VIRY.CZ

Zdravím. Nedávno jsem přešel z W7 na W10 a do teď jsem se potýkal s drobnými nedostatky co se týká kompatibility W10 vůči všemu ostatnímu.
Chtěl jsem dát Avastu přednost před Windows Deffenderem, což jsem usoudil, že vzhledem ke kompatibilitě bude ideální si tam nechat Windows Deffender a popřípadě používat Malwarebites a Adwcleaner.
Avast jsem uninstaloval, ale po startu mi vždy najede proces: Avast Backup. Vzhledem k tomu, že s W10 nemám zkušenosti, tak jsem si určitě čerstvý OS zbytečně zaneřádil..
Pro to bych rád poprosil o kontrolu a zda je vše aspoň trochu tak jak to má být, předem děkuji.

Logfile of random's system information tool 1.10 (written by random/random)
Run by kasta at 2017-01-30 17:07:50
Microsoft Windows 10 Enterprise
System drive C: has 850 GB (89%) free of 953 GB
Total RAM: 4095 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:07:52, on 30.01.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0000)
Boot mode: Normal

Running processes:
C:\Program Files\trend micro\kasta.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Developer Tools Service (DeveloperToolsService) - Unknown owner - C:\WINDOWS\System32\DeveloperToolsSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6079 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\atiesrxx.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a39ba03a-9a50-4f18-b6b7-b116a676ee3b -SystemEventPortName:HostProcess-6a543087-acb2-4306-86f9-344385e0f190 -IoCancelEventPortName:HostProcess-3539b213-fc32-4c00-a959-029ecbc3cbfe -NonStateChangingEventPortName:HostProcess-d501d3ed-7148-431e-95f6-c91ef916b367 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d3be7857-c0e0-48c3-828d-e29dccff2e8f -DeviceGroupId:WpdFsGroup
atieclxx
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\System32\svchost.exe -k utcsvc

