Prosím o kontrolu logu
Napsal: 27 lis 2016 17:01
Logfile of random's system information tool 1.10 (written by random/random)
Run by admin at 2016-11-27 16:59:20
Microsoft Windows 10 Education
System drive C: has 718 GB (75%) free of 953 GB
Total RAM: 16296 MB (75% free)
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a4ea3195-286a-4e31-b42d-0d8f6096b67e -SystemEventPortName:HostProcess-009b8e37-50bd-4b6a-89b2-a22ec9467d62 -IoCancelEventPortName:HostProcess-3c70b17b-e69b-4edd-b0ff-4e382e9910ac -NonStateChangingEventPortName:HostProcess-94377dd7-b5c8-45bc-80c8-9688c712cd1f -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:4cdfafd7-2ba9-4f9c-84d4-291e603207d1 -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem"
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
"C:\Program Files\Elantech\ETDService.exe"
C:\WINDOWS\system32\ibtsiva
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe"
"C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
"C:\Program Files (x86)\Common Files\Intel\RSDCM\bin\win32\RealSenseDCM.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\WLANExt.exe 1432248360160
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
"C:\Program Files (x86)\Lenovo\System Update\SUService.exe"
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"dwm.exe"
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe" /hide
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -l 3 -c
sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\Elantech\ETDIntelligent.exe"
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_MICPKEY
"C:\Windows\RTFTrack.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM
"C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe"
"C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe"
"C:\Users\admin\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
"C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe" -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe" --type=renderer --disable-gpu-compositing --no-sandbox --enable-begin-frame-scheduling --primordial-pipe-token=DE357875C403F75886848FC6F982DD58 --lang=en-US --lang=en-US --log-file="C:\Users\admin\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\debug.log" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="9648.0.962757588\295281770" --mojo-platform-channel-handle=1472 /prefetch:1
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Users\admin\AppData\Local\Apps\2.0\TC0CYRJH.8V8\TTL6J3RN.00B\lsb...tion_2d7b41b05b24775e_0001.0006_589ac911618caaca\LSB.exe"
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=-m --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=54.0.2840.99 --handshake-handle=0x1b0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/ClientSideDetectionModel/Model0/DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/StrictSecureCookies/Default/SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --supports-dual-gpus=false --gpu-driver-bug-workarounds=5,16,20,34,51,60 --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=20.19.15.4531 --gpu-driver-date=9-29-2016 --gpu-secondary-vendor-ids=0x10de --gpu-secondary-device-ids=0x1392 --mojo-application-channel-token=C18E8150CF0BC3038A0793EA8284E615 --mojo-platform-channel-handle=1284 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=330F272F9EB0D322FDD63CFC74311A15 --lang=sk --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=330F272F9EB0D322FDD63CFC74311A15 --channel="3964.1.1571930005\513210298" --mojo-platform-channel-handle=2264 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=495D44702F6CA62DD12DAC9E8E32885F --lang=sk --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=495D44702F6CA62DD12DAC9E8E32885F --channel="3964.2.121573538\1092420171" --mojo-platform-channel-handle=2352 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=CDBBEF75D42C5563CBDA62CEE83FE899 --lang=sk --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=CDBBEF75D42C5563CBDA62CEE83FE899 --channel="3964.3.223972853\1537626110" --mojo-platform-channel-handle=2592 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=49958C918EFC005F3B9E2B51E2D7CA54 --lang=sk --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=49958C918EFC005F3B9E2B51E2D7CA54 --channel="3964.4.851747269\761249322" --mojo-platform-channel-handle=5464 /prefetch:1
"C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
C:\WINDOWS\system32\AUDIODG.EXE 0x34c
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=E25EDB86BAF62B7A12D1895749BBDC4B --lang=sk --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=E25EDB86BAF62B7A12D1895749BBDC4B --channel="3964.11.195360502\2016937551" --mojo-platform-channel-handle=6312 /prefetch:1
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\trend micro\admin.exe" /silentautolog
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=91D95F33152C29A45F725850969EB70D --lang=sk --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=91D95F33152C29A45F725850969EB70D --channel="3964.14.425318495\1142202460" --mojo-platform-channel-handle=8156 /prefetch:1
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup
"C:\Users\admin\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31 226984]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~1\MICROS~1\Office16\GROOVEEX.DLL [2016-10-18 2179888]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2016-10-18 171216]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-28 473152]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL [2016-10-18 1524528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-28 186944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-08-03 14038776]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-08-03 1411320]
"RtHDVBg_LENOVO_DOLBYDRAGON"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-08-03 1411320]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-08-03 1411320]
"RtsFT"=C:\WINDOWS\RTFTrack.exe [2015-08-30 5062384]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2014-04-02 36352]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-08-03 1411320]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2016-10-25 1854008]
"Energy Manager"=C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [2016-10-28 15813616]
"Lenovo Utility"=C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [2016-10-28 80880]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-10-28 633024]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2016-10-13 2860832]
"f.lux"=C:\Users\admin\AppData\Local\FluxSoftware\Flux\flux.exe [2013-10-23 1017224]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-09-22 587288]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-11-27 16:44:36 ----D---- C:\rsit
2016-11-27 16:44:36 ----D---- C:\Program Files\trend micro
2016-11-24 17:38:01 ----SHD---- C:\Config.Msi
2016-11-24 17:36:34 ----D---- C:\Program Files (x86)\gs
2016-11-24 17:35:17 ----D---- C:\ProgramData\VsTelemetry
2016-11-24 17:35:02 ----D---- C:\Program Files (x86)\Corel
2016-11-24 17:34:47 ----D---- C:\Program Files\Common Files\Corel
2016-11-24 17:33:21 ----D---- C:\Users\admin\AppData\Roaming\Corel
2016-11-24 17:32:42 ----D---- C:\ProgramData\Corel
2016-11-24 17:32:32 ----AD---- C:\Program Files\Corel
2016-11-24 17:20:53 ----D---- C:\ProgramData\UniqueId
2016-11-23 21:33:58 ----D---- C:\Program Files (x86)\Slimi
2016-11-19 19:24:45 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2016-11-19 19:24:43 ----D---- C:\Program Files (x86)\VulkanRT
2016-11-19 19:24:43 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo.exe
2016-11-19 19:24:43 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1.dll
2016-11-19 19:24:43 ----A---- C:\WINDOWS\system32\vulkaninfo.exe
2016-11-19 19:24:43 ----A---- C:\WINDOWS\system32\vulkan-1.dll
2016-11-19 19:22:59 ----D---- C:\WINDOWS\LastGood
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\nvptxJitCompiler.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\nvfatbinaryLoader.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\nvptxJitCompiler.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\nvopencl.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\nvfatbinaryLoader.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\nvEncMFTH264.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFTH264.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\system32\nvdispgenco6437595.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\system32\nvdispco6437595.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\system32\nvcuda.dll
2016-11-19 19:20:44 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2016-11-19 19:20:44 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2016-11-19 18:46:21 ----D---- C:\Users\admin\AppData\Roaming\SUPERAntiSpyware.com
2016-11-19 18:46:02 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2016-11-19 18:46:02 ----AD---- C:\Program Files\SUPERAntiSpyware
2016-11-17 09:54:04 ----A---- C:\WINDOWS\system32\nvdispgenco6437586.dll
2016-11-17 09:54:04 ----A---- C:\WINDOWS\system32\nvdispco6437586.dll
2016-11-16 17:57:01 ----D---- C:\WINDOWS\LastGood.Tmp
2016-11-16 17:56:57 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2016-11-16 17:56:57 ----A---- C:\WINDOWS\system32\nvaudcap64v.dll
