SHARE
TWEET

Untitled

a guest Apr 20th, 2017 322 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. OTL logfile created on: 21.04.2017 00:43:36 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0    
  3. 64bit- Professional  (Version = 6.2.9200) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.14393.0)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: dd.MM.yyyy
  6.  
  7. %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
  8.  
  9. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  10. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  11.  
  12. [color=#E56717]========== Processes (All) ==========[/color]
  13.  
  14. PRC - File not found --
  15. PRC - [2017.04.21 00:42:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Tomasz\Desktop\OTL.exe
  16. PRC - [2017.04.17 17:13:30 | 028,344,776 | ---- | M] (Dropbox, Inc.) -- C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
  17. PRC - [2017.04.14 23:17:43 | 001,518,808 | ---- | M] (Microsoft Corporation) -- C:\Users\Tomasz\AppData\Local\Microsoft\OneDrive\OneDrive.exe
  18. PRC - [2016.11.10 19:27:54 | 002,237,392 | ---- | M] (Micro-Star INT'L CO., LTD.) -- C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
  19. PRC - [2016.09.19 09:03:53 | 000,035,448 | ---- | M] (MSFree Inc.) -- C:\ProgramData\KMSAuto\bin\KMSSS.exe
  20. PRC - [2016.07.17 13:05:42 | 000,014,464 | ---- | M] () -- C:\ProgramData\KMSAuto\bin\TunMirror2.exe
  21. PRC - [2016.07.16 13:42:56 | 000,416,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
  22. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe  [comLaunch]
  23. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe  [comLaunch]
  24. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe  [comLaunch]
  25. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe  [comLaunch]
  26. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe  [comLaunch]
  27. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe  [comLaunch]
  28. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe  [comLaunch]
  29. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe  [comLaunch]
  30. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe  [comLaunch]
  31. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe  [comLaunch]
  32. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe  [comLaunch]
  33. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe  [comLaunch]
  34. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe  [comLaunch]
  35. PRC - [2016.04.16 09:55:06 | 001,325,240 | ---- | M] () -- C:\Program Files (x86)\DFX\DFX.exe
  36. PRC - [2015.12.31 01:10:40 | 000,105,296 | ---- | M] (MSI) -- C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
  37. PRC - [2015.12.31 01:08:11 | 000,223,520 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  38. PRC - [2015.11.27 21:05:54 | 000,132,280 | ---- | M] () -- C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp32.exe
  39.  
  40.  
  41. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  42.  
  43. MOD - [2017.04.17 17:14:04 | 000,025,432 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
  44. MOD - [2017.04.17 17:14:04 | 000,023,896 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
  45. MOD - [2017.04.17 17:14:02 | 000,054,608 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
  46. MOD - [2017.04.17 17:14:02 | 000,022,872 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
  47. MOD - [2017.04.17 17:14:00 | 000,026,456 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
  48. MOD - [2017.04.17 17:14:00 | 000,022,864 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
  49. MOD - [2017.04.17 17:14:00 | 000,021,848 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
  50. MOD - [2017.04.17 17:13:58 | 000,069,968 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
  51. MOD - [2017.04.17 17:13:58 | 000,030,536 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd
  52. MOD - [2017.04.17 17:13:58 | 000,022,872 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
  53. MOD - [2017.04.17 17:13:58 | 000,022,864 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
  54. MOD - [2017.04.17 17:13:56 | 000,392,512 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
  55. MOD - [2017.04.17 17:13:54 | 000,019,776 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
  56. MOD - [2017.04.17 17:13:50 | 000,103,232 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd
  57. MOD - [2017.04.17 17:13:48 | 003,928,896 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
  58. MOD - [2017.04.17 17:13:48 | 000,224,064 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
  59. MOD - [2017.04.17 17:13:48 | 000,171,336 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
  60. MOD - [2017.04.17 17:13:48 | 000,133,432 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
  61. MOD - [2017.04.17 17:13:46 | 000,546,104 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
  62. MOD - [2017.04.17 17:13:46 | 000,357,688 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
  63. MOD - [2017.04.17 17:13:46 | 000,207,680 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
  64. MOD - [2017.04.17 17:13:46 | 000,042,816 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
  65. MOD - [2017.04.17 17:13:44 | 001,972,024 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
  66. MOD - [2017.04.17 17:13:44 | 001,826,104 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
  67. MOD - [2017.04.17 17:13:44 | 000,531,264 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
  68. MOD - [2017.04.17 17:13:42 | 000,060,736 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
  69. MOD - [2017.04.17 17:13:42 | 000,025,936 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
  70. MOD - [2017.04.17 17:13:40 | 000,084,288 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
  71. MOD - [2017.04.17 17:13:40 | 000,038,712 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
  72. MOD - [2017.04.17 17:13:40 | 000,033,112 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
  73. MOD - [2017.04.17 17:13:38 | 000,027,488 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
  74. MOD - [2017.04.17 17:13:38 | 000,020,816 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
  75. MOD - [2017.04.17 17:13:36 | 001,729,360 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
  76. MOD - [2017.04.17 17:13:36 | 000,246,608 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
  77. MOD - [2017.04.17 17:13:36 | 000,022,336 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
  78. MOD - [2017.04.17 17:13:36 | 000,020,824 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
  79. MOD - [2017.04.17 17:09:48 | 000,870,720 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
  80. MOD - [2017.03.29 02:00:28 | 001,631,184 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
  81. MOD - [2017.03.29 02:00:28 | 000,017,864 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\libEGL.dll
  82. MOD - [2017.03.29 01:56:46 | 000,349,128 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
  83. MOD - [2017.03.29 01:56:46 | 000,116,176 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32security.pyd
  84. MOD - [2017.03.29 01:56:46 | 000,048,592 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32service.pyd
  85. MOD - [2017.03.29 01:56:46 | 000,028,616 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
  86. MOD - [2017.03.29 01:56:44 | 000,060,880 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32print.pyd
  87. MOD - [2017.03.29 01:56:44 | 000,043,472 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32process.pyd
  88. MOD - [2017.03.29 01:56:44 | 000,030,160 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
  89. MOD - [2017.03.29 01:56:44 | 000,024,016 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
  90. MOD - [2017.03.29 01:56:42 | 000,175,560 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
  91. MOD - [2017.03.29 01:56:42 | 000,124,880 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32file.pyd
  92. MOD - [2017.03.29 01:56:42 | 000,057,808 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
  93. MOD - [2017.03.29 01:56:42 | 000,024,528 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32event.pyd
  94. MOD - [2017.03.29 01:56:40 | 000,105,928 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32api.pyd
  95. MOD - [2017.03.29 01:56:40 | 000,024,016 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
  96. MOD - [2017.03.29 01:56:40 | 000,020,936 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
  97. MOD - [2017.03.29 01:55:32 | 000,241,104 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
  98. MOD - [2017.03.29 01:54:54 | 000,123,856 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
  99. MOD - [2017.03.29 01:54:52 | 000,083,912 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\sip.pyd
  100. MOD - [2017.03.29 01:54:52 | 000,019,408 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
  101. MOD - [2017.03.29 01:54:10 | 000,035,792 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
  102. MOD - [2017.03.29 01:54:08 | 000,694,224 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
  103. MOD - [2017.03.29 01:54:08 | 000,100,296 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
  104. MOD - [2017.03.29 01:54:08 | 000,018,888 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\select.pyd
  105. MOD - [2017.03.29 01:54:06 | 000,145,864 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
  106. MOD - [2017.03.29 01:54:04 | 000,116,688 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
  107. MOD - [2017.03.29 01:54:02 | 000,392,656 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
  108. MOD - [2017.03.29 01:52:12 | 000,036,296 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\librsync.dll
  109. MOD - [2017.03.22 23:21:46 | 000,293,392 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
  110. MOD - [2016.04.16 09:55:06 | 001,325,240 | ---- | M] () -- C:\Program Files (x86)\DFX\DFX.exe
  111. MOD - [2015.11.27 21:05:54 | 000,132,280 | ---- | M] () -- C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp32.exe
  112. MOD - [2015.11.27 21:05:53 | 000,050,872 | ---- | M] () -- C:\Program Files (x86)\Common Files\DFX\Dlls\dfxShared32.dll
  113.  
  114.  
  115. [color=#E56717]========== Services (SafeList) ==========[/color]
  116.  
  117. SRV:[b]64bit:[/b] - [2017.04.17 17:14:04 | 000,048,944 | ---- | M] (Dropbox, Inc.) [Auto | Running] -- C:\Windows\SysNative\DbxSvc.exe -- (DbxSvc)
  118. SRV:[b]64bit:[/b] - [2017.03.28 08:22:52 | 000,347,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
  119. SRV:[b]64bit:[/b] - [2017.03.28 08:21:33 | 003,318,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  120. SRV:[b]64bit:[/b] - [2017.03.28 08:20:11 | 000,764,392 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
  121. SRV:[b]64bit:[/b] - [2017.03.28 08:09:22 | 000,103,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
  122. SRV:[b]64bit:[/b] - [2017.03.28 07:32:23 | 000,635,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FlightSettings.dll -- (wisvc)
  123. SRV:[b]64bit:[/b] - [2017.03.28 07:28:25 | 000,407,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
  124. SRV:[b]64bit:[/b] - [2017.03.28 07:26:44 | 000,549,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc)
  125. SRV:[b]64bit:[/b] - [2017.03.28 07:13:32 | 000,650,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo)
  126. SRV:[b]64bit:[/b] - [2017.03.28 07:11:24 | 001,981,440 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  127. SRV:[b]64bit:[/b] - [2017.03.28 07:10:05 | 001,231,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc)
  128. SRV:[b]64bit:[/b] - [2017.03.18 18:35:45 | 002,278,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
  129. SRV:[b]64bit:[/b] - [2017.03.09 21:15:14 | 002,624,856 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Security\ekrn.exe -- (ekrn)
  130. SRV:[b]64bit:[/b] - [2017.03.04 08:33:28 | 000,095,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tzautoupdate.dll -- (tzautoupdate)
  131. SRV:[b]64bit:[/b] - [2017.03.04 08:29:39 | 000,082,944 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker)
  132. SRV:[b]64bit:[/b] - [2017.03.04 08:29:21 | 000,203,264 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
  133. SRV:[b]64bit:[/b] - [2017.03.04 08:28:56 | 000,349,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicvss)
  134. SRV:[b]64bit:[/b] - [2017.03.04 08:28:56 | 000,349,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicrdv)
  135. SRV:[b]64bit:[/b] - [2017.03.04 08:25:51 | 001,016,320 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager)
  136. SRV:[b]64bit:[/b] - [2017.03.04 08:24:38 | 001,025,536 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
  137. SRV:[b]64bit:[/b] - [2017.03.04 08:24:03 | 000,560,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
  138. SRV:[b]64bit:[/b] - [2017.03.04 08:23:43 | 001,184,256 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc)
  139. SRV:[b]64bit:[/b] - [2017.03.04 08:23:18 | 000,715,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
  140. SRV:[b]64bit:[/b] - [2017.03.04 08:23:17 | 000,330,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
  141. SRV:[b]64bit:[/b] - [2017.03.04 08:15:29 | 001,837,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
  142. SRV:[b]64bit:[/b] - [2017.03.04 08:12:58 | 000,805,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FrameServer.dll -- (FrameServer)
  143. SRV:[b]64bit:[/b] - [2017.03.04 08:11:22 | 001,312,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService)
  144. SRV:[b]64bit:[/b] - [2017.03.04 08:10:23 | 000,770,560 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
  145. SRV:[b]64bit:[/b] - [2017.03.04 08:07:14 | 001,512,448 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc)
  146. SRV:[b]64bit:[/b] - [2017.02.06 15:42:30 | 000,076,848 | ---- | M] (CyberGhost S.R.L) [Auto | Running] -- C:\Program Files\CyberGhost 6\CyberGhost.Service.exe -- (CG6Service)
  147. SRV:[b]64bit:[/b] - [2016.12.14 07:33:21 | 000,822,624 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\AppVClient.exe -- (AppVClient)
  148. SRV:[b]64bit:[/b] - [2016.12.14 06:43:24 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
  149. SRV:[b]64bit:[/b] - [2016.12.10 01:16:02 | 000,285,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
  150. SRV:[b]64bit:[/b] - [2016.12.10 01:16:01 | 004,136,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository)
  151. SRV:[b]64bit:[/b] - [2016.12.10 01:16:01 | 002,104,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
  152. SRV:[b]64bit:[/b] - [2016.12.10 01:15:51 | 000,411,648 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc)
  153. SRV:[b]64bit:[/b] - [2016.12.10 01:15:51 | 000,339,456 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\cdpusersvc.dll -- (CDPUserSvc)
  154. SRV:[b]64bit:[/b] - [2016.12.10 01:15:44 | 000,691,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
  155. SRV:[b]64bit:[/b] - [2016.11.09 22:10:31 | 000,265,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
  156. SRV:[b]64bit:[/b] - [2016.11.02 21:15:35 | 000,373,744 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService2.0.0.0)
  157. SRV:[b]64bit:[/b] - [2016.11.02 12:22:02 | 000,337,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
  158. SRV:[b]64bit:[/b] - [2016.10.12 18:30:04 | 000,983,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc)
  159. SRV:[b]64bit:[/b] - [2016.10.08 02:24:01 | 002,889,896 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe -- (Sense)
  160. SRV:[b]64bit:[/b] - [2016.10.08 02:24:01 | 000,447,488 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
  161. SRV:[b]64bit:[/b] - [2016.10.08 02:23:52 | 001,020,928 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager)
  162. SRV:[b]64bit:[/b] - [2016.10.08 02:23:52 | 000,781,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PhoneService.dll -- (PhoneSvc)
  163. SRV:[b]64bit:[/b] - [2016.10.08 02:23:52 | 000,140,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RMapi.dll -- (RmSvc)
  164. SRV:[b]64bit:[/b] - [2016.10.08 02:23:47 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService)
  165. SRV:[b]64bit:[/b] - [2016.10.08 02:23:47 | 000,026,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
  166. SRV:[b]64bit:[/b] - [2016.10.08 02:23:39 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession)
  167. SRV:[b]64bit:[/b] - [2016.10.08 02:23:39 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
  168. SRV:[b]64bit:[/b] - [2016.10.08 02:23:39 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
  169. SRV:[b]64bit:[/b] - [2016.10.08 02:23:39 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
  170. SRV:[b]64bit:[/b] - [2016.10.08 02:23:39 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
  171. SRV:[b]64bit:[/b] - [2016.10.08 02:23:39 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
  172. SRV:[b]64bit:[/b] - [2016.10.08 02:23:38 | 000,023,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
  173. SRV:[b]64bit:[/b] - [2016.07.17 00:09:32 | 001,227,264 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\AgentService.exe -- (UevAgentService)
  174. SRV:[b]64bit:[/b] - [2016.07.17 00:09:24 | 000,197,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  175. SRV:[b]64bit:[/b] - [2016.07.16 13:43:50 | 000,082,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
  176. SRV:[b]64bit:[/b] - [2016.07.16 13:43:47 | 000,436,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService)
  177. SRV:[b]64bit:[/b] - [2016.07.16 13:43:18 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
  178. SRV:[b]64bit:[/b] - [2016.07.16 13:42:42 | 000,088,576 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
  179. SRV:[b]64bit:[/b] - [2016.07.16 13:42:39 | 000,161,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll -- (shpamsvc)
  180. SRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 000,057,344 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice)
  181. SRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 000,055,296 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
  182. SRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,183,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dcpsvc.dll -- (DcpSvc)
  183. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,827,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
  184. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,096,768 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
  185. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,093,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
  186. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (WpnUserService_585c6)
  187. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_585c6)
  188. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_585c6)
  189. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_585c6)
  190. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_585c6)
  191. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_585c6)
  192. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (CDPUserSvc_585c6)
  193. SRV:[b]64bit:[/b] - [2016.07.16 13:42:23 | 000,366,592 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc)
  194. SRV:[b]64bit:[/b] - [2016.07.16 13:42:20 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
  195. SRV:[b]64bit:[/b] - [2016.07.16 13:42:16 | 000,287,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TieringEngineService.exe -- (TieringEngineService)
  196. SRV:[b]64bit:[/b] - [2016.07.16 13:42:16 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
  197. SRV:[b]64bit:[/b] - [2016.07.16 13:42:16 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
  198. SRV:[b]64bit:[/b] - [2016.07.16 13:42:13 | 000,590,848 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter)
  199. SRV:[b]64bit:[/b] - [2016.07.16 13:42:12 | 000,519,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
  200. SRV:[b]64bit:[/b] - [2016.07.16 13:42:12 | 000,052,224 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\MessagingService.dll -- (MessagingService)
  201. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,574,976 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\tileobjserver.dll -- (tiledatamodelsvc)
  202. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,387,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
  203. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,358,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
  204. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,339,968 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
  205. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,234,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService)
  206. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,202,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc)
  207. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,177,664 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBrokerSvc)
  208. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,074,240 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\WpnUserService.dll -- (WpnUserService)
  209. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,037,376 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc)
  210. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,034,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
  211. SRV:[b]64bit:[/b] - [2016.07.16 13:42:07 | 001,159,680 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave)
  212. SRV:[b]64bit:[/b] - [2016.07.16 13:42:06 | 000,729,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC)
  213. SRV:[b]64bit:[/b] - [2016.07.16 13:42:06 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter)
  214. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 000,197,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
  215. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 000,152,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc)
  216. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 000,140,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode)
  217. SRV:[b]64bit:[/b] - [2016.07.16 13:42:04 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hvhostsvc.dll -- (HvHost)
  218. SRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,321,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
  219. SRV:[b]64bit:[/b] - [2015.12.31 01:08:16 | 000,881,152 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R)
  220. SRV:[b]64bit:[/b] - [2015.12.31 01:08:11 | 000,415,520 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  221. SRV:[b]64bit:[/b] - [2015.12.31 01:08:11 | 000,223,520 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
  222. SRV:[b]64bit:[/b] - [2015.05.21 07:50:40 | 001,272,560 | ---- | M] (Disc Soft Ltd) [On_Demand | Stopped] -- C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe -- (Disc Soft Lite Bus Service)
  223. SRV - [2017.03.28 08:21:33 | 003,318,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  224. SRV - [2017.03.28 07:32:32 | 000,298,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
  225. SRV - [2017.03.28 06:48:06 | 000,483,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar)
  226. SRV - [2017.03.23 02:52:28 | 001,590,560 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  227. SRV - [2017.03.04 08:16:20 | 000,968,704 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc)
  228. SRV - [2017.02.28 19:21:32 | 000,173,512 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  229. SRV - [2017.02.24 20:03:42 | 001,659,592 | ---- | M] (Foxit Software Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe -- (FoxitReaderService)
  230. SRV - [2016.12.10 01:16:12 | 003,370,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository)
  231. SRV - [2016.11.10 19:27:54 | 002,237,392 | ---- | M] (Micro-Star INT'L CO., LTD.) [Auto | Running] -- C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe -- (MSI_LiveUpdate_Service)
  232. SRV - [2016.11.02 21:15:35 | 000,301,552 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  233. SRV - [2016.10.09 23:33:48 | 000,177,376 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe -- (iumsvc)
  234. SRV - [2016.10.08 02:23:38 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
  235. SRV - [2016.09.19 09:03:53 | 000,035,448 | ---- | M] (MSFree Inc.) [Auto | Running] -- C:\ProgramData\KMSAuto\bin\KMSSS.exe -- (KMSEmulator)
  236. SRV - [2016.07.17 13:05:42 | 000,014,464 | ---- | M] () [Auto | Running] -- C:\ProgramData\KMSAuto\bin\TunMirror2.exe -- (TunMirror)
  237. SRV - [2016.03.25 00:57:32 | 000,087,368 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe -- (HTCMonitorService)
  238. SRV - [2016.03.16 20:54:34 | 000,166,912 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
  239. SRV - [2015.12.31 01:17:30 | 000,171,480 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
  240. SRV - [2015.12.31 01:17:23 | 000,019,216 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe -- (XTU3SERVICE)
  241. SRV - [2015.12.31 01:10:40 | 000,105,296 | ---- | M] (MSI) [Auto | Running] -- C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe -- (MSI_FastBoot)
  242. SRV - [2015.12.31 01:08:20 | 000,335,872 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe -- (Intel(R)
  243. SRV - [2015.12.06 15:50:14 | 000,143,144 | ---- | M] (Dropbox, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdatem)
  244. SRV - [2015.12.06 15:50:14 | 000,143,144 | ---- | M] (Dropbox, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdate)
  245.  