dashost.exe {51dd9a6f-8432-44d6-82c0126bdcdd48c6}
C:\WINDOWS\system32\svchost.exe -k SshBrokerGroup
C:\WINDOWS\system32\svchost.exe -k SshProxyGroup
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe"
"C:\Program Files\Windows Defender\\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey B3E86A93-2EE6-B5F2-22E6-154C0FD96989 -Reinvoke
"C:\Program Files\CCleaner\CCleaner64.exe" /monitor
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
dashost.exe {30642272-b69a-4d08-a14d7ba3e0a1f857}
dashost.exe {7e33d923-9e7d-4fde-bce056bc602a63d0}
C:\WINDOWS\system32\DllHost.exe /Processid:{49F6E667-6658-4BD1-9DE9-6AF87F9FAF85}
"C:\WINDOWS\system32\SystemSettingsAdminFlows.exe" OptionalFeaturesAdminHelper
C:\WINDOWS\system32\AUDIODG.EXE 0x76c
C:\WINDOWS\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\kasta\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\kasta\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=56.0.2924.76 --initial-client-data=0x1d0,0x1d4,0x1d8,0x1cc,0x1dc,0x7ffbce351160,0x7ffbce351140,0x7ffbce351118
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=3196 --on-initialized-event-handle=584 --parent-handle=592 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features=AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DefaultEnableGpuRasterization<DefaultEnableGpuRasterization,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*EnableSyncClientToServerCompression<EnableSyncClientToServerCompression,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,MetricsReporting<MetricsAndCrashSampling,*NegotiateTLS13<TLS13Negotiation,*PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,*TranslateUI2016Q2<TranslateUI2016Q2 --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/LanguageInstall/AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/UnclickedSearchResults/ClientSideDetectionModel/Model0/DataReductionProxyUseQuic/Control9/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DefaultEnableGpuRasterization/Default/DisableFirstRunAutoImport/Default/DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableSyncClientToServerCompression/Default/ExtensionDeveloperModeWarning/Enabled/Html5ByDefault/Default/InstanceID/Enabled/MarkNonSecureAs/show-non-secure-passwords-cc-ui/MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/InReportingSample/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/*PersistentHistograms/Default/PluginPowerSaverTiny/Enabled2/*QUIC/EnabledAsyncSigning/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityChip/Enabled/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Enable3/StrictSecureCookies/Enabled/SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Enabled/*TLS13Negotiation/Default/TranslateServerStudy/Default/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_33/*UMA-Uniformity-Trial-10-Percent/default/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/WebFontsInterventionV2/Default/ --supports-dual-gpus=false --gpu-driver-bug-workarounds=7,19,20,23,26,40,71 --gpu-vendor-id=0x1002 --gpu-device-id=0x6779 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=15.200.1062.1004 --gpu-driver-date=8-3-2015 --service-request-channel-token=B92A6C24B569CE3F0F21549601007619 --mojo-platform-channel-handle=1248 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DefaultEnableGpuRasterization<DefaultEnableGpuRasterization,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*EnableSyncClientToServerCompression<EnableSyncClientToServerCompression,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,MetricsReporting<MetricsAndCrashSampling,*NegotiateTLS13<TLS13Negotiation,*PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,*TranslateUI2016Q2<TranslateUI2016Q2 --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/LanguageInstall/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/UnclickedSearchResults/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control9/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DefaultEnableGpuRasterization/Default/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/*EnableSyncClientToServerCompression/Default/ExtensionDeveloperModeWarning/Enabled/*Html5ByDefault/Default/*InstanceID/Enabled/MarkNonSecureAs/show-non-secure-passwords-cc-ui/*MediaFoundationH264Encoding/Default/*MetricsAndCrashSampling/InReportingSample/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/Default/PluginPowerSaverTiny/Enabled2/*QUIC/EnabledAsyncSigning/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Enable3/*StrictSecureCookies/Enabled/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Enabled/*TLS13Negotiation/Default/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_33/*UMA-Uniformity-Trial-10-Percent/default/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*WebFontsInterventionV2/Default/ --primordial-pipe-token=E51C26FA69D8094A0DD34467FC52783D --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=E51C26FA69D8094A0DD34467FC52783D --renderer-client-id=9 --mojo-platform-channel-handle=2540 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DefaultEnableGpuRasterization<DefaultEnableGpuRasterization,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*EnableSyncClientToServerCompression<EnableSyncClientToServerCompression,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,MetricsReporting<MetricsAndCrashSampling,*NegotiateTLS13<TLS13Negotiation,*PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,*TranslateUI2016Q2<TranslateUI2016Q2 --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/LanguageInstall/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/UnclickedSearchResults/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control9/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DefaultEnableGpuRasterization/Default/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/*EnableSyncClientToServerCompression/Default/ExtensionDeveloperModeWarning/Enabled/*Html5ByDefault/Default/*InstanceID/Enabled/MarkNonSecureAs/show-non-secure-passwords-cc-ui/*MediaFoundationH264Encoding/Default/*MetricsAndCrashSampling/InReportingSample/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/Default/PluginPowerSaverTiny/Enabled2/*QUIC/EnabledAsyncSigning/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Enable3/*StrictSecureCookies/Enabled/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Enabled/*TLS13Negotiation/Default/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_33/*UMA-Uniformity-Trial-10-Percent/default/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*WebFontsInterventionV2/Default/ --primordial-pipe-token=E9E5BC8EFDABA641C44E356BF60313B5 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=E9E5BC8EFDABA641C44E356BF60313B5 --renderer-client-id=27 --mojo-platform-channel-handle=5376 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DefaultEnableGpuRasterization<DefaultEnableGpuRasterization,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*EnableSyncClientToServerCompression<EnableSyncClientToServerCompression,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,MetricsReporting<MetricsAndCrashSampling,*NegotiateTLS13<TLS13Negotiation,*PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,*TranslateUI2016Q2<TranslateUI2016Q2 --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/LanguageInstall/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/UnclickedSearchResults/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control9/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DefaultEnableGpuRasterization/Default/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/*EnableSyncClientToServerCompression/Default/ExtensionDeveloperModeWarning/Enabled/*Html5ByDefault/Default/*InstanceID/Enabled/*MarkNonSecureAs/show-non-secure-passwords-cc-ui/*MediaFoundationH264Encoding/Default/*MetricsAndCrashSampling/InReportingSample/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/Default/PluginPowerSaverTiny/Enabled2/*QUIC/EnabledAsyncSigning/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Enable3/*StrictSecureCookies/Enabled/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Enabled/*TLS13Negotiation/Default/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_33/*UMA-Uniformity-Trial-10-Percent/default/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*WebFontsInterventionV2/Default/ --primordial-pipe-token=CC336E9A4B5D0D1B84ABEDBFBF9D28CA --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=CC336E9A4B5D0D1B84ABEDBFBF9D28CA --renderer-client-id=29 --mojo-platform-channel-handle=9520 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DefaultEnableGpuRasterization<DefaultEnableGpuRasterization,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*EnableSyncClientToServerCompression<EnableSyncClientToServerCompression,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,MetricsReporting<MetricsAndCrashSampling,*NegotiateTLS13<TLS13Negotiation,*PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,*TranslateUI2016Q2<TranslateUI2016Q2 --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/LanguageInstall/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/UnclickedSearchResults/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control9/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DefaultEnableGpuRasterization/Default/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/*EnableSyncClientToServerCompression/Default/ExtensionDeveloperModeWarning/Enabled/*Html5ByDefault/Default/*InstanceID/Enabled/*MarkNonSecureAs/show-non-secure-passwords-cc-ui/*MediaFoundationH264Encoding/Default/*MetricsAndCrashSampling/InReportingSample/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/Default/PluginPowerSaverTiny/Enabled2/*QUIC/EnabledAsyncSigning/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Enable3/*StrictSecureCookies/Enabled/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Enabled/*TLS13Negotiation/Default/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_33/*UMA-Uniformity-Trial-10-Percent/default/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*WebFontsInterventionV2/Default/ --primordial-pipe-token=DC313D4B1F61955962BCE390C6B30775 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=DC313D4B1F61955962BCE390C6B30775 --renderer-client-id=37 --mojo-platform-channel-handle=8040 /prefetch:1
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\kasta\Downloads\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsDefender"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-01-29 631808]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-12-21 9292504]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-08-04 767176]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"PromptOnSecureDesktop"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-01-30 16:52:59 ----D---- C:\rsit
2017-01-30 16:52:59 ----D---- C:\Program Files\trend micro
2017-01-30 15:43:01 ----D---- C:\WINDOWS\LastGood.Tmp
2017-01-30 15:42:21 ----D---- C:\WINDOWS\system32\DAX3
2017-01-30 15:42:21 ----D---- C:\WINDOWS\system32\DAX2
2017-01-30 15:42:21 ----D---- C:\ProgramData\Audyssey Labs
2017-01-30 15:40:40 ----HD---- C:\Program Files (x86)\Temp
2017-01-30 15:27:31 ----D---- C:\Users\kasta\AppData\Roaming\AMD
2017-01-30 11:18:22 ----D---- C:\Users\kasta\AppData\Roaming\Wargaming.net
2017-01-30 00:40:52 ----D---- C:\WINDOWS\Microsoft Antimalware
2017-01-30 00:35:30 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2017-01-30 00:35:27 ----D---- C:\Program Files\Reference Assemblies
2017-01-30 00:35:27 ----D---- C:\Program Files\MSBuild
2017-01-30 00:35:27 ----D---- C:\Program Files (x86)\Reference Assemblies
2017-01-30 00:35:27 ----D---- C:\Program Files (x86)\MSBuild
2017-01-30 00:34:34 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2017-01-30 00:34:34 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2017-01-30 00:34:34 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-01-30 00:34:31 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2017-01-30 00:34:31 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-01-30 00:34:31 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-01-30 00:10:04 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2017-01-29 22:58:43 ----D---- C:\Program Files\CPUID
2017-01-29 21:22:13 ----A---- C:\WINDOWS\SYSWOW64\SET5513.tmp
2017-01-29 21:22:13 ----A---- C:\WINDOWS\system32\SET58BD.tmp
2017-01-29 20:32:12 ----D---- C:\ProgramData\Riot Games
2017-01-29 20:00:37 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_7.dll
2017-01-29 20:00:37 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_5.dll
2017-01-29 20:00:37 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_7.dll
2017-01-29 20:00:37 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2017-01-29 20:00:37 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2017-01-29 20:00:37 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2017-01-29 20:00:36 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_43.dll
2017-01-29 20:00:36 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_43.dll
2017-01-29 20:00:36 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_43.dll
2017-01-29 20:00:36 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_43.dll
2017-01-29 20:00:36 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_43.dll
2017-01-29 20:00:36 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2017-01-29 20:00:36 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2017-01-29 20:00:36 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2017-01-29 20:00:36 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2017-01-29 20:00:36 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2017-01-29 20:00:35 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_6.dll
2017-01-29 20:00:35 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_5.dll
2017-01-29 20:00:35 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_4.dll
2017-01-29 20:00:35 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_6.dll
2017-01-29 20:00:35 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_5.dll
2017-01-29 20:00:35 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_7.dll
2017-01-29 20:00:35 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2017-01-29 20:00:35 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2017-01-29 20:00:35 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2017-01-29 20:00:35 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2017-01-29 20:00:35 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2017-01-29 20:00:35 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2017-01-29 20:00:34 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_42.dll
2017-01-29 20:00:34 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_42.dll