2016-11-09 14:36:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-11-09 14:36:02 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\system32\usercpl.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\system32\oleaut32.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\system32\ole32.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\system32\ActionCenterCPL.dll
2016-11-09 14:36:00 ----A---- C:\WINDOWS\SYSWOW64\weretw.dll
2016-11-09 14:36:00 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-11-09 14:36:00 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-11-09 14:36:00 ----A---- C:\WINDOWS\SYSWOW64\chartv.dll
2016-11-09 14:36:00 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-11-09 14:36:00 ----A---- C:\WINDOWS\system32\wer.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\WpcRefreshTask.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\weretw.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\ubpm.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\asycfilt.dll
2016-11-09 14:35:58 ----A---- C:\WINDOWS\SYSWOW64\NPSM.dll
2016-11-09 14:35:58 ----A---- C:\WINDOWS\system32\WpcTok.exe
2016-11-09 14:35:58 ----A---- C:\WINDOWS\system32\rdpshell.exe
2016-11-09 14:35:58 ----A---- C:\WINDOWS\system32\drivers\bowser.sys
2016-11-09 14:35:58 ----A---- C:\WINDOWS\system32\ddraw.dll
2016-11-09 14:35:58 ----A---- C:\WINDOWS\system32\dab.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\system32\TSpkg.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\system32\rdpinit.exe
2016-11-09 14:35:57 ----A---- C:\WINDOWS\system32\netplwiz.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2016-11-09 14:35:56 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-11-09 14:35:56 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-11-09 14:35:56 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-11-09 14:35:55 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2016-11-09 14:35:55 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-11-09 14:35:55 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-11-09 14:35:55 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2016-11-09 14:35:55 ----A---- C:\WINDOWS\system32\wmp.dll
2016-11-09 14:35:55 ----A---- C:\WINDOWS\system32\chartv.dll
2016-11-09 14:35:54 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-11-09 14:35:54 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2016-11-09 14:35:54 ----A---- C:\WINDOWS\SYSWOW64\fontext.dll
2016-11-09 14:35:54 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-11-09 14:35:54 ----A---- C:\WINDOWS\system32\twinapi.dll
2016-11-09 14:35:54 ----A---- C:\WINDOWS\system32\authui.dll
2016-11-09 14:35:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-11-09 14:35:53 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-11-09 14:35:53 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2016-11-09 14:35:53 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2016-11-09 14:35:53 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2016-11-09 14:35:52 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2016-11-09 14:35:52 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2016-11-09 14:35:52 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-11-09 14:35:52 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2016-11-09 14:35:52 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-11-09 14:35:51 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2016-11-09 14:35:51 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-11-09 14:35:51 ----A---- C:\WINDOWS\system32\ListSvc.dll
2016-11-09 14:35:51 ----A---- C:\WINDOWS\system32\d3d12warp.dll
2016-11-09 14:35:51 ----A---- C:\WINDOWS\system32\comdlg32.dll
2016-11-09 14:35:50 ----A---- C:\WINDOWS\SYSWOW64\win32k.sys
2016-11-09 14:35:50 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2016-11-09 14:35:50 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-11-09 14:35:50 ----A---- C:\WINDOWS\system32\rdpcore.dll
2016-11-09 14:35:50 ----A---- C:\WINDOWS\system32\efsext.dll
2016-11-09 14:35:50 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2016-11-09 14:35:49 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2016-11-09 14:35:49 ----A---- C:\WINDOWS\SYSWOW64\AuthExt.dll
2016-11-09 14:35:49 ----A---- C:\WINDOWS\system32\VSD3DWARPDebug.dll
2016-11-09 14:35:49 ----A---- C:\WINDOWS\system32\VSD3DWARP12Debug.dll
2016-11-09 14:35:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-11-09 14:35:46 ----A---- C:\WINDOWS\system32\stobject.dll
2016-11-09 14:35:46 ----A---- C:\WINDOWS\system32\AudioEng.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\zipfldr.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\themecpl.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\sud.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\fontext.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2016-11-09 14:35:44 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\system32\hgcpl.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\system32\gameux.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\explorer.exe
2016-11-09 14:35:43 ----A---- C:\WINDOWS\system32\twinui.dll
2016-11-09 14:35:43 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-11-09 14:35:43 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2016-11-09 14:35:41 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2016-11-09 14:35:41 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-11-09 14:35:41 ----A---- C:\WINDOWS\system32\cscui.dll
2016-11-09 14:35:39 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2016-11-09 14:35:39 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2016-11-09 14:35:39 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-11-09 14:35:39 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2016-11-09 14:35:39 ----A---- C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-11-09 14:35:39 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2016-11-09 14:35:38 ----A---- C:\WINDOWS\SYSWOW64\d3d12warp.dll
2016-11-09 14:35:38 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2016-11-09 14:35:38 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-11-09 14:35:38 ----A---- C:\WINDOWS\system32\NPSM.dll
2016-11-09 14:35:38 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-11-09 14:35:37 ----A---- C:\WINDOWS\SYSWOW64\VSD3DWARPDebug.dll
2016-11-09 14:35:37 ----A---- C:\WINDOWS\SYSWOW64\VSD3DWARP12Debug.dll
2016-11-09 14:35:37 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-11-09 14:35:37 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2016-11-09 14:35:37 ----A---- C:\WINDOWS\system32\DeviceCenter.dll
2016-11-09 14:35:36 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-11-09 14:35:36 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2016-11-09 14:35:36 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2016-11-09 14:35:36 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2016-11-09 14:35:36 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2016-11-09 14:35:35 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-11-09 14:35:34 ----A---- C:\WINDOWS\SYSWOW64\indexeddbserver.dll
2016-11-09 14:35:34 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2016-11-09 14:35:34 ----A---- C:\WINDOWS\SYSWOW64\ActionCenterCPL.dll
2016-11-09 14:35:34 ----A---- C:\WINDOWS\system32\ntshrui.dll
2016-11-09 14:35:34 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2016-11-09 14:35:33 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-11-09 14:35:33 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2016-11-09 14:35:33 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2016-11-09 14:35:32 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2016-11-09 14:35:30 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-11-09 14:35:30 ----A---- C:\WINDOWS\system32\shell32.dll
2016-11-09 14:35:29 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-11-09 14:35:28 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-11-09 14:35:28 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-11-09 14:35:28 ----A---- C:\WINDOWS\system32\shdocvw.dll
2016-11-09 14:35:28 ----A---- C:\WINDOWS\system32\ieproxy.dll
2016-11-09 14:35:28 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-11-09 14:35:27 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-11-09 14:35:27 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-11-09 14:35:27 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-11-09 14:35:26 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-11-09 14:35:26 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2016-11-09 14:35:26 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-11-09 14:35:26 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-11-09 14:35:26 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-11-09 14:35:26 ----A---- C:\WINDOWS\system32\FSClient.dll
2016-11-09 14:35:25 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-11-09 14:35:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2016-11-09 14:35:24 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2016-11-09 14:35:24 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-11-09 14:35:24 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-11-09 14:35:24 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-11-09 14:35:24 ----A---- C:\WINDOWS\system32\FrameServer.dll