  246.  
  247. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  248.  
  249. DRV:[b]64bit:[/b] - [2017.03.28 07:37:09 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
  250. DRV:[b]64bit:[/b] - [2017.03.28 07:36:52 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
  251. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,178,056 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
  252. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,132,848 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
  253. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,107,344 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\edevmon.sys -- (edevmon)
  254. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,101,648 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
  255. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,078,192 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
  256. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,050,752 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\ekbdflt.sys -- (ekbdflt)
  257. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,014,880 | ---- | M] (ESET) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\eelam.sys -- (eelam)
  258. DRV:[b]64bit:[/b] - [2017.03.04 09:24:27 | 000,108,384 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
  259. DRV:[b]64bit:[/b] - [2017.03.04 09:15:25 | 000,063,328 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
  260. DRV:[b]64bit:[/b] - [2017.03.04 09:08:59 | 000,130,912 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
  261. DRV:[b]64bit:[/b] - [2017.03.04 09:07:55 | 000,557,400 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
  262. DRV:[b]64bit:[/b] - [2017.03.04 08:34:51 | 000,258,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip)
  263. DRV:[b]64bit:[/b] - [2017.03.04 08:27:56 | 000,719,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
  264. DRV:[b]64bit:[/b] - [2016.12.21 00:45:51 | 000,040,984 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt)
  265. DRV:[b]64bit:[/b] - [2016.12.14 17:15:48 | 000,377,184 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
  266. DRV:[b]64bit:[/b] - [2016.12.14 01:02:13 | 000,033,872 | ---- | M] (AnvSoft Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\anvsnddrv.sys -- (anvsnddrv)
  267. DRV:[b]64bit:[/b] - [2016.12.10 01:15:53 | 000,219,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
  268. DRV:[b]64bit:[/b] - [2016.11.19 22:04:52 | 000,024,056 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv)
  269. DRV:[b]64bit:[/b] - [2016.11.19 22:04:52 | 000,010,848 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv)
  270. DRV:[b]64bit:[/b] - [2016.11.10 19:48:36 | 000,206,416 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\VBoxNetLwf.sys -- (VBoxNetLwf)
  271. DRV:[b]64bit:[/b] - [2016.11.10 19:48:34 | 000,132,120 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp6.sys -- (VBoxNetAdp)
  272. DRV:[b]64bit:[/b] - [2016.11.09 22:10:31 | 000,048,992 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iorate.sys -- (iorate)
  273. DRV:[b]64bit:[/b] - [2016.11.02 21:16:23 | 000,481,768 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  274. DRV:[b]64bit:[/b] - [2016.11.02 21:15:39 | 007,966,192 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  275. DRV:[b]64bit:[/b] - [2016.11.02 21:05:53 | 000,227,328 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
  276. DRV:[b]64bit:[/b] - [2016.11.02 21:05:44 | 000,118,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg)
  277. DRV:[b]64bit:[/b] - [2016.10.12 18:30:04 | 000,064,352 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\MegaSas2i.sys -- (megasas2i)
  278. DRV:[b]64bit:[/b] - [2016.10.12 18:29:41 | 000,279,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  279. DRV:[b]64bit:[/b] - [2016.10.08 02:23:47 | 000,127,328 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppVStrm.sys -- (AppvStrm)
  280. DRV:[b]64bit:[/b] - [2016.10.08 02:23:42 | 000,073,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hvservice.sys -- (hvservice)
  281. DRV:[b]64bit:[/b] - [2016.10.08 02:23:41 | 000,119,648 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcifs.sys -- (wcifs)
  282. DRV:[b]64bit:[/b] - [2016.10.08 02:23:38 | 000,118,112 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
  283. DRV:[b]64bit:[/b] - [2016.10.08 02:23:38 | 000,081,760 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
  284. DRV:[b]64bit:[/b] - [2016.10.08 02:23:38 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
  285. DRV:[b]64bit:[/b] - [2016.10.08 02:23:38 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid)
  286. DRV:[b]64bit:[/b] - [2016.10.08 02:19:03 | 000,199,008 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
  287. DRV:[b]64bit:[/b] - [2016.09.09 16:23:58 | 000,018,624 | ---- | M] (/n software, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpnpbus.sys -- (vpnpbus)
  288. DRV:[b]64bit:[/b] - [2016.09.09 16:23:46 | 000,460,992 | ---- | M] (/n software, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cbfs6.sys -- (cbfs6)
  289. DRV:[b]64bit:[/b] - [2016.07.23 23:00:17 | 000,129,152 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
  290. DRV:[b]64bit:[/b] - [2016.07.17 00:09:43 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  291. DRV:[b]64bit:[/b] - [2016.07.17 00:09:36 | 000,179,040 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mssecflt.sys -- (MsSecFlt)
  292. DRV:[b]64bit:[/b] - [2016.07.17 00:09:32 | 000,040,288 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\UevAgentDriver.sys -- (UevAgentDriver)
  293. DRV:[b]64bit:[/b] - [2016.07.17 00:09:24 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  294. DRV:[b]64bit:[/b] - [2016.07.17 00:09:22 | 000,123,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
  295. DRV:[b]64bit:[/b] - [2016.07.17 00:09:19 | 000,157,024 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppvVemgr.sys -- (AppvVemgr)
  296. DRV:[b]64bit:[/b] - [2016.07.17 00:09:19 | 000,141,152 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppvVfs.sys -- (AppvVfs)
  297. DRV:[b]64bit:[/b] - [2016.07.16 13:44:01 | 000,030,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
  298. DRV:[b]64bit:[/b] - [2016.07.16 13:43:06 | 000,123,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
  299. DRV:[b]64bit:[/b] - [2016.07.16 13:43:04 | 000,290,144 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
  300. DRV:[b]64bit:[/b] - [2016.07.16 13:43:04 | 000,044,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
  301. DRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 000,125,440 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
  302. DRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
  303. DRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,078,336 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
  304. DRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\applockerfltr.sys -- (applockerfltr)
  305. DRV:[b]64bit:[/b] - [2016.07.16 13:42:35 | 000,928,608 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1)
  306. DRV:[b]64bit:[/b] - [2016.07.16 13:42:28 | 000,107,032 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
  307. DRV:[b]64bit:[/b] - [2016.07.16 13:42:28 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
  308. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,263,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000)
  309. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,201,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
  310. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,151,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
  311. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,108,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmTcpciCx.sys -- (UcmTcpciCx0101)
  312. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,095,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
  313. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,079,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
  314. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,078,336 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt)
  315. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,074,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
  316. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
  317. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,053,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
  318. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,035,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IndirectKmd.sys -- (IndirectKmd)
  319. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,031,584 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  320. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
  321. DRV:[b]64bit:[/b] - [2016.07.16 13:42:23 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
  322. DRV:[b]64bit:[/b] - [2016.07.16 13:42:22 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS)
  323. DRV:[b]64bit:[/b] - [2016.07.16 13:42:18 | 000,088,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
  324. DRV:[b]64bit:[/b] - [2016.07.16 13:42:12 | 000,120,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\irda.sys -- (irda)
  325. DRV:[b]64bit:[/b] - [2016.07.16 13:42:11 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
  326. DRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,168,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
  327. DRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,156,000 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
  328. DRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,070,144 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\registry.sys -- (clreg)
  329. DRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,066,560 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcnfs.sys -- (wcnfs)
  330. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,210,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
  331. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,126,816 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
  332. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,090,624 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NetAdapterCx.sys -- (NetAdapterCx)
  333. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,088,576 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt)
  334. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (tsusbflt)
  335. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,045,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx)
  336. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf)
  337. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,535,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
  338. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,381,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
  339. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,137,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
  340. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,096,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
  341. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,095,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
  342. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
  343. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
  344. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
  345. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
  346. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,017,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
  347. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,176,384 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C)
  348. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,081,408 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iai2c.sys -- (iai2c)
  349. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,064,512 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2.sys -- (iaLPSS2i_GPIO2)
  350. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
  351. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,050,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
  352. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
  353. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
  354. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,034,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  355. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,033,280 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iagpio.sys -- (iagpio)
  356. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
  357. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
  358. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 002,104,160 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4vx64.sys -- (cht4vbd)
  359. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 001,135,456 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
  360. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,842,584 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
  361. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,673,120 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
  362. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,526,176 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus)
  363. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,346,976 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4sx64.sys -- (cht4iscsi)
  364. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
  365. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  366. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,123,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\scmdisk0101.sys -- (scmdisk0101)
  367. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,108,896 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr)
  368. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,107,360 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
  369. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,105,824 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
  370. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,101,216 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
  371. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,088,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\scmbus.sys -- (scmbus)
  372. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,083,296 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  373. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,082,776 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
  374. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,077,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
  375. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,069,120 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
  376. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,064,864 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs)
  377. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  378. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
  379. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,061,792 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i)
  380. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,058,720 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i)
  381. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,032,096 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs)
  382. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,032,096 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad)
  383. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  384. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
  385. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,026,976 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  386. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiDev.sys -- (AcpiDev)
  387. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,016,224 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volume.sys -- (volume)
  388. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
  389. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
  390. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
  391. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn.sys -- (bcmfn)
  392. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 003,814,400 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rtwlanu_oldIC.sys -- (RtlWlanu_OldIC)
  393. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 003,418,976 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  394. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 002,224,128 | ---- | M] (MediaTek Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28ux.sys -- (netr28ux)
  395. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 000,533,856 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  396. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 000,048,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
  397. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
  398. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
  399. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
  400. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  401. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
  402. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys -- (CompositeBus)
  403. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,035,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  404. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
  405. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
  406. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
  407. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgid.sys -- (vmgid)
  408. DRV:[b]64bit:[/b] - [2016.06.18 16:56:52 | 000,041,088 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
  409. DRV:[b]64bit:[/b] - [2016.04.25 00:35:58 | 000,221,824 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
  410. DRV:[b]64bit:[/b] - [2016.03.17 01:54:42 | 000,121,800 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HtcVComV64.sys -- (HtcVCom32)
  411. DRV:[b]64bit:[/b] - [2016.03.17 01:49:06 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)
  412. DRV:[b]64bit:[/b] - [2016.03.16 20:54:35 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\htcnprot.sys -- (htcnprot)
  413. DRV:[b]64bit:[/b] - [2015.12.31 01:20:28 | 000,889,584 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rt640x64.sys -- (rt640x64)
  414. DRV:[b]64bit:[/b] - [2015.12.31 01:17:24 | 000,039,736 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ICCWDT.sys -- (ICCWDT)
  415. DRV:[b]64bit:[/b] - [2015.12.31 01:07:52 | 000,184,608 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverW8x64.sys -- (MEIx64)
  416. DRV:[b]64bit:[/b] - [2015.11.22 02:35:42 | 000,029,688 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dfx12x64.sys -- (DFX12)
  417. DRV:[b]64bit:[/b] - [2015.11.22 02:35:42 | 000,028,008 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dfx11_1x64.sys -- (DFX11_1)
  418. DRV:[b]64bit:[/b] - [2015.11.09 01:26:33 | 000,027,136 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ptun0901.sys -- (ptun0901)
  419. DRV:[b]64bit:[/b] - [2015.09.19 22:06:35 | 000,025,880 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiCtlDrv.sys -- (AcpiCtlDrv)
  420. DRV:[b]64bit:[/b] - [2015.09.09 20:31:43 | 000,042,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
  421. DRV:[b]64bit:[/b] - [2015.07.08 14:33:12 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
  422. DRV:[b]64bit:[/b] - [2015.06.24 16:34:10 | 000,063,840 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\XtuAcpiDriver.sys -- (XtuAcpiDriver)
  423. DRV:[b]64bit:[/b] - [2015.05.23 21:52:39 | 000,030,264 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtlitescsibus.sys -- (dtlitescsibus)
  424. DRV:[b]64bit:[/b] - [2015.05.03 20:58:37 | 000,037,376 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetmodem64.sys -- (ANDNetModem)
  425. DRV:[b]64bit:[/b] - [2015.05.03 20:58:37 | 000,030,720 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetdiag64.sys -- (AndNetDiag)
  426. DRV:[b]64bit:[/b] - [2015.05.03 20:58:37 | 000,020,992 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetbus64.sys -- (AndnetBus)
  427. DRV:[b]64bit:[/b] - [2015.03.15 21:46:14 | 000,157,944 | ---- | M] (Ray Hinchliffe) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SIVX64.sys -- (SIVDriver)
  428. DRV:[b]64bit:[/b] - [2014.05.27 11:21:08 | 000,044,744 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ISCTD.sys -- (ISCT)
  429. DRV:[b]64bit:[/b] - [2014.05.27 11:21:06 | 000,025,800 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\INETMON.sys -- (INETMON)
  430. DRV:[b]64bit:[/b] - [2013.08.22 14:40:24 | 000,040,664 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
  431. DRV:[b]64bit:[/b] - [2012.10.03 17:14:56 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
  432. DRV:[b]64bit:[/b] - [2012.07.15 07:18:16 | 000,030,720 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tapoas.sys -- (tapoas)
  433. DRV - [2016.12.16 02:24:02 | 000,029,616 | ---- | M] (WiseCleaner.com) [Kernel | On_Demand | Stopped] -- C:\Windows\WiseRegNotify.sys -- (WiseRegNotify)
  434. DRV - [2016.11.19 22:04:52 | 000,021,496 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv)
  435. DRV - [2016.11.19 22:04:52 | 000,010,208 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv)
  436. DRV - [2016.07.16 13:41:50 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys -- (CompositeBus)
  437. DRV - [2015.12.31 01:10:40 | 000,013,368 | ---- | M] (MSI) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys -- (NTIOLib_FastBoot)
  438. DRV - [2015.12.24 21:15:50 | 000,014,800 | ---- | M] (wisecleaner.com) [Kernel | On_Demand | Stopped] -- C:\Windows\WiseHDInfo64.dll -- (WiseHDInfo)
  439. DRV - [2015.05.28 14:42:20 | 000,030,224 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys -- (iocbios2)
  440.  
  441.  
  442. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  443.  
  444.  
  445. [color=#E56717]========== Internet Explorer ==========[/color]
  446.  
  447. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  448. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
  449. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  450. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  451. IE:[b]64bit:[/b] - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  452. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  453. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  454. IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
  455. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  456. IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  457.  