2017-01-29 20:00:34 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_42.dll
2017-01-29 20:00:34 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_42.dll
2017-01-29 20:00:34 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_42.dll
2017-01-29 20:00:34 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2017-01-29 20:00:34 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2017-01-29 20:00:34 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2017-01-29 20:00:34 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2017-01-29 20:00:34 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2017-01-29 20:00:33 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_4.dll
2017-01-29 20:00:33 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_3.dll
2017-01-29 20:00:33 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_41.dll
2017-01-29 20:00:33 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_41.dll
2017-01-29 20:00:33 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_41.dll
2017-01-29 20:00:33 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2017-01-29 20:00:33 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2017-01-29 20:00:33 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2017-01-29 20:00:33 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2017-01-29 20:00:33 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2017-01-29 20:00:32 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_4.dll
2017-01-29 20:00:32 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_6.dll
2017-01-29 20:00:32 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_40.dll
2017-01-29 20:00:32 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_40.dll
2017-01-29 20:00:32 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_40.dll
2017-01-29 20:00:32 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2017-01-29 20:00:32 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2017-01-29 20:00:32 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2017-01-29 20:00:32 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2017-01-29 20:00:32 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_3.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_2.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_3.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_2.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_5.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2017-01-29 20:00:31 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2017-01-29 20:00:30 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_1.dll
2017-01-29 20:00:30 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_0.dll
2017-01-29 20:00:30 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_1.dll
2017-01-29 20:00:30 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2017-01-29 20:00:30 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2017-01-29 20:00:30 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2017-01-29 20:00:30 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2017-01-29 20:00:29 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_0.dll
2017-01-29 20:00:29 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_0.dll
2017-01-29 20:00:29 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_4.dll
2017-01-29 20:00:29 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_38.dll
2017-01-29 20:00:29 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_38.dll
2017-01-29 20:00:29 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_38.dll
2017-01-29 20:00:29 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2017-01-29 20:00:29 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2017-01-29 20:00:29 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2017-01-29 20:00:29 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2017-01-29 20:00:29 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2017-01-29 20:00:29 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2017-01-29 20:00:28 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_10.dll
2017-01-29 20:00:28 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_3.dll
2017-01-29 20:00:28 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_37.dll
2017-01-29 20:00:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_37.dll
2017-01-29 20:00:28 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_37.dll
2017-01-29 20:00:28 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2017-01-29 20:00:28 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2017-01-29 20:00:28 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2017-01-29 20:00:28 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2017-01-29 20:00:28 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2017-01-29 20:00:27 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_9.dll
2017-01-29 20:00:27 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_36.dll
2017-01-29 20:00:27 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_36.dll
2017-01-29 20:00:27 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_36.dll
2017-01-29 20:00:27 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2017-01-29 20:00:27 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2017-01-29 20:00:27 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2017-01-29 20:00:27 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_8.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_2.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_35.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_34.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_35.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_34.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_35.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_34.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2017-01-29 20:00:26 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2017-01-29 20:00:25 ----A---- C:\WINDOWS\SYSWOW64\xinput1_3.dll
2017-01-29 20:00:25 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_7.dll
2017-01-29 20:00:25 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_6.dll
2017-01-29 20:00:25 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_33.dll
2017-01-29 20:00:25 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_33.dll
2017-01-29 20:00:25 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_33.dll
2017-01-29 20:00:25 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2017-01-29 20:00:25 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2017-01-29 20:00:25 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2017-01-29 20:00:25 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2017-01-29 20:00:25 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2017-01-29 20:00:25 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2017-01-29 20:00:24 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_5.dll
2017-01-29 20:00:24 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_4.dll
2017-01-29 20:00:24 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_1.dll
2017-01-29 20:00:24 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_32.dll
2017-01-29 20:00:24 ----A---- C:\WINDOWS\SYSWOW64\d3dx10.dll
2017-01-29 20:00:24 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2017-01-29 20:00:24 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2017-01-29 20:00:24 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2017-01-29 20:00:24 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2017-01-29 20:00:24 ----A---- C:\WINDOWS\system32\d3dx10.dll
2017-01-29 20:00:23 ----A---- C:\WINDOWS\SYSWOW64\xinput1_2.dll
2017-01-29 20:00:23 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_3.dll
2017-01-29 20:00:23 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_2.dll
2017-01-29 20:00:23 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_31.dll
2017-01-29 20:00:23 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2017-01-29 20:00:23 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2017-01-29 20:00:23 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2017-01-29 20:00:23 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2017-01-29 20:00:22 ----A---- C:\WINDOWS\SYSWOW64\xinput1_1.dll
2017-01-29 20:00:22 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_1.dll
2017-01-29 20:00:22 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_30.dll
2017-01-29 20:00:22 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2017-01-29 20:00:22 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2017-01-29 20:00:22 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2017-01-29 20:00:21 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_0.dll
2017-01-29 20:00:21 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_0.dll
2017-01-29 20:00:21 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_29.dll
2017-01-29 20:00:21 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_28.dll
2017-01-29 20:00:21 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2017-01-29 20:00:21 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2017-01-29 20:00:21 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2017-01-29 20:00:21 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2017-01-29 20:00:20 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_27.dll
2017-01-29 20:00:20 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_26.dll
2017-01-29 20:00:20 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_25.dll
2017-01-29 20:00:20 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2017-01-29 20:00:20 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2017-01-29 20:00:20 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2017-01-29 20:00:19 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_24.dll
2017-01-29 20:00:19 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2017-01-29 19:58:42 ----HD---- C:\WINDOWS\msdownld.tmp
2017-01-29 19:58:41 ----D---- C:\WINDOWS\SYSWOW64\directx
2017-01-29 19:58:39 ----D---- C:\Games
2017-01-29 19:31:56 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_2.dll
2017-01-29 19:31:56 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_1.dll
2017-01-29 19:31:56 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_39.dll
2017-01-29 19:31:56 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_39.dll
2017-01-29 19:31:56 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_39.dll
2017-01-29 19:30:39 ----D---- C:\Gamesy
2017-01-29 19:30:18 ----D---- C:\Users\kasta\AppData\Roaming\Riot Games
2017-01-29 18:33:59 ----A---- C:\WINDOWS\system32\WebManagement.exe
2017-01-29 18:33:54 ----A---- C:\WINDOWS\system32\wdp.dll
2017-01-29 18:33:53 ----A---- C:\WINDOWS\system32\SshSftp.exe
2017-01-29 18:33:53 ----A---- C:\WINDOWS\system32\SshSession.exe
2017-01-29 18:33:53 ----A---- C:\WINDOWS\system32\SshProxy.dll
2017-01-29 18:33:53 ----A---- C:\WINDOWS\system32\SshBroker.dll
2017-01-29 18:33:37 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2017-01-29 18:33:36 ----A---- C:\WINDOWS\system32\poqexec.exe
2017-01-29 18:04:47 ----D---- C:\Program Files\Common Files\AV
2017-01-29 18:03:32 ----D---- C:\ProgramData\AVAST Software
2017-01-29 16:48:18 ----RSD---- C:\WINDOWS\system32\WindowsDevicePortal
2017-01-29 16:48:18 ----RD---- C:\WINDOWS\WebManagement
2017-01-29 16:48:14 ----A---- C:\WINDOWS\system32\DevToolsLauncher.exe
2017-01-29 16:48:14 ----A---- C:\WINDOWS\system32\DeveloperToolsSvc.exe
2017-01-29 16:48:14 ----A---- C:\WINDOWS\system32\DeveloperTools.ProxyStub.dll
2017-01-29 16:48:14 ----A---- C:\WINDOWS\system32\DeployUtil.exe
2017-01-29 16:48:14 ----A---- C:\WINDOWS\system32\debugregsvcapi.dll
2017-01-29 16:48:14 ----A---- C:\WINDOWS\system32\debugregsvc.dll
2017-01-29 16:34:59 ----D---- C:\Program Files\CCleaner
2017-01-29 16:28:43 ----D---- C:\ProgramData\ATI
2017-01-29 16:21:08 ----D---- C:\Users\kasta\AppData\Roaming\PlaysTV
2017-01-29 16:20:15 ----D---- C:\Users\kasta\AppData\Roaming\library_dir
2017-01-29 16:20:04 ----D---- C:\Program Files (x86)\Raptr Inc
2017-01-29 16:19:30 ----D---- C:\Users\kasta\AppData\Roaming\Raptr
2017-01-29 16:19:30 ----D---- C:\Program Files (x86)\Raptr
2017-01-29 16:19:10 ----D---- C:\Program Files (x86)\AMD
2017-01-29 16:05:11 ----D---- C:\ProgramData\Microsoft OneDrive
2017-01-29 15:47:07 ----D---- C:\ProgramData\USOShared
2017-01-29 15:43:54 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2017-01-29 15:41:20 ----ASH---- C:\hiberfil.sys
2017-01-29 15:38:20 ----SD---- C:\Users\kasta\AppData\Roaming\Microsoft
2017-01-29 15:36:38 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2017-01-29 15:35:58 ----D---- C:\Program Files (x86)\ATI Technologies
2017-01-29 15:35:42 ----D---- C:\ProgramData\Package Cache
2017-01-29 15:35:15 ----D---- C:\Program Files\Common Files\ATI Technologies
2017-01-29 15:35:08 ----D---- C:\Program Files\AMD
2017-01-29 15:35:04 ----AS---- C:\WINDOWS\bootstat.dat
2017-01-29 15:34:02 ----D---- C:\WINDOWS\system32\SleepStudy
2017-01-29 15:34:02 ----D---- C:\WINDOWS\ServiceProfiles
2017-01-29 15:34:02 ----D---- C:\WINDOWS\Prefetch
2017-01-29 15:33:54 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-29 15:33:03 ----SHD---- C:\Recovery
2017-01-29 15:32:54 ----DC---- C:\WINDOWS\Panther
2017-01-29 15:30:50 ----D---- C:\Windows.old
2017-01-29 15:27:39 ----A---- C:\WINDOWS\SYSWOW64\TempSignedLicenseExchangeTask.dll
2017-01-29 15:27:39 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2017-01-29 15:27:39 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2017-01-29 15:27:39 ----A---- C:\WINDOWS\SYSWOW64\MSAC3ENC.DLL
2017-01-29 15:27:39 ----A---- C:\WINDOWS\SYSWOW64\LicenseManagerApi.dll
2017-01-29 15:27:39 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2017-01-29 15:27:39 ----A---- C:\WINDOWS\SYSWOW64\CloudBackupSettings.dll
2017-01-29 15:27:39 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2017-01-29 15:27:39 ----A---- C:\WINDOWS\system32\MSAC3ENC.DLL
2017-01-29 15:27:39 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\rdpencom.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\dmenrollengine.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\BcastDVRHelper.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\system32\mfksproxy.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\system32\encapi.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\system32\devenum.dll
2017-01-29 15:27:37 ----A---- C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncPolicy.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\MSVP9DEC.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\mfaudiocnv.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\dialclient.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\SYSWOW64\CloudStorageWizard.exe
2017-01-29 15:27:36 ----A---- C:\WINDOWS\system32\rdpshell.exe
2017-01-29 15:27:36 ----A---- C:\WINDOWS\system32\rdpinit.exe
