hranice 55°C.

Stáhni MEMTEST

soubor rozbal a spusť exe soubor.

Připoj flashdisk pozor vše co na něm je bude smazáno !,

v okénku Select your USB Flash Drive vyber tento disk a dej Create.

Během chvilky se Memtest nainstaluje.

Flashdisk nech v USB, restartuj PC a nabootuj z něj.

Před tím samozřemě musíš v Bios Setup do kterého se dostaneš při restartu mačkáním klávesy :

* DEL
* F2
* F1
* F10

záleží na PC, ale vždy je to na monitoru napsáno,

otevři nabídku ADVANCED BIOS FEATURES a vyhledej Boot Devices 0 až 4 nebo Boot Sequence.

Na první místo nastav Flashdisk,

na druhé pevný disk HDD, u obou položek bývá napsán i výrobce.

Stisknutím Save většinou je to F10 a potvrzením Entrem uložíš nastavení,

pak ještě stisknutím Save and Exit se dostaneš z Biosu.

Test nech projet minimálně jednou, ideálně však několikrát třeba přes noc a s každým RAM modulem zvlášť.

Pak dej vědět jak vše dopadlo.

VIRY.CZ

Pomalejší notebook

Pomalejší notebook

Re: Pomalejší notebook

Re: Pomalejší notebook

Re: Pomalejší notebook

Re: Pomalejší notebook

Re: Pomalejší notebook

Re: Pomalejší notebook

Re: Pomalejší notebook

Re: Pomalejší notebook

Re: Pomalejší notebook

Re: Pomalejší notebook

Re: Pomalejší notebook

Re: Pomalejší notebook