2016-11-09 14:35:24 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-11-09 14:35:23 ----A---- C:\WINDOWS\system32\indexeddbserver.dll
2016-11-09 14:35:22 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-11-09 14:35:21 ----A---- C:\WINDOWS\system32\wininet.dll
2016-11-09 14:35:21 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2016-11-09 14:35:21 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-11-09 14:35:21 ----A---- C:\WINDOWS\system32\cdp.dll
2016-11-09 14:35:21 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-11-09 14:35:20 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-11-09 14:35:18 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-11-09 14:35:18 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-11-09 14:35:17 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2016-11-09 14:35:17 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-11-09 14:35:16 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2016-11-09 14:35:16 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-11-09 14:35:16 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-11-09 14:35:16 ----A---- C:\WINDOWS\system32\ErrorDetails.dll
2016-11-09 14:35:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2016-11-09 14:35:15 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-11-09 14:35:14 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-11-09 14:35:14 ----A---- C:\WINDOWS\system32\mstsc.exe
2016-11-09 14:35:14 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-11-09 14:35:13 ----A---- C:\WINDOWS\SYSWOW64\UIAnimation.dll
2016-11-09 14:35:13 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2016-11-09 14:35:13 ----A---- C:\WINDOWS\SYSWOW64\input.dll
2016-11-09 14:35:13 ----A---- C:\WINDOWS\system32\wifitask.exe
2016-11-09 14:35:12 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\SYSWOW64\ErrorDetailsUpdate.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\SYSWOW64\ErrorDetails.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\iepeers.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\ErrorDetailsUpdate.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\dxtrans.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\BcastDVRHelper.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-11-09 14:35:11 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2016-11-09 14:35:11 ----A---- C:\WINDOWS\system32\winresume.exe
2016-11-09 14:35:11 ----A---- C:\WINDOWS\system32\winload.exe
2016-11-09 14:35:10 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-11-09 14:35:10 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2016-11-09 14:35:10 ----A---- C:\WINDOWS\SYSWOW64\mfsensorgroup.dll
2016-11-09 14:35:10 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-11-09 14:35:10 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-11-09 14:35:10 ----A---- C:\WINDOWS\system32\msinfo32.exe
2016-11-09 14:35:09 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-11-09 14:35:09 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2016-11-09 14:35:09 ----A---- C:\WINDOWS\SYSWOW64\msinfo32.exe
2016-11-09 14:35:09 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2016-11-09 14:35:09 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-11-09 14:35:09 ----A---- C:\WINDOWS\system32\msctf.dll
2016-11-09 14:35:08 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-11-09 14:35:07 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-11-09 14:35:07 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-11-09 14:35:07 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-11-09 14:35:07 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-11-09 14:35:07 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-11-09 14:35:07 ----A---- C:\WINDOWS\system32\d3d9.dll
2016-11-09 14:35:06 ----A---- C:\WINDOWS\system32\gdi32full.dll
2016-11-09 14:35:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-11-09 14:35:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-11-09 14:35:05 ----A---- C:\WINDOWS\SYSWOW64\efsext.dll
2016-11-09 14:35:05 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-11-09 14:35:05 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2016-11-09 14:35:05 ----A---- C:\WINDOWS\system32\NetworkUXBroker.dll
2016-11-09 14:35:05 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-11-09 14:35:05 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-11-09 14:35:05 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\SYSWOW64\BcastDVRHelper.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\UIAnimation.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-11-09 14:35:03 ----A---- C:\WINDOWS\SYSWOW64\comctl32.dll
2016-11-09 14:35:03 ----A---- C:\WINDOWS\system32\win32k.sys
2016-11-09 14:35:03 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2016-11-09 14:35:03 ----A---- C:\WINDOWS\system32\input.dll
2016-11-09 14:35:03 ----A---- C:\WINDOWS\system32\drivers\iorate.sys
2016-11-09 14:35:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2016-11-09 14:35:02 ----A---- C:\WINDOWS\SYSWOW64\ddraw.dll
2016-11-09 14:35:02 ----A---- C:\WINDOWS\SYSWOW64\d3d8.dll
2016-11-09 14:35:02 ----A---- C:\WINDOWS\system32\wininetlui.dll
2016-11-09 14:35:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BlockedShutdown.dll
2016-11-09 14:35:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2016-11-09 14:35:00 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2016-11-09 14:35:00 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-11-07 13:48:52 ----D---- C:\Program Files (x86)\Origin Games
2016-11-07 13:46:32 ----D---- C:\Users\admin\AppData\Roaming\Origin
2016-11-07 13:46:14 ----AD---- C:\Program Files (x86)\Origin
2016-11-07 13:34:43 ----D---- C:\ProgramData\Origin
2016-11-01 23:06:06 ----A---- C:\WINDOWS\system32\igdumdim64.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\SYSWOW64\iglhsip32.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\SYSWOW64\iglhcp32.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\SYSWOW64\igfxcmrt32.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\SYSWOW64\igfx11cmrt32.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\SYSWOW64\igd11dxva32.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\system32\iglhsip64.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\system32\iglhcp64.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\system32\igfxexps.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\system32\igfxcmrt64.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\system32\igfx11cmrt64.dll
2016-11-01 23:06:00 ----A---- C:\WINDOWS\SYSWOW64\igd10iumd32.dll
2016-11-01 23:06:00 ----A---- C:\WINDOWS\system32\igdmd64.dll
2016-11-01 23:05:58 ----A---- C:\WINDOWS\SYSWOW64\igdmd32.dll
2016-11-01 23:05:58 ----A---- C:\WINDOWS\SYSWOW64\igdde32.dll
2016-11-01 23:05:58 ----A---- C:\WINDOWS\SYSWOW64\igc32.dll
2016-11-01 23:05:58 ----A---- C:\WINDOWS\system32\igdde64.dll
2016-11-01 23:05:58 ----A---- C:\WINDOWS\system32\igd12umd64.dll
2016-11-01 23:05:58 ----A---- C:\WINDOWS\system32\igc64.dll
2016-11-01 23:05:56 ----A---- C:\WINDOWS\SYSWOW64\igd12umd32.dll
2016-11-01 23:05:56 ----A---- C:\WINDOWS\SYSWOW64\igd10idpp32.dll
2016-11-01 23:05:56 ----A---- C:\WINDOWS\system32\igd10idpp64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\IntelOpenCL32.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\IntelCpHeciSvc.exe
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\Intel_OpenCL_ICD32.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\igfxexps32.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\igfxcmjit32.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\igdrcl32.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\igdmcl32.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\IntelWiDiUMS64.exe
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\IntelWiDiMCComp64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\IntelOpenCL64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\IntelCpHDCPSvc.exe
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxSDKLibv2_0.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxSDKLib.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxSDK.exe
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxOSP.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxLHMLib.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxext.exe
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxEMLibv2_0.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxEMLib.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxDTCM.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxDILibv2_0.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxDILib.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxDHLibv2_0.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxDHLib.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxCUIServicePS.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxCoIn_v4531.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxcmjit64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igdrcl64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igdmcl64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\common_clang64.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\SYSWOW64\igdfcl32.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\SYSWOW64\igdbcl32.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\SYSWOW64\igdail32.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\SYSWOW64\ig75icd32.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\SYSWOW64\common_clang32.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\igdfcl64.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\igdbcl64.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\igdail64.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\ig75icd64.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\Gfxv4_0.exe