2017-01-29 15:27:36 ----A---- C:\WINDOWS\system32\MSVP9DEC.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2017-01-29 15:27:36 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\SYSWOW64\RTWorkQ.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\SYSWOW64\mfsensorgroup.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\msvproc.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfsvr.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfps.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfplat.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfcore.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfaudiocnv.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\FSClient.dll
2017-01-29 15:27:35 ----A---- C:\WINDOWS\system32\FrameServer.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2017-01-29 15:27:34 ----A---- C:\WINDOWS\SYSWOW64\wmpmde.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\wwansvc.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\wwanmm.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\wwanconn.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\wmpmde.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\Windows.Media.Devices.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\SettingSyncPolicy.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\SettingSync.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\RTWorkQ.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\LsaIso.exe
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\ListSvc.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\CloudStorageWizard.exe
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\audiosrv.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\AudioSes.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\AudioEng.dll
2017-01-29 15:27:34 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-01-29 15:27:33 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\manage-bde.exe
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\fvewiz.dll
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\fveui.dll
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\fveprompt.exe
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\fvenotify.exe
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\fvecpl.dll
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\fveapibase.dll
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\fveapi.dll
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\drivers\bowser.sys
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\bdeunlock.exe
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\bdeui.dll
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\bdesvc.dll
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\bdechangepin.exe
2017-01-29 15:27:33 ----A---- C:\WINDOWS\system32\baaupdate.exe
2017-01-29 15:27:32 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2017-01-29 15:27:32 ----A---- C:\WINDOWS\system32\wpnprv.dll
2017-01-29 15:27:32 ----A---- C:\WINDOWS\system32\wpninprc.dll
2017-01-29 15:27:32 ----A---- C:\WINDOWS\system32\rdpudd.dll
2017-01-29 15:27:32 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\SYSWOW64\wlancfg.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\SYSWOW64\findnetprinters.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\wpncore.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\wpnapps.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\WpcTok.exe
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\WpcRefreshTask.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\wlansvc.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\wlansec.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\wlanapi.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\WiFiConfigSP.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\wfdprov.dll
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\pwcreator.exe
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2017-01-29 15:27:30 ----A---- C:\WINDOWS\system32\daxexec.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\SYSWOW64\eappprxy.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\wlancfg.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\nshwfp.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\mprdim.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\mprddm.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\deviceassociation.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\dasHost.exe
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\das.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\cscui.dll
2017-01-29 15:27:29 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2017-01-29 15:27:28 ----A---- C:\WINDOWS\SYSWOW64\wmpshell.dll
2017-01-29 15:27:28 ----A---- C:\WINDOWS\SYSWOW64\wmpdxm.dll
2017-01-29 15:27:28 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2017-01-29 15:27:28 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2017-01-29 15:27:28 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2017-01-29 15:27:28 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2017-01-29 15:27:28 ----A---- C:\WINDOWS\system32\wmpshell.dll
2017-01-29 15:27:28 ----A---- C:\WINDOWS\system32\wmploc.DLL
2017-01-29 15:27:28 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2017-01-29 15:27:28 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2017-01-29 15:27:28 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2017-01-29 15:27:28 ----A---- C:\WINDOWS\system32\pnidui.dll
2017-01-29 15:27:28 ----A---- C:\WINDOWS\system32\MFPlay.dll
2017-01-29 15:27:28 ----A---- C:\WINDOWS\system32\evr.dll
2017-01-29 15:27:28 ----A---- C:\WINDOWS\system32\dlnashext.dll
2017-01-29 15:27:27 ----A---- C:\WINDOWS\SYSWOW64\wmploc.DLL
2017-01-29 15:27:27 ----A---- C:\WINDOWS\SYSWOW64\wmpeffects.dll
2017-01-29 15:27:27 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2017-01-29 15:27:27 ----A---- C:\WINDOWS\SYSWOW64\spwmp.dll
2017-01-29 15:27:27 ----A---- C:\WINDOWS\SYSWOW64\dxmasf.dll
2017-01-29 15:27:27 ----A---- C:\WINDOWS\system32\wmpps.dll
2017-01-29 15:27:27 ----A---- C:\WINDOWS\system32\wmpeffects.dll
2017-01-29 15:27:27 ----A---- C:\WINDOWS\system32\wmp.dll
2017-01-29 15:27:27 ----A---- C:\WINDOWS\system32\spwmp.dll
2017-01-29 15:27:27 ----A---- C:\WINDOWS\system32\dxmasf.dll
2017-01-29 15:27:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2017-01-29 15:27:26 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2017-01-29 15:27:26 ----A---- C:\WINDOWS\SYSWOW64\Chakrathunk.dll
2017-01-29 15:27:26 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2017-01-29 15:27:26 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2017-01-29 15:27:26 ----A---- C:\WINDOWS\system32\Chakrathunk.dll
2017-01-29 15:27:25 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2017-01-29 15:27:25 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2017-01-29 15:27:25 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2017-01-29 15:27:25 ----A---- C:\WINDOWS\system32\mshtmled.dll
2017-01-29 15:27:25 ----A---- C:\WINDOWS\system32\indexeddbserver.dll
2017-01-29 15:27:25 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2017-01-29 15:27:25 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2017-01-29 15:27:25 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-01-29 15:27:25 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-01-29 15:27:25 ----A---- C:\WINDOWS\system32\dxtrans.dll
2017-01-29 15:27:24 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-01-29 15:27:24 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2017-01-29 15:27:24 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-01-29 15:27:24 ----A---- C:\WINDOWS\SYSWOW64\indexeddbserver.dll
2017-01-29 15:27:24 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2017-01-29 15:27:24 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2017-01-29 15:27:24 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2017-01-29 15:27:24 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-01-29 15:27:24 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2017-01-29 15:27:24 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-01-29 15:27:24 ----A---- C:\WINDOWS\system32\ieproxy.dll
2017-01-29 15:27:24 ----A---- C:\WINDOWS\system32\iepeers.dll
2017-01-29 15:27:23 ----A---- C:\WINDOWS\SYSWOW64\NetworkCollectionAgent.dll
2017-01-29 15:27:23 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2017-01-29 15:27:23 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2017-01-29 15:27:23 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2017-01-29 15:27:23 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-01-29 15:27:23 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2017-01-29 15:27:23 ----A---- C:\WINDOWS\system32\NetworkCollectionAgent.dll
2017-01-29 15:27:23 ----A---- C:\WINDOWS\system32\msfeeds.dll
2017-01-29 15:27:23 ----A---- C:\WINDOWS\system32\iesetup.dll
2017-01-29 15:27:23 ----A---- C:\WINDOWS\system32\iernonce.dll
2017-01-29 15:27:23 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-01-29 15:27:23 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2017-01-29 15:27:23 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2017-01-29 15:27:21 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2017-01-29 15:27:21 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2017-01-29 15:27:21 ----A---- C:\WINDOWS\SYSWOW64\Geolocation.dll
2017-01-29 15:27:21 ----A---- C:\WINDOWS\system32\ntdll.dll
2017-01-29 15:27:21 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2017-01-29 15:27:21 ----A---- C:\WINDOWS\system32\Geolocation.dll
2017-01-29 15:27:21 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2017-01-29 15:27:21 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2017-01-29 15:27:21 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2017-01-29 15:27:21 ----A---- C:\WINDOWS\system32\csrsrv.dll
2017-01-29 15:27:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-29 15:27:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Perception.dll
2017-01-29 15:27:20 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2017-01-29 15:27:20 ----A---- C:\WINDOWS\SYSWOW64\credprovs.dll
2017-01-29 15:27:20 ----A---- C:\WINDOWS\SYSWOW64\credprovhost.dll
2017-01-29 15:27:20 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2017-01-29 15:27:20 ----A---- C:\WINDOWS\system32\ws2_32.dll
2017-01-29 15:27:20 ----A---- C:\WINDOWS\system32\Windows.Devices.Perception.dll
2017-01-29 15:27:20 ----A---- C:\WINDOWS\system32\sspicli.dll
2017-01-29 15:27:20 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2017-01-29 15:27:20 ----A---- C:\WINDOWS\system32\lsass.exe
2017-01-29 15:27:20 ----A---- C:\WINDOWS\system32\KernelBase.dll
2017-01-29 15:27:20 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2017-01-29 15:27:20 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2017-01-29 15:27:20 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2017-01-29 15:27:20 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2017-01-29 15:27:17 ----A---- C:\WINDOWS\system32\msxml6r.dll
2017-01-29 15:27:17 ----A---- C:\WINDOWS\system32\msxml6.dll
2017-01-29 15:27:17 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2017-01-29 15:27:17 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2017-01-29 15:27:17 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2017-01-29 15:27:17 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2017-01-29 15:27:17 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2017-01-29 15:27:17 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2017-01-29 15:27:17 ----A---- C:\WINDOWS\system32\dab.dll
2017-01-29 15:27:17 ----A---- C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2017-01-29 15:27:15 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2017-01-29 15:27:15 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2017-01-29 15:27:15 ----A---- C:\WINDOWS\SYSWOW64\msdtcuiu.dll
2017-01-29 15:27:15 ----A---- C:\WINDOWS\SYSWOW64\ActionCenterCPL.dll
2017-01-29 15:27:15 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2017-01-29 15:27:15 ----A---- C:\WINDOWS\system32\drivers\cmimcext.sys
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\systemcpl.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\sendmail.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\fontext.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\ConfigureExpandedStorage.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\comctl32.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\autoplay.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\AuthExt.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2017-01-29 15:27:14 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\ws2_32.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\WinSCard.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\tcpipcfg.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\sppcext.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\sppc.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\slcext.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\slc.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\netiougc.exe
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\efsext.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\cryptui.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\credprovslegacy.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2017-01-29 15:27:13 ----A---- C:\WINDOWS\SYSWOW64\adsmsext.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\xolehlp.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\wsp_sr.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\mtxclu.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\msdtcprx.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\migisol.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\chartv.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2017-01-29 15:27:12 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2017-01-29 15:27:11 ----A---- C:\WINDOWS\SYSWOW64\wsecedit.dll
2017-01-29 15:27:11 ----A---- C:\WINDOWS\SYSWOW64\wscinterop.dll
2017-01-29 15:27:11 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2017-01-29 15:27:11 ----A---- C:\WINDOWS\SYSWOW64\ReAgentc.exe
2017-01-29 15:27:11 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2017-01-29 15:27:11 ----A---- C:\WINDOWS\SYSWOW64\pwrshplugin.dll
2017-01-29 15:27:11 ----A---- C:\WINDOWS\SYSWOW64\msinfo32.exe
2017-01-29 15:27:11 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2017-01-29 15:27:11 ----A---- C:\WINDOWS\SYSWOW64\DscCoreConfProv.dll
2017-01-29 15:27:11 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2017-01-29 15:27:11 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2017-01-29 15:27:09 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2017-01-29 15:27:09 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2017-01-29 15:27:09 ----A---- C:\WINDOWS\system32\input.dll