  458. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
  459. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  460. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl-PL
  461. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 3A 8A 98 BE C3 56 D1 01  [binary data]
  462. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = DC 2F 5A 8D B5 87 D2 01  [binary data]
  463. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = 01 00 00 00 48 00 00 00 8C AF 6B 63 77 B4 5C 0F 5C B5 3E F1 FE C9 4B D3 73 1E 88 AE FC FC 20 0D 69 B4 9D F1 C3 C2 CC 87 BA 3A 5C 75 68 C6 48 EE 80 E5 6A CD C4 1F 4C 1A EF 7D F7 74 4B 53 8A BD 57 8A B0 59 E2 5B 2D 41 21 3C 43 69 5E 97 1A B4 02 00 00 00 10 00 00 00 38 57 59 46 34 25 32 62 4A 2F 41 7A 45 25 33 64  [Binary data over 200 bytes]
  464. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  465. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
  466. IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  467. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  468. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
  469.  
  470.  
  471. [color=#E56717]========== FireFox ==========[/color]
  472.  
  473. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.40.2: C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  474. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2: C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll (Oracle Corporation)
  475. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll ( Microsoft Corporation)
  476. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\Microsoft Office\Office16\NPSPWRAP.DLL (Microsoft Corporation)
  477. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@unity3d.com/UnityPlayer64,version=1.0: C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll (Unity Technologies ApS)
  478. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.4: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  479. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.0: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  480. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  481. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  482. FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
  483. FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
  484. FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
  485. FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
  486. FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
  487. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  488. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  489. FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
  490. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll ( Microsoft Corporation)
  491. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\Microsoft Office\Office16\NPSPWRAP.DLL (Microsoft Corporation)
  492. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  493. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll (Google Inc.)
  494. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll (Google Inc.)
  495.  
  496. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 52.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components
  497. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 52.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
  498. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 52.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components
  499. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 52.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
  500.  
  501. [2015.06.11 18:53:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tomasz\AppData\Roaming\mozilla\Extensions
  502. [2017.02.22 23:56:40 | 000,039,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll
  503.  
  504. [color=#E56717]========== Chrome  ==========[/color]
  505.  
  506. CHR - plugin: Error reading preferences file
  507.  
  508. O1 HOSTS File: ([2017.04.20 09:18:30 | 000,000,876 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  509. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll (Oracle Corporation)
  510. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll (Oracle Corporation)
  511. O2 - BHO: (Microsoft OneDrive for Business Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\Microsoft Office\Office16\GROOVEEX.DLL (Microsoft Corporation)
  512. O4 - HKLM..\Run: [Dropbox] C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.)
  513. O4 - HKCU..\Run: [DAEMON Tools Lite Automount] C:\Program Files\DAEMON Tools Lite\DTAgent.exe (Disc Soft Ltd)
  514. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  515. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  516. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
  517. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
  518. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
  519. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
  520. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
  521. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  522. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  523. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
  524. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  525. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
  526. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleNetIDList = 1
  527. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
  528. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer:  =
  529. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
  530. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
  531. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
  532. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 1 = Yandex.Disk
  533. O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Office15\EXCEL.EXE/3000 File not found
  534. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE/3000 File not found
  535. O8:[b]64bit:[/b] - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm File not found
  536. O8:[b]64bit:[/b] - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm File not found
  537. O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\Root\Office16\ONBttnIE.dll/105 File not found
  538. O8:[b]64bit:[/b] - Extra context menu item: Wyślij &do programu OneNote - res://C:\Program Files\Microsoft Office 15\Office15\ONBttnIE.dll/105 File not found
  539. O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Office15\EXCEL.EXE/3000 File not found
  540. O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE/3000 File not found
  541. O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm File not found
  542. O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm File not found
  543. O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\Root\Office16\ONBttnIE.dll/105 File not found
  544. O8 - Extra context menu item: Wyślij &do programu OneNote - res://C:\Program Files\Microsoft Office 15\Office15\ONBttnIE.dll/105 File not found
  545. O9:[b]64bit:[/b] - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found
  546. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found
  547. O13[b]64bit:[/b] - gopher Prefix: missing
  548. O13 - gopher Prefix: missing
  549. O15:[b]64bit:[/b] - ..Trusted Domains: eset.com ([help] http in Trusted sites)
  550. O15 - HKLM\..Trusted Domains: eset.com ([help] http in Trusted sites)
  551. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.62 62.179.1.63
  552. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4d7fad59-66ad-4718-a066-88db187445bd}: DhcpNameServer = 62.179.1.62 62.179.1.63
  553. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{a0de790d-a7a1-451d-908b-8e8a2ae6bb24}: DhcpNameServer = 62.179.1.62 62.179.1.63
  554. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{b0d28f23-e87f-46a5-9561-5f0956081941}: DhcpNameServer = 192.168.8.1
  555. O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
  556. O18:[b]64bit:[/b] - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
  557. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  558. O18 - Protocol\Handler\ms-help - No CLSID value found
  559. O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
  560. O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
  561. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
  562. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  563. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
  564. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)
  565. O21:[b]64bit:[/b] - SSODL: EldosMountNotificator-cbfs6 - {964A16C1-E57F-4FB9-BAC5-B284E55231C6} - C:\Windows\SysNative\cbfsMntNtf6.dll (/n software, Inc.)
  566. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  567. O21 - SSODL: EldosMountNotificator-cbfs6 - {964A16C1-E57F-4FB9-BAC5-B284E55231C6} - C:\Windows\SysWOW64\cbfsMntNtf6.dll (/n software, Inc.)
  568. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  569. O22:[b]64bit:[/b] - SharedTaskScheduler: {964A16C1-E57F-4FB9-BAC5-B284E55231C6} - Virtual Storage Mount Notification - C:\Windows\SysNative\cbfsMntNtf6.dll (/n software, Inc.)
  570. O22 - SharedTaskScheduler: {964A16C1-E57F-4FB9-BAC5-B284E55231C6} - Virtual Storage Mount Notification - C:\Windows\SysWOW64\cbfsMntNtf6.dll (/n software, Inc.)
  571. O32 - HKLM CDRom: AutoRun - 1
  572. O32 - AutoRun File - [2016.03.30 17:54:15 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
  573. O34 - HKLM BootExecute: (autocheck autochk *)
  574. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  575. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  576. O35 - HKLM\..comfile [open] -- "%1" %*
  577. O35 - HKLM\..exefile [open] -- "%1" %*
  578. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  579. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  580. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  581. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  582. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  583. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  584.  
  585. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  586.  
  587. [2017.04.21 00:42:13 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Tomasz\Desktop\OTL.exe
  588. [2017.04.21 00:28:40 | 000,000,000 | -H-D | C] -- C:\OneDriveTemp
  589. [2017.04.21 00:18:52 | 000,000,000 | -H-D | C] -- C:\$WINDOWS.~BT
  590. [2017.04.20 19:14:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
  591. [2017.04.20 12:00:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  592. [2017.04.20 11:55:52 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\AppData\Local\UNP
  593. [2017.04.20 11:31:56 | 000,000,000 | ---D | C] -- C:\ProgramData\KMSAuto
  594. [2017.04.20 11:31:03 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Narzędzia pakietu Microsoft Office 2016
  595. [2017.04.20 11:28:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
  596. [2017.04.20 11:28:34 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
  597. [2017.04.20 11:28:23 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\AppData\Roaming\Google
  598. [2017.04.20 11:26:50 | 000,000,000 | RH-D | C] -- C:\MSOCache
  599. [2017.04.20 11:25:31 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\AppData\Roaming\ESET
  600. [2017.04.20 11:08:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Toolkit Final
  601. [2017.04.20 10:55:11 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\Desktop\LibreOfficePortable
  602. [2017.04.20 10:52:29 | 000,000,000 | ---D | C] -- C:\KVRT_Data
  603. [2017.04.20 10:28:43 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\AppData\Local\ESET
  604. [2017.04.20 10:24:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
  605. [2017.04.20 10:24:11 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
  606. [2017.04.20 10:24:11 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
  607. [2017.04.20 09:07:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender Device Management
  608. [2017.04.20 09:06:10 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\AppData\Roaming\Bitdefender
  609. [2017.04.20 09:05:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender
  610. [2017.04.20 08:52:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Martau
  611. [2017.04.20 08:52:42 | 000,000,000 | ---D | C] -- C:\Program Files\Total Uninstall 6
  612. [2017.04.20 04:31:26 | 000,000,000 | ---D | C] -- C:\Kaspersky Rescue Disk 10.0
  613. [2017.04.20 01:02:42 | 000,000,000 | -H-D | C] -- C:\$Windows.~WS
  614. [2017.04.20 00:38:24 | 004,797,120 | ---- | C] (COMODO) -- C:\ProgramData\cisE3A2.exe
  615. [2017.04.20 00:38:24 | 000,365,248 | ---- | C] (COMODO) -- C:\ProgramData\cmdres.dll
  616. [2017.04.20 00:34:52 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\Doctor Web
  617. [2017.04.19 11:35:48 | 000,000,000 | -H-D | C] -- C:\$AV_ASW
  618. [2017.04.19 11:23:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AV
  619. [2017.04.19 11:23:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AV
  620. [2017.04.19 11:18:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KMSPico
  621. [2017.04.19 09:53:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\KMSServerService
  622. [2017.04.17 17:14:04 | 000,048,944 | ---- | C] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\DbxSvc.exe
  623. [2017.04.17 01:05:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\UNP
  624. [2017.04.17 01:05:34 | 000,000,000 | ---D | C] -- C:\Program Files\UNP
  625. [2017.04.14 18:40:42 | 000,835,576 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
  626. [2017.04.14 18:40:42 | 000,177,656 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
  627. [2017.04.12 23:48:47 | 006,667,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
  628. [2017.04.12 23:48:46 | 003,307,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
  629. [2017.04.12 23:48:45 | 005,721,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
  630. [2017.04.12 23:48:45 | 001,277,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll
  631. [2017.04.12 23:48:45 | 001,202,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
  632. [2017.04.12 23:48:44 | 006,109,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll
  633. [2017.04.12 23:48:44 | 002,994,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys
  634. [2017.04.12 23:48:44 | 000,981,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetcore.dll
  635. [2017.04.12 23:48:43 | 004,614,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
  636. [2017.04.12 23:48:43 | 001,851,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
  637. [2017.04.12 23:48:43 | 001,414,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll
  638. [2017.04.12 23:48:43 | 000,542,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Connectivity.dll
  639. [2017.04.12 23:48:42 | 007,468,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
  640. [2017.04.12 23:48:42 | 001,564,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\quartz.dll
  641. [2017.04.12 23:48:42 | 001,344,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
  642. [2017.04.12 23:48:42 | 000,861,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
  643. [2017.04.12 23:48:42 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepsync.dll
  644. [2017.04.12 23:48:41 | 001,431,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
  645. [2017.04.12 23:48:41 | 000,641,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCRecvSrc.dll
  646. [2017.04.12 23:48:41 | 000,545,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
  647. [2017.04.12 23:48:41 | 000,315,744 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll
  648. [2017.04.12 23:48:40 | 005,685,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
  649. [2017.04.12 23:48:40 | 004,023,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
  650. [2017.04.12 23:48:40 | 000,653,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.AccountsControl.dll
  651. [2017.04.12 23:48:39 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.dll
  652. [2017.04.12 23:48:39 | 001,004,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Input.Inking.dll
  653. [2017.04.12 23:48:39 | 000,975,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
  654. [2017.04.12 23:48:39 | 000,557,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\StoreAgent.dll
  655. [2017.04.12 23:48:39 | 000,034,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CompPkgSup.dll
  656. [2017.04.12 23:48:38 | 003,106,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstsc.exe
  657. [2017.04.12 23:48:38 | 001,360,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll
  658. [2017.04.12 23:48:38 | 000,846,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll
  659. [2017.04.12 23:48:38 | 000,827,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll
  660. [2017.04.12 23:48:38 | 000,576,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wer.dll
  661. [2017.04.12 23:48:38 | 000,116,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudExperienceHostCommon.dll
  662. [2017.04.12 23:48:38 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\updatepolicy.dll
  663. [2017.04.12 23:48:37 | 001,221,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Audio.dll
  664. [2017.04.12 23:48:37 | 001,077,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Editing.dll
  665. [2017.04.12 23:48:37 | 000,895,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Streaming.dll
  666. [2017.04.12 23:48:37 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ShareHost.dll
  667. [2017.04.12 23:48:37 | 000,306,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.MediaControl.dll
  668. [2017.04.12 23:48:37 | 000,263,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Storage.ApplicationData.dll
  669. [2017.04.12 23:48:37 | 000,167,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscapi.dll
  670. [2017.04.12 23:48:37 | 000,136,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudExperienceHostUser.dll
  671. [2017.04.12 23:48:36 | 002,646,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CertEnroll.dll
  672. [2017.04.12 23:48:36 | 000,901,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Bluetooth.dll
  673. [2017.04.12 23:48:36 | 000,675,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.dll
  674. [2017.04.12 23:48:36 | 000,654,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApiPublic.dll
  675. [2017.04.12 23:48:36 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.AllJoyn.dll
  676. [2017.04.12 23:48:36 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataTimeUtil.dll
  677. [2017.04.12 23:48:35 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Phone.dll
  678. [2017.04.12 23:48:35 | 001,013,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.Http.dll
  679. [2017.04.12 23:48:35 | 000,819,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppContracts.dll
  680. [2017.04.12 23:48:35 | 000,691,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBroker.dll
  681. [2017.04.12 23:48:35 | 000,589,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Sensors.dll
  682. [2017.04.12 23:48:35 | 000,400,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToManager.dll
  683. [2017.04.12 23:48:35 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dlnashext.dll
  684. [2017.04.12 23:48:34 | 001,232,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Maps.dll
  685. [2017.04.12 23:48:34 | 000,783,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TSWorkspace.dll
  686. [2017.04.12 23:48:34 | 000,746,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdtcprx.dll
  687. [2017.04.12 23:48:34 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RTMediaFrame.dll
  688. [2017.04.12 23:48:34 | 000,129,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.SerialCommunication.dll
  689. [2017.04.12 23:48:33 | 000,795,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MiracastReceiver.dll
  690. [2017.04.12 23:48:33 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidcli.dll
  691. [2017.04.12 23:48:33 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.HumanInterfaceDevice.dll
  692. [2017.04.12 23:48:32 | 001,656,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Perception.dll
  693. [2017.04.12 23:48:32 | 000,862,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncCore.dll
  694. [2017.04.12 23:48:32 | 000,620,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.dll
  695. [2017.04.12 23:48:32 | 000,468,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.InkControls.dll
  696. [2017.04.12 23:48:32 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Bluetooth.dll
  697. [2017.04.12 23:48:32 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepapi.dll
  698. [2017.04.12 23:48:32 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BasicRender.sys
  699. [2017.04.12 23:48:31 | 001,247,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Globalization.dll
  700. [2017.04.12 23:48:31 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.BackgroundTransfer.dll
  701. [2017.04.12 23:48:31 | 000,713,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wpnapps.dll
  702. [2017.04.12 23:48:31 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.WiFi.dll
  703. [2017.04.12 23:48:31 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.System.UserDeviceAssociation.dll
  704. [2017.04.12 23:48:30 | 002,682,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\netshell.dll
  705. [2017.04.12 23:48:30 | 001,534,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Graphics.Printing.3D.dll
  706. [2017.04.12 23:48:30 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Web.Core.dll
  707. [2017.04.12 23:48:30 | 000,390,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CredProvDataModel.dll
  708. [2017.04.12 23:48:30 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ErrorDetails.dll
  709. [2017.04.12 23:48:30 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
  710. [2017.04.12 23:48:30 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmjpegdec.dll
  711. [2017.04.12 23:48:29 | 000,670,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.PointOfService.dll
  712. [2017.04.12 23:48:29 | 000,500,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Graphics.Printing.dll
  713. [2017.04.12 23:48:29 | 000,498,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mbsmsapi.dll
  714. [2017.04.12 23:48:29 | 000,431,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\efswrt.dll
  715. [2017.04.12 23:48:29 | 000,262,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Picker.dll
  716. [2017.04.12 23:48:29 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserMgrProxy.dll
  717. [2017.04.12 23:48:28 | 000,711,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
  718. [2017.04.12 23:48:28 | 000,609,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Import.dll
  719. [2017.04.12 23:48:28 | 000,598,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.dll
  720. [2017.04.12 23:48:28 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Gaming.Input.dll
  721. [2017.04.12 23:48:28 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Geolocation.dll
  722. [2017.04.12 23:48:28 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToDevice.dll
  723. [2017.04.12 23:48:28 | 000,315,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Gaming.XboxLive.Storage.dll
  724. [2017.04.12 23:48:28 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Usb.dll
  725. [2017.04.12 23:48:28 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CryptoWinRT.dll
  726. [2017.04.12 23:48:27 | 000,886,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aadtb.dll
  727. [2017.04.12 23:48:27 | 000,769,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ipsecsnp.dll
  728. [2017.04.12 23:48:27 | 000,562,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.SmartCards.dll
  729. [2017.04.12 23:48:27 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.WiFiDirect.dll
  730. [2017.04.12 23:48:27 | 000,299,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RADCUI.dll
  731. [2017.04.12 23:48:27 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.dll
  732. [2017.04.12 23:48:27 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.System.SystemManagement.dll
  733. [2017.04.12 23:48:26 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ipsmsnap.dll
  734. [2017.04.12 23:48:26 | 000,426,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Wallet.dll
  735. [2017.04.12 23:48:26 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Midi.dll
  736. [2017.04.12 23:48:26 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataAccountApis.dll
  737. [2017.04.12 23:48:26 | 000,298,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Management.dll
  738. [2017.04.12 23:48:26 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AboveLockAppHost.dll
  739. [2017.04.12 23:48:26 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apds.dll
  740. [2017.04.12 23:48:26 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Scanners.dll
  741. [2017.04.12 23:48:26 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDeviceRegistration.dll
  742. [2017.04.12 23:48:26 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Lights.dll
  743. [2017.04.12 23:48:25 | 006,474,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mspaint.exe
  744. [2017.04.12 23:48:25 | 001,243,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.FaceAnalysis.dll
  745. [2017.04.12 23:48:25 | 001,196,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscui.cpl
  746. [2017.04.12 23:48:25 | 000,255,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\unimdm.tsp
  747. [2017.04.12 23:48:25 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.LockScreen.dll
  748. [2017.04.12 23:48:25 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vaultcli.dll
  749. [2017.04.12 23:48:25 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Devices.dll
  750. [2017.04.12 23:48:24 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\deviceaccess.dll
  751. [2017.04.12 23:48:24 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToReceiver.dll
  752. [2017.04.12 23:48:24 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WwaApi.dll
  753. [2017.04.12 23:48:24 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Identity.Provider.dll
  754. [2017.04.12 23:48:24 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DisplayManager.dll
  755. [2017.04.12 23:48:24 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinRtTracing.dll
  756. [2017.04.12 23:48:24 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppointmentActivation.dll
  757. [2017.04.12 23:48:24 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BasicDisplay.sys
  758. [2017.04.12 23:48:24 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBrokerUI.dll
  759. [2017.04.12 23:48:23 | 000,787,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sbe.dll
  760. [2017.04.12 23:48:23 | 000,747,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Ocr.dll
  761. [2017.04.12 23:48:23 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Radios.dll
  762. [2017.04.12 23:48:23 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dialclient.dll
  763. [2017.04.12 23:48:23 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AuthBroker.dll
  764. [2017.04.12 23:48:23 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryClient.dll
  765. [2017.04.12 23:48:23 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthManagerProxy.dll
  766. [2017.04.12 23:48:22 | 003,198,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll
  767. [2017.04.12 23:48:22 | 001,255,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AzureSettingSyncProvider.dll
  768. [2017.04.12 23:48:22 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dmenrollengine.dll
  769. [2017.04.12 23:48:22 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SyncSettings.dll
  770. [2017.04.12 23:48:22 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Core.dll
  771. [2017.04.12 23:48:22 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.ServiceDiscovery.Dnssd.dll