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\Gfxv2_0.exe
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\GfxUIEx.exe
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\GfxResources.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\DPTopologyApp.exe
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\difx64.exe
2016-11-01 01:27:11 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe
2016-10-28 21:22:41 ----A---- C:\WINDOWS\system32\nvdispgenco6437570.dll
2016-10-28 21:22:41 ----A---- C:\WINDOWS\system32\nvdispco6437570.dll
2016-10-28 19:39:07 ----D---- C:\Users\admin\AppData\Roaming\eve Updater
2016-10-28 14:34:06 ----DC---- C:\WINDOWS\Panther
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\wmpmde.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\wlancfg.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsDesktopEngine.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\TempSignedLicenseExchangeTask.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncPolicy.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\MSAC3ENC.DLL
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\LicenseManagerApi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\findnetprinters.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\dmenrollengine.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\dialclient.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\d3d12SDKLayers.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\CloudBackupSettings.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wwanmm.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wwanconn.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wpnprv.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wpninprc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wpncore.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wpnapps.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wmpmde.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\VsGraphicsDesktopEngine.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\SettingSyncPolicy.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\pwcreator.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\msvproc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\MSAC3ENC.DLL
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfps.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfksproxy.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\manage-bde.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\LsaIso.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fvewiz.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fveui.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fveprompt.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fvenotify.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fvecpl.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fveapibase.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\encapi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\devenum.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\daxexec.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\d3d12SDKLayers.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\CloudBackupSettings.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\bdeunlock.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\bdeui.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\bdesvc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\bdechangepin.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\baaupdate.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\wmpshell.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\wmploc.DLL
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\wmpeffects.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\wmpdxm.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\spwmp.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\NetworkCollectionAgent.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\Chakrathunk.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\Geolocation.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\eappprxy.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\dxmasf.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\ws2_32.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wmpshell.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wmploc.DLL
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wmpeffects.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlansec.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlancfg.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlanapi.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\WiFiConfigSP.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wfdprov.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\sspicli.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\spwmp.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\pnidui.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\NetworkCollectionAgent.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\mprdim.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\mprddm.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\lsass.exe
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\iesetup.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\iernonce.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\Chakrathunk.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\Geolocation.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\evr.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\dxmasf.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\dlnashext.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\deviceassociation.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\dasHost.exe
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\das.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\csrsrv.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Perception.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\systemcpl.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\credprovs.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\credprovhost.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\autoplay.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\Windows.Devices.Perception.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\msxml6r.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\cmimcext.sys
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\wsp_sr.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\ws2_32.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\tcpipcfg.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\sppcext.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\sppc.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\slcext.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\slc.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\pwrshplugin.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\netiougc.exe
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\DscCoreConfProv.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\credprovslegacy.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\ConfigureExpandedStorage.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\adsmsext.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\winsrv.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\tsmf.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\taskbarcpl.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\SessEnv.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\rshx32.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\mspaint.exe
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\lsm.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\fhcpl.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\Family.SyncEngine.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\Family.Client.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\Family.Authentication.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\Display.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\DevicePairingFolder.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\credprovslegacy.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\autoplay.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\aclui.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\wpx.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
Run by admin at 2016-11-27 16:59:20
Microsoft Windows 10 Education
System drive C: has 718 GB (75%) free of 953 GB
Total RAM: 16296 MB (75% free)