2017-01-29 15:27:09 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2017-01-29 15:27:09 ----A---- C:\WINDOWS\system32\gdi32full.dll
2017-01-29 15:27:08 ----A---- C:\WINDOWS\system32\d3d9.dll
2017-01-29 15:27:07 ----A---- C:\WINDOWS\system32\winsrv.dll
2017-01-29 15:27:07 ----A---- C:\WINDOWS\system32\tsmf.dll
2017-01-29 15:27:07 ----A---- C:\WINDOWS\system32\mstsc.exe
2017-01-29 15:27:07 ----A---- C:\WINDOWS\system32\msctf.dll
2017-01-29 15:27:07 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2017-01-29 15:27:07 ----A---- C:\WINDOWS\system32\ddraw.dll
2017-01-29 15:27:07 ----A---- C:\WINDOWS\system32\atmlib.dll
2017-01-29 15:27:07 ----A---- C:\WINDOWS\system32\atmfd.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\usercpl.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\shell32.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\shdocvw.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\SessEnv.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\rshx32.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\RDXService.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\ntshrui.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\netplwiz.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\mstscax.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\lsm.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\ActionCenterCPL.dll
2017-01-29 15:27:06 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\twinui.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\themecpl.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\taskbarcpl.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\sud.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\stobject.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\sendmail.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\NetworkDesktopSettings.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\mspaint.exe
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\hgcpl.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\gameux.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\fontext.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\Family.SyncEngine.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\Family.Client.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\Family.Authentication.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\Display.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\DevicePairingFolder.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\DeviceCenter.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\system32\autoplay.dll
2017-01-29 15:27:05 ----A---- C:\WINDOWS\explorer.exe
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\zipfldr.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\twinapi.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\lpremove.exe
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\LogonController.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\fhcpl.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\credprovslegacy.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\comdlg32.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\authui.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\aclui.dll
2017-01-29 15:27:04 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\win32spl.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\usbmon.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\spoolsv.exe
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\ReportingCSP.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\puiobj.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\PrintWSDAHost.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\policymanager.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\PhoneServiceRes.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\PhoneService.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\OneBackupHandler.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\localspl.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\efswrt.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2017-01-29 15:27:02 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2017-01-29 15:27:02 ----A---- C:\WINDOWS\splwow64.exe
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\wow64.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\wininet.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\wifitask.exe
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\wificonnapi.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\vpnike.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\vbscript.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\uReFS.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\umpoext.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\ubpm.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\SRH.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\RMapi.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\rasmans.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\rascustom.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\rasapi32.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\provtool.exe
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\provops.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\provhandlers.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\provengine.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\provdatastore.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\nltest.exe
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\jsproxy.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\ImplatSetup.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\EDPCleanup.exe
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\EAMProgressHandler.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\dosvc.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\domgmt.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\credprovs.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\credprovhost.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\ClipUp.exe
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\bcdedit.exe
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-01-29 15:27:01 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\wpx.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\winresume.exe
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\winload.exe
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\w32time.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\usermgr.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\TSpkg.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\tcpipcfg.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\StorSvc.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\StorageUsage.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\services.exe
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\sbe.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\qedit.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\powercfg.exe
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\nlasvc.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\nettrace.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\netshell.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\netiougc.exe
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\ncsi.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\hal.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\GamePanel.exe
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\esentutl.exe
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\EncDec.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\drivers\tm.sys
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\drivers\modem.sys
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\drivers\crashdmp.sys
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\CPFilters.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\C_IS2022.DLL
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\c_GSM7.DLL
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\C_G18030.DLL
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\BcastDVRHelper.dll
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2017-01-29 15:27:00 ----A---- C:\WINDOWS\system32\AppCapture.dll
2017-01-29 15:26:57 ----A---- C:\WINDOWS\system32\inetcomm.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\wininetlui.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\sppwinob.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\sppsvc.exe
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\sppobjs.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\sppcext.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\sppc.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\slcext.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\slc.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\odbcconf.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\NaturalLanguage6.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\GenValObj.exe
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\efsext.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\easwrt.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\dsregcmd.exe
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\apprepsync.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\apprepapi.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\appinfo.dll
2017-01-29 15:26:56 ----A---- C:\WINDOWS\system32\adsmsext.dll
2017-01-29 15:26:55 ----A---- C:\WINDOWS\SYSWOW64\pidgenx.dll
2017-01-29 15:26:55 ----A---- C:\WINDOWS\system32\WinSCard.dll
2017-01-29 15:26:55 ----A---- C:\WINDOWS\system32\winlogon.exe
2017-01-29 15:26:55 ----A---- C:\WINDOWS\system32\ScDeviceEnum.dll
2017-01-29 15:26:55 ----A---- C:\WINDOWS\system32\pidgenx.dll
2017-01-29 15:26:55 ----A---- C:\WINDOWS\system32\gpsvc.dll
2017-01-29 15:26:55 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-01-29 15:26:55 ----A---- C:\WINDOWS\system32\EditionUpgradeHelper.dll
2017-01-29 15:26:55 ----A---- C:\WINDOWS\system32\DeviceReactivation.dll
2017-01-29 15:26:55 ----A---- C:\WINDOWS\system32\cryptui.dll
2017-01-29 15:26:55 ----A---- C:\WINDOWS\system32\certprop.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\wsp_sr.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\wsp_health.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\wsecedit.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\systemreset.exe
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\SysResetErr.exe
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\sppnp.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\SpaceControl.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\SpaceAgent.exe
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\Sens.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\RjvMDMConfig.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\ResetEngine.exe
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\reseteng.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\RelPost.exe
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\ReAgentc.exe
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\ReAgent.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\pwrshplugin.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\ProvSysprep.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\pcasvc.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\ole32.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\offreg.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\msinfo32.exe
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\msi.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\msdtctm.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\migisol.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\iscsiwmi.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\invagent.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\imapi2.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\chartv.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\fhsettingsprovider.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\fhcfg.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\discan.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\devinv.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\comsvcs.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\BackgroundMediaPolicy.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\asycfilt.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\appraiser.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\aitstatic.exe
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\aepic.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\aeinv.dll
2017-01-29 15:26:54 ----A---- C:\WINDOWS\system32\acmigration.dll
2017-01-29 15:26:53 ----A---- C:\WINDOWS\system32\wscsvc.dll
2017-01-29 15:26:53 ----A---- C:\WINDOWS\system32\wscinterop.dll
2017-01-29 15:26:53 ----A---- C:\WINDOWS\system32\wscapi.dll
2017-01-29 15:26:53 ----A---- C:\WINDOWS\system32\DscCoreConfProv.dll
2017-01-29 15:26:53 ----A---- C:\WINDOWS\system32\DscCore.dll
2017-01-29 15:26:53 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2017-01-29 15:26:53 ----A---- C:\WINDOWS\system32\browserbroker.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.CredDialogController.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BlockedShutdown.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\SYSWOW64\biwinrt.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\SYSWOW64\AppVEntSubsystems32.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\TransportDSA.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\shutdownux.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\generaltel.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\drivers\http.sys
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\drivers\AppVStrm.sys
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\biwinrt.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\bisrv.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVShNotify.exe
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVScripting.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVReporting.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVPublishing.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVPolicy.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVOrchestration.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVManifest.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVIntegration.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVEntSubsystems64.dll