  772. [2017.04.12 23:48:22 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthTokenBrokerExt.dll
  773. [2017.04.12 23:48:21 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.LowLevel.dll
  774. [2017.04.12 23:48:21 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
  775. [2017.04.12 23:48:21 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExSMime.dll
  776. [2017.04.12 23:48:21 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallAgent.exe
  777. [2017.04.12 23:48:21 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.Diagnostics.dll
  778. [2017.04.12 23:48:21 | 000,157,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\enrollmentapi.dll
  779. [2017.04.12 23:48:21 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.HostName.dll
  780. [2017.04.12 23:48:20 | 003,733,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_47.dll
  781. [2017.04.12 23:48:20 | 002,138,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputService.dll
  782. [2017.04.12 23:48:20 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe
  783. [2017.04.12 23:48:20 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallAgentUserBroker.exe
  784. [2017.04.12 23:48:20 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usoapi.dll
  785. [2017.04.12 23:48:20 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\odbcconf.dll
  786. [2017.04.12 23:48:19 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
  787. [2017.04.12 23:48:19 | 000,037,376 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll
  788. [2017.04.12 23:48:18 | 000,551,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
  789. [2017.04.12 23:48:17 | 004,596,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xpsrchvw.exe
  790. [2017.04.12 23:48:17 | 002,424,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Perception.dll
  791. [2017.04.12 23:48:17 | 001,266,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Input.Inking.dll
  792. [2017.04.12 23:48:16 | 003,520,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xpsrchvw.exe
  793. [2017.04.12 23:48:16 | 001,424,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Maps.dll
  794. [2017.04.12 23:48:16 | 001,369,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Phone.dll
  795. [2017.04.12 23:48:16 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.InkControls.dll
  796. [2017.04.12 23:48:16 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Wallet.dll
  797. [2017.04.12 23:48:16 | 000,467,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Gaming.XboxLive.Storage.dll
  798. [2017.04.12 23:48:16 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
  799. [2017.04.12 23:48:15 | 001,080,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Ocr.dll
  800. [2017.04.12 23:48:15 | 000,963,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WebcamUi.dll
  801. [2017.04.12 23:48:15 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WebcamUi.dll
  802. [2017.04.12 23:48:15 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.dll
  803. [2017.04.12 23:48:15 | 000,358,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.dll
  804. [2017.04.12 23:48:15 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WwaApi.dll
  805. [2017.04.12 23:48:15 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinRtTracing.dll
  806. [2017.04.12 23:48:14 | 008,168,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
  807. [2017.04.12 23:48:14 | 001,388,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Cred.dll
  808. [2017.04.12 23:48:14 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.Diagnostics.dll
  809. [2017.04.12 23:48:14 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Core.dll
  810. [2017.04.12 23:48:14 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
  811. [2017.04.12 23:48:12 | 007,655,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll
  812. [2017.04.12 23:48:12 | 007,220,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
  813. [2017.04.12 23:48:12 | 003,778,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
  814. [2017.04.12 23:48:11 | 001,981,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
  815. [2017.04.12 23:48:11 | 001,848,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
  816. [2017.04.12 23:48:10 | 001,702,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll
  817. [2017.04.12 23:48:10 | 001,302,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
  818. [2017.04.12 23:48:09 | 004,149,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
  819. [2017.04.12 23:48:09 | 002,213,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll
  820. [2017.04.12 23:48:09 | 001,072,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetcore.dll
  821. [2017.04.12 23:48:08 | 008,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll
  822. [2017.04.12 23:48:08 | 006,288,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
  823. [2017.04.12 23:48:07 | 002,390,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\smartscreen.exe
  824. [2017.04.12 23:48:07 | 001,988,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
  825. [2017.04.12 23:48:07 | 000,773,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll
  826. [2017.04.12 23:48:07 | 000,549,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
  827. [2017.04.12 23:48:07 | 000,456,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\puiobj.dll
  828. [2017.04.12 23:48:07 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkBindingEngineMigPlugin.dll
  829. [2017.04.12 23:48:07 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
  830. [2017.04.12 23:48:07 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
  831. [2017.04.12 23:48:07 | 000,218,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LsaIso.exe
  832. [2017.04.12 23:48:06 | 001,860,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
  833. [2017.04.12 23:48:06 | 001,403,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Editing.dll
  834. [2017.04.12 23:48:06 | 001,145,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EmailApis.dll
  835. [2017.04.12 23:48:06 | 001,078,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Streaming.dll
  836. [2017.04.12 23:48:06 | 000,999,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TSWorkspace.dll
  837. [2017.04.12 23:48:06 | 000,748,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StoreAgent.dll
  838. [2017.04.12 23:48:06 | 000,415,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpshell.exe
  839. [2017.04.12 23:48:06 | 000,387,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpps.dll
  840. [2017.04.12 23:48:06 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
  841. [2017.04.12 23:48:05 | 004,260,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
  842. [2017.04.12 23:48:05 | 001,293,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
  843. [2017.04.12 23:48:05 | 000,947,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVP9DEC.dll
  844. [2017.04.12 23:48:05 | 000,765,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Sensors.dll
  845. [2017.04.12 23:48:05 | 000,360,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsAdminFlows.exe
  846. [2017.04.12 23:48:05 | 000,299,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpinit.exe
  847. [2017.04.12 23:48:05 | 000,198,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscapi.dll
  848. [2017.04.12 23:48:05 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataTimeUtil.dll
  849. [2017.04.12 23:48:05 | 000,097,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Credentials.UI.CredentialPicker.dll
  850. [2017.04.12 23:48:05 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\musdialoghandlers.dll
  851. [2017.04.12 23:48:04 | 000,671,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mbsmsapi.dll
  852. [2017.04.12 23:48:04 | 000,611,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Graphics.Printing.dll
  853. [2017.04.12 23:48:04 | 000,590,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efswrt.dll
  854. [2017.04.12 23:48:04 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RTMediaFrame.dll
  855. [2017.04.12 23:48:04 | 000,092,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
  856. [2017.04.12 23:48:03 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Audio.dll
  857. [2017.04.12 23:48:03 | 000,864,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnapps.dll
  858. [2017.04.12 23:48:03 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApiPublic.dll
  859. [2017.04.12 23:48:03 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AccountsRt.dll
  860. [2017.04.12 23:48:03 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.DeviceEncryptionHandlers.dll
  861. [2017.04.12 23:48:02 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Scanners.dll
  862. [2017.04.12 23:47:53 | 000,779,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cscui.dll
  863. [2017.04.12 23:47:53 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsApi.dll
  864. [2017.04.12 23:47:53 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXTaskFactory.dll
  865. [2017.04.12 23:47:53 | 000,360,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpencom.dll
  866. [2017.04.12 23:47:53 | 000,284,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AboveLockAppHost.dll
  867. [2017.04.12 23:47:53 | 000,252,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Identity.Provider.dll
  868. [2017.04.12 23:47:53 | 000,119,808 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecureAssessmentHandlers.dll
  869. [2017.04.12 23:47:53 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.ServiceDiscovery.Dnssd.dll
  870. [2017.04.12 23:47:52 | 001,220,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscui.cpl
  871. [2017.04.12 23:47:52 | 001,131,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\localspl.dll
  872. [2017.04.12 23:47:52 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\unimdm.tsp
  873. [2017.04.12 23:47:51 | 001,908,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AzureSettingSyncProvider.dll
  874. [2017.04.12 23:47:51 | 000,260,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgentUserBroker.exe
  875. [2017.04.12 23:47:51 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RdpRelayTransport.dll
  876. [2017.04.12 23:47:51 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgent.exe
  877. [2017.04.12 23:47:51 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpninprc.dll
  878. [2017.04.12 23:47:49 | 022,568,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
  879. [2017.04.12 23:47:47 | 008,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
  880. [2017.04.12 23:47:45 | 018,364,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
  881. [2017.04.12 23:47:45 | 001,738,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WindowsCodecs.dll
  882. [2017.04.12 23:47:44 | 006,045,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
  883. [2017.04.12 23:47:44 | 001,633,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\quartz.dll
  884. [2017.04.12 23:47:43 | 001,513,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
  885. [2017.04.12 23:47:43 | 001,276,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ole32.dll
  886. [2017.04.12 23:47:43 | 000,975,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\HelpPane.exe
  887. [2017.04.12 23:47:43 | 000,759,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
  888. [2017.04.12 23:47:42 | 002,095,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
  889. [2017.04.12 23:47:42 | 001,637,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
  890. [2017.04.12 23:47:42 | 001,157,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
  891. [2017.04.12 23:47:42 | 000,937,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCRecvSrc.dll
  892. [2017.04.12 23:47:42 | 000,913,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.dll
  893. [2017.04.12 23:47:42 | 000,912,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SmartCards.dll
  894. [2017.04.12 23:47:42 | 000,603,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContentDeliveryManager.Utilities.dll
  895. [2017.04.12 23:47:42 | 000,402,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
  896. [2017.04.12 23:47:40 | 001,275,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Bluetooth.dll
  897. [2017.04.12 23:47:40 | 000,472,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll
  898. [2017.04.12 23:47:39 | 001,589,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdtctm.dll
  899. [2017.04.12 23:47:39 | 000,650,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXService.dll
  900. [2017.04.12 23:47:39 | 000,635,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FlightSettings.dll
  901. [2017.04.12 23:47:38 | 000,949,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.PointOfService.dll
  902. [2017.04.12 23:47:38 | 000,774,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.dll
  903. [2017.04.12 23:47:38 | 000,692,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CellularAPI.dll
  904. [2017.04.12 23:47:38 | 000,568,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.LowLevel.dll
  905. [2017.04.12 23:47:38 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Picker.dll
  906. [2017.04.12 23:47:38 | 000,328,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Storage.ApplicationData.dll
  907. [2017.04.12 23:47:37 | 007,786,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
  908. [2017.04.12 23:47:37 | 005,611,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d2d1.dll
  909. [2017.04.12 23:47:37 | 000,908,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
  910. [2017.04.12 23:47:37 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Web.Core.dll
  911. [2017.04.12 23:47:37 | 000,306,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieproxy.dll
  912. [2017.04.12 23:47:37 | 000,241,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHost.dll
  913. [2017.04.12 23:47:37 | 000,160,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostBroker.dll
  914. [2017.04.12 23:47:36 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.Http.dll
  915. [2017.04.12 23:47:36 | 000,981,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.OnlineId.dll
  916. [2017.04.12 23:47:36 | 000,701,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Connectivity.dll
  917. [2017.04.12 23:47:36 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.WiFiDirect.dll
  918. [2017.04.12 23:47:36 | 000,437,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Usb.dll
  919. [2017.04.12 23:47:36 | 000,343,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SmartCards.Phone.dll
  920. [2017.04.12 23:47:36 | 000,239,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafpos.dll
  921. [2017.04.12 23:47:36 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SerialCommunication.dll
  922. [2017.04.12 23:47:36 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Lights.dll
  923. [2017.04.12 23:47:35 | 002,026,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
  924. [2017.04.12 23:47:35 | 000,875,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBroker.dll
  925. [2017.04.12 23:47:35 | 000,539,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToManager.dll
  926. [2017.04.12 23:47:35 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToDevice.dll
  927. [2017.04.12 23:47:35 | 000,431,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpAXHolder.dll
  928. [2017.04.12 23:47:34 | 002,208,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Graphics.Printing.3D.dll
  929. [2017.04.12 23:47:34 | 000,924,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.BackgroundTransfer.dll
  930. [2017.04.12 23:47:34 | 000,467,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Geolocation.dll
  931. [2017.04.12 23:47:34 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.HumanInterfaceDevice.dll
  932. [2017.04.12 23:47:34 | 000,223,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
  933. [2017.04.12 23:47:34 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FontProvider.dll
  934. [2017.04.12 23:47:33 | 001,509,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
  935. [2017.04.12 23:47:33 | 000,311,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SyncSettings.dll
  936. [2017.04.12 23:47:33 | 000,276,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtrans.dll
  937. [2017.04.12 23:47:33 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DisplayManager.dll
  938. [2017.04.12 23:47:33 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmjpegdec.dll
  939. [2017.04.12 23:47:32 | 000,661,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WpcWebFilter.dll
  940. [2017.04.12 23:47:32 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToReceiver.dll
  941. [2017.04.12 23:47:32 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceDirectoryClient.dll
  942. [2017.04.12 23:47:32 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Printers.dll
  943. [2017.04.12 23:47:32 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
  944. [2017.04.12 23:47:31 | 001,231,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dosvc.dll
  945. [2017.04.12 23:47:31 | 001,121,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadtb.dll
  946. [2017.04.12 23:47:31 | 001,105,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MiracastReceiver.dll
  947. [2017.04.12 23:47:31 | 000,261,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\indexeddbserver.dll
  948. [2017.04.12 23:47:31 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\flvprophandler.dll
  949. [2017.04.12 23:47:31 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
  950. [2017.04.12 23:47:31 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DdcWnsListener.dll
  951. [2017.04.12 23:47:30 | 004,474,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_47.dll
  952. [2017.04.12 23:47:30 | 000,945,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcWebFilter.dll
  953. [2017.04.12 23:47:30 | 000,425,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadcloudap.dll
  954. [2017.04.12 23:47:30 | 000,418,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BlockedShutdown.dll
  955. [2017.04.12 23:47:30 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CastLaunch.dll
  956. [2017.04.12 23:47:30 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\odbcconf.dll
  957. [2017.04.12 23:47:29 | 001,040,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NaturalLanguage6.dll
  958. [2017.04.12 23:47:25 | 003,612,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
  959. [2017.04.12 23:47:24 | 003,542,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
  960. [2017.04.12 23:47:24 | 002,278,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
  961. [2017.04.12 23:47:24 | 001,359,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModel.dll
  962. [2017.04.12 23:47:24 | 001,010,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll
  963. [2017.04.12 23:47:24 | 000,754,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVOrchestration.dll
  964. [2017.04.12 23:47:23 | 001,692,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll
  965. [2017.04.12 23:47:23 | 001,643,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.dll
  966. [2017.04.12 23:47:23 | 001,569,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32full.dll
  967. [2017.04.12 23:47:23 | 000,628,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
  968. [2017.04.12 23:47:23 | 000,573,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVCatalog.dll
  969. [2017.04.12 23:47:23 | 000,379,232 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll
  970. [2017.04.12 23:47:22 | 009,130,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
  971. [2017.04.12 23:47:22 | 000,896,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.AccountsControl.dll
  972. [2017.04.12 23:47:21 | 007,216,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll
  973. [2017.04.12 23:47:21 | 000,989,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe
  974. [2017.04.12 23:47:21 | 000,379,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepsync.dll
  975. [2017.04.12 23:47:21 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.LockScreen.dll
  976. [2017.04.12 23:47:21 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatepolicy.dll
  977. [2017.04.12 23:47:20 | 001,600,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppobjs.dll
  978. [2017.04.12 23:47:20 | 001,267,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll
  979. [2017.04.12 23:47:20 | 001,100,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe
  980. [2017.04.12 23:47:20 | 000,966,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sbe.dll
  981. [2017.04.12 23:47:20 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ShareHost.dll
  982. [2017.04.12 23:47:20 | 000,651,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.AllJoyn.dll
  983. [2017.04.12 23:47:20 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\qedit.dll
  984. [2017.04.12 23:47:20 | 000,146,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostCommon.dll
  985. [2017.04.12 23:47:20 | 000,038,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompPkgSup.dll
  986. [2017.04.12 23:47:19 | 002,914,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CertEnroll.dll
  987. [2017.04.12 23:47:19 | 001,060,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppContracts.dll
  988. [2017.04.12 23:47:19 | 000,956,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.desktop.dll
  989. [2017.04.12 23:47:19 | 000,682,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll
  990. [2017.04.12 23:47:19 | 000,372,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.MediaControl.dll
  991. [2017.04.12 23:47:19 | 000,368,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneBackupHandler.dll
  992. [2017.04.12 23:47:19 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dlnashext.dll
  993. [2017.04.12 23:47:19 | 000,178,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostUser.dll
  994. [2017.04.12 23:47:18 | 004,749,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
  995. [2017.04.12 23:47:18 | 001,617,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appraiser.dll
  996. [2017.04.12 23:47:18 | 001,064,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncCore.dll
  997. [2017.04.12 23:47:18 | 000,547,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Gaming.Input.dll
  998. [2017.04.12 23:47:18 | 000,460,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Midi.dll
  999. [2017.04.12 23:47:18 | 000,343,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\invagent.dll
  1000. [2017.04.12 23:47:18 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmcertinst.exe
  1001. [2017.04.12 23:47:18 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.System.SystemManagement.dll
  1002. [2017.04.12 23:47:17 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Import.dll
  1003. [2017.04.12 23:47:17 | 000,764,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
  1004. [2017.04.12 23:47:17 | 000,565,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\devinv.dll
  1005. [2017.04.12 23:47:17 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll
  1006. [2017.04.12 23:47:17 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CryptoWinRT.dll
  1007. [2017.04.12 23:47:17 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\psmsrv.dll
  1008. [2017.04.12 23:47:17 | 000,142,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
  1009. [2017.04.12 23:47:17 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Devices.dll
  1010. [2017.04.12 23:47:17 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.System.UserDeviceAssociation.dll
  1011. [2017.04.12 23:47:16 | 001,586,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Globalization.dll
  1012. [2017.04.12 23:47:16 | 001,294,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aeinv.dll
  1013. [2017.04.12 23:47:16 | 000,407,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Management.dll
  1014. [2017.04.12 23:47:16 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserMgrProxy.dll
  1015. [2017.04.12 23:47:16 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Family.SyncEngine.dll
  1016. [2017.04.12 23:47:16 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDeviceRegistration.dll
  1017. [2017.04.12 23:47:16 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.WiFi.dll
  1018. [2017.04.12 23:47:16 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepapi.dll
  1019. [2017.04.12 23:47:15 | 000,329,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\deviceaccess.dll
  1020. [2017.04.12 23:47:15 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Radios.dll
  1021. [2017.04.12 23:47:15 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryClient.dll
  1022. [2017.04.12 23:47:14 | 000,869,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
  1023. [2017.04.12 23:47:14 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AuthBroker.dll
  1024. [2017.04.12 23:47:14 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_ClosedCaptioning.dll
  1025. [2017.04.12 23:47:14 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDeviceRegistration.Ngc.dll
  1026. [2017.04.12 23:47:14 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vss_ps.dll
  1027. [2017.04.12 23:47:13 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudDomainJoinDataModelServer.dll
  1028. [2017.04.12 23:47:13 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ErrorDetails.dll
  1029. [2017.04.12 23:47:13 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthTokenBrokerExt.dll
  1030. [2017.04.12 23:47:13 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBrokerUI.dll
  1031. [2017.04.12 23:47:12 | 005,114,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll
  1032. [2017.04.12 23:47:12 | 000,775,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe
  1033. [2017.04.12 23:47:12 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbonRes.dll
  1034. [2017.04.12 23:47:12 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
  1035. [2017.04.12 23:47:12 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleacc.dll
  1036. [2017.04.12 23:47:12 | 000,289,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeveloperOptionsSettingsHandlers.dll
  1037. [2017.04.12 23:47:12 | 000,267,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vaultcli.dll
  1038. [2017.04.12 23:47:12 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enrollmentapi.dll
  1039. [2017.04.12 23:47:12 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Family.Client.dll
  1040. [2017.04.12 23:47:12 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winsrv.dll
  1041. [2017.04.12 23:47:12 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthManagerProxy.dll
  1042. [2017.04.12 23:47:12 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSManMigrationPlugin.dll
  1043. [2017.04.12 23:47:11 | 000,045,056 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll
  1044. [2017.04.10 09:53:42 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\Documents\DRUKI Gofin
  1045. [2017.04.10 09:53:40 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\AppData\Roaming\GofinDruki
  1046. [2017.04.02 08:15:32 | 000,087,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UNPUXWorker.exe
  1047. [2017.03.27 13:25:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeaZip UNRAR5 plugin
  1048. [2017.03.26 12:50:50 | 000,000,000 | ---D | C] -- C:\Debloat-Windows-10-master
  1049. [2017.03.24 16:03:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
  1050. [2017.03.24 09:53:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
  1051. [2017.03.22 23:21:46 | 000,045,672 | ---- | C] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-stable.sys
  1052. [2017.03.22 23:21:46 | 000,045,672 | ---- | C] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-dev.sys
  1053. [2017.03.22 23:21:46 | 000,045,672 | ---- | C] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-canary.sys
  1054. [2016.11.05 01:18:22 | 025,397,336 | ---- | C] (One Click Root) -- C:\Users\Tomasz\AppData\Local\TempOneClickRoot.exe
  1055.  