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a4ea3195-286a-4e31-b42d-0d8f6096b67e -SystemEventPortName:HostProcess-009b8e37-50bd-4b6a-89b2-a22ec9467d62 -IoCancelEventPortName:HostProcess-3c70b17b-e69b-4edd-b0ff-4e382e9910ac -NonStateChangingEventPortName:HostProcess-94377dd7-b5c8-45bc-80c8-9688c712cd1f -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:4cdfafd7-2ba9-4f9c-84d4-291e603207d1 -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem"
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
"C:\Program Files\Elantech\ETDService.exe"
C:\WINDOWS\system32\ibtsiva
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe"
"C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
"C:\Program Files (x86)\Common Files\Intel\RSDCM\bin\win32\RealSenseDCM.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\WLANExt.exe 1432248360160
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
"C:\Program Files (x86)\Lenovo\System Update\SUService.exe"
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"dwm.exe"
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe" /hide
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -l 3 -c
sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\Elantech\ETDIntelligent.exe"
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_MICPKEY
"C:\Windows\RTFTrack.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM
"C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe"
"C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe"
"C:\Users\admin\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
"C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe" -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe" --type=renderer --disable-gpu-compositing --no-sandbox --enable-begin-frame-scheduling --primordial-pipe-token=DE357875C403F75886848FC6F982DD58 --lang=en-US --lang=en-US --log-file="C:\Users\admin\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\debug.log" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="9648.0.962757588\295281770" --mojo-platform-channel-handle=1472 /prefetch:1
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Users\admin\AppData\Local\Apps\2.0\TC0CYRJH.8V8\TTL6J3RN.00B\lsb...tion_2d7b41b05b24775e_0001.0006_589ac911618caaca\LSB.exe"
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=-m --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=54.0.2840.99 --handshake-handle=0x1b0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/ClientSideDetectionModel/Model0/DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/StrictSecureCookies/Default/SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --supports-dual-gpus=false --gpu-driver-bug-workarounds=5,16,20,34,51,60 --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=20.19.15.4531 --gpu-driver-date=9-29-2016 --gpu-secondary-vendor-ids=0x10de --gpu-secondary-device-ids=0x1392 --mojo-application-channel-token=C18E8150CF0BC3038A0793EA8284E615 --mojo-platform-channel-handle=1284 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=330F272F9EB0D322FDD63CFC74311A15 --lang=sk --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=330F272F9EB0D322FDD63CFC74311A15 --channel="3964.1.1571930005\513210298" --mojo-platform-channel-handle=2264 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=495D44702F6CA62DD12DAC9E8E32885F --lang=sk --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=495D44702F6CA62DD12DAC9E8E32885F --channel="3964.2.121573538\1092420171" --mojo-platform-channel-handle=2352 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=CDBBEF75D42C5563CBDA62CEE83FE899 --lang=sk --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=CDBBEF75D42C5563CBDA62CEE83FE899 --channel="3964.3.223972853\1537626110" --mojo-platform-channel-handle=2592 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=49958C918EFC005F3B9E2B51E2D7CA54 --lang=sk --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=49958C918EFC005F3B9E2B51E2D7CA54 --channel="3964.4.851747269\761249322" --mojo-platform-channel-handle=5464 /prefetch:1
"C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
C:\WINDOWS\system32\AUDIODG.EXE 0x34c
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=E25EDB86BAF62B7A12D1895749BBDC4B --lang=sk --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=E25EDB86BAF62B7A12D1895749BBDC4B --channel="3964.11.195360502\2016937551" --mojo-platform-channel-handle=6312 /prefetch:1
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\trend micro\admin.exe" /silentautolog
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,PointerEvent<PointerEvent,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_58/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=91D95F33152C29A45F725850969EB70D --lang=sk --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1.25 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=91D95F33152C29A45F725850969EB70D --channel="3964.14.425318495\1142202460" --mojo-platform-channel-handle=8156 /prefetch:1
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup
"C:\Users\admin\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31 226984]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~1\MICROS~1\Office16\GROOVEEX.DLL [2016-10-18 2179888]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2016-10-18 171216]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-28 473152]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL [2016-10-18 1524528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-28 186944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-08-03 14038776]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-08-03 1411320]
"RtHDVBg_LENOVO_DOLBYDRAGON"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-08-03 1411320]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-08-03 1411320]
"RtsFT"=C:\WINDOWS\RTFTrack.exe [2015-08-30 5062384]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2014-04-02 36352]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-08-03 1411320]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2016-10-25 1854008]
"Energy Manager"=C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [2016-10-28 15813616]
"Lenovo Utility"=C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [2016-10-28 80880]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-10-28 633024]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2016-10-13 2860832]
"f.lux"=C:\Users\admin\AppData\Local\FluxSoftware\Flux\flux.exe [2013-10-23 1017224]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-09-22 587288]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-11-27 16:44:36 ----D---- C:\rsit
2016-11-27 16:44:36 ----D---- C:\Program Files\trend micro
2016-11-24 17:38:01 ----SHD---- C:\Config.Msi
2016-11-24 17:36:34 ----D---- C:\Program Files (x86)\gs
2016-11-24 17:35:17 ----D---- C:\ProgramData\VsTelemetry
2016-11-24 17:35:02 ----D---- C:\Program Files (x86)\Corel
2016-11-24 17:34:47 ----D---- C:\Program Files\Common Files\Corel
2016-11-24 17:33:21 ----D---- C:\Users\admin\AppData\Roaming\Corel
2016-11-24 17:32:42 ----D---- C:\ProgramData\Corel
2016-11-24 17:32:32 ----AD---- C:\Program Files\Corel
2016-11-24 17:20:53 ----D---- C:\ProgramData\UniqueId
2016-11-23 21:33:58 ----D---- C:\Program Files (x86)\Slimi
2016-11-19 19:24:45 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2016-11-19 19:24:43 ----D---- C:\Program Files (x86)\VulkanRT
2016-11-19 19:24:43 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo.exe
2016-11-19 19:24:43 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1.dll
2016-11-19 19:24:43 ----A---- C:\WINDOWS\system32\vulkaninfo.exe
2016-11-19 19:24:43 ----A---- C:\WINDOWS\system32\vulkan-1.dll
2016-11-19 19:22:59 ----D---- C:\WINDOWS\LastGood
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\nvptxJitCompiler.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\nvfatbinaryLoader.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\nvptxJitCompiler.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\nvopencl.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\nvfatbinaryLoader.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2016-11-19 19:20:46 ----A---- C:\WINDOWS\system32\nvEncMFTH264.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\SYSWOW64\nvEncMFTH264.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\system32\nvdispgenco6437595.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\system32\nvdispco6437595.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2016-11-19 19:20:45 ----A---- C:\WINDOWS\system32\nvcuda.dll
2016-11-19 19:20:44 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2016-11-19 19:20:44 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2016-11-19 18:46:21 ----D---- C:\Users\admin\AppData\Roaming\SUPERAntiSpyware.com
2016-11-19 18:46:02 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2016-11-19 18:46:02 ----AD---- C:\Program Files\SUPERAntiSpyware
2016-11-17 09:54:04 ----A---- C:\WINDOWS\system32\nvdispgenco6437586.dll
2016-11-17 09:54:04 ----A---- C:\WINDOWS\system32\nvdispco6437586.dll
2016-11-16 17:57:01 ----D---- C:\WINDOWS\LastGood.Tmp
2016-11-16 17:56:57 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2016-11-16 17:56:57 ----A---- C:\WINDOWS\system32\nvaudcap64v.dll
2016-11-09 14:36:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-11-09 14:36:02 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\system32\usercpl.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\system32\oleaut32.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\system32\ole32.dll