2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVEntStreamingManager.dll
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVDllSurrogate.exe
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVClient.exe
2017-01-29 15:26:51 ----A---- C:\WINDOWS\system32\AppVCatalog.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\WwaApi.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\UserDataTypeHelperUtil.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\UserDataPlatformHelperUtil.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\UserDataLanguageUtil.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccessRes.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\POSyncServices.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\PhoneutilRes.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\Phoneutil.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\ExtrasXmlParser.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\ContactActivation.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\AppointmentActivation.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\SYSWOW64\AddressParser.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\XamlTileRender.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\WWAHost.exe
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\wups2.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\wups.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\wuauclt.exe
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\WSManHTTPConfig.exe
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\weretw.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\wer.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\VCardParser.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\usocore.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\UserDataLanguageUtil.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\UserDataAccessRes.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\POSyncServices.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\PhoneutilRes.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\Phoneutil.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\NotificationController.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\MusNotification.exe
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\LicenseManagerSvc.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\ChatApis.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\ExtrasXmlParser.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\ExSMime.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\EmailApis.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\DbgModel.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\dbgeng.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\ContactApis.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\ContactActivation.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\AppointmentActivation.dll
2017-01-29 15:26:50 ----A---- C:\WINDOWS\system32\AddressParser.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.UXRes.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.PointOfService.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\PlayToReceiver.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\NPSM.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\NmaDirect.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\MosResource.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MosHost.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MapControls.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\mfpmp.exe
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\MapRouter.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\MapControlStringsRes.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\SYSWOW64\dtdump.exe
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\winmde.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\SensorService.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\rdpencom.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\rdpcore.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\NPSM.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\NetworkUXBroker.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\mfpmp.exe
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\mf.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\MDEServer.exe
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\energy.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\drvstore.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\DMRServer.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\dialserver.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\dialclient.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\dafpos.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\cryptngc.dll
2017-01-29 15:26:49 ----A---- C:\WINDOWS\system32\CastLaunch.dll
2017-01-29 15:26:48 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MosTrace.dll
2017-01-29 15:26:48 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2017-01-29 15:26:48 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2017-01-29 15:26:48 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2017-01-29 15:26:48 ----A---- C:\WINDOWS\SYSWOW64\BingOnlineServices.dll
2017-01-29 15:26:46 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2017-01-29 15:26:46 ----A---- C:\WINDOWS\SYSWOW64\MapGeocoder.dll
2017-01-29 15:26:46 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2017-01-29 15:26:46 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2017-01-29 15:26:46 ----A---- C:\WINDOWS\system32\NmaDirect.dll
2017-01-29 15:26:46 ----A---- C:\WINDOWS\system32\NMAA.dll
2017-01-29 15:26:46 ----A---- C:\WINDOWS\system32\MosResource.dll
2017-01-29 15:26:46 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2017-01-29 15:26:46 ----A---- C:\WINDOWS\system32\mos.dll
2017-01-29 15:26:46 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2017-01-29 15:26:46 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2017-01-29 15:26:46 ----A---- C:\WINDOWS\system32\MapRouter.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\nativemap.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\MosStorage.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\moshostcore.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\moshost.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\mapstoasttask.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\MapsStore.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\MapsBtSvcProxy.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\MapGeocoder.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\MapControlStringsRes.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2017-01-29 15:26:45 ----A---- C:\WINDOWS\system32\BingOnlineServices.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\SYSWOW64\WordBreakers.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2017-01-29 15:26:44 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2017-01-29 15:26:44 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\SYSWOW64\EditBufferTestHook.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\WordBreakers.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\tquery.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\skci.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\securekernel.exe
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\mssrch.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\mssprxy.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\kdhvcom.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\InputService.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\hvloader.exe
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\hvix64.exe
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\hvax64.exe
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\EditBufferTestHook.dll
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\drivers\hvservice.sys
2017-01-29 15:26:44 ----A---- C:\WINDOWS\system32\BingMaps.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Picker.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.LowLevel.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore6.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\DeviceFlows.DataModel.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\win32u.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\win32k.sys
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\wevtapi.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\user32.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\gdi32.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\FontProvider.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\FntCache.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\eappprxy.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\eapphost.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\eappgnui.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\eappcfg.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\dxgi.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\DWrite.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\D3D12.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\d3d11.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\d2d1.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-29 15:26:43 ----A---- C:\WINDOWS\system32\cdd.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\WinRtTracing.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Phone.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.InkControls.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.HostName.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Import.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.Input.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFi.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Radios.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Core.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\ErrorDetailsUpdate.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\ErrorDetails.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\DataExchange.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\container.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostUser.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\ClipboardServer.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\wkssvc.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\WinTypes.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\wintrust.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\winhttp.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\wincorlib.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\webio.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\wc_storage.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\tzres.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\schannel.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\samsrv.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\samlib.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\qmgr.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\profsvc.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\oleaut32.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\offlinesam.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\NfcRadioMedia.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\msv1_0.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\mprapi.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\esent.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\drivers\wcifs.sys
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\dnsapi.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\dhcpcore6.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\dafBth.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\crypt32.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\container.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\combase.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\CloudExperienceHostUser.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\ci.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\bcrypt.dll
2017-01-29 15:26:42 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.3D.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Energy.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFiDirect.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\SYSWOW64\UIAnimation.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.Networking.HostName.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\Windows.Devices.Printers.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\DataExchange.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\aadtb.dll
2017-01-29 15:26:41 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2017-01-29 15:26:39 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2017-01-29 15:26:39 ----A---- C:\WINDOWS\system32\Windows.Energy.dll
2017-01-29 15:26:39 ----A---- C:\WINDOWS\system32\UIAnimation.dll
2017-01-29 15:26:39 ----A---- C:\WINDOWS\system32\msftedit.dll
2017-01-29 15:26:39 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\Windows.Gaming.Input.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\Windows.Devices.Radios.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\smartscreen.exe
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\ShareHost.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\ffbroker.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\ErrorDetailsUpdate.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\ErrorDetails.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\dsreg.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\CryptoWinRT.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\cloudAP.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\ClipboardServer.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\cdpusersvc.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\cdpsvc.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\cdp.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\AppContracts.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2017-01-29 15:26:38 ----A---- C:\WINDOWS\system32\AccountsRt.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Perception.Stub.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Ocr.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.FaceAnalysis.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.AllJoyn.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\win32u.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2017-01-29 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\win32k.sys
2017-01-29 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\MSAJApi.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\Windows.Media.Ocr.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\vmrdvcore.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\tspubwmi.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\setupugc.exe
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\resutils.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\MSAJApi.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\icsvcext.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\icsvc.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\drivers\winhvr.sys
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\drivers\ClipSp.sys
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\cmifw.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\clusapi.dll
2017-01-29 15:26:37 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.MediaPlayer.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.BackgroundMediaPlayback.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\SYSWOW64\mfksproxy.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\SYSWOW64\encapi.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\SYSWOW64\BackgroundMediaPolicy.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\system32\tdh.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\system32\pdh.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\system32\kerberos.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2017-01-29 15:26:36 ----A---- C:\WINDOWS\system32\actxprxy.dll
2017-01-29 15:26:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryClient.dll
2017-01-29 15:26:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2017-01-29 15:26:35 ----A---- C:\WINDOWS\SYSWOW64\oleacc.dll
2017-01-29 15:26:35 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2017-01-29 15:26:35 ----A---- C:\WINDOWS\SYSWOW64\ngccredprov.dll
2017-01-29 15:26:35 ----A---- C:\WINDOWS\SYSWOW64\msxml6r.dll
2017-01-29 15:26:35 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2017-01-29 15:26:35 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2017-01-29 15:26:35 ----A---- C:\WINDOWS\SYSWOW64\deviceassociation.dll
2017-01-29 15:26:35 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2017-01-29 15:26:35 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2017-01-29 15:26:35 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2017-01-29 15:26:35 ----A---- C:\WINDOWS\system32\drivers\iorate.sys
2017-01-29 15:26:35 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\WSManHTTPConfig.exe
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.UserDeviceAssociation.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SmartCards.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SerialCommunication.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\wevtapi.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\weretw.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.Ngc.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\tsmf.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\storagewmi_passthru.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\smphost.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\samlib.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\powercfg.exe
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\offlinesam.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\NetCfgNotifyObjectHost.exe
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\NaturalLanguage6.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\mprapi.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\iscsiwmi.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\input.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\imapi2.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\esentutl.exe
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\dsreg.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\drvstore.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\delegatorprovider.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\ddraw.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\DbgModel.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\d3d8.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\CryptoWinRT.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\cmifw.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\C_IS2022.DLL
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\c_GSM7.DLL
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\C_G18030.DLL
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\storagewmi_passthru.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\storagewmi.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\spaceman.exe
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\smphost.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\mispace.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\dwmcore.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\dwmapi.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\delegatorprovider.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2017-01-29 15:26:34 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\xinputhid.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\vpci.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\MegaSas2i.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2017-01-29 15:26:33 ----A---- C:\WINDOWS\system32\drivers\capimg.sys
2017-01-29 15:16:25 ----D---- C:\WINDOWS\system32\Microsoft
2017-01-29 15:15:36 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2017-01-29 15:15:36 ----A---- C:\WINDOWS\system32\bootux.dll
2017-01-29 00:34:16 ----D---- C:\Users\kasta\AppData\Roaming\uTorrent
2017-01-29 00:06:02 ----D---- C:\WINDOWS\system32\MRT
2017-01-29 00:05:55 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-01-28 23:56:18 ----D---- C:\Users\kasta\AppData\Roaming\Macromedia
2017-01-28 23:45:47 ----D---- C:\Program Files (x86)\CrystalDiskInfo
2017-01-28 18:44:01 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2017-01-28 18:22:06 ----D---- C:\Program Files (x86)\Google
2017-01-28 18:06:53 ----A---- C:\WINDOWS\SYSWOW64\mqrt.dll
2017-01-28 18:05:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Speech.Pal.dll
2017-01-28 18:00:14 ----A---- C:\WINDOWS\system32\drivers\ASACPI.sys
2017-01-28 17:50:36 ----D---- C:\Users\kasta\AppData\Roaming\Skype
2017-01-28 17:49:41 ----D---- C:\Users\kasta\AppData\Roaming\ATI
2017-01-28 17:46:14 ----D---- C:\Users\kasta\AppData\Roaming\Adobe
2017-01-28 17:45:02 ----D---- C:\AMD
2017-01-28 17:44:30 ----A---- C:\WINDOWS\SYSWOW64\ativvsvl.dat
2017-01-28 17:44:30 ----A---- C:\WINDOWS\SYSWOW64\ativvsva.dat
2017-01-28 17:44:30 ----A---- C:\WINDOWS\system32\coinst_15.20.dll
2017-01-28 17:44:30 ----A---- C:\WINDOWS\system32\ativvsvl.dat
2017-01-28 17:44:30 ----A---- C:\WINDOWS\system32\ativvsva.dat
2017-01-28 17:44:30 ----A---- C:\WINDOWS\system32\ativvaxy_vi_nd.dat
2017-01-28 17:44:30 ----A---- C:\WINDOWS\system32\ativvaxy_vi.dat
2017-01-28 17:44:30 ----A---- C:\WINDOWS\system32\ativvaxy_FJ_nd.dat
2017-01-28 17:44:30 ----A---- C:\WINDOWS\system32\ativvaxy_FJ.dat
2017-01-28 17:44:30 ----A---- C:\WINDOWS\system32\ativvaxy_cz_nd.dat
2017-01-28 17:44:30 ----A---- C:\WINDOWS\system32\ativvaxy_cik_nd.dat
2017-01-28 17:44:30 ----A---- C:\WINDOWS\system32\ativvaxy_cik.dat
2017-01-28 17:44:30 ----A---- C:\WINDOWS\system32\atiuxp64.dll
2017-01-28 17:44:29 ----A---- C:\WINDOWS\system32\drivers\atikmpag.sys
2017-01-28 17:44:29 ----A---- C:\WINDOWS\system32\drivers\atikmdag.sys
2017-01-28 17:44:29 ----A---- C:\WINDOWS\system32\atiicdxx.dat
2017-01-28 17:44:29 ----A---- C:\WINDOWS\system32\atidxx64.dll
2017-01-28 17:44:29 ----A---- C:\WINDOWS\system32\aticfx64.dll
2017-01-28 17:44:27 ----A---- C:\WINDOWS\SYSWOW64\amdlvr32.dll
2017-01-28 17:44:27 ----A---- C:\WINDOWS\system32\amdlvr64.dll
2017-01-28 17:43:55 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-28 17:41:54 ----A---- C:\WINDOWS\system32\drivers\AtihdWT6.sys
2017-01-28 17:34:14 ----D---- C:\WINDOWS\CSC
2017-01-28 17:33:53 ----SHD---- C:\ProgramData\Šablony
2017-01-28 17:33:53 ----SHD---- C:\ProgramData\Plocha
2017-01-28 17:33:53 ----SHD---- C:\ProgramData\Nabídka Start
2017-01-28 17:33:53 ----SHD---- C:\ProgramData\Dokumenty
2017-01-28 17:33:53 ----SHD---- C:\ProgramData\Data aplikací
2017-01-28 17:32:33 ----D---- C:\WINDOWS\SoftwareDistribution
2017-01-28 17:29:51 ----ASH---- C:\swapfile.sys
2017-01-28 17:29:51 ----ASH---- C:\pagefile.sys
2017-01-28 17:29:50 ----SHD---- C:\System Volume Information
2017-01-28 17:28:53 ----RASH---- C:\BOOTSECT.BAK
2017-01-28 17:28:52 ----SHD---- C:\Boot

======List of files/folders modified in the last 1 month======

2017-01-30 17:01:00 ----D---- C:\WINDOWS\system32\sru
2017-01-30 16:52:59 ----RD---- C:\Program Files
2017-01-30 16:49:17 ----D---- C:\WINDOWS\Temp
2017-01-30 16:41:46 ----D---- C:\WINDOWS\Logs
2017-01-30 16:39:32 ----D---- C:\WINDOWS\INF
2017-01-30 16:35:37 ----D---- C:\Windows
2017-01-30 16:33:10 ----D---- C:\WINDOWS\AppReadiness
2017-01-30 16:33:09 ----HD---- C:\Program Files\WindowsApps
2017-01-30 16:06:08 ----HD---- C:\ProgramData
2017-01-30 16:06:07 ----RD---- C:\Program Files (x86)
2017-01-30 16:06:07 ----D---- C:\Program Files (x86)\Common Files
2017-01-30 16:05:58 ----D---- C:\WINDOWS\system32\Tasks
2017-01-30 16:04:50 ----D---- C:\WINDOWS\System32
2017-01-30 15:59:13 ----D---- C:\WINDOWS\SysWOW64
2017-01-30 15:59:00 ----D---- C:\WINDOWS\system32\DriverStore
2017-01-30 15:59:00 ----D---- C:\WINDOWS\system32\drivers
2017-01-30 15:43:52 ----D---- C:\WINDOWS\system32\catroot2
2017-01-30 15:29:43 ----RSD---- C:\WINDOWS\assembly
2017-01-30 15:27:23 ----SHD---- C:\WINDOWS\Installer
2017-01-30 11:42:02 ----D---- C:\WINDOWS\Tasks
2017-01-30 11:17:43 ----D---- C:\WINDOWS\CbsTemp
2017-01-30 11:17:37 ----RD---- C:\WINDOWS\Microsoft.NET
2017-01-30 11:17:36 ----D---- C:\WINDOWS\WinSxS
2017-01-30 11:16:00 ----SD---- C:\ProgramData\Microsoft
2017-01-30 10:30:43 ----D---- C:\WINDOWS\appcompat
2017-01-30 00:41:17 ----D---- C:\WINDOWS\system32\config
2017-01-30 00:35:30 ----D---- C:\WINDOWS\SYSWOW64\MUI
2017-01-30 00:35:30 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2017-01-30 00:35:30 ----D---- C:\WINDOWS\system32\MUI
2017-01-30 00:35:30 ----D---- C:\WINDOWS\system32\cs-CZ
2017-01-30 00:35:27 ----RSD---- C:\WINDOWS\Fonts
2017-01-29 19:13:44 ----D---- C:\WINDOWS\LiveKernelReports
2017-01-29 18:04:47 ----D---- C:\Program Files\Common Files
2017-01-29 17:48:59 ----HD---- C:\WINDOWS\system32\GroupPolicy
2017-01-29 17:48:13 ----D---- C:\WINDOWS\system32\WDI
2017-01-29 17:45:24 ----RD---- C:\Users
2017-01-29 16:48:18 ----D---- C:\WINDOWS\system32\en-US
2017-01-29 16:37:36 ----D---- C:\WINDOWS\debug
2017-01-29 16:25:01 ----D---- C:\WINDOWS\system32\CatRoot
2017-01-29 16:21:46 ----D---- C:\Program Files\Common Files\microsoft shared
2017-01-29 15:47:54 ----D---- C:\WINDOWS\rescache
2017-01-29 15:47:07 ----D---- C:\ProgramData\USOPrivate
2017-01-29 15:47:00 ----D---- C:\Program Files\Windows NT
2017-01-29 15:46:26 ----D---- C:\WINDOWS\Registration
2017-01-29 15:45:58 ----D---- C:\WINDOWS\system32\wbem
2017-01-29 15:45:27 ----D---- C:\WINDOWS\system32\WinBioDatabase
2017-01-29 15:45:27 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2017-01-29 15:44:00 ----D---- C:\WINDOWS\system32\LogFiles
2017-01-29 15:43:21 ----D---- C:\WINDOWS\system32\drivers\etc
2017-01-29 15:40:37 ----D---- C:\WINDOWS\system32\CodeIntegrity
2017-01-29 15:39:53 ----D---- C:\WINDOWS\SYSWOW64\migration
2017-01-29 15:39:52 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-01-29 15:39:48 ----D---- C:\WINDOWS\system32\spool
2017-01-29 15:39:33 ----D---- C:\WINDOWS\PolicyDefinitions
2017-01-29 15:39:18 ----D---- C:\WINDOWS\system32\Recovery
2017-01-29 15:37:58 ----D---- C:\WINDOWS\system32\Sysprep
2017-01-29 15:36:06 ----RD---- C:\WINDOWS\PrintDialog
2017-01-29 15:36:06 ----RD---- C:\WINDOWS\MiracastView
2017-01-29 15:36:05 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-01-29 15:34:56 ----D---- C:\WINDOWS\system32\drivers\UMDF
2017-01-29 15:29:40 ----D---- C:\WINDOWS\SYSWOW64\wbem
2017-01-29 15:29:40 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-CS
2017-01-29 15:29:40 ----D---- C:\WINDOWS\SYSWOW64\setup
2017-01-29 15:29:40 ----D---- C:\WINDOWS\SYSWOW64\oobe
2017-01-29 15:29:39 ----SD---- C:\WINDOWS\SYSWOW64\F12
2017-01-29 15:29:39 ----D---- C:\WINDOWS\SYSWOW64\Dism
2017-01-29 15:29:36 ----SD---- C:\WINDOWS\system32\F12
2017-01-29 15:29:36 ----SD---- C:\WINDOWS\system32\dsc
2017-01-29 15:29:36 ----SD---- C:\WINDOWS\system32\DiagSvcs
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\zh-TW
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\zh-HK
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\zh-CN
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\uk-UA
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\tr-TR
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\th-TH
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\sv-SE
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\sl-SI
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\sk-SK
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\setup
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\ru-RU
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\ro-RO
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\pt-PT
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\pt-BR
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\pl-PL
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\oobe
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\nl-NL
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\nb-NO
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\migwiz
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\migration
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\lv-LV
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\lt-LT
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\ko-KR
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\ja-jp
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\it-IT
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\hu-HU
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\hr-HR
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\he-IL
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\fr-FR
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\fr-CA
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\fi-FI
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\et-EE
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\es-MX
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\es-ES
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\en-GB
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\el-GR
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\Dism
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\de-DE
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\da-DK
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\Boot
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\bg-BG
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\ar-SA
2017-01-29 15:29:36 ----D---- C:\WINDOWS\system32\appraiser
2017-01-29 15:29:35 ----D---- C:\WINDOWS\ShellExperiences
2017-01-29 15:29:35 ----D---- C:\WINDOWS\servicing
2017-01-29 15:29:35 ----D---- C:\WINDOWS\Provisioning
2017-01-29 15:29:34 ----RD---- C:\Program Files\Windows Defender
2017-01-29 15:29:34 ----D---- C:\WINDOWS\bcastdvr
2017-01-29 15:29:34 ----D---- C:\WINDOWS\AppPatch
2017-01-29 15:29:34 ----D---- C:\Program Files\Windows Photo Viewer
2017-01-29 15:29:34 ----D---- C:\Program Files\Windows Media Player
2017-01-29 15:29:34 ----D---- C:\Program Files\Windows Mail
2017-01-29 15:29:34 ----D---- C:\Program Files\Windows Defender Advanced Threat Protection
2017-01-29 15:29:34 ----D---- C:\Program Files\Internet Explorer
2017-01-29 15:29:34 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-01-29 15:29:34 ----D---- C:\Program Files (x86)\Windows Media Player
2017-01-29 15:29:34 ----D---- C:\Program Files (x86)\Windows Mail
2017-01-29 15:29:34 ----D---- C:\Program Files (x86)\Windows Defender
2017-01-29 15:29:34 ----D---- C:\Program Files (x86)\Internet Explorer
2017-01-29 15:07:37 ----HD---- C:\$WINDOWS.~BT
2017-01-28 17:56:41 ----A---- C:\WINDOWS\SYSWOW64\mqsnap.dll
2017-01-28 17:56:41 ----A---- C:\WINDOWS\SYSWOW64\mqcertui.dll
2017-01-28 17:49:30 ----SHD---- C:\$Recycle.Bin