  1056. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  1057.  
  1058. [2017.04.21 00:42:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Tomasz\Desktop\OTL.exe
  1059. [2017.04.21 00:34:09 | 005,341,874 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
  1060. [2017.04.21 00:34:09 | 002,835,514 | ---- | M] () -- C:\WINDOWS\SysNative\perfh015.dat
  1061. [2017.04.21 00:34:09 | 001,071,410 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
  1062. [2017.04.21 00:34:09 | 000,996,480 | ---- | M] () -- C:\WINDOWS\SysNative\perfh010.dat
  1063. [2017.04.21 00:34:09 | 000,878,092 | ---- | M] () -- C:\WINDOWS\SysNative\perfc015.dat
  1064. [2017.04.21 00:34:09 | 000,460,024 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
  1065. [2017.04.21 00:34:09 | 000,335,798 | ---- | M] () -- C:\WINDOWS\SysNative\perfc010.dat
  1066. [2017.04.21 00:31:18 | 000,031,533 | ---- | M] () -- C:\Users\Tomasz\Desktop\cz2.jpg
  1067. [2017.04.21 00:30:57 | 000,034,711 | ---- | M] () -- C:\Users\Tomasz\Desktop\CZ1.jpg
  1068. [2017.04.21 00:30:10 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  1069. [2017.04.21 00:28:19 | 000,000,180 | ---- | M] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
  1070. [2017.04.21 00:28:09 | 016,777,216 | -HS- | M] () -- C:\swapfile.sys
  1071. [2017.04.21 00:28:08 | 1660,108,800 | -HS- | M] () -- C:\hiberfil.sys
  1072. [2017.04.20 11:42:40 | 000,353,360 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
  1073. [2017.04.20 10:24:13 | 000,002,062 | ---- | M] () -- C:\Users\Public\Desktop\Ochrona bankowości internetowej.lnk
  1074. [2017.04.20 10:22:42 | 000,029,868 | ---- | M] () -- C:\ProgramData\agent.uninstall.1492676559.bdinstall.bin
  1075. [2017.04.20 09:58:36 | 000,220,886 | ---- | M] () -- C:\ProgramData\cl.uninstall.1492675021.bdinstall.bin
  1076. [2017.04.20 09:57:19 | 000,036,220 | ---- | M] () -- C:\ProgramData\dm.uninstall.1492675029.bdinstall.bin
  1077. [2017.04.20 09:18:30 | 000,000,876 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\hosts
  1078. [2017.04.20 09:07:34 | 000,029,905 | ---- | M] () -- C:\ProgramData\agent.update.1492672051.bdinstall.bin
  1079. [2017.04.20 09:07:24 | 000,056,809 | ---- | M] () -- C:\ProgramData\dm.1492672035.bdinstall.bin
  1080. [2017.04.20 09:07:06 | 000,464,063 | ---- | M] () -- C:\ProgramData\cl.1492671892.bdinstall.bin
  1081. [2017.04.20 09:02:32 | 000,047,293 | ---- | M] () -- C:\ProgramData\agent.1492671751.bdinstall.bin
  1082. [2017.04.20 08:52:45 | 000,000,016 | ---- | M] () -- C:\ProgramData\mntemp
  1083. [2017.04.20 08:21:52 | 000,000,214 | ---- | M] () -- C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job
  1084. [2017.04.20 08:12:43 | 000,001,937 | ---- | M] () -- C:\Users\Tomasz\Desktop\Ten komputer.lnk
  1085. [2017.04.20 02:26:22 | 001,474,832 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\sfi.dat
  1086. [2017.04.20 02:26:22 | 000,241,722 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\fvstore.dat
  1087. [2017.04.17 17:14:04 | 000,048,944 | ---- | M] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\DbxSvc.exe
  1088. [2017.04.05 07:58:07 | 000,365,248 | ---- | M] (COMODO) -- C:\ProgramData\cmdres.dll
  1089. [2017.04.05 07:53:19 | 004,797,120 | ---- | M] (COMODO) -- C:\ProgramData\cisE3A2.exe
  1090. [2017.04.03 11:54:39 | 004,089,296 | ---- | M] () -- C:\Users\Tomasz\Desktop\AdwCleaner 6.045.exe
  1091. [2017.04.02 08:15:32 | 000,087,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UNPUXWorker.exe
  1092. [2017.04.01 20:52:38 | 000,835,576 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
  1093. [2017.04.01 20:52:38 | 000,177,656 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
  1094. [2017.03.28 09:10:28 | 000,315,744 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll
  1095. [2017.03.28 08:36:11 | 000,142,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
  1096. [2017.03.28 08:36:08 | 000,343,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\invagent.dll
  1097. [2017.03.28 08:36:05 | 001,617,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appraiser.dll
  1098. [2017.03.28 08:36:05 | 001,294,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aeinv.dll
  1099. [2017.03.28 08:36:05 | 000,565,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\devinv.dll
  1100. [2017.03.28 08:35:59 | 000,379,232 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll
  1101. [2017.03.28 08:32:26 | 000,198,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscapi.dll
  1102. [2017.03.28 08:29:11 | 002,213,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll
  1103. [2017.03.28 08:28:05 | 007,786,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
  1104. [2017.03.28 08:28:03 | 000,773,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll
  1105. [2017.03.28 08:26:23 | 000,573,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVCatalog.dll
  1106. [2017.03.28 08:26:21 | 000,603,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContentDeliveryManager.Utilities.dll
  1107. [2017.03.28 08:26:20 | 000,754,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVOrchestration.dll
  1108. [2017.03.28 08:26:11 | 000,218,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LsaIso.exe
  1109. [2017.03.28 08:22:07 | 002,681,200 | ---- | M] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
  1110. [2017.03.28 08:21:27 | 000,167,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscapi.dll
  1111. [2017.03.28 08:20:43 | 002,717,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PrintConfig.dll
  1112. [2017.03.28 08:20:11 | 000,764,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
  1113. [2017.03.28 08:15:53 | 002,048,496 | ---- | M] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
  1114. [2017.03.28 08:12:54 | 000,328,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Storage.ApplicationData.dll
  1115. [2017.03.28 08:11:30 | 000,360,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsAdminFlows.exe
  1116. [2017.03.28 08:11:14 | 001,860,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
  1117. [2017.03.28 08:11:11 | 001,738,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WindowsCodecs.dll
  1118. [2017.03.28 08:11:09 | 000,402,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
  1119. [2017.03.28 08:10:53 | 000,178,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostUser.dll
  1120. [2017.03.28 08:10:44 | 001,157,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
  1121. [2017.03.28 08:10:42 | 000,146,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostCommon.dll
  1122. [2017.03.28 08:10:41 | 007,220,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
  1123. [2017.03.28 08:10:29 | 001,293,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
  1124. [2017.03.28 08:09:48 | 000,097,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Credentials.UI.CredentialPicker.dll
  1125. [2017.03.28 08:09:18 | 000,682,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll
  1126. [2017.03.28 08:08:48 | 001,100,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe
  1127. [2017.03.28 08:08:43 | 001,267,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll
  1128. [2017.03.28 08:08:39 | 000,989,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe
  1129. [2017.03.28 08:07:35 | 000,263,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Storage.ApplicationData.dll
  1130. [2017.03.28 08:06:47 | 000,092,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
  1131. [2017.03.28 08:05:31 | 004,260,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
  1132. [2017.03.28 08:05:29 | 008,168,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
  1133. [2017.03.28 08:05:17 | 001,702,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll
  1134. [2017.03.28 08:05:15 | 001,848,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
  1135. [2017.03.28 08:05:14 | 001,988,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
  1136. [2017.03.28 08:05:14 | 001,072,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetcore.dll
  1137. [2017.03.28 08:05:11 | 001,302,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
  1138. [2017.03.28 08:04:58 | 001,431,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
  1139. [2017.03.28 08:04:54 | 001,276,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ole32.dll
  1140. [2017.03.28 08:04:53 | 000,136,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudExperienceHostUser.dll
  1141. [2017.03.28 08:04:39 | 000,116,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudExperienceHostCommon.dll
  1142. [2017.03.28 08:04:38 | 005,721,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
  1143. [2017.03.28 08:04:32 | 000,975,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
  1144. [2017.03.28 08:04:31 | 000,861,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
  1145. [2017.03.28 08:04:31 | 000,241,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHost.dll
  1146. [2017.03.28 08:04:30 | 000,160,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostBroker.dll
  1147. [2017.03.28 08:04:17 | 001,600,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppobjs.dll
  1148. [2017.03.28 08:02:55 | 000,576,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wer.dll
  1149. [2017.03.28 08:02:01 | 000,846,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll
  1150. [2017.03.28 08:00:09 | 001,569,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32full.dll
  1151. [2017.03.28 08:00:05 | 000,628,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
  1152. [2017.03.28 07:59:11 | 006,667,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
  1153. [2017.03.28 07:59:01 | 004,023,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
  1154. [2017.03.28 07:58:59 | 001,851,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
  1155. [2017.03.28 07:58:53 | 001,360,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll
  1156. [2017.03.28 07:58:53 | 001,344,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
  1157. [2017.03.28 07:58:53 | 000,981,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetcore.dll
  1158. [2017.03.28 07:58:52 | 001,277,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll
  1159. [2017.03.28 07:58:50 | 001,202,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
  1160. [2017.03.28 07:58:45 | 000,387,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpps.dll
  1161. [2017.03.28 07:58:44 | 000,372,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.MediaControl.dll
  1162. [2017.03.28 07:53:54 | 001,414,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll
  1163. [2017.03.28 07:53:54 | 000,545,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
  1164. [2017.03.28 07:52:00 | 000,306,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.MediaControl.dll
  1165. [2017.03.28 07:48:07 | 005,685,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
  1166. [2017.03.28 07:44:50 | 007,216,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll
  1167. [2017.03.28 07:42:28 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataTimeUtil.dll
  1168. [2017.03.28 07:42:06 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usoapi.dll
  1169. [2017.03.28 07:41:51 | 000,372,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXTaskFactory.dll
  1170. [2017.03.28 07:41:51 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\odbcconf.dll
  1171. [2017.03.28 07:41:49 | 000,299,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpinit.exe
  1172. [2017.03.28 07:41:47 | 000,415,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpshell.exe
  1173. [2017.03.28 07:40:58 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthManagerProxy.dll
  1174. [2017.03.28 07:40:53 | 000,037,376 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll
  1175. [2017.03.28 07:40:19 | 000,224,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExSMime.dll
  1176. [2017.03.28 07:39:48 | 000,141,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Radios.dll
  1177. [2017.03.28 07:39:17 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBrokerUI.dll
  1178. [2017.03.28 07:38:37 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
  1179. [2017.03.28 07:38:36 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthTokenBrokerExt.dll
  1180. [2017.03.28 07:38:26 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataTimeUtil.dll
  1181. [2017.03.28 07:38:17 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbonRes.dll
  1182. [2017.03.28 07:38:05 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDeviceRegistration.dll
  1183. [2017.03.28 07:37:58 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DisplayManager.dll
  1184. [2017.03.28 07:37:47 | 000,177,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.Diagnostics.dll
  1185. [2017.03.28 07:37:46 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.HostName.dll
  1186. [2017.03.28 07:37:39 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DdcWnsListener.dll
  1187. [2017.03.28 07:37:29 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apds.dll
  1188. [2017.03.28 07:37:29 | 000,097,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.System.SystemManagement.dll
  1189. [2017.03.28 07:37:29 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthManagerProxy.dll
  1190. [2017.03.28 07:37:29 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\musdialoghandlers.dll
  1191. [2017.03.28 07:37:19 | 000,255,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\unimdm.tsp
  1192. [2017.03.28 07:37:09 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BasicRender.sys
  1193. [2017.03.28 07:37:05 | 022,568,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
  1194. [2017.03.28 07:36:56 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\odbcconf.dll
  1195. [2017.03.28 07:36:52 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BasicDisplay.sys
  1196. [2017.03.28 07:36:50 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
  1197. [2017.03.28 07:36:49 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinRtTracing.dll
  1198. [2017.03.28 07:36:42 | 000,094,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryClient.dll
  1199. [2017.03.28 07:36:38 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.ServiceDiscovery.Dnssd.dll
  1200. [2017.03.28 07:36:34 | 000,129,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.SerialCommunication.dll
  1201. [2017.03.28 07:36:33 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.System.UserDeviceAssociation.dll
  1202. [2017.03.28 07:36:30 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
  1203. [2017.03.28 07:36:19 | 000,045,056 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll
  1204. [2017.03.28 07:36:13 | 000,237,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.Diagnostics.dll
  1205. [2017.03.28 07:36:06 | 000,769,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ipsecsnp.dll
  1206. [2017.03.28 07:36:02 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RdpRelayTransport.dll
  1207. [2017.03.28 07:35:59 | 000,124,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.System.SystemManagement.dll
  1208. [2017.03.28 07:35:59 | 000,093,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
  1209. [2017.03.28 07:35:53 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.WiFi.dll
  1210. [2017.03.28 07:35:48 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
  1211. [2017.03.28 07:35:46 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
  1212. [2017.03.28 07:35:31 | 000,505,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe
  1213. [2017.03.28 07:35:28 | 000,090,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Printers.dll
  1214. [2017.03.28 07:35:24 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserMgrProxy.dll
  1215. [2017.03.28 07:35:19 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Gaming.Input.dll
  1216. [2017.03.28 07:35:17 | 000,113,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Lights.dll
  1217. [2017.03.28 07:35:16 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.LockScreen.dll
  1218. [2017.03.28 07:35:11 | 000,118,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppointmentActivation.dll
  1219. [2017.03.28 07:35:10 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DisplayManager.dll
  1220. [2017.03.28 07:35:09 | 000,315,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Gaming.XboxLive.Storage.dll
  1221. [2017.03.28 07:35:03 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallAgent.exe
  1222. [2017.03.28 07:35:03 | 000,156,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Family.Client.dll
  1223. [2017.03.28 07:35:02 | 000,374,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.LowLevel.dll
  1224. [2017.03.28 07:34:55 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmcertinst.exe
  1225. [2017.03.28 07:34:50 | 000,259,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Family.SyncEngine.dll
  1226. [2017.03.28 07:34:49 | 000,129,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_ClosedCaptioning.dll
  1227. [2017.03.28 07:34:47 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthTokenBrokerExt.dll
  1228. [2017.03.28 07:34:43 | 000,299,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataAccountApis.dll
  1229. [2017.03.28 07:34:43 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\unimdm.tsp
  1230. [2017.03.28 07:34:32 | 000,237,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SyncSettings.dll
  1231. [2017.03.28 07:34:20 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.ServiceDiscovery.Dnssd.dll
  1232. [2017.03.28 07:34:07 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Core.dll
  1233. [2017.03.28 07:34:01 | 000,117,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AuthBroker.dll
  1234. [2017.03.28 07:33:59 | 000,557,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\StoreAgent.dll
  1235. [2017.03.28 07:33:56 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.WiFi.dll
  1236. [2017.03.28 07:33:55 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinRtTracing.dll
  1237. [2017.03.28 07:33:54 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDeviceRegistration.Ngc.dll
  1238. [2017.03.28 07:33:51 | 000,436,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ipsmsnap.dll
  1239. [2017.03.28 07:33:51 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.System.UserDeviceAssociation.dll
  1240. [2017.03.28 07:33:49 | 000,265,728 | ---- | M] () -- C:\WINDOWS\SysWow64\Windows.Perception.Stub.dll