2016-11-09 14:36:01 ----A---- C:\WINDOWS\system32\ActionCenterCPL.dll
2016-11-09 14:36:00 ----A---- C:\WINDOWS\SYSWOW64\weretw.dll
2016-11-09 14:36:00 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-11-09 14:36:00 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-11-09 14:36:00 ----A---- C:\WINDOWS\SYSWOW64\chartv.dll
2016-11-09 14:36:00 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-11-09 14:36:00 ----A---- C:\WINDOWS\system32\wer.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\WpcRefreshTask.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\weretw.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\ubpm.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2016-11-09 14:35:59 ----A---- C:\WINDOWS\system32\asycfilt.dll
2016-11-09 14:35:58 ----A---- C:\WINDOWS\SYSWOW64\NPSM.dll
2016-11-09 14:35:58 ----A---- C:\WINDOWS\system32\WpcTok.exe
2016-11-09 14:35:58 ----A---- C:\WINDOWS\system32\rdpshell.exe
2016-11-09 14:35:58 ----A---- C:\WINDOWS\system32\drivers\bowser.sys
2016-11-09 14:35:58 ----A---- C:\WINDOWS\system32\ddraw.dll
2016-11-09 14:35:58 ----A---- C:\WINDOWS\system32\dab.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\system32\TSpkg.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\system32\rdpinit.exe
2016-11-09 14:35:57 ----A---- C:\WINDOWS\system32\netplwiz.dll
2016-11-09 14:35:57 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2016-11-09 14:35:56 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-11-09 14:35:56 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-11-09 14:35:56 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-11-09 14:35:55 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2016-11-09 14:35:55 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-11-09 14:35:55 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-11-09 14:35:55 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2016-11-09 14:35:55 ----A---- C:\WINDOWS\system32\wmp.dll
2016-11-09 14:35:55 ----A---- C:\WINDOWS\system32\chartv.dll
2016-11-09 14:35:54 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-11-09 14:35:54 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2016-11-09 14:35:54 ----A---- C:\WINDOWS\SYSWOW64\fontext.dll
2016-11-09 14:35:54 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-11-09 14:35:54 ----A---- C:\WINDOWS\system32\twinapi.dll
2016-11-09 14:35:54 ----A---- C:\WINDOWS\system32\authui.dll
2016-11-09 14:35:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-11-09 14:35:53 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-11-09 14:35:53 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2016-11-09 14:35:53 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2016-11-09 14:35:53 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2016-11-09 14:35:52 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2016-11-09 14:35:52 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2016-11-09 14:35:52 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-11-09 14:35:52 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2016-11-09 14:35:52 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-11-09 14:35:51 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2016-11-09 14:35:51 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-11-09 14:35:51 ----A---- C:\WINDOWS\system32\ListSvc.dll
2016-11-09 14:35:51 ----A---- C:\WINDOWS\system32\d3d12warp.dll
2016-11-09 14:35:51 ----A---- C:\WINDOWS\system32\comdlg32.dll
2016-11-09 14:35:50 ----A---- C:\WINDOWS\SYSWOW64\win32k.sys
2016-11-09 14:35:50 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2016-11-09 14:35:50 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-11-09 14:35:50 ----A---- C:\WINDOWS\system32\rdpcore.dll
2016-11-09 14:35:50 ----A---- C:\WINDOWS\system32\efsext.dll
2016-11-09 14:35:50 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2016-11-09 14:35:49 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2016-11-09 14:35:49 ----A---- C:\WINDOWS\SYSWOW64\AuthExt.dll
2016-11-09 14:35:49 ----A---- C:\WINDOWS\system32\VSD3DWARPDebug.dll
2016-11-09 14:35:49 ----A---- C:\WINDOWS\system32\VSD3DWARP12Debug.dll
2016-11-09 14:35:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-11-09 14:35:46 ----A---- C:\WINDOWS\system32\stobject.dll
2016-11-09 14:35:46 ----A---- C:\WINDOWS\system32\AudioEng.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\zipfldr.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\themecpl.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\sud.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\fontext.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-11-09 14:35:45 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2016-11-09 14:35:44 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\system32\hgcpl.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\system32\gameux.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-11-09 14:35:44 ----A---- C:\WINDOWS\explorer.exe
2016-11-09 14:35:43 ----A---- C:\WINDOWS\system32\twinui.dll
2016-11-09 14:35:43 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-11-09 14:35:43 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2016-11-09 14:35:41 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2016-11-09 14:35:41 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-11-09 14:35:41 ----A---- C:\WINDOWS\system32\cscui.dll
2016-11-09 14:35:39 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2016-11-09 14:35:39 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2016-11-09 14:35:39 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-11-09 14:35:39 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2016-11-09 14:35:39 ----A---- C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-11-09 14:35:39 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2016-11-09 14:35:38 ----A---- C:\WINDOWS\SYSWOW64\d3d12warp.dll
2016-11-09 14:35:38 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2016-11-09 14:35:38 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-11-09 14:35:38 ----A---- C:\WINDOWS\system32\NPSM.dll
2016-11-09 14:35:38 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-11-09 14:35:37 ----A---- C:\WINDOWS\SYSWOW64\VSD3DWARPDebug.dll
2016-11-09 14:35:37 ----A---- C:\WINDOWS\SYSWOW64\VSD3DWARP12Debug.dll
2016-11-09 14:35:37 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-11-09 14:35:37 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2016-11-09 14:35:37 ----A---- C:\WINDOWS\system32\DeviceCenter.dll
2016-11-09 14:35:36 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-11-09 14:35:36 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2016-11-09 14:35:36 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2016-11-09 14:35:36 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2016-11-09 14:35:36 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2016-11-09 14:35:35 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-11-09 14:35:34 ----A---- C:\WINDOWS\SYSWOW64\indexeddbserver.dll
2016-11-09 14:35:34 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2016-11-09 14:35:34 ----A---- C:\WINDOWS\SYSWOW64\ActionCenterCPL.dll
2016-11-09 14:35:34 ----A---- C:\WINDOWS\system32\ntshrui.dll
2016-11-09 14:35:34 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2016-11-09 14:35:33 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-11-09 14:35:33 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2016-11-09 14:35:33 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2016-11-09 14:35:32 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2016-11-09 14:35:30 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-11-09 14:35:30 ----A---- C:\WINDOWS\system32\shell32.dll
2016-11-09 14:35:29 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-11-09 14:35:28 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-11-09 14:35:28 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-11-09 14:35:28 ----A---- C:\WINDOWS\system32\shdocvw.dll
2016-11-09 14:35:28 ----A---- C:\WINDOWS\system32\ieproxy.dll
2016-11-09 14:35:28 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-11-09 14:35:27 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-11-09 14:35:27 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-11-09 14:35:27 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-11-09 14:35:26 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-11-09 14:35:26 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2016-11-09 14:35:26 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-11-09 14:35:26 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-11-09 14:35:26 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-11-09 14:35:26 ----A---- C:\WINDOWS\system32\FSClient.dll
2016-11-09 14:35:25 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-11-09 14:35:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2016-11-09 14:35:24 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2016-11-09 14:35:24 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-11-09 14:35:24 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-11-09 14:35:24 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-11-09 14:35:24 ----A---- C:\WINDOWS\system32\FrameServer.dll