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\WINDOWS\system32\drivers\iorate.sys [2017-01-29 48992]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2016-07-16 88576]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2016-07-16 8192]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2016-07-16 70144]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2016-07-16 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2016-07-16 78336]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-08-09 21631512]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-08-09 673816]
R3 AtiHDAudioService;@oem8.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWT6.sys [2015-07-22 102912]
R3 L1E;@netl1e64.inf,%L1E.Service.DispName%;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1E62x64.sys [2016-07-16 59904]
R3 MTsensor;@oem1.inf,%ASACPI.DisplayName%;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2017-01-28 17280]
S0 amdkmafd;@oem6.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmafd.sys [2015-06-03 31992]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2016-07-16 105824]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2016-07-16 101216]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2017-01-29 64352]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2016-07-16 58720]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2016-07-16 61792]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2016-07-16 88416]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2016-07-16 32096]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\WINDOWS\system32\drivers\AppvStrm.sys [2017-01-29 127328]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\WINDOWS\system32\drivers\AppvVemgr.sys [2016-07-16 157024]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\WINDOWS\system32\drivers\AppvVfs.sys [2016-07-16 141152]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2016-07-16 9728]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2016-07-16 38912]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2017-01-29 118272]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2016-07-16 20480]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2016-07-16 50016]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2017-01-29 73568]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2016-07-16 81408]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2016-07-16 176384]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2016-07-16 526176]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys []
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2016-07-16 120320]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2016-07-16 842584]
S3 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\WINDOWS\system32\drivers\mssecflt.sys [2016-07-16 179040]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2016-07-16 108896]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2016-07-16 928608]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\WINDOWS\System32\drivers\scmdisk0101.sys [2016-07-16 123904]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2016-07-16 95744]
S3 UcmTcpciCx0101;UCM-TCPCI KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmTcpciCx.sys [2016-07-16 108544]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2016-07-16 50688]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2016-07-16 45568]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2016-07-16 263008]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2016-07-16 96608]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2016-07-16 137056]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2016-07-16 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2016-07-16 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2016-07-16 27488]
S4 UevAgentDriver;@%systemroot%\system32\drivers\UevAgentDriver.sys,-101; C:\WINDOWS\system32\drivers\UevAgentDriver.sys [2016-07-16 40288]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-08-09 255512]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 CDPUserSvc_4b450;CDPUserSvc_4b450; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
R2 OneSyncSvc_4b450;Hostitel synchronizace_4b450; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 PimIndexMaintenanceSvc_4b450;Data kontaktů_4b450; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 SshBroker;@%SystemRoot%\system32\SshBroker.dll,-3; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 SshProxy;@%SystemRoot%\system32\SshProxy.dll,-3; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 UnistoreSvc_4b450;Úložiště uživatelských dat_4b450; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S2 debugregsvc;debugregsvc; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-30 153752]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 DeveloperToolsService;Developer Tools Service; C:\WINDOWS\System32\DeveloperToolsSvc.exe [2016-07-15 104448]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2016-07-16 93184]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2016-05-25 43696]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-30 153752]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 MessagingService_4b450;Služba zasílání zpráv_4b450; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2017-01-29 2889896]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2017-01-29 1312768]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2016-07-16 287744]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\WINDOWS\system32\AppVClient.exe [2017-01-29 822624]
S4 PlaysService;Plays.tv Update Service (PlaysService); C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [2016-12-23 55056]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S4 UevAgentService;@%systemroot%\system32\AgentService.exe,-102; C:\WINDOWS\system32\AgentService.exe [2016-07-16 1227264]

-----------------EOF-----------------

Krasny den Vam preju


Pokud je Vas log dlouhy a nevejde se do jednoho prispevku (je delsi nez 100.000 znaku), pridejte do nazvu tematu informaci o tom, ze je log dlouhy a je rozdelen do vice casti (napr. "virus, 3 posty"). Primarne resime temata bez odpovedi, takze ve Vasem pripade to vypada, ze se Vam jiz nektery z kolegu venuje a tema snadno zapadne.


V ramci cisteni Vam budou vyprazdneny docasne adresare (vysypani Kose a tempu, vyprazdneni cache prohlizecu apod.).


Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan (Skenovani), pote na Clean (Cisteni)
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner[Cx].txt), jehoz obsah zkopirujte do pristi odpovedi

Dobře tak pro příště si to budu pamatovat.
Divné je, že jsem doteď program garena neinstaloval! Ale mám importované nastavení z Chrome. Ještě, než jsem přešel na W10 tak jsem se tohoto nemohl zbavit. I po smazání Adwcleanerem, se to tam vždy po nějaké době opět ukázalo.

# AdwCleaner v6.043 - Log vytvořen 31/01/2017 v 20:42:10
# Aktualizováno dne 27/01/2017 z Malwarebytes
# Databáze : 2017-01-30.3 [Server]
# Operační systém : Windows 10 Pro (X64)
# Uživatelské jméno : kasta - KASTAB
# Spuštěno z : C:\Users\kasta\Downloads\adwcleaner_6.043.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****



***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****



***** [ Registry ] *****



***** [ Prohlížeče ] *****

[-] [C:\Users\kasta\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazáno: garena-plus.en.softonic.com


*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [924 Bajty] - [31/01/2017 20:42:10]
C:\AdwCleaner\AdwCleaner[S0].txt - [1425 Bajty] - [31/01/2017 20:41:23]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1069 Bajty] ##########

Polozka odstranena AdwCleanerem je nepodstatna malickost - netreba si kvuli ni lamat hlavu.


Mrkneme jeste na problem s Avastem. Dejte logy FRST.txt a Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101
Pokud budete mit problemy se stazenim FRSTLauncheru, staci kdyz pouzijete samotny FRST.exe/FRST64.exe.