  1241. [2017.03.28 07:33:49 | 000,196,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDeviceRegistration.dll
  1242. [2017.03.28 07:33:44 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceDirectoryClient.dll
  1243. [2017.03.28 07:33:40 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Core.dll
  1244. [2017.03.28 07:33:18 | 000,467,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Gaming.XboxLive.Storage.dll
  1245. [2017.03.28 07:33:07 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryClient.dll
  1246. [2017.03.28 07:33:06 | 000,483,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.AllJoyn.dll
  1247. [2017.03.28 07:33:02 | 000,670,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.PointOfService.dll
  1248. [2017.03.28 07:33:02 | 000,609,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Import.dll
  1249. [2017.03.28 07:32:49 | 001,243,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.FaceAnalysis.dll
  1250. [2017.03.28 07:32:48 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallAgentUserBroker.exe
  1251. [2017.03.28 07:32:45 | 000,306,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieproxy.dll
  1252. [2017.03.28 07:32:40 | 000,185,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Identity.Provider.dll
  1253. [2017.03.28 07:32:37 | 000,426,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Wallet.dll
  1254. [2017.03.28 07:32:37 | 000,386,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.WiFiDirect.dll
  1255. [2017.03.28 07:32:37 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.HumanInterfaceDevice.dll
  1256. [2017.03.28 07:32:32 | 000,298,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Management.dll
  1257. [2017.03.28 07:32:28 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WwaApi.dll
  1258. [2017.03.28 07:32:27 | 000,332,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Bluetooth.dll
  1259. [2017.03.28 07:32:25 | 000,186,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Radios.dll
  1260. [2017.03.28 07:32:23 | 000,635,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FlightSettings.dll
  1261. [2017.03.28 07:32:20 | 000,368,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneBackupHandler.dll
  1262. [2017.03.28 07:32:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\deviceaccess.dll
  1263. [2017.03.28 07:32:20 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vaultcli.dll
  1264. [2017.03.28 07:32:17 | 000,562,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.SmartCards.dll
  1265. [2017.03.28 07:32:14 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepsync.dll
  1266. [2017.03.28 07:32:07 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Scanners.dll
  1267. [2017.03.28 07:32:03 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepapi.dll
  1268. [2017.03.28 07:31:58 | 000,418,304 | ---- | M] () -- C:\WINDOWS\SysNative\Windows.Perception.Stub.dll
  1269. [2017.03.28 07:31:51 | 000,547,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Gaming.Input.dll
  1270. [2017.03.28 07:31:51 | 000,431,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\efswrt.dll
  1271. [2017.03.28 07:31:51 | 000,390,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CredProvDataModel.dll
  1272. [2017.03.28 07:31:43 | 000,498,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mbsmsapi.dll
  1273. [2017.03.28 07:31:31 | 000,211,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgent.exe
  1274. [2017.03.28 07:31:25 | 000,257,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudDomainJoinDataModelServer.dll
  1275. [2017.03.28 07:31:23 | 000,360,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpencom.dll
  1276. [2017.03.28 07:31:18 | 000,418,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BlockedShutdown.dll
  1277. [2017.03.28 07:31:18 | 000,343,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SmartCards.Phone.dll
  1278. [2017.03.28 07:31:15 | 000,289,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeveloperOptionsSettingsHandlers.dll
  1279. [2017.03.28 07:31:12 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SerialCommunication.dll
  1280. [2017.03.28 07:31:10 | 000,276,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtrans.dll
  1281. [2017.03.28 07:31:10 | 000,223,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
  1282. [2017.03.28 07:31:08 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Lights.dll
  1283. [2017.03.28 07:31:07 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkBindingEngineMigPlugin.dll
  1284. [2017.03.28 07:31:06 | 000,711,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
  1285. [2017.03.28 07:30:59 | 000,262,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Picker.dll
  1286. [2017.03.28 07:30:55 | 000,819,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppContracts.dll
  1287. [2017.03.28 07:30:46 | 000,505,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.WiFiDirect.dll
  1288. [2017.03.28 07:30:34 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBrokerUI.dll
  1289. [2017.03.28 07:30:24 | 000,787,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sbe.dll
  1290. [2017.03.28 07:30:23 | 000,651,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.AllJoyn.dll
  1291. [2017.03.28 07:30:20 | 000,239,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafpos.dll
  1292. [2017.03.28 07:30:15 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserMgrProxy.dll
  1293. [2017.03.28 07:30:09 | 000,846,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WebcamUi.dll
  1294. [2017.03.28 07:30:09 | 000,692,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CellularAPI.dll
  1295. [2017.03.28 07:30:09 | 000,568,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.LowLevel.dll
  1296. [2017.03.28 07:30:03 | 000,748,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StoreAgent.dll
  1297. [2017.03.28 07:30:02 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\updatepolicy.dll
  1298. [2017.03.28 07:29:57 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.HumanInterfaceDevice.dll
  1299. [2017.03.28 07:29:56 | 000,912,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SmartCards.dll
  1300. [2017.03.28 07:29:55 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\psmsrv.dll
  1301. [2017.03.28 07:29:51 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Scanners.dll
  1302. [2017.03.28 07:29:46 | 000,147,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winsrv.dll
  1303. [2017.03.28 07:29:44 | 000,747,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Ocr.dll
  1304. [2017.03.28 07:29:43 | 000,293,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
  1305. [2017.03.28 07:29:42 | 000,379,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepsync.dll
  1306. [2017.03.28 07:29:37 | 000,314,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Usb.dll
  1307. [2017.03.28 07:29:35 | 000,324,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.LockScreen.dll
  1308. [2017.03.28 07:29:33 | 000,267,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vaultcli.dll
  1309. [2017.03.28 07:29:32 | 000,852,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Import.dll
  1310. [2017.03.28 07:29:32 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
  1311. [2017.03.28 07:29:29 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.dll
  1312. [2017.03.28 07:29:29 | 000,260,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgentUserBroker.exe
  1313. [2017.03.28 07:29:29 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AuthBroker.dll
  1314. [2017.03.28 07:29:27 | 000,590,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efswrt.dll
  1315. [2017.03.28 07:29:13 | 000,311,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SyncSettings.dll
  1316. [2017.03.28 07:29:08 | 000,238,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AboveLockAppHost.dll
  1317. [2017.03.28 07:29:07 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleacc.dll
  1318. [2017.03.28 07:28:57 | 000,551,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
  1319. [2017.03.28 07:28:55 | 000,431,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpAXHolder.dll
  1320. [2017.03.28 07:28:50 | 000,456,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\puiobj.dll
  1321. [2017.03.28 07:28:43 | 000,500,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Graphics.Printing.dll
  1322. [2017.03.28 07:28:36 | 000,252,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Identity.Provider.dll
  1323. [2017.03.28 07:28:31 | 000,176,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepapi.dll
  1324. [2017.03.28 07:28:28 | 000,358,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.dll
  1325. [2017.03.28 07:28:25 | 000,407,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Management.dll
  1326. [2017.03.28 07:28:21 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Picker.dll
  1327. [2017.03.28 07:28:20 | 000,561,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Wallet.dll
  1328. [2017.03.28 07:28:18 | 000,661,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WpcWebFilter.dll
  1329. [2017.03.28 07:28:05 | 000,261,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\indexeddbserver.dll
  1330. [2017.03.28 07:28:04 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Web.Core.dll
  1331. [2017.03.28 07:27:54 | 000,949,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.PointOfService.dll
  1332. [2017.03.28 07:27:43 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CryptoWinRT.dll
  1333. [2017.03.28 07:27:37 | 000,472,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll
  1334. [2017.03.28 07:27:36 | 001,060,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppContracts.dll
  1335. [2017.03.28 07:27:29 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatepolicy.dll
  1336. [2017.03.28 07:27:25 | 001,388,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Cred.dll
  1337. [2017.03.28 07:27:12 | 000,645,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\qedit.dll
  1338. [2017.03.28 07:27:12 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WwaApi.dll
  1339. [2017.03.28 07:27:11 | 000,671,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mbsmsapi.dll
  1340. [2017.03.28 07:27:09 | 000,425,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadcloudap.dll
  1341. [2017.03.28 07:27:00 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AccountsRt.dll
  1342. [2017.03.28 07:26:53 | 000,437,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Usb.dll
  1343. [2017.03.28 07:26:51 | 001,534,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Graphics.Printing.3D.dll
  1344. [2017.03.28 07:26:49 | 000,329,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\deviceaccess.dll
  1345. [2017.03.28 07:26:44 | 000,549,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
  1346. [2017.03.28 07:26:39 | 000,284,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AboveLockAppHost.dll
  1347. [2017.03.28 07:26:36 | 000,468,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.InkControls.dll
  1348. [2017.03.28 07:26:08 | 000,642,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.InkControls.dll
  1349. [2017.03.28 07:26:03 | 001,145,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EmailApis.dll
  1350. [2017.03.28 07:26:01 | 000,313,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
  1351. [2017.03.28 07:25:59 | 000,653,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.AccountsControl.dll
  1352. [2017.03.28 07:25:57 | 001,010,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll
  1353. [2017.03.28 07:25:54 | 001,196,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscui.cpl
  1354. [2017.03.28 07:25:47 | 000,966,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sbe.dll
  1355. [2017.03.28 07:25:41 | 018,364,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
  1356. [2017.03.28 07:25:37 | 000,775,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe
  1357. [2017.03.28 07:25:34 | 000,963,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WebcamUi.dll
  1358. [2017.03.28 07:25:07 | 000,896,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.AccountsControl.dll
  1359. [2017.03.28 07:24:50 | 006,474,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mspaint.exe
  1360. [2017.03.28 07:24:50 | 006,288,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
  1361. [2017.03.28 07:24:36 | 000,675,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.dll
  1362. [2017.03.28 07:24:33 | 004,614,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
  1363. [2017.03.28 07:24:15 | 000,901,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Bluetooth.dll
  1364. [2017.03.28 07:24:10 | 000,410,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll
  1365. [2017.03.28 07:24:04 | 001,220,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscui.cpl
  1366. [2017.03.28 07:23:58 | 003,733,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_47.dll
  1367. [2017.03.28 07:23:44 | 000,395,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dmenrollengine.dll
  1368. [2017.03.28 07:23:28 | 000,886,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aadtb.dll
  1369. [2017.03.28 07:23:17 | 009,130,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
  1370. [2017.03.28 07:23:16 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSManMigrationPlugin.dll
  1371. [2017.03.28 07:23:15 | 000,589,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Sensors.dll
  1372. [2017.03.28 07:22:43 | 000,157,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\enrollmentapi.dll
  1373. [2017.03.28 07:22:34 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.DeviceEncryptionHandlers.dll
  1374. [2017.03.28 07:22:22 | 000,516,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidcli.dll
  1375. [2017.03.28 07:22:03 | 000,355,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RTMediaFrame.dll
  1376. [2017.03.28 07:21:59 | 000,458,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RTMediaFrame.dll
  1377. [2017.03.28 07:21:57 | 001,589,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdtctm.dll
  1378. [2017.03.28 07:21:51 | 001,403,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Editing.dll
  1379. [2017.03.28 07:21:46 | 000,104,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CastLaunch.dll
  1380. [2017.03.28 07:21:45 | 003,778,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
  1381. [2017.03.28 07:21:45 | 001,077,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Editing.dll
  1382. [2017.03.28 07:20:56 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmjpegdec.dll
  1383. [2017.03.28 07:20:52 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmjpegdec.dll
  1384. [2017.03.28 07:20:14 | 003,307,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
  1385. [2017.03.28 07:20:12 | 001,105,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MiracastReceiver.dll
  1386. [2017.03.28 07:20:07 | 000,795,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MiracastReceiver.dll
  1387. [2017.03.28 07:19:58 | 000,442,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToDevice.dll
  1388. [2017.03.28 07:19:56 | 000,343,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToDevice.dll
  1389. [2017.03.28 07:19:50 | 000,864,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnapps.dll
  1390. [2017.03.28 07:19:48 | 007,655,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll
  1391. [2017.03.28 07:19:47 | 000,713,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wpnapps.dll
  1392. [2017.03.28 07:19:45 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dlnashext.dll
  1393. [2017.03.28 07:19:42 | 000,746,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdtcprx.dll
  1394. [2017.03.28 07:19:39 | 000,248,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dlnashext.dll
  1395. [2017.03.28 07:19:38 | 000,235,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\flvprophandler.dll
  1396. [2017.03.28 07:19:18 | 000,141,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dialclient.dll
  1397. [2017.03.28 07:18:48 | 001,908,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AzureSettingSyncProvider.dll
  1398. [2017.03.28 07:18:47 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpninprc.dll
  1399. [2017.03.28 07:18:23 | 001,255,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AzureSettingSyncProvider.dll
  1400. [2017.03.28 07:18:16 | 001,078,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Streaming.dll
  1401. [2017.03.28 07:17:48 | 005,114,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll
  1402. [2017.03.28 07:17:47 | 000,895,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Streaming.dll
  1403. [2017.03.28 07:17:38 | 006,109,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll
  1404. [2017.03.28 07:17:29 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToReceiver.dll
  1405. [2017.03.28 07:17:06 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToReceiver.dll
  1406. [2017.03.28 07:17:02 | 004,749,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
  1407. [2017.03.28 07:16:58 | 000,167,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ErrorDetails.dll
  1408. [2017.03.28 07:16:38 | 003,198,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll
  1409. [2017.03.28 07:16:36 | 001,217,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Audio.dll
  1410. [2017.03.28 07:16:36 | 000,134,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ErrorDetails.dll
  1411. [2017.03.28 07:16:33 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vss_ps.dll
  1412. [2017.03.28 07:16:07 | 001,221,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Audio.dll
  1413. [2017.03.28 07:15:47 | 000,937,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCRecvSrc.dll
  1414. [2017.03.28 07:15:38 | 000,411,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsApi.dll
  1415. [2017.03.28 07:15:30 | 001,247,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Globalization.dll
  1416. [2017.03.28 07:15:29 | 002,390,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\smartscreen.exe
  1417. [2017.03.28 07:15:17 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Devices.dll
  1418. [2017.03.28 07:15:11 | 000,981,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.OnlineId.dll
  1419. [2017.03.28 07:15:08 | 000,467,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Geolocation.dll
  1420. [2017.03.28 07:15:07 | 000,539,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToManager.dll