2016-11-09 14:35:24 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-11-09 14:35:23 ----A---- C:\WINDOWS\system32\indexeddbserver.dll
2016-11-09 14:35:22 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-11-09 14:35:21 ----A---- C:\WINDOWS\system32\wininet.dll
2016-11-09 14:35:21 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2016-11-09 14:35:21 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-11-09 14:35:21 ----A---- C:\WINDOWS\system32\cdp.dll
2016-11-09 14:35:21 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-11-09 14:35:20 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-11-09 14:35:18 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-11-09 14:35:18 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-11-09 14:35:17 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2016-11-09 14:35:17 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-11-09 14:35:16 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2016-11-09 14:35:16 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-11-09 14:35:16 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-11-09 14:35:16 ----A---- C:\WINDOWS\system32\ErrorDetails.dll
2016-11-09 14:35:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2016-11-09 14:35:15 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-11-09 14:35:14 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-11-09 14:35:14 ----A---- C:\WINDOWS\system32\mstsc.exe
2016-11-09 14:35:14 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-11-09 14:35:13 ----A---- C:\WINDOWS\SYSWOW64\UIAnimation.dll
2016-11-09 14:35:13 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2016-11-09 14:35:13 ----A---- C:\WINDOWS\SYSWOW64\input.dll
2016-11-09 14:35:13 ----A---- C:\WINDOWS\system32\wifitask.exe
2016-11-09 14:35:12 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\SYSWOW64\ErrorDetailsUpdate.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\SYSWOW64\ErrorDetails.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\iepeers.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\ErrorDetailsUpdate.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\dxtrans.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\BcastDVRHelper.dll
2016-11-09 14:35:12 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-11-09 14:35:11 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2016-11-09 14:35:11 ----A---- C:\WINDOWS\system32\winresume.exe
2016-11-09 14:35:11 ----A---- C:\WINDOWS\system32\winload.exe
2016-11-09 14:35:10 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-11-09 14:35:10 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2016-11-09 14:35:10 ----A---- C:\WINDOWS\SYSWOW64\mfsensorgroup.dll
2016-11-09 14:35:10 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-11-09 14:35:10 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-11-09 14:35:10 ----A---- C:\WINDOWS\system32\msinfo32.exe
2016-11-09 14:35:09 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-11-09 14:35:09 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2016-11-09 14:35:09 ----A---- C:\WINDOWS\SYSWOW64\msinfo32.exe
2016-11-09 14:35:09 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2016-11-09 14:35:09 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-11-09 14:35:09 ----A---- C:\WINDOWS\system32\msctf.dll
2016-11-09 14:35:08 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-11-09 14:35:07 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-11-09 14:35:07 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-11-09 14:35:07 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-11-09 14:35:07 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-11-09 14:35:07 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-11-09 14:35:07 ----A---- C:\WINDOWS\system32\d3d9.dll
2016-11-09 14:35:06 ----A---- C:\WINDOWS\system32\gdi32full.dll
2016-11-09 14:35:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-11-09 14:35:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-11-09 14:35:05 ----A---- C:\WINDOWS\SYSWOW64\efsext.dll
2016-11-09 14:35:05 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-11-09 14:35:05 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2016-11-09 14:35:05 ----A---- C:\WINDOWS\system32\NetworkUXBroker.dll
2016-11-09 14:35:05 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-11-09 14:35:05 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-11-09 14:35:05 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\SYSWOW64\BcastDVRHelper.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\UIAnimation.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2016-11-09 14:35:04 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-11-09 14:35:03 ----A---- C:\WINDOWS\SYSWOW64\comctl32.dll
2016-11-09 14:35:03 ----A---- C:\WINDOWS\system32\win32k.sys
2016-11-09 14:35:03 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2016-11-09 14:35:03 ----A---- C:\WINDOWS\system32\input.dll
2016-11-09 14:35:03 ----A---- C:\WINDOWS\system32\drivers\iorate.sys
2016-11-09 14:35:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2016-11-09 14:35:02 ----A---- C:\WINDOWS\SYSWOW64\ddraw.dll
2016-11-09 14:35:02 ----A---- C:\WINDOWS\SYSWOW64\d3d8.dll
2016-11-09 14:35:02 ----A---- C:\WINDOWS\system32\wininetlui.dll
2016-11-09 14:35:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BlockedShutdown.dll
2016-11-09 14:35:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2016-11-09 14:35:00 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2016-11-09 14:35:00 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-11-07 13:48:52 ----D---- C:\Program Files (x86)\Origin Games
2016-11-07 13:46:32 ----D---- C:\Users\admin\AppData\Roaming\Origin
2016-11-07 13:46:14 ----AD---- C:\Program Files (x86)\Origin
2016-11-07 13:34:43 ----D---- C:\ProgramData\Origin
2016-11-01 23:06:06 ----A---- C:\WINDOWS\system32\igdumdim64.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\SYSWOW64\iglhsip32.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\SYSWOW64\iglhcp32.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\SYSWOW64\igfxcmrt32.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\SYSWOW64\igfx11cmrt32.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\SYSWOW64\igd11dxva32.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\system32\iglhsip64.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\system32\iglhcp64.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\system32\igfxexps.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\system32\igfxcmrt64.dll
2016-11-01 23:06:02 ----A---- C:\WINDOWS\system32\igfx11cmrt64.dll
2016-11-01 23:06:00 ----A---- C:\WINDOWS\SYSWOW64\igd10iumd32.dll
2016-11-01 23:06:00 ----A---- C:\WINDOWS\system32\igdmd64.dll
2016-11-01 23:05:58 ----A---- C:\WINDOWS\SYSWOW64\igdmd32.dll
2016-11-01 23:05:58 ----A---- C:\WINDOWS\SYSWOW64\igdde32.dll
2016-11-01 23:05:58 ----A---- C:\WINDOWS\SYSWOW64\igc32.dll
2016-11-01 23:05:58 ----A---- C:\WINDOWS\system32\igdde64.dll
2016-11-01 23:05:58 ----A---- C:\WINDOWS\system32\igd12umd64.dll
2016-11-01 23:05:58 ----A---- C:\WINDOWS\system32\igc64.dll
2016-11-01 23:05:56 ----A---- C:\WINDOWS\SYSWOW64\igd12umd32.dll
2016-11-01 23:05:56 ----A---- C:\WINDOWS\SYSWOW64\igd10idpp32.dll
2016-11-01 23:05:56 ----A---- C:\WINDOWS\system32\igd10idpp64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\IntelOpenCL32.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\IntelCpHeciSvc.exe
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\Intel_OpenCL_ICD32.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\igfxexps32.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\igfxcmjit32.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\igdrcl32.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\SYSWOW64\igdmcl32.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\IntelWiDiUMS64.exe
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\IntelWiDiMCComp64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\IntelOpenCL64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\IntelCpHDCPSvc.exe
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxSDKLibv2_0.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxSDKLib.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxSDK.exe
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxOSP.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxLHMLib.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxext.exe
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxEMLibv2_0.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxEMLib.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxDTCM.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxDILibv2_0.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxDILib.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxDHLibv2_0.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxDHLib.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxCUIServicePS.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxCoIn_v4531.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igfxcmjit64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igdrcl64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\igdmcl64.dll