  1421. [2017.03.28 07:15:05 | 000,945,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcWebFilter.dll
  1422. [2017.03.28 07:14:56 | 000,641,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCRecvSrc.dll
  1423. [2017.03.28 07:14:54 | 008,126,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
  1424. [2017.03.28 07:14:49 | 003,520,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xpsrchvw.exe
  1425. [2017.03.28 07:14:48 | 000,800,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Web.Core.dll
  1426. [2017.03.28 07:14:38 | 000,947,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVP9DEC.dll
  1427. [2017.03.28 07:14:36 | 000,869,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
  1428. [2017.03.28 07:14:32 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Devices.dll
  1429. [2017.03.28 07:14:29 | 000,400,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToManager.dll
  1430. [2017.03.28 07:14:28 | 000,779,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cscui.dll
  1431. [2017.03.28 07:14:22 | 007,468,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
  1432. [2017.03.28 07:14:21 | 001,643,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.dll
  1433. [2017.03.28 07:14:20 | 000,357,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Geolocation.dll
  1434. [2017.03.28 07:14:12 | 001,692,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll
  1435. [2017.03.28 07:14:07 | 001,080,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Ocr.dll
  1436. [2017.03.28 07:14:05 | 000,975,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\HelpPane.exe
  1437. [2017.03.28 07:14:00 | 000,913,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.dll
  1438. [2017.03.28 07:13:56 | 000,460,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Midi.dll
  1439. [2017.03.28 07:13:54 | 001,359,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModel.dll
  1440. [2017.03.28 07:13:53 | 001,232,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Maps.dll
  1441. [2017.03.28 07:13:49 | 002,138,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputService.dll
  1442. [2017.03.28 07:13:39 | 006,045,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
  1443. [2017.03.28 07:13:34 | 000,611,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Graphics.Printing.dll
  1444. [2017.03.28 07:13:33 | 004,474,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_47.dll
  1445. [2017.03.28 07:13:32 | 000,650,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXService.dll
  1446. [2017.03.28 07:13:24 | 000,816,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.dll
  1447. [2017.03.28 07:13:23 | 000,759,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
  1448. [2017.03.28 07:13:22 | 001,170,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.dll
  1449. [2017.03.28 07:13:13 | 001,040,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NaturalLanguage6.dll
  1450. [2017.03.28 07:13:08 | 002,095,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
  1451. [2017.03.28 07:13:08 | 001,656,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Perception.dll
  1452. [2017.03.28 07:13:04 | 004,596,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xpsrchvw.exe
  1453. [2017.03.28 07:12:55 | 000,376,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CryptoWinRT.dll
  1454. [2017.03.28 07:12:48 | 001,004,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Input.Inking.dll
  1455. [2017.03.28 07:12:42 | 000,827,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll
  1456. [2017.03.28 07:12:35 | 002,208,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Graphics.Printing.3D.dll
  1457. [2017.03.28 07:12:30 | 005,611,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d2d1.dll
  1458. [2017.03.28 07:12:22 | 000,691,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBroker.dll
  1459. [2017.03.28 07:12:22 | 000,598,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.dll
  1460. [2017.03.28 07:12:21 | 002,682,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\netshell.dll
  1461. [2017.03.28 07:12:20 | 000,566,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ShareHost.dll
  1462. [2017.03.28 07:12:17 | 000,620,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.dll
  1463. [2017.03.28 07:12:16 | 001,013,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.Http.dll
  1464. [2017.03.28 07:12:07 | 001,509,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
  1465. [2017.03.28 07:12:07 | 000,846,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApiPublic.dll
  1466. [2017.03.28 07:12:07 | 000,654,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApiPublic.dll
  1467. [2017.03.28 07:12:04 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Midi.dll
  1468. [2017.03.28 07:12:02 | 000,542,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Connectivity.dll
  1469. [2017.03.28 07:12:01 | 002,026,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
  1470. [2017.03.28 07:12:01 | 000,862,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncCore.dll
  1471. [2017.03.28 07:11:47 | 002,646,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CertEnroll.dll
  1472. [2017.03.28 07:11:46 | 002,914,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CertEnroll.dll
  1473. [2017.03.28 07:11:40 | 001,170,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Phone.dll
  1474. [2017.03.28 07:11:27 | 000,765,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Sensors.dll
  1475. [2017.03.28 07:11:24 | 001,981,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
  1476. [2017.03.28 07:11:22 | 002,994,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys
  1477. [2017.03.28 07:11:09 | 001,275,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Bluetooth.dll
  1478. [2017.03.28 07:11:08 | 000,751,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.BackgroundTransfer.dll
  1479. [2017.03.28 07:10:48 | 001,637,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
  1480. [2017.03.28 07:10:38 | 008,076,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll
  1481. [2017.03.28 07:10:37 | 001,586,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Globalization.dll
  1482. [2017.03.28 07:10:37 | 001,424,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Maps.dll
  1483. [2017.03.28 07:10:13 | 002,424,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Perception.dll
  1484. [2017.03.28 07:10:12 | 000,774,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.dll
  1485. [2017.03.28 07:10:09 | 001,266,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Input.Inking.dll
  1486. [2017.03.28 07:10:09 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
  1487. [2017.03.28 07:10:06 | 000,875,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBroker.dll
  1488. [2017.03.28 07:10:05 | 001,231,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dosvc.dll
  1489. [2017.03.28 07:09:49 | 001,064,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncCore.dll
  1490. [2017.03.28 07:09:39 | 001,328,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.Http.dll
  1491. [2017.03.28 07:09:39 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ShareHost.dll
  1492. [2017.03.28 07:09:32 | 001,513,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
  1493. [2017.03.28 07:09:31 | 003,106,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstsc.exe
  1494. [2017.03.28 07:09:10 | 004,149,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
  1495. [2017.03.28 07:09:05 | 001,131,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\localspl.dll
  1496. [2017.03.28 07:09:03 | 001,369,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Phone.dll
  1497. [2017.03.28 07:08:59 | 003,612,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
  1498. [2017.03.28 07:08:52 | 001,564,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\quartz.dll
  1499. [2017.03.28 07:08:51 | 003,542,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
  1500. [2017.03.28 07:08:35 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enrollmentapi.dll
  1501. [2017.03.28 07:08:16 | 000,783,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TSWorkspace.dll
  1502. [2017.03.28 07:08:11 | 000,299,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RADCUI.dll
  1503. [2017.03.28 07:07:53 | 000,908,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
  1504. [2017.03.28 07:07:52 | 000,701,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Connectivity.dll
  1505. [2017.03.28 07:07:14 | 000,122,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FontProvider.dll
  1506. [2017.03.28 07:06:43 | 001,121,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadtb.dll
  1507. [2017.03.28 07:06:39 | 000,924,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.BackgroundTransfer.dll
  1508. [2017.03.28 07:06:04 | 000,999,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TSWorkspace.dll
  1509. [2017.03.28 07:05:25 | 001,633,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\quartz.dll
  1510. [2017.03.28 07:04:44 | 000,119,808 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecureAssessmentHandlers.dll
  1511. [2017.03.28 06:48:06 | 000,483,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
  1512. [2017.03.24 13:24:24 | 000,000,829 | ---- | M] () -- C:\Users\Tomasz\Desktop\Scrap Mechanic 0.1.32.lnk
  1513. [2017.03.22 23:21:46 | 000,045,672 | ---- | M] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-stable.sys
  1514. [2017.03.22 23:21:46 | 000,045,672 | ---- | M] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-dev.sys
  1515. [2017.03.22 23:21:46 | 000,045,672 | ---- | M] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-canary.sys
  1516.  
  1517. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  1518.  
  1519. [2017.04.21 00:31:18 | 000,031,533 | ---- | C] () -- C:\Users\Tomasz\Desktop\cz2.jpg
  1520. [2017.04.21 00:30:57 | 000,034,711 | ---- | C] () -- C:\Users\Tomasz\Desktop\CZ1.jpg
  1521. [2017.04.21 00:28:19 | 000,000,180 | ---- | C] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
  1522. [2017.04.20 11:55:52 | 000,001,252 | ---- | C] () -- C:\Users\Tomasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ustawienia aktualizacji i prywatności.lnk
  1523. [2017.04.20 11:31:03 | 000,002,759 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
  1524. [2017.04.20 11:31:03 | 000,002,692 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive dla firm.lnk
  1525. [2017.04.20 11:31:03 | 000,002,686 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
  1526. [2017.04.20 11:31:03 | 000,002,686 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype dla firm 2016.lnk
  1527. [2017.04.20 11:31:03 | 000,002,686 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
  1528. [2017.04.20 11:31:03 | 000,002,678 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
  1529. [2017.04.20 11:31:03 | 000,002,678 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
  1530. [2017.04.20 11:31:03 | 000,002,672 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
  1531. [2017.04.20 11:31:03 | 000,002,658 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
  1532. [2017.04.20 10:24:13 | 000,002,062 | ---- | C] () -- C:\Users\Public\Desktop\Ochrona bankowości internetowej.lnk
  1533. [2017.04.20 10:22:42 | 000,029,868 | ---- | C] () -- C:\ProgramData\agent.uninstall.1492676559.bdinstall.bin
  1534. [2017.04.20 09:58:36 | 000,220,886 | ---- | C] () -- C:\ProgramData\cl.uninstall.1492675021.bdinstall.bin
  1535. [2017.04.20 09:57:19 | 000,036,220 | ---- | C] () -- C:\ProgramData\dm.uninstall.1492675029.bdinstall.bin
  1536. [2017.04.20 09:07:34 | 000,029,905 | ---- | C] () -- C:\ProgramData\agent.update.1492672051.bdinstall.bin
  1537. [2017.04.20 09:07:24 | 000,056,809 | ---- | C] () -- C:\ProgramData\dm.1492672035.bdinstall.bin
  1538. [2017.04.20 09:07:06 | 000,464,063 | ---- | C] () -- C:\ProgramData\cl.1492671892.bdinstall.bin
  1539. [2017.04.20 09:02:32 | 000,047,293 | ---- | C] () -- C:\ProgramData\agent.1492671751.bdinstall.bin
  1540. [2017.04.20 08:52:45 | 000,000,016 | ---- | C] () -- C:\ProgramData\mntemp
  1541. [2017.04.20 08:52:44 | 000,000,900 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Uninstall 6.lnk
  1542. [2017.04.20 08:21:52 | 000,000,214 | ---- | C] () -- C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job
  1543. [2017.04.16 01:45:08 | 000,001,391 | ---- | C] () -- C:\Users\Tomasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mp3DirectCut.lnk
  1544. [2017.04.14 23:18:04 | 000,002,446 | ---- | C] () -- C:\Users\Tomasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
  1545. [2017.04.12 23:48:36 | 002,048,496 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
  1546. [2017.04.12 23:48:21 | 000,265,728 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.Perception.Stub.dll
  1547. [2017.04.12 23:47:53 | 000,418,304 | ---- | C] () -- C:\WINDOWS\SysNative\Windows.Perception.Stub.dll
  1548. [2017.04.12 23:47:38 | 002,681,200 | ---- | C] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
  1549. [2017.04.03 11:54:34 | 004,089,296 | ---- | C] () -- C:\Users\Tomasz\Desktop\AdwCleaner 6.045.exe
  1550. [2017.03.24 13:24:24 | 000,000,829 | ---- | C] () -- C:\Users\Tomasz\Desktop\Scrap Mechanic 0.1.32.lnk
  1551. [2017.03.24 09:51:39 | 000,002,579 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
  1552. [2017.03.16 13:20:00 | 000,019,968 | ---- | C] () -- C:\WINDOWS\SysWow64\GamePanelExternalHook.dll
  1553. [2017.03.11 19:47:29 | 000,032,294 | ---- | C] () -- C:\Users\Tomasz\AppData\Roaming\Wartości oddzielone przecinkami.ADR
  1554. [2017.03.11 19:27:39 | 000,019,546 | ---- | C] () -- C:\Users\Tomasz\AppData\Roaming\Wartości oddzielone przecinkami.CAL
  1555. [2016.12.29 18:15:42 | 000,000,135 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
  1556. [2016.12.16 02:17:51 | 000,000,020 | -HS- | C] () -- C:\Users\Tomasz\AppData\Roaming\Programs8187ConfigDB.dat
  1557. [2016.12.16 02:17:51 | 000,000,020 | -HS- | C] () -- C:\Users\Tomasz\AppData\Roaming\1816CA7466166.ind
  1558. [2016.12.14 01:10:14 | 000,001,561 | ---- | C] () -- C:\Users\Tomasz\AppData\Local\recently-used.xbel
  1559. [2016.11.19 22:04:52 | 002,936,512 | ---- | C] () -- C:\WINDOWS\SysWow64\BootMan.exe
  1560. [2016.11.19 22:04:52 | 000,088,160 | ---- | C] () -- C:\WINDOWS\SysWow64\setupempdrv03.exe
  1561. [2016.11.19 22:04:52 | 000,021,496 | ---- | C] () -- C:\WINDOWS\SysWow64\epmntdrv.sys
  1562. [2016.11.19 22:04:52 | 000,021,088 | ---- | C] () -- C:\WINDOWS\SysWow64\EuEpmGdi.dll
  1563. [2016.11.19 22:04:52 | 000,010,208 | ---- | C] () -- C:\WINDOWS\SysWow64\EuGdiDrv.sys
  1564. [2016.10.21 15:05:11 | 000,020,075 | ---- | C] () -- C:\ProgramData\agent.1477055109.bdinstall.bin
  1565. [2016.10.21 01:20:42 | 000,026,801 | ---- | C] () -- C:\ProgramData\agent.1477005640.bdinstall.bin
  1566. [2016.10.21 01:20:36 | 000,024,894 | ---- | C] () -- C:\ProgramData\1477005633.bdinstall.bin
  1567. [2016.10.21 01:20:07 | 000,026,805 | ---- | C] () -- C:\ProgramData\agent.1477005604.bdinstall.bin
  1568. [2016.10.21 01:19:59 | 000,024,619 | ---- | C] () -- C:\ProgramData\1477005597.bdinstall.bin
  1569. [2016.10.21 01:19:22 | 000,026,805 | ---- | C] () -- C:\ProgramData\agent.1477005560.bdinstall.bin
  1570. [2016.10.21 01:19:14 | 000,024,895 | ---- | C] () -- C:\ProgramData\1477005551.bdinstall.bin
  1571. [2016.10.21 01:18:49 | 000,026,806 | ---- | C] () -- C:\ProgramData\agent.1477005526.bdinstall.bin
  1572. [2016.10.21 01:18:36 | 000,042,745 | ---- | C] () -- C:\ProgramData\1477005514.bdinstall.bin
  1573. [2016.10.21 00:21:03 | 000,240,431 | ---- | C] () -- C:\ProgramData\1477002017.bdinstall.bin
  1574. [2016.10.08 01:36:44 | 000,000,266 | RHS- | C] () -- C:\Users\Tomasz\ntuser.pol
  1575. [2016.10.08 01:36:29 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  1576. [2016.10.08 01:27:42 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
  1577. [2016.07.16 13:47:57 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
  1578. [2016.07.16 13:47:57 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
  1579. [2016.07.16 13:43:04 | 000,055,296 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
  1580. [2016.07.16 13:42:55 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
  1581. [2016.07.16 13:42:53 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
  1582. [2016.07.16 13:42:49 | 000,304,640 | ---- | C] () -- C:\WINDOWS\SysWow64\HrtfApo.dll
  1583. [2016.07.16 13:42:48 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
  1584. [2016.07.16 13:42:43 | 000,002,307 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
  1585. [2016.07.16 13:42:12 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
  1586. [2016.02.12 12:32:49 | 000,000,022 | ---- | C] () -- C:\Users\Tomasz\AppData\Roaming\langInstall.exe
  1587. [2016.02.08 01:55:19 | 000,007,626 | ---- | C] () -- C:\Users\Tomasz\AppData\Local\Resmon.ResmonCfg
  1588. [2016.01.27 20:52:47 | 000,000,001 | ---- | C] () -- C:\Users\Tomasz\AppData\Local\llftool.4.40.agreement
  1589. [2016.01.03 11:46:19 | 000,077,248 | ---- | C] () -- C:\WINDOWS\hpqins06.dat
  1590. [2015.07.05 00:45:25 | 000,053,248 | ---- | C] () -- C:\WINDOWS\SysWow64\CommonDL.dll
  1591. [2015.07.05 00:45:25 | 000,002,411 | ---- | C] () -- C:\WINDOWS\SysWow64\lgAxconfig.ini
  1592. [2015.04.21 00:53:15 | 000,000,220 | ---- | C] () -- C:\Users\Tomasz\AppData\Local\5D515C96_stp.CIS.part
  1593. [2015.04.21 00:53:13 | 000,385,602 | ---- | C] () -- C:\Users\Tomasz\AppData\Local\5D515C96_stp.CIS
  1594. [2015.03.11 03:13:44 | 000,000,010 | -HS- | C] () -- C:\Users\Tomasz\AppData\Roaming\3.0.0.1
  1595. [2015.03.11 03:13:07 | 000,000,010 | -HS- | C] () -- C:\Users\Tomasz\AppData\Roaming\3.0.0.3
  1596.  
  1597. [color=#E56717]========== ZeroAccess Check ==========[/color]
  1598.  
  1599.  
  1600. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  1601.  
  1602. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  1603.  
  1604. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  1605.  
  1606. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  1607.  
  1608. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  1609. "" = C:\Windows\SysNative\windows.storage.dll -- [2017.03.28 08:10:41 | 007,220,184 | ---- | M] (Microsoft Corporation)
  1610. "ThreadingModel" = Apartment
  1611.  
  1612. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  1613. "" = %SystemRoot%\system32\windows.storage.dll -- [2017.03.28 08:04:38 | 005,721,808 | ---- | M] (Microsoft Corporation)
  1614. "ThreadingModel" = Apartment
  1615.  
  1616. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  1617. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2016.07.16 13:42:31 | 000,977,920 | ---- | M] (Microsoft Corporation)
  1618. "ThreadingModel" = Free
  1619.  
  1620. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  1621. "" = %systemroot%\system32\wbem\fastprox.dll -- [2016.07.16 13:42:56 | 000,779,776 | ---- | M] (Microsoft Corporation)
  1622. "ThreadingModel" = Free
  1623.  
  1624. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  1625. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2016.07.16 13:42:31 | 000,518,656 | ---- | M] (Microsoft Corporation)
  1626. "ThreadingModel" = Both
  1627.  
  1628. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  1629.  
  1630. [color=#E56717]========== LOP Check ==========[/color]
  1631.  
  1632. [2016.03.03 16:25:59 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\.minecraft
  1633. [2016.10.21 15:02:32 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\.Tribler
  1634. [2017.03.04 22:37:26 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\abgx360
  1635. [2016.02.04 23:27:45 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Ableton
  1636. [2017.04.11 00:12:25 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\AIMP
  1637. [2016.08.05 23:26:35 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\All Free YouTube to  Converter
  1638. [2017.03.31 21:32:16 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Anvsoft
  1639. [2016.03.30 19:19:28 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Autodesk
  1640. [2016.03.26 16:28:58 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Axolot Games
  1641. [2016.12.30 18:18:14 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Azureus
  1642. [2017.04.20 09:58:06 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Bitdefender
  1643. [2017.02.18 22:52:58 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\com.efile.epity
  1644. [2017.04.20 11:25:10 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\DAEMON Tools Lite
  1645. [2016.04.15 12:24:58 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Dropbox
  1646. [2016.11.19 23:38:09 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\epm
  1647. [2017.04.20 11:25:31 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\ESET
  1648. [2016.12.20 20:29:51 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Fenrir Inc
  1649. [2016.07.24 14:23:44 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Foxit AgentInformation
  1650. [2016.09.28 20:42:18 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Foxit Software
  1651. [2017.03.20 02:07:59 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Franz
  1652. [2016.12.29 18:15:42 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\GHISLER
  1653. [2016.10.26 23:14:46 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\GlarySoft
  1654. [2017.04.10 09:56:01 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\GofinDruki
  1655. [2017.01.04 09:58:08 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\HandBrake Team
  1656. [2015.09.20 01:07:48 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Hard Disk Sentinel
  1657. [2016.03.25 00:57:56 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\HTC
  1658. [2015.04.14 20:24:29 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\ImgBurn
  1659. [2015.12.28 02:02:23 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\IrfanView
  1660. [2016.03.16 21:31:33 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\JetBrains
  1661. [2017.03.18 12:51:58 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\KeePass
  1662. [2016.02.21 21:03:17 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Kingosoft
  1663. [2017.01.28 19:29:43 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\LEGO Company
  1664. [2015.07.19 01:38:32 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\LG Electronics
  1665. [2017.04.16 01:46:29 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Mp3tag
  1666. [2015.03.11 11:02:53 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\MultiCommander
  1667. [2017.03.13 01:56:03 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Navigator
  1668. [2016.08.06 00:16:54 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\New Version Available
  1669. [2017.02.25 02:33:52 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\nuclear
  1670. [2015.02.05 19:33:44 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\ODIN
  1671. [2015.12.28 02:18:43 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\OfficeRecovery
  1672. [2016.05.23 22:21:36 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Opera Software
  1673. [2017.04.03 15:43:35 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\PeaZip
  1674. [2016.12.06 11:36:54 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\PhotoScape
  1675. [2017.02.28 19:24:54 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Poikosoft
  1676. [2015.09.05 22:23:22 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\ProcessLasso
  1677. [2016.10.20 23:29:22 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\QuickScan
  1678. [2016.02.21 20:55:06 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Shuame
  1679. [2016.03.30 15:22:04 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\SmartSteamEmu
  1680. [2017.04.10 23:15:26 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Spotify
  1681. [2016.11.20 16:00:19 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Steam
  1682. [2017.03.19 14:56:17 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\TAC
  1683. [2016.10.20 22:26:02 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\TagScanner
  1684. [2015.03.27 16:11:05 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\TeamViewer
  1685. [2016.12.29 17:54:02 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Thunderbird
  1686. [2017.04.17 00:30:40 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\TIDAL
  1687. [2015.05.24 14:24:39 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Unity
  1688. [2015.02.07 23:35:35 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\VS Revo Group
  1689. [2015.05.25 19:53:40 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Warner Bros. Interactive Entertainment
  1690. [2015.10.25 12:26:52 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\WindSolutions
  1691. [2016.12.16 02:30:36 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Wise Uninstaller
  1692. [2016.12.29 15:23:33 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\WiseUpdate
  1693. [2015.05.03 20:08:17 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\ZJMedia
  1694.  
  1695. [color=#E56717]========== Purity Check ==========[/color]
  1696.  
  1697.  
  1698.  
  1699. [color=#E56717]========== Alternate Data Streams ==========[/color]
  1700.  
  1701. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\WLXPGSS.SCR:$CmdTcID
  1702. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\unvise32.exe:$CmdTcID
  1703. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\zipfldr.dll:$CmdTcID
  1704. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xolehlp.dll:$CmdTcID
  1705. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xinput1_3.dll:$CmdTcID
  1706. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xinput1_2.dll:$CmdTcID
  1707. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xinput1_1.dll:$CmdTcID
  1708. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_7.dll:$CmdTcID
  1709. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_6.dll:$CmdTcID
  1710. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_5.dll:$CmdTcID
  1711. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_4.dll:$CmdTcID
  1712. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_3.dll:$CmdTcID
  1713. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_2.dll:$CmdTcID
  1714. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_1.dll:$CmdTcID
  1715. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_0.dll:$CmdTcID
  1716. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAPOFX1_5.dll:$CmdTcID
  1717. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAPOFX1_4.dll:$CmdTcID
  1718. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAPOFX1_3.dll:$CmdTcID
  1719. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAPOFX1_2.dll:$CmdTcID
  1720. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAPOFX1_1.dll:$CmdTcID
  1721. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAPOFX1_0.dll:$CmdTcID
  1722. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_7.dll:$CmdTcID
  1723. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_6.dll:$CmdTcID
  1724. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_5.dll:$CmdTcID
  1725. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_4.dll:$CmdTcID
  1726. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_3.dll:$CmdTcID
  1727. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_2.dll:$CmdTcID
  1728. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_1.dll:$CmdTcID
  1729. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_0.dll:$CmdTcID
  1730. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_9.dll:$CmdTcID
  1731. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_8.dll:$CmdTcID
  1732. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_7.dll:$CmdTcID
  1733. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_6.dll:$CmdTcID
  1734. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_5.dll:$CmdTcID
  1735. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_4.dll:$CmdTcID
  1736. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_3.dll:$CmdTcID
  1737. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_2.dll:$CmdTcID
  1738. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_10.dll:$CmdTcID
  1739. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_1.dll:$CmdTcID
  1740. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_0.dll:$CmdTcID
  1741. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\X3DAudio1_7.dll:$CmdTcID
  1742. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\X3DAudio1_6.dll:$CmdTcID
  1743. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\X3DAudio1_5.dll:$CmdTcID
  1744. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\X3DAudio1_4.dll:$CmdTcID
  1745. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\X3DAudio1_3.dll:$CmdTcID
  1746. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\X3DAudio1_2.dll:$CmdTcID
  1747. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\x3daudio1_1.dll:$CmdTcID
  1748. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\x3daudio1_0.dll:$CmdTcID
  1749. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\WSManHTTPConfig.exe:$CmdTcID
  1750. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wsecedit.dll:$CmdTcID
  1751. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wscinterop.dll:$CmdTcID
  1752. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\WordBreakers.dll:$CmdTcID
  1753. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wmpshell.dll:$CmdTcID
  1754. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wmpeffects.dll:$CmdTcID
  1755. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wmpdxm.dll:$CmdTcID
  1756. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wininetlui.dll:$CmdTcID
  1757. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\Windows.StateRepository.dll:$CmdTcID
  1758. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\Windows.Security.Authentication.OnlineId.dll:$CmdTcID
  1759. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll:$CmdTcID
  1760. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\Windows.Media.Playback.MediaPlayer.dll:$CmdTcID
  1761. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\Windows.Media.Playback.BackgroundMediaPlayer.dll:$CmdTcID
  1762. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wincorlib.dll:$CmdTcID
  1763. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\weretw.dll:$CmdTcID
  1764. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\user32.dll:$CmdTcID
  1765. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\UIAutomationCore.dll:$CmdTcID
  1766. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\UIAnimation.dll:$CmdTcID
  1767. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\TsWpfWrp.exe:$CmdTcID
  1768. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\TSpkg.dll:$CmdTcID
  1769. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\systemcpl.dll:$CmdTcID
  1770. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\stobject.dll:$CmdTcID
  1771. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\sspicli.dll:$CmdTcID
  1772. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\SndVolSSO.dll:$CmdTcID
  1773. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\setupugc.exe:$CmdTcID
  1774. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\setupempdrv03.exe:$CmdTcID
  1775. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\sendmail.dll:$CmdTcID
  1776. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\RTWorkQ.dll:$CmdTcID
  1777. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\RemoteNaturalLanguage.dll:$CmdTcID
  1778. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ReAgentc.exe:$CmdTcID
  1779. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\rasapi32.dll:$CmdTcID
  1780. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\PresentationNative_v0300.dll:$CmdTcID
  1781. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID
  1782. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\powercfg.exe:$CmdTcID
  1783. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\opencl.dll:$CmdTcID
  1784. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\offreg.dll:$CmdTcID
  1785. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ntshrui.dll:$CmdTcID
  1786. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ntdll.dll:$CmdTcID
  1787. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\NPSM.dll:$CmdTcID
  1788. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\NMAA.dll:$CmdTcID
  1789. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ngccredprov.dll:$CmdTcID
  1790. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\NetSetupShim.dll:$CmdTcID
  1791. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\NetSetupEngine.dll:$CmdTcID
  1792. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\NetSetupApi.dll:$CmdTcID
  1793. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\NetCfgNotifyObjectHost.exe:$CmdTcID
  1794. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\msvproc.dll:$CmdTcID
  1795. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\MSVidCtl.dll:$CmdTcID
  1796. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\msvcr70.dll:$CmdTcID
  1797. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\msinfo32.exe:$CmdTcID
  1798. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\msi.dll:$CmdTcID
  1799. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\MrmCoreR.dll:$CmdTcID
  1800. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\MosStorage.dll:$CmdTcID
  1801. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\migisol.dll:$CmdTcID
  1802. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\mfsensorgroup.dll:$CmdTcID
  1803. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\mfksproxy.dll:$CmdTcID
  1804. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\mfaudiocnv.dll:$CmdTcID
  1805. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\mdmregistration.dll:$CmdTcID
  1806. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\MapsBtSvc.dll:$CmdTcID
  1807. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\MapControlCore.dll:$CmdTcID
  1808. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\JpMapControl.dll:$CmdTcID
  1809. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\iscsiwmi.dll:$CmdTcID
  1810. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\IntelOpenCL32.dll:$CmdTcID
  1811. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\Intel_OpenCL_ICD32.dll:$CmdTcID
  1812. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\InputLocaleManager.dll:$CmdTcID
  1813. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\iglhsip32.dll:$CmdTcID
  1814. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\iglhcp32.dll:$CmdTcID
  1815. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igfxexps32.dll:$CmdTcID
  1816. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igfxcmrt32.dll:$CmdTcID
  1817. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igfxcmjit32.dll:$CmdTcID
  1818. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igfx11cmrt32.dll:$CmdTcID
  1819. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdusc32.dll:$CmdTcID
  1820. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdumdim32.dll:$CmdTcID
  1821. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdrcl32.dll:$CmdTcID
  1822. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdmd32.dll:$CmdTcID
  1823. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdmcl32.dll:$CmdTcID
  1824. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdfcl32.dll:$CmdTcID
  1825. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdde32.dll:$CmdTcID
  1826. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdbcl32.dll:$CmdTcID
  1827. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdail32.dll:$CmdTcID
  1828. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igd12umd32.dll:$CmdTcID
  1829. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igd11dxva32.dll:$CmdTcID
  1830. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igd10iumd32.dll:$CmdTcID
  1831. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igd10idpp32.dll:$CmdTcID
  1832. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igc32.dll:$CmdTcID
  1833. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ig75icd32.dll:$CmdTcID
  1834. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\iepeers.dll:$CmdTcID
  1835. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\GlobCollationHost.dll:$CmdTcID
  1836. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\FSClient.dll:$CmdTcID
  1837. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\EuGdiDrv.sys:$CmdTcID
  1838. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\EuEpmGdi.dll:$CmdTcID
  1839. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\esentutl.exe:$CmdTcID
  1840. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\esent.dll:$CmdTcID
  1841. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ErrorDetailsUpdate.dll:$CmdTcID
  1842. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\epmntdrv.sys:$CmdTcID
  1843. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\efsext.dll:$CmdTcID
  1844. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\EditBufferTestHook.dll:$CmdTcID
  1845. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\dtdump.exe:$CmdTcID
  1846. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\dsreg.dll:$CmdTcID
  1847. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\drvstore.dll:$CmdTcID
  1848. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\DolbyDecMFT.dll:$CmdTcID
  1849. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\DeviceFlows.DataModel.dll:$CmdTcID
  1850. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DX9_43.dll:$CmdTcID
  1851. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DX9_41.dll:$CmdTcID
  1852. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DX9_40.dll:$CmdTcID
  1853. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DX9_39.dll:$CmdTcID
  1854. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DX9_38.dll:$CmdTcID
  1855. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DX9_37.dll:$CmdTcID
  1856. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_36.dll:$CmdTcID
  1857. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_35.dll:$CmdTcID
  1858. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_34.dll:$CmdTcID
  1859. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_33.dll:$CmdTcID
  1860. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_32.dll:$CmdTcID
  1861. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_30.dll:$CmdTcID
  1862. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_29.dll:$CmdTcID
  1863. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_28.dll:$CmdTcID
  1864. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_27.dll:$CmdTcID
  1865. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_26.dll:$CmdTcID
  1866. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_25.dll:$CmdTcID
  1867. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_24.dll:$CmdTcID
  1868. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx11_43.dll:$CmdTcID
  1869. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx11_42.dll:$CmdTcID
  1870. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_43.dll:$CmdTcID
  1871. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_42.dll:$CmdTcID
  1872. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_41.dll:$CmdTcID
  1873. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_40.dll:$CmdTcID
  1874. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_39.dll:$CmdTcID
  1875. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_38.dll:$CmdTcID
  1876. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_37.dll:$CmdTcID
  1877. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_36.dll:$CmdTcID
  1878. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_35.dll:$CmdTcID
  1879. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_34.dll:$CmdTcID
  1880. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_33.dll:$CmdTcID
  1881. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10.dll:$CmdTcID
  1882. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dcsx_43.dll:$CmdTcID
  1883. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dcsx_42.dll:$CmdTcID
  1884. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_43.dll:$CmdTcID
  1885. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_42.dll:$CmdTcID
  1886. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_41.dll:$CmdTcID
  1887. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_40.dll:$CmdTcID
  1888. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_39.dll:$CmdTcID
  1889. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_38.dll:$CmdTcID
  1890. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_37.dll:$CmdTcID
  1891. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_36.dll:$CmdTcID
  1892. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_35.dll:$CmdTcID
  1893. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_34.dll:$CmdTcID
  1894. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_33.dll:$CmdTcID
  1895. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3d9.dll:$CmdTcID
  1896. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3d8.dll:$CmdTcID
  1897. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3d10warp.dll:$CmdTcID
  1898. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\cryptngc.dll:$CmdTcID
  1899. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\crypt32.dll:$CmdTcID
  1900. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\credprovs.dll:$CmdTcID
  1901. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\CPFilters.dll:$CmdTcID
  1902. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ConfigureExpandedStorage.dll:$CmdTcID
  1903. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\common_clang32.dll:$CmdTcID
  1904. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\comdlg32.dll:$CmdTcID
  1905. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\comctl32.dll:$CmdTcID
  1906. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\combase.dll:$CmdTcID
  1907. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\cmifw.dll:$CmdTcID
  1908. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\CloudStorageWizard.exe:$CmdTcID
  1909. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\chartv.dll:$CmdTcID
  1910. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\BootMan.exe:$CmdTcID
  1911. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\BluetoothApis.dll:$CmdTcID
  1912. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\bcrypt.dll:$CmdTcID
  1913. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\autoplay.dll:$CmdTcID
  1914. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\AuthExt.dll:$CmdTcID
  1915. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\AppxPackaging.dll:$CmdTcID
  1916. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\AppCapture.dll:$CmdTcID
  1917. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\adsmsext.dll:$CmdTcID
  1918. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ActivationManager.dll:$CmdTcID
  1919. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ActionCenterCPL.dll:$CmdTcID
  1920. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\splwow64.exe:$CmdTcID
  1921. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\acpimof.dll:$CmdTcID
  1922. @Alternate Data Stream - 64 bytes -> C:\Users\Tomasz\AppData\Local\TempOneClickRoot.exe:$CmdTcID
  1923. @Alternate Data Stream - 64 bytes -> C:\Users\Tomasz\AppData\Local\5D515C96_stp.CIS.part:$CmdTcID
  1924. @Alternate Data Stream - 26 bytes -> C:\Users\Tomasz\Desktop\AlbumArtSmall.jpg:$CmdZnID
  1925. @Alternate Data Stream - 237 bytes -> C:\Users\Tomasz\OneDrive:ms-properties
  1926. @Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:3E7908F7
  1927.  
  1928. < End of report >
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!
 
Top