2016-11-01 23:05:26 ----A---- C:\WINDOWS\system32\common_clang64.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\SYSWOW64\igdfcl32.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\SYSWOW64\igdbcl32.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\SYSWOW64\igdail32.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\SYSWOW64\ig75icd32.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\SYSWOW64\common_clang32.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\igdfcl64.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\igdbcl64.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\igdail64.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\ig75icd64.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\Gfxv4_0.exe
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\Gfxv2_0.exe
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\GfxUIEx.exe
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\GfxResources.dll
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\DPTopologyApp.exe
2016-11-01 23:05:24 ----A---- C:\WINDOWS\system32\difx64.exe
2016-11-01 01:27:11 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe
2016-10-28 21:22:41 ----A---- C:\WINDOWS\system32\nvdispgenco6437570.dll
2016-10-28 21:22:41 ----A---- C:\WINDOWS\system32\nvdispco6437570.dll
2016-10-28 19:39:07 ----D---- C:\Users\admin\AppData\Roaming\eve Updater
2016-10-28 14:34:06 ----DC---- C:\WINDOWS\Panther
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\wmpmde.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\wlancfg.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsDesktopEngine.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\TempSignedLicenseExchangeTask.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncPolicy.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\MSAC3ENC.DLL
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\LicenseManagerApi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\findnetprinters.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\dmenrollengine.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\dialclient.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\d3d12SDKLayers.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\CloudBackupSettings.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wwanmm.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wwanconn.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wpnprv.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wpninprc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wpncore.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wpnapps.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\wmpmde.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\VsGraphicsDesktopEngine.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\SettingSyncPolicy.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\pwcreator.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\msvproc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\MSAC3ENC.DLL
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfps.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\mfksproxy.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\manage-bde.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\LsaIso.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fvewiz.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fveui.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fveprompt.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fvenotify.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fvecpl.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fveapibase.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\encapi.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\devenum.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\daxexec.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\d3d12SDKLayers.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\CloudBackupSettings.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\bdeunlock.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\bdeui.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\bdesvc.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\bdechangepin.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\baaupdate.exe
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-10-28 14:28:30 ----A---- C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\wmpshell.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\wmploc.DLL
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\wmpeffects.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\wmpdxm.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\spwmp.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\NetworkCollectionAgent.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\Chakrathunk.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\Geolocation.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\eappprxy.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\dxmasf.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\ws2_32.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wmpshell.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wmploc.DLL
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wmpeffects.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlansec.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlancfg.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wlanapi.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\WiFiConfigSP.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\wfdprov.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\sspicli.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\spwmp.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\pnidui.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\NetworkCollectionAgent.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\mprdim.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\mprddm.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\lsass.exe
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\iesetup.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\iernonce.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\Chakrathunk.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\Geolocation.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\evr.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\dxmasf.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\dlnashext.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\deviceassociation.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\dasHost.exe
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\das.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\csrsrv.dll
2016-10-28 14:28:25 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Perception.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\systemcpl.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\credprovs.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\credprovhost.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\autoplay.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\Windows.Devices.Perception.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\msxml6r.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2016-10-28 14:28:22 ----A---- C:\WINDOWS\system32\drivers\cmimcext.sys
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\wsp_sr.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\ws2_32.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\tcpipcfg.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\sppcext.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\sppc.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\slcext.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\slc.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\pwrshplugin.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\netiougc.exe
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\DscCoreConfProv.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\credprovslegacy.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\ConfigureExpandedStorage.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\adsmsext.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\winsrv.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\tsmf.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\taskbarcpl.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\SessEnv.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\rshx32.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\mspaint.exe
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\lsm.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\fhcpl.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\Family.SyncEngine.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\Family.Client.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\Family.Authentication.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\Display.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\DevicePairingFolder.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\credprovslegacy.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\autoplay.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\aclui.dll
2016-10-28 14:28:18 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\wpx.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-10-28 14:28:16 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll