API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Apr 20th, 2017
551
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 219.76 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 21.04.2017 00:43:36 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0
  3. 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.14393.0)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: dd.MM.yyyy
  6.  
  7. %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
  8.  
  9. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  10. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  11.  
  12. [color=#E56717]========== Processes (All) ==========[/color]
  13.  
  14. PRC - File not found --
  15. PRC - [2017.04.21 00:42:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Tomasz\Desktop\OTL.exe
  16. PRC - [2017.04.17 17:13:30 | 028,344,776 | ---- | M] (Dropbox, Inc.) -- C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
  17. PRC - [2017.04.14 23:17:43 | 001,518,808 | ---- | M] (Microsoft Corporation) -- C:\Users\Tomasz\AppData\Local\Microsoft\OneDrive\OneDrive.exe
  18. PRC - [2016.11.10 19:27:54 | 002,237,392 | ---- | M] (Micro-Star INT'L CO., LTD.) -- C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
  19. PRC - [2016.09.19 09:03:53 | 000,035,448 | ---- | M] (MSFree Inc.) -- C:\ProgramData\KMSAuto\bin\KMSSS.exe
  20. PRC - [2016.07.17 13:05:42 | 000,014,464 | ---- | M] () -- C:\ProgramData\KMSAuto\bin\TunMirror2.exe
  21. PRC - [2016.07.16 13:42:56 | 000,416,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
  22. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch]
  23. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch]
  24. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch]
  25. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch]
  26. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch]
  27. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch]
  28. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch]
  29. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch]
  30. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch]
  31. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch]
  32. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch]
  33. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch]
  34. PRC - [2016.07.16 13:42:55 | 000,038,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch]
  35. PRC - [2016.04.16 09:55:06 | 001,325,240 | ---- | M] () -- C:\Program Files (x86)\DFX\DFX.exe
  36. PRC - [2015.12.31 01:10:40 | 000,105,296 | ---- | M] (MSI) -- C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
  37. PRC - [2015.12.31 01:08:11 | 000,223,520 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  38. PRC - [2015.11.27 21:05:54 | 000,132,280 | ---- | M] () -- C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp32.exe
  39.  
  40.  
  41. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  42.  
  43. MOD - [2017.04.17 17:14:04 | 000,025,432 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
  44. MOD - [2017.04.17 17:14:04 | 000,023,896 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
  45. MOD - [2017.04.17 17:14:02 | 000,054,608 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
  46. MOD - [2017.04.17 17:14:02 | 000,022,872 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
  47. MOD - [2017.04.17 17:14:00 | 000,026,456 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
  48. MOD - [2017.04.17 17:14:00 | 000,022,864 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
  49. MOD - [2017.04.17 17:14:00 | 000,021,848 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
  50. MOD - [2017.04.17 17:13:58 | 000,069,968 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
  51. MOD - [2017.04.17 17:13:58 | 000,030,536 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd
  52. MOD - [2017.04.17 17:13:58 | 000,022,872 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
  53. MOD - [2017.04.17 17:13:58 | 000,022,864 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
  54. MOD - [2017.04.17 17:13:56 | 000,392,512 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
  55. MOD - [2017.04.17 17:13:54 | 000,019,776 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
  56. MOD - [2017.04.17 17:13:50 | 000,103,232 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd
  57. MOD - [2017.04.17 17:13:48 | 003,928,896 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
  58. MOD - [2017.04.17 17:13:48 | 000,224,064 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
  59. MOD - [2017.04.17 17:13:48 | 000,171,336 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
  60. MOD - [2017.04.17 17:13:48 | 000,133,432 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
  61. MOD - [2017.04.17 17:13:46 | 000,546,104 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
  62. MOD - [2017.04.17 17:13:46 | 000,357,688 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
  63. MOD - [2017.04.17 17:13:46 | 000,207,680 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
  64. MOD - [2017.04.17 17:13:46 | 000,042,816 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
  65. MOD - [2017.04.17 17:13:44 | 001,972,024 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
  66. MOD - [2017.04.17 17:13:44 | 001,826,104 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
  67. MOD - [2017.04.17 17:13:44 | 000,531,264 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
  68. MOD - [2017.04.17 17:13:42 | 000,060,736 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
  69. MOD - [2017.04.17 17:13:42 | 000,025,936 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
  70. MOD - [2017.04.17 17:13:40 | 000,084,288 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
  71. MOD - [2017.04.17 17:13:40 | 000,038,712 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
  72. MOD - [2017.04.17 17:13:40 | 000,033,112 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
  73. MOD - [2017.04.17 17:13:38 | 000,027,488 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
  74. MOD - [2017.04.17 17:13:38 | 000,020,816 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
  75. MOD - [2017.04.17 17:13:36 | 001,729,360 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
  76. MOD - [2017.04.17 17:13:36 | 000,246,608 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
  77. MOD - [2017.04.17 17:13:36 | 000,022,336 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
  78. MOD - [2017.04.17 17:13:36 | 000,020,824 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
  79. MOD - [2017.04.17 17:09:48 | 000,870,720 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
  80. MOD - [2017.03.29 02:00:28 | 001,631,184 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
  81. MOD - [2017.03.29 02:00:28 | 000,017,864 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\libEGL.dll
  82. MOD - [2017.03.29 01:56:46 | 000,349,128 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
  83. MOD - [2017.03.29 01:56:46 | 000,116,176 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32security.pyd
  84. MOD - [2017.03.29 01:56:46 | 000,048,592 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32service.pyd
  85. MOD - [2017.03.29 01:56:46 | 000,028,616 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
  86. MOD - [2017.03.29 01:56:44 | 000,060,880 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32print.pyd
  87. MOD - [2017.03.29 01:56:44 | 000,043,472 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32process.pyd
  88. MOD - [2017.03.29 01:56:44 | 000,030,160 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
  89. MOD - [2017.03.29 01:56:44 | 000,024,016 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
  90. MOD - [2017.03.29 01:56:42 | 000,175,560 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
  91. MOD - [2017.03.29 01:56:42 | 000,124,880 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32file.pyd
  92. MOD - [2017.03.29 01:56:42 | 000,057,808 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
  93. MOD - [2017.03.29 01:56:42 | 000,024,528 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32event.pyd
  94. MOD - [2017.03.29 01:56:40 | 000,105,928 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32api.pyd
  95. MOD - [2017.03.29 01:56:40 | 000,024,016 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
  96. MOD - [2017.03.29 01:56:40 | 000,020,936 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
  97. MOD - [2017.03.29 01:55:32 | 000,241,104 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
  98. MOD - [2017.03.29 01:54:54 | 000,123,856 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
  99. MOD - [2017.03.29 01:54:52 | 000,083,912 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\sip.pyd
  100. MOD - [2017.03.29 01:54:52 | 000,019,408 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
  101. MOD - [2017.03.29 01:54:10 | 000,035,792 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
  102. MOD - [2017.03.29 01:54:08 | 000,694,224 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
  103. MOD - [2017.03.29 01:54:08 | 000,100,296 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
  104. MOD - [2017.03.29 01:54:08 | 000,018,888 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\select.pyd
  105. MOD - [2017.03.29 01:54:06 | 000,145,864 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
  106. MOD - [2017.03.29 01:54:04 | 000,116,688 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
  107. MOD - [2017.03.29 01:54:02 | 000,392,656 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
  108. MOD - [2017.03.29 01:52:12 | 000,036,296 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\librsync.dll
  109. MOD - [2017.03.22 23:21:46 | 000,293,392 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
  110. MOD - [2016.04.16 09:55:06 | 001,325,240 | ---- | M] () -- C:\Program Files (x86)\DFX\DFX.exe
  111. MOD - [2015.11.27 21:05:54 | 000,132,280 | ---- | M] () -- C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp32.exe
  112. MOD - [2015.11.27 21:05:53 | 000,050,872 | ---- | M] () -- C:\Program Files (x86)\Common Files\DFX\Dlls\dfxShared32.dll
  113.  
  114.  
  115. [color=#E56717]========== Services (SafeList) ==========[/color]
  116.  
  117. SRV:[b]64bit:[/b] - [2017.04.17 17:14:04 | 000,048,944 | ---- | M] (Dropbox, Inc.) [Auto | Running] -- C:\Windows\SysNative\DbxSvc.exe -- (DbxSvc)
  118. SRV:[b]64bit:[/b] - [2017.03.28 08:22:52 | 000,347,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
  119. SRV:[b]64bit:[/b] - [2017.03.28 08:21:33 | 003,318,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  120. SRV:[b]64bit:[/b] - [2017.03.28 08:20:11 | 000,764,392 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
  121. SRV:[b]64bit:[/b] - [2017.03.28 08:09:22 | 000,103,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
  122. SRV:[b]64bit:[/b] - [2017.03.28 07:32:23 | 000,635,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FlightSettings.dll -- (wisvc)
  123. SRV:[b]64bit:[/b] - [2017.03.28 07:28:25 | 000,407,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
  124. SRV:[b]64bit:[/b] - [2017.03.28 07:26:44 | 000,549,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc)
  125. SRV:[b]64bit:[/b] - [2017.03.28 07:13:32 | 000,650,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo)
  126. SRV:[b]64bit:[/b] - [2017.03.28 07:11:24 | 001,981,440 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  127. SRV:[b]64bit:[/b] - [2017.03.28 07:10:05 | 001,231,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc)
  128. SRV:[b]64bit:[/b] - [2017.03.18 18:35:45 | 002,278,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
  129. SRV:[b]64bit:[/b] - [2017.03.09 21:15:14 | 002,624,856 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Security\ekrn.exe -- (ekrn)
  130. SRV:[b]64bit:[/b] - [2017.03.04 08:33:28 | 000,095,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tzautoupdate.dll -- (tzautoupdate)
  131. SRV:[b]64bit:[/b] - [2017.03.04 08:29:39 | 000,082,944 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker)
  132. SRV:[b]64bit:[/b] - [2017.03.04 08:29:21 | 000,203,264 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
  133. SRV:[b]64bit:[/b] - [2017.03.04 08:28:56 | 000,349,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicvss)
  134. SRV:[b]64bit:[/b] - [2017.03.04 08:28:56 | 000,349,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicrdv)
  135. SRV:[b]64bit:[/b] - [2017.03.04 08:25:51 | 001,016,320 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager)
  136. SRV:[b]64bit:[/b] - [2017.03.04 08:24:38 | 001,025,536 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
  137. SRV:[b]64bit:[/b] - [2017.03.04 08:24:03 | 000,560,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
  138. SRV:[b]64bit:[/b] - [2017.03.04 08:23:43 | 001,184,256 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc)
  139. SRV:[b]64bit:[/b] - [2017.03.04 08:23:18 | 000,715,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
  140. SRV:[b]64bit:[/b] - [2017.03.04 08:23:17 | 000,330,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
  141. SRV:[b]64bit:[/b] - [2017.03.04 08:15:29 | 001,837,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
  142. SRV:[b]64bit:[/b] - [2017.03.04 08:12:58 | 000,805,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FrameServer.dll -- (FrameServer)
  143. SRV:[b]64bit:[/b] - [2017.03.04 08:11:22 | 001,312,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService)
  144. SRV:[b]64bit:[/b] - [2017.03.04 08:10:23 | 000,770,560 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
  145. SRV:[b]64bit:[/b] - [2017.03.04 08:07:14 | 001,512,448 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc)
  146. SRV:[b]64bit:[/b] - [2017.02.06 15:42:30 | 000,076,848 | ---- | M] (CyberGhost S.R.L) [Auto | Running] -- C:\Program Files\CyberGhost 6\CyberGhost.Service.exe -- (CG6Service)
  147. SRV:[b]64bit:[/b] - [2016.12.14 07:33:21 | 000,822,624 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\AppVClient.exe -- (AppVClient)
  148. SRV:[b]64bit:[/b] - [2016.12.14 06:43:24 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
  149. SRV:[b]64bit:[/b] - [2016.12.10 01:16:02 | 000,285,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
  150. SRV:[b]64bit:[/b] - [2016.12.10 01:16:01 | 004,136,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository)
  151. SRV:[b]64bit:[/b] - [2016.12.10 01:16:01 | 002,104,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
  152. SRV:[b]64bit:[/b] - [2016.12.10 01:15:51 | 000,411,648 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc)
  153. SRV:[b]64bit:[/b] - [2016.12.10 01:15:51 | 000,339,456 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\cdpusersvc.dll -- (CDPUserSvc)
  154. SRV:[b]64bit:[/b] - [2016.12.10 01:15:44 | 000,691,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
  155. SRV:[b]64bit:[/b] - [2016.11.09 22:10:31 | 000,265,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
  156. SRV:[b]64bit:[/b] - [2016.11.02 21:15:35 | 000,373,744 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService2.0.0.0)
  157. SRV:[b]64bit:[/b] - [2016.11.02 12:22:02 | 000,337,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
  158. SRV:[b]64bit:[/b] - [2016.10.12 18:30:04 | 000,983,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc)
  159. SRV:[b]64bit:[/b] - [2016.10.08 02:24:01 | 002,889,896 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe -- (Sense)
  160. SRV:[b]64bit:[/b] - [2016.10.08 02:24:01 | 000,447,488 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
  161. SRV:[b]64bit:[/b] - [2016.10.08 02:23:52 | 001,020,928 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager)
  162. SRV:[b]64bit:[/b] - [2016.10.08 02:23:52 | 000,781,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PhoneService.dll -- (PhoneSvc)
  163. SRV:[b]64bit:[/b] - [2016.10.08 02:23:52 | 000,140,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RMapi.dll -- (RmSvc)
  164. SRV:[b]64bit:[/b] - [2016.10.08 02:23:47 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService)
  165. SRV:[b]64bit:[/b] - [2016.10.08 02:23:47 | 000,026,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
  166. SRV:[b]64bit:[/b] - [2016.10.08 02:23:39 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession)
  167. SRV:[b]64bit:[/b] - [2016.10.08 02:23:39 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
  168. SRV:[b]64bit:[/b] - [2016.10.08 02:23:39 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
  169. SRV:[b]64bit:[/b] - [2016.10.08 02:23:39 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
  170. SRV:[b]64bit:[/b] - [2016.10.08 02:23:39 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
  171. SRV:[b]64bit:[/b] - [2016.10.08 02:23:39 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
  172. SRV:[b]64bit:[/b] - [2016.10.08 02:23:38 | 000,023,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
  173. SRV:[b]64bit:[/b] - [2016.07.17 00:09:32 | 001,227,264 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\AgentService.exe -- (UevAgentService)
  174. SRV:[b]64bit:[/b] - [2016.07.17 00:09:24 | 000,197,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  175. SRV:[b]64bit:[/b] - [2016.07.16 13:43:50 | 000,082,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
  176. SRV:[b]64bit:[/b] - [2016.07.16 13:43:47 | 000,436,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService)
  177. SRV:[b]64bit:[/b] - [2016.07.16 13:43:18 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
  178. SRV:[b]64bit:[/b] - [2016.07.16 13:42:42 | 000,088,576 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
  179. SRV:[b]64bit:[/b] - [2016.07.16 13:42:39 | 000,161,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll -- (shpamsvc)
  180. SRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 000,057,344 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice)
  181. SRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 000,055,296 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
  182. SRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,183,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dcpsvc.dll -- (DcpSvc)
  183. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,827,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
  184. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,096,768 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
  185. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,093,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
  186. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (WpnUserService_585c6)
  187. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_585c6)
  188. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_585c6)
  189. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_585c6)
  190. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_585c6)
  191. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_585c6)
  192. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (CDPUserSvc_585c6)
  193. SRV:[b]64bit:[/b] - [2016.07.16 13:42:23 | 000,366,592 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc)
  194. SRV:[b]64bit:[/b] - [2016.07.16 13:42:20 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
  195. SRV:[b]64bit:[/b] - [2016.07.16 13:42:16 | 000,287,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TieringEngineService.exe -- (TieringEngineService)
  196. SRV:[b]64bit:[/b] - [2016.07.16 13:42:16 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
  197. SRV:[b]64bit:[/b] - [2016.07.16 13:42:16 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
  198. SRV:[b]64bit:[/b] - [2016.07.16 13:42:13 | 000,590,848 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter)
  199. SRV:[b]64bit:[/b] - [2016.07.16 13:42:12 | 000,519,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
  200. SRV:[b]64bit:[/b] - [2016.07.16 13:42:12 | 000,052,224 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\MessagingService.dll -- (MessagingService)
  201. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,574,976 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\tileobjserver.dll -- (tiledatamodelsvc)
  202. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,387,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
  203. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,358,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
  204. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,339,968 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
  205. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,234,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService)
  206. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,202,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc)
  207. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,177,664 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBrokerSvc)
  208. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,074,240 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\WpnUserService.dll -- (WpnUserService)
  209. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,037,376 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc)
  210. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,034,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
  211. SRV:[b]64bit:[/b] - [2016.07.16 13:42:07 | 001,159,680 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave)
  212. SRV:[b]64bit:[/b] - [2016.07.16 13:42:06 | 000,729,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC)
  213. SRV:[b]64bit:[/b] - [2016.07.16 13:42:06 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter)
  214. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 000,197,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
  215. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 000,152,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc)
  216. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 000,140,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode)
  217. SRV:[b]64bit:[/b] - [2016.07.16 13:42:04 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hvhostsvc.dll -- (HvHost)
  218. SRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,321,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
  219. SRV:[b]64bit:[/b] - [2015.12.31 01:08:16 | 000,881,152 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R)
  220. SRV:[b]64bit:[/b] - [2015.12.31 01:08:11 | 000,415,520 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  221. SRV:[b]64bit:[/b] - [2015.12.31 01:08:11 | 000,223,520 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
  222. SRV:[b]64bit:[/b] - [2015.05.21 07:50:40 | 001,272,560 | ---- | M] (Disc Soft Ltd) [On_Demand | Stopped] -- C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe -- (Disc Soft Lite Bus Service)
  223. SRV - [2017.03.28 08:21:33 | 003,318,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  224. SRV - [2017.03.28 07:32:32 | 000,298,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
  225. SRV - [2017.03.28 06:48:06 | 000,483,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar)
  226. SRV - [2017.03.23 02:52:28 | 001,590,560 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  227. SRV - [2017.03.04 08:16:20 | 000,968,704 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc)
  228. SRV - [2017.02.28 19:21:32 | 000,173,512 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  229. SRV - [2017.02.24 20:03:42 | 001,659,592 | ---- | M] (Foxit Software Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe -- (FoxitReaderService)
  230. SRV - [2016.12.10 01:16:12 | 003,370,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository)
  231. SRV - [2016.11.10 19:27:54 | 002,237,392 | ---- | M] (Micro-Star INT'L CO., LTD.) [Auto | Running] -- C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe -- (MSI_LiveUpdate_Service)
  232. SRV - [2016.11.02 21:15:35 | 000,301,552 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  233. SRV - [2016.10.09 23:33:48 | 000,177,376 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe -- (iumsvc)
  234. SRV - [2016.10.08 02:23:38 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
  235. SRV - [2016.09.19 09:03:53 | 000,035,448 | ---- | M] (MSFree Inc.) [Auto | Running] -- C:\ProgramData\KMSAuto\bin\KMSSS.exe -- (KMSEmulator)
  236. SRV - [2016.07.17 13:05:42 | 000,014,464 | ---- | M] () [Auto | Running] -- C:\ProgramData\KMSAuto\bin\TunMirror2.exe -- (TunMirror)
  237. SRV - [2016.03.25 00:57:32 | 000,087,368 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe -- (HTCMonitorService)
  238. SRV - [2016.03.16 20:54:34 | 000,166,912 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
  239. SRV - [2015.12.31 01:17:30 | 000,171,480 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
  240. SRV - [2015.12.31 01:17:23 | 000,019,216 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe -- (XTU3SERVICE)
  241. SRV - [2015.12.31 01:10:40 | 000,105,296 | ---- | M] (MSI) [Auto | Running] -- C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe -- (MSI_FastBoot)
  242. SRV - [2015.12.31 01:08:20 | 000,335,872 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe -- (Intel(R)
  243. SRV - [2015.12.06 15:50:14 | 000,143,144 | ---- | M] (Dropbox, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdatem)
  244. SRV - [2015.12.06 15:50:14 | 000,143,144 | ---- | M] (Dropbox, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdate)
  245.  
  246.  
  247. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  248.  
  249. DRV:[b]64bit:[/b] - [2017.03.28 07:37:09 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
  250. DRV:[b]64bit:[/b] - [2017.03.28 07:36:52 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
  251. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,178,056 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
  252. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,132,848 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
  253. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,107,344 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\edevmon.sys -- (edevmon)
  254. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,101,648 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
  255. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,078,192 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
  256. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,050,752 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\ekbdflt.sys -- (ekbdflt)
  257. DRV:[b]64bit:[/b] - [2017.03.09 21:55:26 | 000,014,880 | ---- | M] (ESET) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\eelam.sys -- (eelam)
  258. DRV:[b]64bit:[/b] - [2017.03.04 09:24:27 | 000,108,384 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
  259. DRV:[b]64bit:[/b] - [2017.03.04 09:15:25 | 000,063,328 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
  260. DRV:[b]64bit:[/b] - [2017.03.04 09:08:59 | 000,130,912 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
  261. DRV:[b]64bit:[/b] - [2017.03.04 09:07:55 | 000,557,400 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
  262. DRV:[b]64bit:[/b] - [2017.03.04 08:34:51 | 000,258,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip)
  263. DRV:[b]64bit:[/b] - [2017.03.04 08:27:56 | 000,719,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
  264. DRV:[b]64bit:[/b] - [2016.12.21 00:45:51 | 000,040,984 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt)
  265. DRV:[b]64bit:[/b] - [2016.12.14 17:15:48 | 000,377,184 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
  266. DRV:[b]64bit:[/b] - [2016.12.14 01:02:13 | 000,033,872 | ---- | M] (AnvSoft Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\anvsnddrv.sys -- (anvsnddrv)
  267. DRV:[b]64bit:[/b] - [2016.12.10 01:15:53 | 000,219,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
  268. DRV:[b]64bit:[/b] - [2016.11.19 22:04:52 | 000,024,056 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv)
  269. DRV:[b]64bit:[/b] - [2016.11.19 22:04:52 | 000,010,848 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv)
  270. DRV:[b]64bit:[/b] - [2016.11.10 19:48:36 | 000,206,416 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\VBoxNetLwf.sys -- (VBoxNetLwf)
  271. DRV:[b]64bit:[/b] - [2016.11.10 19:48:34 | 000,132,120 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp6.sys -- (VBoxNetAdp)
  272. DRV:[b]64bit:[/b] - [2016.11.09 22:10:31 | 000,048,992 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iorate.sys -- (iorate)
  273. DRV:[b]64bit:[/b] - [2016.11.02 21:16:23 | 000,481,768 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  274. DRV:[b]64bit:[/b] - [2016.11.02 21:15:39 | 007,966,192 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  275. DRV:[b]64bit:[/b] - [2016.11.02 21:05:53 | 000,227,328 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
  276. DRV:[b]64bit:[/b] - [2016.11.02 21:05:44 | 000,118,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg)
  277. DRV:[b]64bit:[/b] - [2016.10.12 18:30:04 | 000,064,352 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\MegaSas2i.sys -- (megasas2i)
  278. DRV:[b]64bit:[/b] - [2016.10.12 18:29:41 | 000,279,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  279. DRV:[b]64bit:[/b] - [2016.10.08 02:23:47 | 000,127,328 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppVStrm.sys -- (AppvStrm)
  280. DRV:[b]64bit:[/b] - [2016.10.08 02:23:42 | 000,073,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hvservice.sys -- (hvservice)
  281. DRV:[b]64bit:[/b] - [2016.10.08 02:23:41 | 000,119,648 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcifs.sys -- (wcifs)
  282. DRV:[b]64bit:[/b] - [2016.10.08 02:23:38 | 000,118,112 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
  283. DRV:[b]64bit:[/b] - [2016.10.08 02:23:38 | 000,081,760 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
  284. DRV:[b]64bit:[/b] - [2016.10.08 02:23:38 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
  285. DRV:[b]64bit:[/b] - [2016.10.08 02:23:38 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid)
  286. DRV:[b]64bit:[/b] - [2016.10.08 02:19:03 | 000,199,008 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
  287. DRV:[b]64bit:[/b] - [2016.09.09 16:23:58 | 000,018,624 | ---- | M] (/n software, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpnpbus.sys -- (vpnpbus)
  288. DRV:[b]64bit:[/b] - [2016.09.09 16:23:46 | 000,460,992 | ---- | M] (/n software, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cbfs6.sys -- (cbfs6)
  289. DRV:[b]64bit:[/b] - [2016.07.23 23:00:17 | 000,129,152 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
  290. DRV:[b]64bit:[/b] - [2016.07.17 00:09:43 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  291. DRV:[b]64bit:[/b] - [2016.07.17 00:09:36 | 000,179,040 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mssecflt.sys -- (MsSecFlt)
  292. DRV:[b]64bit:[/b] - [2016.07.17 00:09:32 | 000,040,288 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\UevAgentDriver.sys -- (UevAgentDriver)
  293. DRV:[b]64bit:[/b] - [2016.07.17 00:09:24 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  294. DRV:[b]64bit:[/b] - [2016.07.17 00:09:22 | 000,123,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
  295. DRV:[b]64bit:[/b] - [2016.07.17 00:09:19 | 000,157,024 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppvVemgr.sys -- (AppvVemgr)
  296. DRV:[b]64bit:[/b] - [2016.07.17 00:09:19 | 000,141,152 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppvVfs.sys -- (AppvVfs)
  297. DRV:[b]64bit:[/b] - [2016.07.16 13:44:01 | 000,030,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
  298. DRV:[b]64bit:[/b] - [2016.07.16 13:43:06 | 000,123,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
  299. DRV:[b]64bit:[/b] - [2016.07.16 13:43:04 | 000,290,144 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
  300. DRV:[b]64bit:[/b] - [2016.07.16 13:43:04 | 000,044,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
  301. DRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 000,125,440 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
  302. DRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
  303. DRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,078,336 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
  304. DRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\applockerfltr.sys -- (applockerfltr)
  305. DRV:[b]64bit:[/b] - [2016.07.16 13:42:35 | 000,928,608 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1)
  306. DRV:[b]64bit:[/b] - [2016.07.16 13:42:28 | 000,107,032 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
  307. DRV:[b]64bit:[/b] - [2016.07.16 13:42:28 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
  308. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,263,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000)
  309. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,201,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
  310. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,151,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
  311. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,108,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmTcpciCx.sys -- (UcmTcpciCx0101)
  312. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,095,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
  313. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,079,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
  314. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,078,336 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt)
  315. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,074,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
  316. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
  317. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,053,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
  318. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,035,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IndirectKmd.sys -- (IndirectKmd)
  319. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,031,584 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  320. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
  321. DRV:[b]64bit:[/b] - [2016.07.16 13:42:23 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
  322. DRV:[b]64bit:[/b] - [2016.07.16 13:42:22 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS)
  323. DRV:[b]64bit:[/b] - [2016.07.16 13:42:18 | 000,088,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
  324. DRV:[b]64bit:[/b] - [2016.07.16 13:42:12 | 000,120,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\irda.sys -- (irda)
  325. DRV:[b]64bit:[/b] - [2016.07.16 13:42:11 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
  326. DRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,168,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
  327. DRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,156,000 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
  328. DRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,070,144 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\registry.sys -- (clreg)
  329. DRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,066,560 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcnfs.sys -- (wcnfs)
  330. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,210,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
  331. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,126,816 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
  332. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,090,624 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NetAdapterCx.sys -- (NetAdapterCx)
  333. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,088,576 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt)
  334. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (tsusbflt)
  335. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,045,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx)
  336. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf)
  337. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,535,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
  338. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,381,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
  339. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,137,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
  340. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,096,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
  341. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,095,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
  342. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
  343. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
  344. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
  345. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
  346. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,017,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
  347. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,176,384 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C)
  348. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,081,408 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iai2c.sys -- (iai2c)
  349. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,064,512 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2.sys -- (iaLPSS2i_GPIO2)
  350. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
  351. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,050,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
  352. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
  353. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
  354. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,034,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  355. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,033,280 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iagpio.sys -- (iagpio)
  356. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
  357. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
  358. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 002,104,160 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4vx64.sys -- (cht4vbd)
  359. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 001,135,456 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
  360. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,842,584 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
  361. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,673,120 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
  362. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,526,176 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus)
  363. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,346,976 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4sx64.sys -- (cht4iscsi)
  364. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
  365. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  366. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,123,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\scmdisk0101.sys -- (scmdisk0101)
  367. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,108,896 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr)
  368. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,107,360 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
  369. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,105,824 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
  370. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,101,216 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
  371. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,088,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\scmbus.sys -- (scmbus)
  372. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,083,296 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  373. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,082,776 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
  374. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,077,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
  375. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,069,120 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
  376. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,064,864 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs)
  377. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  378. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
  379. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,061,792 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i)
  380. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,058,720 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i)
  381. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,032,096 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs)
  382. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,032,096 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad)
  383. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  384. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
  385. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,026,976 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  386. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiDev.sys -- (AcpiDev)
  387. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,016,224 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volume.sys -- (volume)
  388. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
  389. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
  390. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
  391. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn.sys -- (bcmfn)
  392. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 003,814,400 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rtwlanu_oldIC.sys -- (RtlWlanu_OldIC)
  393. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 003,418,976 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  394. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 002,224,128 | ---- | M] (MediaTek Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28ux.sys -- (netr28ux)
  395. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 000,533,856 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  396. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 000,048,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
  397. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
  398. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
  399. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
  400. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  401. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
  402. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys -- (CompositeBus)
  403. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,035,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  404. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
  405. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
  406. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
  407. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgid.sys -- (vmgid)
  408. DRV:[b]64bit:[/b] - [2016.06.18 16:56:52 | 000,041,088 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
  409. DRV:[b]64bit:[/b] - [2016.04.25 00:35:58 | 000,221,824 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
  410. DRV:[b]64bit:[/b] - [2016.03.17 01:54:42 | 000,121,800 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HtcVComV64.sys -- (HtcVCom32)
  411. DRV:[b]64bit:[/b] - [2016.03.17 01:49:06 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)
  412. DRV:[b]64bit:[/b] - [2016.03.16 20:54:35 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\htcnprot.sys -- (htcnprot)
  413. DRV:[b]64bit:[/b] - [2015.12.31 01:20:28 | 000,889,584 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rt640x64.sys -- (rt640x64)
  414. DRV:[b]64bit:[/b] - [2015.12.31 01:17:24 | 000,039,736 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ICCWDT.sys -- (ICCWDT)
  415. DRV:[b]64bit:[/b] - [2015.12.31 01:07:52 | 000,184,608 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverW8x64.sys -- (MEIx64)
  416. DRV:[b]64bit:[/b] - [2015.11.22 02:35:42 | 000,029,688 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dfx12x64.sys -- (DFX12)
  417. DRV:[b]64bit:[/b] - [2015.11.22 02:35:42 | 000,028,008 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dfx11_1x64.sys -- (DFX11_1)
  418. DRV:[b]64bit:[/b] - [2015.11.09 01:26:33 | 000,027,136 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ptun0901.sys -- (ptun0901)
  419. DRV:[b]64bit:[/b] - [2015.09.19 22:06:35 | 000,025,880 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiCtlDrv.sys -- (AcpiCtlDrv)
  420. DRV:[b]64bit:[/b] - [2015.09.09 20:31:43 | 000,042,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
  421. DRV:[b]64bit:[/b] - [2015.07.08 14:33:12 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
  422. DRV:[b]64bit:[/b] - [2015.06.24 16:34:10 | 000,063,840 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\XtuAcpiDriver.sys -- (XtuAcpiDriver)
  423. DRV:[b]64bit:[/b] - [2015.05.23 21:52:39 | 000,030,264 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtlitescsibus.sys -- (dtlitescsibus)
  424. DRV:[b]64bit:[/b] - [2015.05.03 20:58:37 | 000,037,376 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetmodem64.sys -- (ANDNetModem)
  425. DRV:[b]64bit:[/b] - [2015.05.03 20:58:37 | 000,030,720 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetdiag64.sys -- (AndNetDiag)
  426. DRV:[b]64bit:[/b] - [2015.05.03 20:58:37 | 000,020,992 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetbus64.sys -- (AndnetBus)
  427. DRV:[b]64bit:[/b] - [2015.03.15 21:46:14 | 000,157,944 | ---- | M] (Ray Hinchliffe) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SIVX64.sys -- (SIVDriver)
  428. DRV:[b]64bit:[/b] - [2014.05.27 11:21:08 | 000,044,744 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ISCTD.sys -- (ISCT)
  429. DRV:[b]64bit:[/b] - [2014.05.27 11:21:06 | 000,025,800 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\INETMON.sys -- (INETMON)
  430. DRV:[b]64bit:[/b] - [2013.08.22 14:40:24 | 000,040,664 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
  431. DRV:[b]64bit:[/b] - [2012.10.03 17:14:56 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
  432. DRV:[b]64bit:[/b] - [2012.07.15 07:18:16 | 000,030,720 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tapoas.sys -- (tapoas)
  433. DRV - [2016.12.16 02:24:02 | 000,029,616 | ---- | M] (WiseCleaner.com) [Kernel | On_Demand | Stopped] -- C:\Windows\WiseRegNotify.sys -- (WiseRegNotify)
  434. DRV - [2016.11.19 22:04:52 | 000,021,496 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv)
  435. DRV - [2016.11.19 22:04:52 | 000,010,208 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv)
  436. DRV - [2016.07.16 13:41:50 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys -- (CompositeBus)
  437. DRV - [2015.12.31 01:10:40 | 000,013,368 | ---- | M] (MSI) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys -- (NTIOLib_FastBoot)
  438. DRV - [2015.12.24 21:15:50 | 000,014,800 | ---- | M] (wisecleaner.com) [Kernel | On_Demand | Stopped] -- C:\Windows\WiseHDInfo64.dll -- (WiseHDInfo)
  439. DRV - [2015.05.28 14:42:20 | 000,030,224 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys -- (iocbios2)
  440.  
  441.  
  442. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  443.  
  444.  
  445. [color=#E56717]========== Internet Explorer ==========[/color]
  446.  
  447. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  448. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
  449. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  450. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  451. IE:[b]64bit:[/b] - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  452. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  453. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  454. IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
  455. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  456. IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  457.  
  458. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
  459. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  460. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl-PL
  461. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 3A 8A 98 BE C3 56 D1 01 [binary data]
  462. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = DC 2F 5A 8D B5 87 D2 01 [binary data]
  463. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = 01 00 00 00 48 00 00 00 8C AF 6B 63 77 B4 5C 0F 5C B5 3E F1 FE C9 4B D3 73 1E 88 AE FC FC 20 0D 69 B4 9D F1 C3 C2 CC 87 BA 3A 5C 75 68 C6 48 EE 80 E5 6A CD C4 1F 4C 1A EF 7D F7 74 4B 53 8A BD 57 8A B0 59 E2 5B 2D 41 21 3C 43 69 5E 97 1A B4 02 00 00 00 10 00 00 00 38 57 59 46 34 25 32 62 4A 2F 41 7A 45 25 33 64 [Binary data over 200 bytes]
  464. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  465. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
  466. IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  467. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  468. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
  469.  
  470.  
  471. [color=#E56717]========== FireFox ==========[/color]
  472.  
  473. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.40.2: C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  474. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2: C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll (Oracle Corporation)
  475. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll ( Microsoft Corporation)
  476. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\Microsoft Office\Office16\NPSPWRAP.DLL (Microsoft Corporation)
  477. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@unity3d.com/UnityPlayer64,version=1.0: C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll (Unity Technologies ApS)
  478. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.4: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  479. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.0: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  480. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  481. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  482. FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
  483. FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
  484. FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
  485. FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
  486. FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
  487. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  488. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  489. FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
  490. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll ( Microsoft Corporation)
  491. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\Microsoft Office\Office16\NPSPWRAP.DLL (Microsoft Corporation)
  492. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  493. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll (Google Inc.)
  494. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll (Google Inc.)
  495.  
  496. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 52.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components
  497. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 52.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
  498. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 52.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components
  499. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 52.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
  500.  
  501. [2015.06.11 18:53:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tomasz\AppData\Roaming\mozilla\Extensions
  502. [2017.02.22 23:56:40 | 000,039,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll
  503.  
  504. [color=#E56717]========== Chrome ==========[/color]
  505.  
  506. CHR - plugin: Error reading preferences file
  507.  
  508. O1 HOSTS File: ([2017.04.20 09:18:30 | 000,000,876 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  509. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll (Oracle Corporation)
  510. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll (Oracle Corporation)
  511. O2 - BHO: (Microsoft OneDrive for Business Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\Microsoft Office\Office16\GROOVEEX.DLL (Microsoft Corporation)
  512. O4 - HKLM..\Run: [Dropbox] C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.)
  513. O4 - HKCU..\Run: [DAEMON Tools Lite Automount] C:\Program Files\DAEMON Tools Lite\DTAgent.exe (Disc Soft Ltd)
  514. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  515. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  516. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
  517. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
  518. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
  519. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
  520. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
  521. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  522. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  523. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
  524. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  525. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
  526. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleNetIDList = 1
  527. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
  528. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: =
  529. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
  530. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
  531. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
  532. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 1 = Yandex.Disk
  533. O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Office15\EXCEL.EXE/3000 File not found
  534. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE/3000 File not found
  535. O8:[b]64bit:[/b] - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm File not found
  536. O8:[b]64bit:[/b] - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm File not found
  537. O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\Root\Office16\ONBttnIE.dll/105 File not found
  538. O8:[b]64bit:[/b] - Extra context menu item: Wyślij &do programu OneNote - res://C:\Program Files\Microsoft Office 15\Office15\ONBttnIE.dll/105 File not found
  539. O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Office15\EXCEL.EXE/3000 File not found
  540. O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE/3000 File not found
  541. O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm File not found
  542. O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm File not found
  543. O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\Root\Office16\ONBttnIE.dll/105 File not found
  544. O8 - Extra context menu item: Wyślij &do programu OneNote - res://C:\Program Files\Microsoft Office 15\Office15\ONBttnIE.dll/105 File not found
  545. O9:[b]64bit:[/b] - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found
  546. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found
  547. O13[b]64bit:[/b] - gopher Prefix: missing
  548. O13 - gopher Prefix: missing
  549. O15:[b]64bit:[/b] - ..Trusted Domains: eset.com ([help] http in Trusted sites)
  550. O15 - HKLM\..Trusted Domains: eset.com ([help] http in Trusted sites)
  551. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.62 62.179.1.63
  552. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4d7fad59-66ad-4718-a066-88db187445bd}: DhcpNameServer = 62.179.1.62 62.179.1.63
  553. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{a0de790d-a7a1-451d-908b-8e8a2ae6bb24}: DhcpNameServer = 62.179.1.62 62.179.1.63
  554. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{b0d28f23-e87f-46a5-9561-5f0956081941}: DhcpNameServer = 192.168.8.1
  555. O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
  556. O18:[b]64bit:[/b] - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
  557. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  558. O18 - Protocol\Handler\ms-help - No CLSID value found
  559. O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
  560. O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
  561. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
  562. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  563. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
  564. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)
  565. O21:[b]64bit:[/b] - SSODL: EldosMountNotificator-cbfs6 - {964A16C1-E57F-4FB9-BAC5-B284E55231C6} - C:\Windows\SysNative\cbfsMntNtf6.dll (/n software, Inc.)
  566. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  567. O21 - SSODL: EldosMountNotificator-cbfs6 - {964A16C1-E57F-4FB9-BAC5-B284E55231C6} - C:\Windows\SysWOW64\cbfsMntNtf6.dll (/n software, Inc.)
  568. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  569. O22:[b]64bit:[/b] - SharedTaskScheduler: {964A16C1-E57F-4FB9-BAC5-B284E55231C6} - Virtual Storage Mount Notification - C:\Windows\SysNative\cbfsMntNtf6.dll (/n software, Inc.)
  570. O22 - SharedTaskScheduler: {964A16C1-E57F-4FB9-BAC5-B284E55231C6} - Virtual Storage Mount Notification - C:\Windows\SysWOW64\cbfsMntNtf6.dll (/n software, Inc.)
  571. O32 - HKLM CDRom: AutoRun - 1
  572. O32 - AutoRun File - [2016.03.30 17:54:15 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
  573. O34 - HKLM BootExecute: (autocheck autochk *)
  574. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  575. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  576. O35 - HKLM\..comfile [open] -- "%1" %*
  577. O35 - HKLM\..exefile [open] -- "%1" %*
  578. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  579. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  580. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  581. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  582. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  583. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  584.  
  585. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  586.  
  587. [2017.04.21 00:42:13 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Tomasz\Desktop\OTL.exe
  588. [2017.04.21 00:28:40 | 000,000,000 | -H-D | C] -- C:\OneDriveTemp
  589. [2017.04.21 00:18:52 | 000,000,000 | -H-D | C] -- C:\$WINDOWS.~BT
  590. [2017.04.20 19:14:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
  591. [2017.04.20 12:00:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  592. [2017.04.20 11:55:52 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\AppData\Local\UNP
  593. [2017.04.20 11:31:56 | 000,000,000 | ---D | C] -- C:\ProgramData\KMSAuto
  594. [2017.04.20 11:31:03 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Narzędzia pakietu Microsoft Office 2016
  595. [2017.04.20 11:28:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
  596. [2017.04.20 11:28:34 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
  597. [2017.04.20 11:28:23 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\AppData\Roaming\Google
  598. [2017.04.20 11:26:50 | 000,000,000 | RH-D | C] -- C:\MSOCache
  599. [2017.04.20 11:25:31 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\AppData\Roaming\ESET
  600. [2017.04.20 11:08:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Toolkit Final
  601. [2017.04.20 10:55:11 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\Desktop\LibreOfficePortable
  602. [2017.04.20 10:52:29 | 000,000,000 | ---D | C] -- C:\KVRT_Data
  603. [2017.04.20 10:28:43 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\AppData\Local\ESET
  604. [2017.04.20 10:24:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
  605. [2017.04.20 10:24:11 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
  606. [2017.04.20 10:24:11 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
  607. [2017.04.20 09:07:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender Device Management
  608. [2017.04.20 09:06:10 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\AppData\Roaming\Bitdefender
  609. [2017.04.20 09:05:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender
  610. [2017.04.20 08:52:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Martau
  611. [2017.04.20 08:52:42 | 000,000,000 | ---D | C] -- C:\Program Files\Total Uninstall 6
  612. [2017.04.20 04:31:26 | 000,000,000 | ---D | C] -- C:\Kaspersky Rescue Disk 10.0
  613. [2017.04.20 01:02:42 | 000,000,000 | -H-D | C] -- C:\$Windows.~WS
  614. [2017.04.20 00:38:24 | 004,797,120 | ---- | C] (COMODO) -- C:\ProgramData\cisE3A2.exe
  615. [2017.04.20 00:38:24 | 000,365,248 | ---- | C] (COMODO) -- C:\ProgramData\cmdres.dll
  616. [2017.04.20 00:34:52 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\Doctor Web
  617. [2017.04.19 11:35:48 | 000,000,000 | -H-D | C] -- C:\$AV_ASW
  618. [2017.04.19 11:23:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AV
  619. [2017.04.19 11:23:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AV
  620. [2017.04.19 11:18:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KMSPico
  621. [2017.04.19 09:53:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\KMSServerService
  622. [2017.04.17 17:14:04 | 000,048,944 | ---- | C] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\DbxSvc.exe
  623. [2017.04.17 01:05:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\UNP
  624. [2017.04.17 01:05:34 | 000,000,000 | ---D | C] -- C:\Program Files\UNP
  625. [2017.04.14 18:40:42 | 000,835,576 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
  626. [2017.04.14 18:40:42 | 000,177,656 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
  627. [2017.04.12 23:48:47 | 006,667,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
  628. [2017.04.12 23:48:46 | 003,307,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
  629. [2017.04.12 23:48:45 | 005,721,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
  630. [2017.04.12 23:48:45 | 001,277,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll
  631. [2017.04.12 23:48:45 | 001,202,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
  632. [2017.04.12 23:48:44 | 006,109,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll
  633. [2017.04.12 23:48:44 | 002,994,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys
  634. [2017.04.12 23:48:44 | 000,981,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetcore.dll
  635. [2017.04.12 23:48:43 | 004,614,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
  636. [2017.04.12 23:48:43 | 001,851,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
  637. [2017.04.12 23:48:43 | 001,414,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll
  638. [2017.04.12 23:48:43 | 000,542,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Connectivity.dll
  639. [2017.04.12 23:48:42 | 007,468,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
  640. [2017.04.12 23:48:42 | 001,564,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\quartz.dll
  641. [2017.04.12 23:48:42 | 001,344,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
  642. [2017.04.12 23:48:42 | 000,861,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
  643. [2017.04.12 23:48:42 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepsync.dll
  644. [2017.04.12 23:48:41 | 001,431,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
  645. [2017.04.12 23:48:41 | 000,641,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCRecvSrc.dll
  646. [2017.04.12 23:48:41 | 000,545,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
  647. [2017.04.12 23:48:41 | 000,315,744 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll
  648. [2017.04.12 23:48:40 | 005,685,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
  649. [2017.04.12 23:48:40 | 004,023,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
  650. [2017.04.12 23:48:40 | 000,653,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.AccountsControl.dll
  651. [2017.04.12 23:48:39 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.dll
  652. [2017.04.12 23:48:39 | 001,004,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Input.Inking.dll
  653. [2017.04.12 23:48:39 | 000,975,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
  654. [2017.04.12 23:48:39 | 000,557,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\StoreAgent.dll
  655. [2017.04.12 23:48:39 | 000,034,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CompPkgSup.dll
  656. [2017.04.12 23:48:38 | 003,106,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstsc.exe
  657. [2017.04.12 23:48:38 | 001,360,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll
  658. [2017.04.12 23:48:38 | 000,846,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll
  659. [2017.04.12 23:48:38 | 000,827,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll
  660. [2017.04.12 23:48:38 | 000,576,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wer.dll
  661. [2017.04.12 23:48:38 | 000,116,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudExperienceHostCommon.dll
  662. [2017.04.12 23:48:38 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\updatepolicy.dll
  663. [2017.04.12 23:48:37 | 001,221,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Audio.dll
  664. [2017.04.12 23:48:37 | 001,077,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Editing.dll
  665. [2017.04.12 23:48:37 | 000,895,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Streaming.dll
  666. [2017.04.12 23:48:37 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ShareHost.dll
  667. [2017.04.12 23:48:37 | 000,306,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.MediaControl.dll
  668. [2017.04.12 23:48:37 | 000,263,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Storage.ApplicationData.dll
  669. [2017.04.12 23:48:37 | 000,167,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscapi.dll
  670. [2017.04.12 23:48:37 | 000,136,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudExperienceHostUser.dll
  671. [2017.04.12 23:48:36 | 002,646,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CertEnroll.dll
  672. [2017.04.12 23:48:36 | 000,901,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Bluetooth.dll
  673. [2017.04.12 23:48:36 | 000,675,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.dll
  674. [2017.04.12 23:48:36 | 000,654,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApiPublic.dll
  675. [2017.04.12 23:48:36 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.AllJoyn.dll
  676. [2017.04.12 23:48:36 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataTimeUtil.dll
  677. [2017.04.12 23:48:35 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Phone.dll
  678. [2017.04.12 23:48:35 | 001,013,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.Http.dll
  679. [2017.04.12 23:48:35 | 000,819,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppContracts.dll
  680. [2017.04.12 23:48:35 | 000,691,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBroker.dll
  681. [2017.04.12 23:48:35 | 000,589,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Sensors.dll
  682. [2017.04.12 23:48:35 | 000,400,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToManager.dll
  683. [2017.04.12 23:48:35 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dlnashext.dll
  684. [2017.04.12 23:48:34 | 001,232,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Maps.dll
  685. [2017.04.12 23:48:34 | 000,783,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TSWorkspace.dll
  686. [2017.04.12 23:48:34 | 000,746,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdtcprx.dll
  687. [2017.04.12 23:48:34 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RTMediaFrame.dll
  688. [2017.04.12 23:48:34 | 000,129,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.SerialCommunication.dll
  689. [2017.04.12 23:48:33 | 000,795,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MiracastReceiver.dll
  690. [2017.04.12 23:48:33 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidcli.dll
  691. [2017.04.12 23:48:33 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.HumanInterfaceDevice.dll
  692. [2017.04.12 23:48:32 | 001,656,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Perception.dll
  693. [2017.04.12 23:48:32 | 000,862,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncCore.dll
  694. [2017.04.12 23:48:32 | 000,620,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.dll
  695. [2017.04.12 23:48:32 | 000,468,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.InkControls.dll
  696. [2017.04.12 23:48:32 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Bluetooth.dll
  697. [2017.04.12 23:48:32 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepapi.dll
  698. [2017.04.12 23:48:32 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BasicRender.sys
  699. [2017.04.12 23:48:31 | 001,247,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Globalization.dll
  700. [2017.04.12 23:48:31 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.BackgroundTransfer.dll
  701. [2017.04.12 23:48:31 | 000,713,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wpnapps.dll
  702. [2017.04.12 23:48:31 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.WiFi.dll
  703. [2017.04.12 23:48:31 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.System.UserDeviceAssociation.dll
  704. [2017.04.12 23:48:30 | 002,682,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\netshell.dll
  705. [2017.04.12 23:48:30 | 001,534,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Graphics.Printing.3D.dll
  706. [2017.04.12 23:48:30 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Web.Core.dll
  707. [2017.04.12 23:48:30 | 000,390,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CredProvDataModel.dll
  708. [2017.04.12 23:48:30 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ErrorDetails.dll
  709. [2017.04.12 23:48:30 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
  710. [2017.04.12 23:48:30 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmjpegdec.dll
  711. [2017.04.12 23:48:29 | 000,670,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.PointOfService.dll
  712. [2017.04.12 23:48:29 | 000,500,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Graphics.Printing.dll
  713. [2017.04.12 23:48:29 | 000,498,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mbsmsapi.dll
  714. [2017.04.12 23:48:29 | 000,431,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\efswrt.dll
  715. [2017.04.12 23:48:29 | 000,262,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Picker.dll
  716. [2017.04.12 23:48:29 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserMgrProxy.dll
  717. [2017.04.12 23:48:28 | 000,711,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
  718. [2017.04.12 23:48:28 | 000,609,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Import.dll
  719. [2017.04.12 23:48:28 | 000,598,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.dll
  720. [2017.04.12 23:48:28 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Gaming.Input.dll
  721. [2017.04.12 23:48:28 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Geolocation.dll
  722. [2017.04.12 23:48:28 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToDevice.dll
  723. [2017.04.12 23:48:28 | 000,315,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Gaming.XboxLive.Storage.dll
  724. [2017.04.12 23:48:28 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Usb.dll
  725. [2017.04.12 23:48:28 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CryptoWinRT.dll
  726. [2017.04.12 23:48:27 | 000,886,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aadtb.dll
  727. [2017.04.12 23:48:27 | 000,769,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ipsecsnp.dll
  728. [2017.04.12 23:48:27 | 000,562,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.SmartCards.dll
  729. [2017.04.12 23:48:27 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.WiFiDirect.dll
  730. [2017.04.12 23:48:27 | 000,299,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RADCUI.dll
  731. [2017.04.12 23:48:27 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.dll
  732. [2017.04.12 23:48:27 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.System.SystemManagement.dll
  733. [2017.04.12 23:48:26 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ipsmsnap.dll
  734. [2017.04.12 23:48:26 | 000,426,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Wallet.dll
  735. [2017.04.12 23:48:26 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Midi.dll
  736. [2017.04.12 23:48:26 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataAccountApis.dll
  737. [2017.04.12 23:48:26 | 000,298,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Management.dll
  738. [2017.04.12 23:48:26 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AboveLockAppHost.dll
  739. [2017.04.12 23:48:26 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apds.dll
  740. [2017.04.12 23:48:26 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Scanners.dll
  741. [2017.04.12 23:48:26 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDeviceRegistration.dll
  742. [2017.04.12 23:48:26 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Lights.dll
  743. [2017.04.12 23:48:25 | 006,474,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mspaint.exe
  744. [2017.04.12 23:48:25 | 001,243,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.FaceAnalysis.dll
  745. [2017.04.12 23:48:25 | 001,196,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscui.cpl
  746. [2017.04.12 23:48:25 | 000,255,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\unimdm.tsp
  747. [2017.04.12 23:48:25 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.LockScreen.dll
  748. [2017.04.12 23:48:25 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vaultcli.dll
  749. [2017.04.12 23:48:25 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Devices.dll
  750. [2017.04.12 23:48:24 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\deviceaccess.dll
  751. [2017.04.12 23:48:24 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToReceiver.dll
  752. [2017.04.12 23:48:24 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WwaApi.dll
  753. [2017.04.12 23:48:24 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Identity.Provider.dll
  754. [2017.04.12 23:48:24 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DisplayManager.dll
  755. [2017.04.12 23:48:24 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinRtTracing.dll
  756. [2017.04.12 23:48:24 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppointmentActivation.dll
  757. [2017.04.12 23:48:24 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BasicDisplay.sys
  758. [2017.04.12 23:48:24 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBrokerUI.dll
  759. [2017.04.12 23:48:23 | 000,787,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sbe.dll
  760. [2017.04.12 23:48:23 | 000,747,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Ocr.dll
  761. [2017.04.12 23:48:23 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Radios.dll
  762. [2017.04.12 23:48:23 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dialclient.dll
  763. [2017.04.12 23:48:23 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AuthBroker.dll
  764. [2017.04.12 23:48:23 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryClient.dll
  765. [2017.04.12 23:48:23 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthManagerProxy.dll
  766. [2017.04.12 23:48:22 | 003,198,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll
  767. [2017.04.12 23:48:22 | 001,255,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AzureSettingSyncProvider.dll
  768. [2017.04.12 23:48:22 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dmenrollengine.dll
  769. [2017.04.12 23:48:22 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SyncSettings.dll
  770. [2017.04.12 23:48:22 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Core.dll
  771. [2017.04.12 23:48:22 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.ServiceDiscovery.Dnssd.dll
  772. [2017.04.12 23:48:22 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthTokenBrokerExt.dll
  773. [2017.04.12 23:48:21 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.LowLevel.dll
  774. [2017.04.12 23:48:21 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
  775. [2017.04.12 23:48:21 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExSMime.dll
  776. [2017.04.12 23:48:21 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallAgent.exe
  777. [2017.04.12 23:48:21 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.Diagnostics.dll
  778. [2017.04.12 23:48:21 | 000,157,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\enrollmentapi.dll
  779. [2017.04.12 23:48:21 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.HostName.dll
  780. [2017.04.12 23:48:20 | 003,733,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_47.dll
  781. [2017.04.12 23:48:20 | 002,138,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputService.dll
  782. [2017.04.12 23:48:20 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe
  783. [2017.04.12 23:48:20 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallAgentUserBroker.exe
  784. [2017.04.12 23:48:20 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usoapi.dll
  785. [2017.04.12 23:48:20 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\odbcconf.dll
  786. [2017.04.12 23:48:19 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
  787. [2017.04.12 23:48:19 | 000,037,376 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll
  788. [2017.04.12 23:48:18 | 000,551,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
  789. [2017.04.12 23:48:17 | 004,596,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xpsrchvw.exe
  790. [2017.04.12 23:48:17 | 002,424,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Perception.dll
  791. [2017.04.12 23:48:17 | 001,266,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Input.Inking.dll
  792. [2017.04.12 23:48:16 | 003,520,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xpsrchvw.exe
  793. [2017.04.12 23:48:16 | 001,424,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Maps.dll
  794. [2017.04.12 23:48:16 | 001,369,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Phone.dll
  795. [2017.04.12 23:48:16 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.InkControls.dll
  796. [2017.04.12 23:48:16 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Wallet.dll
  797. [2017.04.12 23:48:16 | 000,467,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Gaming.XboxLive.Storage.dll
  798. [2017.04.12 23:48:16 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
  799. [2017.04.12 23:48:15 | 001,080,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Ocr.dll
  800. [2017.04.12 23:48:15 | 000,963,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WebcamUi.dll
  801. [2017.04.12 23:48:15 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WebcamUi.dll
  802. [2017.04.12 23:48:15 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.dll
  803. [2017.04.12 23:48:15 | 000,358,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.dll
  804. [2017.04.12 23:48:15 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WwaApi.dll
  805. [2017.04.12 23:48:15 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinRtTracing.dll
  806. [2017.04.12 23:48:14 | 008,168,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
  807. [2017.04.12 23:48:14 | 001,388,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Cred.dll
  808. [2017.04.12 23:48:14 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.Diagnostics.dll
  809. [2017.04.12 23:48:14 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Core.dll
  810. [2017.04.12 23:48:14 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
  811. [2017.04.12 23:48:12 | 007,655,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll
  812. [2017.04.12 23:48:12 | 007,220,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
  813. [2017.04.12 23:48:12 | 003,778,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
  814. [2017.04.12 23:48:11 | 001,981,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
  815. [2017.04.12 23:48:11 | 001,848,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
  816. [2017.04.12 23:48:10 | 001,702,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll
  817. [2017.04.12 23:48:10 | 001,302,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
  818. [2017.04.12 23:48:09 | 004,149,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
  819. [2017.04.12 23:48:09 | 002,213,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll
  820. [2017.04.12 23:48:09 | 001,072,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetcore.dll
  821. [2017.04.12 23:48:08 | 008,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll
  822. [2017.04.12 23:48:08 | 006,288,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
  823. [2017.04.12 23:48:07 | 002,390,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\smartscreen.exe
  824. [2017.04.12 23:48:07 | 001,988,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
  825. [2017.04.12 23:48:07 | 000,773,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll
  826. [2017.04.12 23:48:07 | 000,549,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
  827. [2017.04.12 23:48:07 | 000,456,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\puiobj.dll
  828. [2017.04.12 23:48:07 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkBindingEngineMigPlugin.dll
  829. [2017.04.12 23:48:07 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
  830. [2017.04.12 23:48:07 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
  831. [2017.04.12 23:48:07 | 000,218,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LsaIso.exe
  832. [2017.04.12 23:48:06 | 001,860,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
  833. [2017.04.12 23:48:06 | 001,403,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Editing.dll
  834. [2017.04.12 23:48:06 | 001,145,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EmailApis.dll
  835. [2017.04.12 23:48:06 | 001,078,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Streaming.dll
  836. [2017.04.12 23:48:06 | 000,999,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TSWorkspace.dll
  837. [2017.04.12 23:48:06 | 000,748,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StoreAgent.dll
  838. [2017.04.12 23:48:06 | 000,415,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpshell.exe
  839. [2017.04.12 23:48:06 | 000,387,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpps.dll
  840. [2017.04.12 23:48:06 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
  841. [2017.04.12 23:48:05 | 004,260,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
  842. [2017.04.12 23:48:05 | 001,293,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
  843. [2017.04.12 23:48:05 | 000,947,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVP9DEC.dll
  844. [2017.04.12 23:48:05 | 000,765,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Sensors.dll
  845. [2017.04.12 23:48:05 | 000,360,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsAdminFlows.exe
  846. [2017.04.12 23:48:05 | 000,299,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpinit.exe
  847. [2017.04.12 23:48:05 | 000,198,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscapi.dll
  848. [2017.04.12 23:48:05 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataTimeUtil.dll
  849. [2017.04.12 23:48:05 | 000,097,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Credentials.UI.CredentialPicker.dll
  850. [2017.04.12 23:48:05 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\musdialoghandlers.dll
  851. [2017.04.12 23:48:04 | 000,671,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mbsmsapi.dll
  852. [2017.04.12 23:48:04 | 000,611,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Graphics.Printing.dll
  853. [2017.04.12 23:48:04 | 000,590,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efswrt.dll
  854. [2017.04.12 23:48:04 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RTMediaFrame.dll
  855. [2017.04.12 23:48:04 | 000,092,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
  856. [2017.04.12 23:48:03 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Audio.dll
  857. [2017.04.12 23:48:03 | 000,864,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnapps.dll
  858. [2017.04.12 23:48:03 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApiPublic.dll
  859. [2017.04.12 23:48:03 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AccountsRt.dll
  860. [2017.04.12 23:48:03 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.DeviceEncryptionHandlers.dll
  861. [2017.04.12 23:48:02 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Scanners.dll
  862. [2017.04.12 23:47:53 | 000,779,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cscui.dll
  863. [2017.04.12 23:47:53 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsApi.dll
  864. [2017.04.12 23:47:53 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXTaskFactory.dll
  865. [2017.04.12 23:47:53 | 000,360,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpencom.dll
  866. [2017.04.12 23:47:53 | 000,284,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AboveLockAppHost.dll
  867. [2017.04.12 23:47:53 | 000,252,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Identity.Provider.dll
  868. [2017.04.12 23:47:53 | 000,119,808 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecureAssessmentHandlers.dll
  869. [2017.04.12 23:47:53 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.ServiceDiscovery.Dnssd.dll
  870. [2017.04.12 23:47:52 | 001,220,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscui.cpl
  871. [2017.04.12 23:47:52 | 001,131,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\localspl.dll
  872. [2017.04.12 23:47:52 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\unimdm.tsp
  873. [2017.04.12 23:47:51 | 001,908,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AzureSettingSyncProvider.dll
  874. [2017.04.12 23:47:51 | 000,260,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgentUserBroker.exe
  875. [2017.04.12 23:47:51 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RdpRelayTransport.dll
  876. [2017.04.12 23:47:51 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgent.exe
  877. [2017.04.12 23:47:51 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpninprc.dll
  878. [2017.04.12 23:47:49 | 022,568,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
  879. [2017.04.12 23:47:47 | 008,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
  880. [2017.04.12 23:47:45 | 018,364,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
  881. [2017.04.12 23:47:45 | 001,738,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WindowsCodecs.dll
  882. [2017.04.12 23:47:44 | 006,045,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
  883. [2017.04.12 23:47:44 | 001,633,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\quartz.dll
  884. [2017.04.12 23:47:43 | 001,513,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
  885. [2017.04.12 23:47:43 | 001,276,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ole32.dll
  886. [2017.04.12 23:47:43 | 000,975,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\HelpPane.exe
  887. [2017.04.12 23:47:43 | 000,759,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
  888. [2017.04.12 23:47:42 | 002,095,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
  889. [2017.04.12 23:47:42 | 001,637,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
  890. [2017.04.12 23:47:42 | 001,157,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
  891. [2017.04.12 23:47:42 | 000,937,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCRecvSrc.dll
  892. [2017.04.12 23:47:42 | 000,913,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.dll
  893. [2017.04.12 23:47:42 | 000,912,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SmartCards.dll
  894. [2017.04.12 23:47:42 | 000,603,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContentDeliveryManager.Utilities.dll
  895. [2017.04.12 23:47:42 | 000,402,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
  896. [2017.04.12 23:47:40 | 001,275,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Bluetooth.dll
  897. [2017.04.12 23:47:40 | 000,472,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll
  898. [2017.04.12 23:47:39 | 001,589,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdtctm.dll
  899. [2017.04.12 23:47:39 | 000,650,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXService.dll
  900. [2017.04.12 23:47:39 | 000,635,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FlightSettings.dll
  901. [2017.04.12 23:47:38 | 000,949,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.PointOfService.dll
  902. [2017.04.12 23:47:38 | 000,774,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.dll
  903. [2017.04.12 23:47:38 | 000,692,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CellularAPI.dll
  904. [2017.04.12 23:47:38 | 000,568,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.LowLevel.dll
  905. [2017.04.12 23:47:38 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Picker.dll
  906. [2017.04.12 23:47:38 | 000,328,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Storage.ApplicationData.dll
  907. [2017.04.12 23:47:37 | 007,786,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
  908. [2017.04.12 23:47:37 | 005,611,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d2d1.dll
  909. [2017.04.12 23:47:37 | 000,908,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
  910. [2017.04.12 23:47:37 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Web.Core.dll
  911. [2017.04.12 23:47:37 | 000,306,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieproxy.dll
  912. [2017.04.12 23:47:37 | 000,241,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHost.dll
  913. [2017.04.12 23:47:37 | 000,160,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostBroker.dll
  914. [2017.04.12 23:47:36 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.Http.dll
  915. [2017.04.12 23:47:36 | 000,981,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.OnlineId.dll
  916. [2017.04.12 23:47:36 | 000,701,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Connectivity.dll
  917. [2017.04.12 23:47:36 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.WiFiDirect.dll
  918. [2017.04.12 23:47:36 | 000,437,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Usb.dll
  919. [2017.04.12 23:47:36 | 000,343,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SmartCards.Phone.dll
  920. [2017.04.12 23:47:36 | 000,239,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafpos.dll
  921. [2017.04.12 23:47:36 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SerialCommunication.dll
  922. [2017.04.12 23:47:36 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Lights.dll
  923. [2017.04.12 23:47:35 | 002,026,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
  924. [2017.04.12 23:47:35 | 000,875,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBroker.dll
  925. [2017.04.12 23:47:35 | 000,539,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToManager.dll
  926. [2017.04.12 23:47:35 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToDevice.dll
  927. [2017.04.12 23:47:35 | 000,431,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpAXHolder.dll
  928. [2017.04.12 23:47:34 | 002,208,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Graphics.Printing.3D.dll
  929. [2017.04.12 23:47:34 | 000,924,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.BackgroundTransfer.dll
  930. [2017.04.12 23:47:34 | 000,467,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Geolocation.dll
  931. [2017.04.12 23:47:34 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.HumanInterfaceDevice.dll
  932. [2017.04.12 23:47:34 | 000,223,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
  933. [2017.04.12 23:47:34 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FontProvider.dll
  934. [2017.04.12 23:47:33 | 001,509,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
  935. [2017.04.12 23:47:33 | 000,311,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SyncSettings.dll
  936. [2017.04.12 23:47:33 | 000,276,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtrans.dll
  937. [2017.04.12 23:47:33 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DisplayManager.dll
  938. [2017.04.12 23:47:33 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmjpegdec.dll
  939. [2017.04.12 23:47:32 | 000,661,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WpcWebFilter.dll
  940. [2017.04.12 23:47:32 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToReceiver.dll
  941. [2017.04.12 23:47:32 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceDirectoryClient.dll
  942. [2017.04.12 23:47:32 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Printers.dll
  943. [2017.04.12 23:47:32 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
  944. [2017.04.12 23:47:31 | 001,231,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dosvc.dll
  945. [2017.04.12 23:47:31 | 001,121,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadtb.dll
  946. [2017.04.12 23:47:31 | 001,105,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MiracastReceiver.dll
  947. [2017.04.12 23:47:31 | 000,261,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\indexeddbserver.dll
  948. [2017.04.12 23:47:31 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\flvprophandler.dll
  949. [2017.04.12 23:47:31 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
  950. [2017.04.12 23:47:31 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DdcWnsListener.dll
  951. [2017.04.12 23:47:30 | 004,474,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_47.dll
  952. [2017.04.12 23:47:30 | 000,945,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcWebFilter.dll
  953. [2017.04.12 23:47:30 | 000,425,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadcloudap.dll
  954. [2017.04.12 23:47:30 | 000,418,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BlockedShutdown.dll
  955. [2017.04.12 23:47:30 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CastLaunch.dll
  956. [2017.04.12 23:47:30 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\odbcconf.dll
  957. [2017.04.12 23:47:29 | 001,040,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NaturalLanguage6.dll
  958. [2017.04.12 23:47:25 | 003,612,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
  959. [2017.04.12 23:47:24 | 003,542,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
  960. [2017.04.12 23:47:24 | 002,278,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
  961. [2017.04.12 23:47:24 | 001,359,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModel.dll
  962. [2017.04.12 23:47:24 | 001,010,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll
  963. [2017.04.12 23:47:24 | 000,754,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVOrchestration.dll
  964. [2017.04.12 23:47:23 | 001,692,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll
  965. [2017.04.12 23:47:23 | 001,643,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.dll
  966. [2017.04.12 23:47:23 | 001,569,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32full.dll
  967. [2017.04.12 23:47:23 | 000,628,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
  968. [2017.04.12 23:47:23 | 000,573,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVCatalog.dll
  969. [2017.04.12 23:47:23 | 000,379,232 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll
  970. [2017.04.12 23:47:22 | 009,130,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
  971. [2017.04.12 23:47:22 | 000,896,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.AccountsControl.dll
  972. [2017.04.12 23:47:21 | 007,216,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll
  973. [2017.04.12 23:47:21 | 000,989,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe
  974. [2017.04.12 23:47:21 | 000,379,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepsync.dll
  975. [2017.04.12 23:47:21 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.LockScreen.dll
  976. [2017.04.12 23:47:21 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatepolicy.dll
  977. [2017.04.12 23:47:20 | 001,600,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppobjs.dll
  978. [2017.04.12 23:47:20 | 001,267,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll
  979. [2017.04.12 23:47:20 | 001,100,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe
  980. [2017.04.12 23:47:20 | 000,966,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sbe.dll
  981. [2017.04.12 23:47:20 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ShareHost.dll
  982. [2017.04.12 23:47:20 | 000,651,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.AllJoyn.dll
  983. [2017.04.12 23:47:20 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\qedit.dll
  984. [2017.04.12 23:47:20 | 000,146,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostCommon.dll
  985. [2017.04.12 23:47:20 | 000,038,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompPkgSup.dll
  986. [2017.04.12 23:47:19 | 002,914,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CertEnroll.dll
  987. [2017.04.12 23:47:19 | 001,060,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppContracts.dll
  988. [2017.04.12 23:47:19 | 000,956,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.desktop.dll
  989. [2017.04.12 23:47:19 | 000,682,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll
  990. [2017.04.12 23:47:19 | 000,372,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.MediaControl.dll
  991. [2017.04.12 23:47:19 | 000,368,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneBackupHandler.dll
  992. [2017.04.12 23:47:19 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dlnashext.dll
  993. [2017.04.12 23:47:19 | 000,178,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostUser.dll
  994. [2017.04.12 23:47:18 | 004,749,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
  995. [2017.04.12 23:47:18 | 001,617,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appraiser.dll
  996. [2017.04.12 23:47:18 | 001,064,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncCore.dll
  997. [2017.04.12 23:47:18 | 000,547,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Gaming.Input.dll
  998. [2017.04.12 23:47:18 | 000,460,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Midi.dll
  999. [2017.04.12 23:47:18 | 000,343,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\invagent.dll
  1000. [2017.04.12 23:47:18 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmcertinst.exe
  1001. [2017.04.12 23:47:18 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.System.SystemManagement.dll
  1002. [2017.04.12 23:47:17 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Import.dll
  1003. [2017.04.12 23:47:17 | 000,764,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
  1004. [2017.04.12 23:47:17 | 000,565,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\devinv.dll
  1005. [2017.04.12 23:47:17 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll
  1006. [2017.04.12 23:47:17 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CryptoWinRT.dll
  1007. [2017.04.12 23:47:17 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\psmsrv.dll
  1008. [2017.04.12 23:47:17 | 000,142,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
  1009. [2017.04.12 23:47:17 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Devices.dll
  1010. [2017.04.12 23:47:17 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.System.UserDeviceAssociation.dll
  1011. [2017.04.12 23:47:16 | 001,586,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Globalization.dll
  1012. [2017.04.12 23:47:16 | 001,294,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aeinv.dll
  1013. [2017.04.12 23:47:16 | 000,407,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Management.dll
  1014. [2017.04.12 23:47:16 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserMgrProxy.dll
  1015. [2017.04.12 23:47:16 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Family.SyncEngine.dll
  1016. [2017.04.12 23:47:16 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDeviceRegistration.dll
  1017. [2017.04.12 23:47:16 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.WiFi.dll
  1018. [2017.04.12 23:47:16 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepapi.dll
  1019. [2017.04.12 23:47:15 | 000,329,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\deviceaccess.dll
  1020. [2017.04.12 23:47:15 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Radios.dll
  1021. [2017.04.12 23:47:15 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryClient.dll
  1022. [2017.04.12 23:47:14 | 000,869,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
  1023. [2017.04.12 23:47:14 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AuthBroker.dll
  1024. [2017.04.12 23:47:14 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_ClosedCaptioning.dll
  1025. [2017.04.12 23:47:14 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDeviceRegistration.Ngc.dll
  1026. [2017.04.12 23:47:14 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vss_ps.dll
  1027. [2017.04.12 23:47:13 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudDomainJoinDataModelServer.dll
  1028. [2017.04.12 23:47:13 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ErrorDetails.dll
  1029. [2017.04.12 23:47:13 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthTokenBrokerExt.dll
  1030. [2017.04.12 23:47:13 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBrokerUI.dll
  1031. [2017.04.12 23:47:12 | 005,114,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll
  1032. [2017.04.12 23:47:12 | 000,775,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe
  1033. [2017.04.12 23:47:12 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbonRes.dll
  1034. [2017.04.12 23:47:12 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
  1035. [2017.04.12 23:47:12 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleacc.dll
  1036. [2017.04.12 23:47:12 | 000,289,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeveloperOptionsSettingsHandlers.dll
  1037. [2017.04.12 23:47:12 | 000,267,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vaultcli.dll
  1038. [2017.04.12 23:47:12 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enrollmentapi.dll
  1039. [2017.04.12 23:47:12 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Family.Client.dll
  1040. [2017.04.12 23:47:12 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winsrv.dll
  1041. [2017.04.12 23:47:12 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthManagerProxy.dll
  1042. [2017.04.12 23:47:12 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSManMigrationPlugin.dll
  1043. [2017.04.12 23:47:11 | 000,045,056 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll
  1044. [2017.04.10 09:53:42 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\Documents\DRUKI Gofin
  1045. [2017.04.10 09:53:40 | 000,000,000 | ---D | C] -- C:\Users\Tomasz\AppData\Roaming\GofinDruki
  1046. [2017.04.02 08:15:32 | 000,087,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UNPUXWorker.exe
  1047. [2017.03.27 13:25:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeaZip UNRAR5 plugin
  1048. [2017.03.26 12:50:50 | 000,000,000 | ---D | C] -- C:\Debloat-Windows-10-master
  1049. [2017.03.24 16:03:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
  1050. [2017.03.24 09:53:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
  1051. [2017.03.22 23:21:46 | 000,045,672 | ---- | C] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-stable.sys
  1052. [2017.03.22 23:21:46 | 000,045,672 | ---- | C] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-dev.sys
  1053. [2017.03.22 23:21:46 | 000,045,672 | ---- | C] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-canary.sys
  1054. [2016.11.05 01:18:22 | 025,397,336 | ---- | C] (One Click Root) -- C:\Users\Tomasz\AppData\Local\TempOneClickRoot.exe
  1055.  
  1056. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  1057.  
  1058. [2017.04.21 00:42:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Tomasz\Desktop\OTL.exe
  1059. [2017.04.21 00:34:09 | 005,341,874 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
  1060. [2017.04.21 00:34:09 | 002,835,514 | ---- | M] () -- C:\WINDOWS\SysNative\perfh015.dat
  1061. [2017.04.21 00:34:09 | 001,071,410 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
  1062. [2017.04.21 00:34:09 | 000,996,480 | ---- | M] () -- C:\WINDOWS\SysNative\perfh010.dat
  1063. [2017.04.21 00:34:09 | 000,878,092 | ---- | M] () -- C:\WINDOWS\SysNative\perfc015.dat
  1064. [2017.04.21 00:34:09 | 000,460,024 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
  1065. [2017.04.21 00:34:09 | 000,335,798 | ---- | M] () -- C:\WINDOWS\SysNative\perfc010.dat
  1066. [2017.04.21 00:31:18 | 000,031,533 | ---- | M] () -- C:\Users\Tomasz\Desktop\cz2.jpg
  1067. [2017.04.21 00:30:57 | 000,034,711 | ---- | M] () -- C:\Users\Tomasz\Desktop\CZ1.jpg
  1068. [2017.04.21 00:30:10 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  1069. [2017.04.21 00:28:19 | 000,000,180 | ---- | M] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
  1070. [2017.04.21 00:28:09 | 016,777,216 | -HS- | M] () -- C:\swapfile.sys
  1071. [2017.04.21 00:28:08 | 1660,108,800 | -HS- | M] () -- C:\hiberfil.sys
  1072. [2017.04.20 11:42:40 | 000,353,360 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
  1073. [2017.04.20 10:24:13 | 000,002,062 | ---- | M] () -- C:\Users\Public\Desktop\Ochrona bankowości internetowej.lnk
  1074. [2017.04.20 10:22:42 | 000,029,868 | ---- | M] () -- C:\ProgramData\agent.uninstall.1492676559.bdinstall.bin
  1075. [2017.04.20 09:58:36 | 000,220,886 | ---- | M] () -- C:\ProgramData\cl.uninstall.1492675021.bdinstall.bin
  1076. [2017.04.20 09:57:19 | 000,036,220 | ---- | M] () -- C:\ProgramData\dm.uninstall.1492675029.bdinstall.bin
  1077. [2017.04.20 09:18:30 | 000,000,876 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\hosts
  1078. [2017.04.20 09:07:34 | 000,029,905 | ---- | M] () -- C:\ProgramData\agent.update.1492672051.bdinstall.bin
  1079. [2017.04.20 09:07:24 | 000,056,809 | ---- | M] () -- C:\ProgramData\dm.1492672035.bdinstall.bin
  1080. [2017.04.20 09:07:06 | 000,464,063 | ---- | M] () -- C:\ProgramData\cl.1492671892.bdinstall.bin
  1081. [2017.04.20 09:02:32 | 000,047,293 | ---- | M] () -- C:\ProgramData\agent.1492671751.bdinstall.bin
  1082. [2017.04.20 08:52:45 | 000,000,016 | ---- | M] () -- C:\ProgramData\mntemp
  1083. [2017.04.20 08:21:52 | 000,000,214 | ---- | M] () -- C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job
  1084. [2017.04.20 08:12:43 | 000,001,937 | ---- | M] () -- C:\Users\Tomasz\Desktop\Ten komputer.lnk
  1085. [2017.04.20 02:26:22 | 001,474,832 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\sfi.dat
  1086. [2017.04.20 02:26:22 | 000,241,722 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\fvstore.dat
  1087. [2017.04.17 17:14:04 | 000,048,944 | ---- | M] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\DbxSvc.exe
  1088. [2017.04.05 07:58:07 | 000,365,248 | ---- | M] (COMODO) -- C:\ProgramData\cmdres.dll
  1089. [2017.04.05 07:53:19 | 004,797,120 | ---- | M] (COMODO) -- C:\ProgramData\cisE3A2.exe
  1090. [2017.04.03 11:54:39 | 004,089,296 | ---- | M] () -- C:\Users\Tomasz\Desktop\AdwCleaner 6.045.exe
  1091. [2017.04.02 08:15:32 | 000,087,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UNPUXWorker.exe
  1092. [2017.04.01 20:52:38 | 000,835,576 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
  1093. [2017.04.01 20:52:38 | 000,177,656 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
  1094. [2017.03.28 09:10:28 | 000,315,744 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll
  1095. [2017.03.28 08:36:11 | 000,142,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
  1096. [2017.03.28 08:36:08 | 000,343,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\invagent.dll
  1097. [2017.03.28 08:36:05 | 001,617,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appraiser.dll
  1098. [2017.03.28 08:36:05 | 001,294,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aeinv.dll
  1099. [2017.03.28 08:36:05 | 000,565,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\devinv.dll
  1100. [2017.03.28 08:35:59 | 000,379,232 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll
  1101. [2017.03.28 08:32:26 | 000,198,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscapi.dll
  1102. [2017.03.28 08:29:11 | 002,213,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll
  1103. [2017.03.28 08:28:05 | 007,786,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
  1104. [2017.03.28 08:28:03 | 000,773,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll
  1105. [2017.03.28 08:26:23 | 000,573,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVCatalog.dll
  1106. [2017.03.28 08:26:21 | 000,603,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContentDeliveryManager.Utilities.dll
  1107. [2017.03.28 08:26:20 | 000,754,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppVOrchestration.dll
  1108. [2017.03.28 08:26:11 | 000,218,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LsaIso.exe
  1109. [2017.03.28 08:22:07 | 002,681,200 | ---- | M] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
  1110. [2017.03.28 08:21:27 | 000,167,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscapi.dll
  1111. [2017.03.28 08:20:43 | 002,717,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PrintConfig.dll
  1112. [2017.03.28 08:20:11 | 000,764,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
  1113. [2017.03.28 08:15:53 | 002,048,496 | ---- | M] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
  1114. [2017.03.28 08:12:54 | 000,328,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Storage.ApplicationData.dll
  1115. [2017.03.28 08:11:30 | 000,360,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsAdminFlows.exe
  1116. [2017.03.28 08:11:14 | 001,860,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
  1117. [2017.03.28 08:11:11 | 001,738,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WindowsCodecs.dll
  1118. [2017.03.28 08:11:09 | 000,402,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
  1119. [2017.03.28 08:10:53 | 000,178,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostUser.dll
  1120. [2017.03.28 08:10:44 | 001,157,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
  1121. [2017.03.28 08:10:42 | 000,146,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostCommon.dll
  1122. [2017.03.28 08:10:41 | 007,220,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
  1123. [2017.03.28 08:10:29 | 001,293,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
  1124. [2017.03.28 08:09:48 | 000,097,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Credentials.UI.CredentialPicker.dll
  1125. [2017.03.28 08:09:18 | 000,682,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll
  1126. [2017.03.28 08:08:48 | 001,100,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe
  1127. [2017.03.28 08:08:43 | 001,267,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll
  1128. [2017.03.28 08:08:39 | 000,989,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe
  1129. [2017.03.28 08:07:35 | 000,263,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Storage.ApplicationData.dll
  1130. [2017.03.28 08:06:47 | 000,092,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
  1131. [2017.03.28 08:05:31 | 004,260,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
  1132. [2017.03.28 08:05:29 | 008,168,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
  1133. [2017.03.28 08:05:17 | 001,702,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll
  1134. [2017.03.28 08:05:15 | 001,848,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
  1135. [2017.03.28 08:05:14 | 001,988,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
  1136. [2017.03.28 08:05:14 | 001,072,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetcore.dll
  1137. [2017.03.28 08:05:11 | 001,302,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
  1138. [2017.03.28 08:04:58 | 001,431,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
  1139. [2017.03.28 08:04:54 | 001,276,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ole32.dll
  1140. [2017.03.28 08:04:53 | 000,136,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudExperienceHostUser.dll
  1141. [2017.03.28 08:04:39 | 000,116,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudExperienceHostCommon.dll
  1142. [2017.03.28 08:04:38 | 005,721,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
  1143. [2017.03.28 08:04:32 | 000,975,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
  1144. [2017.03.28 08:04:31 | 000,861,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
  1145. [2017.03.28 08:04:31 | 000,241,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHost.dll
  1146. [2017.03.28 08:04:30 | 000,160,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostBroker.dll
  1147. [2017.03.28 08:04:17 | 001,600,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppobjs.dll
  1148. [2017.03.28 08:02:55 | 000,576,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wer.dll
  1149. [2017.03.28 08:02:01 | 000,846,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll
  1150. [2017.03.28 08:00:09 | 001,569,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32full.dll
  1151. [2017.03.28 08:00:05 | 000,628,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
  1152. [2017.03.28 07:59:11 | 006,667,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
  1153. [2017.03.28 07:59:01 | 004,023,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
  1154. [2017.03.28 07:58:59 | 001,851,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
  1155. [2017.03.28 07:58:53 | 001,360,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll
  1156. [2017.03.28 07:58:53 | 001,344,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
  1157. [2017.03.28 07:58:53 | 000,981,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetcore.dll
  1158. [2017.03.28 07:58:52 | 001,277,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll
  1159. [2017.03.28 07:58:50 | 001,202,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
  1160. [2017.03.28 07:58:45 | 000,387,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpps.dll
  1161. [2017.03.28 07:58:44 | 000,372,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.MediaControl.dll
  1162. [2017.03.28 07:53:54 | 001,414,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll
  1163. [2017.03.28 07:53:54 | 000,545,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
  1164. [2017.03.28 07:52:00 | 000,306,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.MediaControl.dll
  1165. [2017.03.28 07:48:07 | 005,685,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
  1166. [2017.03.28 07:44:50 | 007,216,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll
  1167. [2017.03.28 07:42:28 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataTimeUtil.dll
  1168. [2017.03.28 07:42:06 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usoapi.dll
  1169. [2017.03.28 07:41:51 | 000,372,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXTaskFactory.dll
  1170. [2017.03.28 07:41:51 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\odbcconf.dll
  1171. [2017.03.28 07:41:49 | 000,299,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpinit.exe
  1172. [2017.03.28 07:41:47 | 000,415,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpshell.exe
  1173. [2017.03.28 07:40:58 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthManagerProxy.dll
  1174. [2017.03.28 07:40:53 | 000,037,376 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll
  1175. [2017.03.28 07:40:19 | 000,224,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExSMime.dll
  1176. [2017.03.28 07:39:48 | 000,141,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Radios.dll
  1177. [2017.03.28 07:39:17 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBrokerUI.dll
  1178. [2017.03.28 07:38:37 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
  1179. [2017.03.28 07:38:36 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XblAuthTokenBrokerExt.dll
  1180. [2017.03.28 07:38:26 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataTimeUtil.dll
  1181. [2017.03.28 07:38:17 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbonRes.dll
  1182. [2017.03.28 07:38:05 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDeviceRegistration.dll
  1183. [2017.03.28 07:37:58 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DisplayManager.dll
  1184. [2017.03.28 07:37:47 | 000,177,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.Diagnostics.dll
  1185. [2017.03.28 07:37:46 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.HostName.dll
  1186. [2017.03.28 07:37:39 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DdcWnsListener.dll
  1187. [2017.03.28 07:37:29 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apds.dll
  1188. [2017.03.28 07:37:29 | 000,097,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.System.SystemManagement.dll
  1189. [2017.03.28 07:37:29 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthManagerProxy.dll
  1190. [2017.03.28 07:37:29 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\musdialoghandlers.dll
  1191. [2017.03.28 07:37:19 | 000,255,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\unimdm.tsp
  1192. [2017.03.28 07:37:09 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BasicRender.sys
  1193. [2017.03.28 07:37:05 | 022,568,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
  1194. [2017.03.28 07:36:56 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\odbcconf.dll
  1195. [2017.03.28 07:36:52 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BasicDisplay.sys
  1196. [2017.03.28 07:36:50 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
  1197. [2017.03.28 07:36:49 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinRtTracing.dll
  1198. [2017.03.28 07:36:42 | 000,094,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryClient.dll
  1199. [2017.03.28 07:36:38 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.ServiceDiscovery.Dnssd.dll
  1200. [2017.03.28 07:36:34 | 000,129,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.SerialCommunication.dll
  1201. [2017.03.28 07:36:33 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.System.UserDeviceAssociation.dll
  1202. [2017.03.28 07:36:30 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
  1203. [2017.03.28 07:36:19 | 000,045,056 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll
  1204. [2017.03.28 07:36:13 | 000,237,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.Diagnostics.dll
  1205. [2017.03.28 07:36:06 | 000,769,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ipsecsnp.dll
  1206. [2017.03.28 07:36:02 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RdpRelayTransport.dll
  1207. [2017.03.28 07:35:59 | 000,124,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.System.SystemManagement.dll
  1208. [2017.03.28 07:35:59 | 000,093,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
  1209. [2017.03.28 07:35:53 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.WiFi.dll
  1210. [2017.03.28 07:35:48 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
  1211. [2017.03.28 07:35:46 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
  1212. [2017.03.28 07:35:31 | 000,505,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe
  1213. [2017.03.28 07:35:28 | 000,090,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Printers.dll
  1214. [2017.03.28 07:35:24 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserMgrProxy.dll
  1215. [2017.03.28 07:35:19 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Gaming.Input.dll
  1216. [2017.03.28 07:35:17 | 000,113,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Lights.dll
  1217. [2017.03.28 07:35:16 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.LockScreen.dll
  1218. [2017.03.28 07:35:11 | 000,118,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppointmentActivation.dll
  1219. [2017.03.28 07:35:10 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DisplayManager.dll
  1220. [2017.03.28 07:35:09 | 000,315,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Gaming.XboxLive.Storage.dll
  1221. [2017.03.28 07:35:03 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallAgent.exe
  1222. [2017.03.28 07:35:03 | 000,156,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Family.Client.dll
  1223. [2017.03.28 07:35:02 | 000,374,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.LowLevel.dll
  1224. [2017.03.28 07:34:55 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmcertinst.exe
  1225. [2017.03.28 07:34:50 | 000,259,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Family.SyncEngine.dll
  1226. [2017.03.28 07:34:49 | 000,129,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_ClosedCaptioning.dll
  1227. [2017.03.28 07:34:47 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XblAuthTokenBrokerExt.dll
  1228. [2017.03.28 07:34:43 | 000,299,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataAccountApis.dll
  1229. [2017.03.28 07:34:43 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\unimdm.tsp
  1230. [2017.03.28 07:34:32 | 000,237,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SyncSettings.dll
  1231. [2017.03.28 07:34:20 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.ServiceDiscovery.Dnssd.dll
  1232. [2017.03.28 07:34:07 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Core.dll
  1233. [2017.03.28 07:34:01 | 000,117,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AuthBroker.dll
  1234. [2017.03.28 07:33:59 | 000,557,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\StoreAgent.dll
  1235. [2017.03.28 07:33:56 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.WiFi.dll
  1236. [2017.03.28 07:33:55 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinRtTracing.dll
  1237. [2017.03.28 07:33:54 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDeviceRegistration.Ngc.dll
  1238. [2017.03.28 07:33:51 | 000,436,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ipsmsnap.dll
  1239. [2017.03.28 07:33:51 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.System.UserDeviceAssociation.dll
  1240. [2017.03.28 07:33:49 | 000,265,728 | ---- | M] () -- C:\WINDOWS\SysWow64\Windows.Perception.Stub.dll
  1241. [2017.03.28 07:33:49 | 000,196,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDeviceRegistration.dll
  1242. [2017.03.28 07:33:44 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceDirectoryClient.dll
  1243. [2017.03.28 07:33:40 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Core.dll
  1244. [2017.03.28 07:33:18 | 000,467,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Gaming.XboxLive.Storage.dll
  1245. [2017.03.28 07:33:07 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryClient.dll
  1246. [2017.03.28 07:33:06 | 000,483,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.AllJoyn.dll
  1247. [2017.03.28 07:33:02 | 000,670,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.PointOfService.dll
  1248. [2017.03.28 07:33:02 | 000,609,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Import.dll
  1249. [2017.03.28 07:32:49 | 001,243,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.FaceAnalysis.dll
  1250. [2017.03.28 07:32:48 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallAgentUserBroker.exe
  1251. [2017.03.28 07:32:45 | 000,306,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieproxy.dll
  1252. [2017.03.28 07:32:40 | 000,185,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Identity.Provider.dll
  1253. [2017.03.28 07:32:37 | 000,426,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Wallet.dll
  1254. [2017.03.28 07:32:37 | 000,386,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.WiFiDirect.dll
  1255. [2017.03.28 07:32:37 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.HumanInterfaceDevice.dll
  1256. [2017.03.28 07:32:32 | 000,298,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Management.dll
  1257. [2017.03.28 07:32:28 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WwaApi.dll
  1258. [2017.03.28 07:32:27 | 000,332,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Bluetooth.dll
  1259. [2017.03.28 07:32:25 | 000,186,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Radios.dll
  1260. [2017.03.28 07:32:23 | 000,635,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FlightSettings.dll
  1261. [2017.03.28 07:32:20 | 000,368,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneBackupHandler.dll
  1262. [2017.03.28 07:32:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\deviceaccess.dll
  1263. [2017.03.28 07:32:20 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vaultcli.dll
  1264. [2017.03.28 07:32:17 | 000,562,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.SmartCards.dll
  1265. [2017.03.28 07:32:14 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepsync.dll
  1266. [2017.03.28 07:32:07 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Scanners.dll
  1267. [2017.03.28 07:32:03 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepapi.dll
  1268. [2017.03.28 07:31:58 | 000,418,304 | ---- | M] () -- C:\WINDOWS\SysNative\Windows.Perception.Stub.dll
  1269. [2017.03.28 07:31:51 | 000,547,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Gaming.Input.dll
  1270. [2017.03.28 07:31:51 | 000,431,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\efswrt.dll
  1271. [2017.03.28 07:31:51 | 000,390,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CredProvDataModel.dll
  1272. [2017.03.28 07:31:43 | 000,498,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mbsmsapi.dll
  1273. [2017.03.28 07:31:31 | 000,211,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgent.exe
  1274. [2017.03.28 07:31:25 | 000,257,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudDomainJoinDataModelServer.dll
  1275. [2017.03.28 07:31:23 | 000,360,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpencom.dll
  1276. [2017.03.28 07:31:18 | 000,418,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BlockedShutdown.dll
  1277. [2017.03.28 07:31:18 | 000,343,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SmartCards.Phone.dll
  1278. [2017.03.28 07:31:15 | 000,289,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeveloperOptionsSettingsHandlers.dll
  1279. [2017.03.28 07:31:12 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SerialCommunication.dll
  1280. [2017.03.28 07:31:10 | 000,276,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtrans.dll
  1281. [2017.03.28 07:31:10 | 000,223,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
  1282. [2017.03.28 07:31:08 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Lights.dll
  1283. [2017.03.28 07:31:07 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkBindingEngineMigPlugin.dll
  1284. [2017.03.28 07:31:06 | 000,711,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
  1285. [2017.03.28 07:30:59 | 000,262,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Picker.dll
  1286. [2017.03.28 07:30:55 | 000,819,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppContracts.dll
  1287. [2017.03.28 07:30:46 | 000,505,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.WiFiDirect.dll
  1288. [2017.03.28 07:30:34 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBrokerUI.dll
  1289. [2017.03.28 07:30:24 | 000,787,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sbe.dll
  1290. [2017.03.28 07:30:23 | 000,651,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.AllJoyn.dll
  1291. [2017.03.28 07:30:20 | 000,239,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafpos.dll
  1292. [2017.03.28 07:30:15 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserMgrProxy.dll
  1293. [2017.03.28 07:30:09 | 000,846,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WebcamUi.dll
  1294. [2017.03.28 07:30:09 | 000,692,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CellularAPI.dll
  1295. [2017.03.28 07:30:09 | 000,568,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.LowLevel.dll
  1296. [2017.03.28 07:30:03 | 000,748,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StoreAgent.dll
  1297. [2017.03.28 07:30:02 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\updatepolicy.dll
  1298. [2017.03.28 07:29:57 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.HumanInterfaceDevice.dll
  1299. [2017.03.28 07:29:56 | 000,912,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.SmartCards.dll
  1300. [2017.03.28 07:29:55 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\psmsrv.dll
  1301. [2017.03.28 07:29:51 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Scanners.dll
  1302. [2017.03.28 07:29:46 | 000,147,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winsrv.dll
  1303. [2017.03.28 07:29:44 | 000,747,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Ocr.dll
  1304. [2017.03.28 07:29:43 | 000,293,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
  1305. [2017.03.28 07:29:42 | 000,379,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepsync.dll
  1306. [2017.03.28 07:29:37 | 000,314,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Usb.dll
  1307. [2017.03.28 07:29:35 | 000,324,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.LockScreen.dll
  1308. [2017.03.28 07:29:33 | 000,267,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vaultcli.dll
  1309. [2017.03.28 07:29:32 | 000,852,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Import.dll
  1310. [2017.03.28 07:29:32 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
  1311. [2017.03.28 07:29:29 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.dll
  1312. [2017.03.28 07:29:29 | 000,260,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgentUserBroker.exe
  1313. [2017.03.28 07:29:29 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AuthBroker.dll
  1314. [2017.03.28 07:29:27 | 000,590,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efswrt.dll
  1315. [2017.03.28 07:29:13 | 000,311,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SyncSettings.dll
  1316. [2017.03.28 07:29:08 | 000,238,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AboveLockAppHost.dll
  1317. [2017.03.28 07:29:07 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleacc.dll
  1318. [2017.03.28 07:28:57 | 000,551,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
  1319. [2017.03.28 07:28:55 | 000,431,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpAXHolder.dll
  1320. [2017.03.28 07:28:50 | 000,456,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\puiobj.dll
  1321. [2017.03.28 07:28:43 | 000,500,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Graphics.Printing.dll
  1322. [2017.03.28 07:28:36 | 000,252,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Identity.Provider.dll
  1323. [2017.03.28 07:28:31 | 000,176,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepapi.dll
  1324. [2017.03.28 07:28:28 | 000,358,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.dll
  1325. [2017.03.28 07:28:25 | 000,407,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Management.dll
  1326. [2017.03.28 07:28:21 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Picker.dll
  1327. [2017.03.28 07:28:20 | 000,561,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Wallet.dll
  1328. [2017.03.28 07:28:18 | 000,661,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WpcWebFilter.dll
  1329. [2017.03.28 07:28:05 | 000,261,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\indexeddbserver.dll
  1330. [2017.03.28 07:28:04 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Web.Core.dll
  1331. [2017.03.28 07:27:54 | 000,949,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.PointOfService.dll
  1332. [2017.03.28 07:27:43 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CryptoWinRT.dll
  1333. [2017.03.28 07:27:37 | 000,472,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll
  1334. [2017.03.28 07:27:36 | 001,060,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppContracts.dll
  1335. [2017.03.28 07:27:29 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatepolicy.dll
  1336. [2017.03.28 07:27:25 | 001,388,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Cred.dll
  1337. [2017.03.28 07:27:12 | 000,645,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\qedit.dll
  1338. [2017.03.28 07:27:12 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WwaApi.dll
  1339. [2017.03.28 07:27:11 | 000,671,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mbsmsapi.dll
  1340. [2017.03.28 07:27:09 | 000,425,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadcloudap.dll
  1341. [2017.03.28 07:27:00 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AccountsRt.dll
  1342. [2017.03.28 07:26:53 | 000,437,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Usb.dll
  1343. [2017.03.28 07:26:51 | 001,534,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Graphics.Printing.3D.dll
  1344. [2017.03.28 07:26:49 | 000,329,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\deviceaccess.dll
  1345. [2017.03.28 07:26:44 | 000,549,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
  1346. [2017.03.28 07:26:39 | 000,284,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AboveLockAppHost.dll
  1347. [2017.03.28 07:26:36 | 000,468,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.InkControls.dll
  1348. [2017.03.28 07:26:08 | 000,642,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.InkControls.dll
  1349. [2017.03.28 07:26:03 | 001,145,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EmailApis.dll
  1350. [2017.03.28 07:26:01 | 000,313,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
  1351. [2017.03.28 07:25:59 | 000,653,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.AccountsControl.dll
  1352. [2017.03.28 07:25:57 | 001,010,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll
  1353. [2017.03.28 07:25:54 | 001,196,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscui.cpl
  1354. [2017.03.28 07:25:47 | 000,966,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sbe.dll
  1355. [2017.03.28 07:25:41 | 018,364,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
  1356. [2017.03.28 07:25:37 | 000,775,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe
  1357. [2017.03.28 07:25:34 | 000,963,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WebcamUi.dll
  1358. [2017.03.28 07:25:07 | 000,896,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.AccountsControl.dll
  1359. [2017.03.28 07:24:50 | 006,474,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mspaint.exe
  1360. [2017.03.28 07:24:50 | 006,288,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
  1361. [2017.03.28 07:24:36 | 000,675,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.dll
  1362. [2017.03.28 07:24:33 | 004,614,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
  1363. [2017.03.28 07:24:15 | 000,901,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Bluetooth.dll
  1364. [2017.03.28 07:24:10 | 000,410,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll
  1365. [2017.03.28 07:24:04 | 001,220,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscui.cpl
  1366. [2017.03.28 07:23:58 | 003,733,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_47.dll
  1367. [2017.03.28 07:23:44 | 000,395,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dmenrollengine.dll
  1368. [2017.03.28 07:23:28 | 000,886,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aadtb.dll
  1369. [2017.03.28 07:23:17 | 009,130,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
  1370. [2017.03.28 07:23:16 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSManMigrationPlugin.dll
  1371. [2017.03.28 07:23:15 | 000,589,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Sensors.dll
  1372. [2017.03.28 07:22:43 | 000,157,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\enrollmentapi.dll
  1373. [2017.03.28 07:22:34 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.DeviceEncryptionHandlers.dll
  1374. [2017.03.28 07:22:22 | 000,516,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidcli.dll
  1375. [2017.03.28 07:22:03 | 000,355,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RTMediaFrame.dll
  1376. [2017.03.28 07:21:59 | 000,458,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RTMediaFrame.dll
  1377. [2017.03.28 07:21:57 | 001,589,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdtctm.dll
  1378. [2017.03.28 07:21:51 | 001,403,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Editing.dll
  1379. [2017.03.28 07:21:46 | 000,104,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CastLaunch.dll
  1380. [2017.03.28 07:21:45 | 003,778,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
  1381. [2017.03.28 07:21:45 | 001,077,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Editing.dll
  1382. [2017.03.28 07:20:56 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmjpegdec.dll
  1383. [2017.03.28 07:20:52 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmjpegdec.dll
  1384. [2017.03.28 07:20:14 | 003,307,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
  1385. [2017.03.28 07:20:12 | 001,105,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MiracastReceiver.dll
  1386. [2017.03.28 07:20:07 | 000,795,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MiracastReceiver.dll
  1387. [2017.03.28 07:19:58 | 000,442,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToDevice.dll
  1388. [2017.03.28 07:19:56 | 000,343,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToDevice.dll
  1389. [2017.03.28 07:19:50 | 000,864,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnapps.dll
  1390. [2017.03.28 07:19:48 | 007,655,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll
  1391. [2017.03.28 07:19:47 | 000,713,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wpnapps.dll
  1392. [2017.03.28 07:19:45 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dlnashext.dll
  1393. [2017.03.28 07:19:42 | 000,746,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdtcprx.dll
  1394. [2017.03.28 07:19:39 | 000,248,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dlnashext.dll
  1395. [2017.03.28 07:19:38 | 000,235,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\flvprophandler.dll
  1396. [2017.03.28 07:19:18 | 000,141,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dialclient.dll
  1397. [2017.03.28 07:18:48 | 001,908,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AzureSettingSyncProvider.dll
  1398. [2017.03.28 07:18:47 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpninprc.dll
  1399. [2017.03.28 07:18:23 | 001,255,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AzureSettingSyncProvider.dll
  1400. [2017.03.28 07:18:16 | 001,078,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Streaming.dll
  1401. [2017.03.28 07:17:48 | 005,114,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll
  1402. [2017.03.28 07:17:47 | 000,895,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Streaming.dll
  1403. [2017.03.28 07:17:38 | 006,109,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll
  1404. [2017.03.28 07:17:29 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToReceiver.dll
  1405. [2017.03.28 07:17:06 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToReceiver.dll
  1406. [2017.03.28 07:17:02 | 004,749,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
  1407. [2017.03.28 07:16:58 | 000,167,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ErrorDetails.dll
  1408. [2017.03.28 07:16:38 | 003,198,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll
  1409. [2017.03.28 07:16:36 | 001,217,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Audio.dll
  1410. [2017.03.28 07:16:36 | 000,134,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ErrorDetails.dll
  1411. [2017.03.28 07:16:33 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vss_ps.dll
  1412. [2017.03.28 07:16:07 | 001,221,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Audio.dll
  1413. [2017.03.28 07:15:47 | 000,937,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCRecvSrc.dll
  1414. [2017.03.28 07:15:38 | 000,411,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsApi.dll
  1415. [2017.03.28 07:15:30 | 001,247,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Globalization.dll
  1416. [2017.03.28 07:15:29 | 002,390,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\smartscreen.exe
  1417. [2017.03.28 07:15:17 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Devices.dll
  1418. [2017.03.28 07:15:11 | 000,981,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.OnlineId.dll
  1419. [2017.03.28 07:15:08 | 000,467,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Geolocation.dll
  1420. [2017.03.28 07:15:07 | 000,539,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToManager.dll
  1421. [2017.03.28 07:15:05 | 000,945,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcWebFilter.dll
  1422. [2017.03.28 07:14:56 | 000,641,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCRecvSrc.dll
  1423. [2017.03.28 07:14:54 | 008,126,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
  1424. [2017.03.28 07:14:49 | 003,520,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xpsrchvw.exe
  1425. [2017.03.28 07:14:48 | 000,800,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Web.Core.dll
  1426. [2017.03.28 07:14:38 | 000,947,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVP9DEC.dll
  1427. [2017.03.28 07:14:36 | 000,869,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
  1428. [2017.03.28 07:14:32 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Devices.dll
  1429. [2017.03.28 07:14:29 | 000,400,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToManager.dll
  1430. [2017.03.28 07:14:28 | 000,779,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cscui.dll
  1431. [2017.03.28 07:14:22 | 007,468,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
  1432. [2017.03.28 07:14:21 | 001,643,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.dll
  1433. [2017.03.28 07:14:20 | 000,357,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Geolocation.dll
  1434. [2017.03.28 07:14:12 | 001,692,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll
  1435. [2017.03.28 07:14:07 | 001,080,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Ocr.dll
  1436. [2017.03.28 07:14:05 | 000,975,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\HelpPane.exe
  1437. [2017.03.28 07:14:00 | 000,913,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.dll
  1438. [2017.03.28 07:13:56 | 000,460,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Midi.dll
  1439. [2017.03.28 07:13:54 | 001,359,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModel.dll
  1440. [2017.03.28 07:13:53 | 001,232,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Maps.dll
  1441. [2017.03.28 07:13:49 | 002,138,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputService.dll
  1442. [2017.03.28 07:13:39 | 006,045,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
  1443. [2017.03.28 07:13:34 | 000,611,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Graphics.Printing.dll
  1444. [2017.03.28 07:13:33 | 004,474,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_47.dll
  1445. [2017.03.28 07:13:32 | 000,650,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXService.dll
  1446. [2017.03.28 07:13:24 | 000,816,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.dll
  1447. [2017.03.28 07:13:23 | 000,759,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
  1448. [2017.03.28 07:13:22 | 001,170,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.dll
  1449. [2017.03.28 07:13:13 | 001,040,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NaturalLanguage6.dll
  1450. [2017.03.28 07:13:08 | 002,095,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
  1451. [2017.03.28 07:13:08 | 001,656,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Perception.dll
  1452. [2017.03.28 07:13:04 | 004,596,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xpsrchvw.exe
  1453. [2017.03.28 07:12:55 | 000,376,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CryptoWinRT.dll
  1454. [2017.03.28 07:12:48 | 001,004,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Input.Inking.dll
  1455. [2017.03.28 07:12:42 | 000,827,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll
  1456. [2017.03.28 07:12:35 | 002,208,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Graphics.Printing.3D.dll
  1457. [2017.03.28 07:12:30 | 005,611,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d2d1.dll
  1458. [2017.03.28 07:12:22 | 000,691,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBroker.dll
  1459. [2017.03.28 07:12:22 | 000,598,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.dll
  1460. [2017.03.28 07:12:21 | 002,682,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\netshell.dll
  1461. [2017.03.28 07:12:20 | 000,566,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ShareHost.dll
  1462. [2017.03.28 07:12:17 | 000,620,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.dll
  1463. [2017.03.28 07:12:16 | 001,013,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.Http.dll
  1464. [2017.03.28 07:12:07 | 001,509,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
  1465. [2017.03.28 07:12:07 | 000,846,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApiPublic.dll
  1466. [2017.03.28 07:12:07 | 000,654,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApiPublic.dll
  1467. [2017.03.28 07:12:04 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Midi.dll
  1468. [2017.03.28 07:12:02 | 000,542,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Connectivity.dll
  1469. [2017.03.28 07:12:01 | 002,026,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
  1470. [2017.03.28 07:12:01 | 000,862,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncCore.dll
  1471. [2017.03.28 07:11:47 | 002,646,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CertEnroll.dll
  1472. [2017.03.28 07:11:46 | 002,914,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CertEnroll.dll
  1473. [2017.03.28 07:11:40 | 001,170,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Phone.dll
  1474. [2017.03.28 07:11:27 | 000,765,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Sensors.dll
  1475. [2017.03.28 07:11:24 | 001,981,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
  1476. [2017.03.28 07:11:22 | 002,994,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys
  1477. [2017.03.28 07:11:09 | 001,275,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Bluetooth.dll
  1478. [2017.03.28 07:11:08 | 000,751,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.BackgroundTransfer.dll
  1479. [2017.03.28 07:10:48 | 001,637,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
  1480. [2017.03.28 07:10:38 | 008,076,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll
  1481. [2017.03.28 07:10:37 | 001,586,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Globalization.dll
  1482. [2017.03.28 07:10:37 | 001,424,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Maps.dll
  1483. [2017.03.28 07:10:13 | 002,424,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Perception.dll
  1484. [2017.03.28 07:10:12 | 000,774,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.dll
  1485. [2017.03.28 07:10:09 | 001,266,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Input.Inking.dll
  1486. [2017.03.28 07:10:09 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
  1487. [2017.03.28 07:10:06 | 000,875,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBroker.dll
  1488. [2017.03.28 07:10:05 | 001,231,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dosvc.dll
  1489. [2017.03.28 07:09:49 | 001,064,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncCore.dll
  1490. [2017.03.28 07:09:39 | 001,328,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.Http.dll
  1491. [2017.03.28 07:09:39 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ShareHost.dll
  1492. [2017.03.28 07:09:32 | 001,513,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
  1493. [2017.03.28 07:09:31 | 003,106,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstsc.exe
  1494. [2017.03.28 07:09:10 | 004,149,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
  1495. [2017.03.28 07:09:05 | 001,131,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\localspl.dll
  1496. [2017.03.28 07:09:03 | 001,369,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Phone.dll
  1497. [2017.03.28 07:08:59 | 003,612,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
  1498. [2017.03.28 07:08:52 | 001,564,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\quartz.dll
  1499. [2017.03.28 07:08:51 | 003,542,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
  1500. [2017.03.28 07:08:35 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enrollmentapi.dll
  1501. [2017.03.28 07:08:16 | 000,783,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TSWorkspace.dll
  1502. [2017.03.28 07:08:11 | 000,299,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RADCUI.dll
  1503. [2017.03.28 07:07:53 | 000,908,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
  1504. [2017.03.28 07:07:52 | 000,701,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Connectivity.dll
  1505. [2017.03.28 07:07:14 | 000,122,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FontProvider.dll
  1506. [2017.03.28 07:06:43 | 001,121,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadtb.dll
  1507. [2017.03.28 07:06:39 | 000,924,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.BackgroundTransfer.dll
  1508. [2017.03.28 07:06:04 | 000,999,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TSWorkspace.dll
  1509. [2017.03.28 07:05:25 | 001,633,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\quartz.dll
  1510. [2017.03.28 07:04:44 | 000,119,808 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecureAssessmentHandlers.dll
  1511. [2017.03.28 06:48:06 | 000,483,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
  1512. [2017.03.24 13:24:24 | 000,000,829 | ---- | M] () -- C:\Users\Tomasz\Desktop\Scrap Mechanic 0.1.32.lnk
  1513. [2017.03.22 23:21:46 | 000,045,672 | ---- | M] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-stable.sys
  1514. [2017.03.22 23:21:46 | 000,045,672 | ---- | M] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-dev.sys
  1515. [2017.03.22 23:21:46 | 000,045,672 | ---- | M] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-canary.sys
  1516.  
  1517. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  1518.  
  1519. [2017.04.21 00:31:18 | 000,031,533 | ---- | C] () -- C:\Users\Tomasz\Desktop\cz2.jpg
  1520. [2017.04.21 00:30:57 | 000,034,711 | ---- | C] () -- C:\Users\Tomasz\Desktop\CZ1.jpg
  1521. [2017.04.21 00:28:19 | 000,000,180 | ---- | C] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
  1522. [2017.04.20 11:55:52 | 000,001,252 | ---- | C] () -- C:\Users\Tomasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ustawienia aktualizacji i prywatności.lnk
  1523. [2017.04.20 11:31:03 | 000,002,759 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
  1524. [2017.04.20 11:31:03 | 000,002,692 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive dla firm.lnk
  1525. [2017.04.20 11:31:03 | 000,002,686 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
  1526. [2017.04.20 11:31:03 | 000,002,686 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype dla firm 2016.lnk
  1527. [2017.04.20 11:31:03 | 000,002,686 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
  1528. [2017.04.20 11:31:03 | 000,002,678 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
  1529. [2017.04.20 11:31:03 | 000,002,678 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
  1530. [2017.04.20 11:31:03 | 000,002,672 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
  1531. [2017.04.20 11:31:03 | 000,002,658 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
  1532. [2017.04.20 10:24:13 | 000,002,062 | ---- | C] () -- C:\Users\Public\Desktop\Ochrona bankowości internetowej.lnk
  1533. [2017.04.20 10:22:42 | 000,029,868 | ---- | C] () -- C:\ProgramData\agent.uninstall.1492676559.bdinstall.bin
  1534. [2017.04.20 09:58:36 | 000,220,886 | ---- | C] () -- C:\ProgramData\cl.uninstall.1492675021.bdinstall.bin
  1535. [2017.04.20 09:57:19 | 000,036,220 | ---- | C] () -- C:\ProgramData\dm.uninstall.1492675029.bdinstall.bin
  1536. [2017.04.20 09:07:34 | 000,029,905 | ---- | C] () -- C:\ProgramData\agent.update.1492672051.bdinstall.bin
  1537. [2017.04.20 09:07:24 | 000,056,809 | ---- | C] () -- C:\ProgramData\dm.1492672035.bdinstall.bin
  1538. [2017.04.20 09:07:06 | 000,464,063 | ---- | C] () -- C:\ProgramData\cl.1492671892.bdinstall.bin
  1539. [2017.04.20 09:02:32 | 000,047,293 | ---- | C] () -- C:\ProgramData\agent.1492671751.bdinstall.bin
  1540. [2017.04.20 08:52:45 | 000,000,016 | ---- | C] () -- C:\ProgramData\mntemp
  1541. [2017.04.20 08:52:44 | 000,000,900 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Uninstall 6.lnk
  1542. [2017.04.20 08:21:52 | 000,000,214 | ---- | C] () -- C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job
  1543. [2017.04.16 01:45:08 | 000,001,391 | ---- | C] () -- C:\Users\Tomasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mp3DirectCut.lnk
  1544. [2017.04.14 23:18:04 | 000,002,446 | ---- | C] () -- C:\Users\Tomasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
  1545. [2017.04.12 23:48:36 | 002,048,496 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
  1546. [2017.04.12 23:48:21 | 000,265,728 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.Perception.Stub.dll
  1547. [2017.04.12 23:47:53 | 000,418,304 | ---- | C] () -- C:\WINDOWS\SysNative\Windows.Perception.Stub.dll
  1548. [2017.04.12 23:47:38 | 002,681,200 | ---- | C] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
  1549. [2017.04.03 11:54:34 | 004,089,296 | ---- | C] () -- C:\Users\Tomasz\Desktop\AdwCleaner 6.045.exe
  1550. [2017.03.24 13:24:24 | 000,000,829 | ---- | C] () -- C:\Users\Tomasz\Desktop\Scrap Mechanic 0.1.32.lnk
  1551. [2017.03.24 09:51:39 | 000,002,579 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
  1552. [2017.03.16 13:20:00 | 000,019,968 | ---- | C] () -- C:\WINDOWS\SysWow64\GamePanelExternalHook.dll
  1553. [2017.03.11 19:47:29 | 000,032,294 | ---- | C] () -- C:\Users\Tomasz\AppData\Roaming\Wartości oddzielone przecinkami.ADR
  1554. [2017.03.11 19:27:39 | 000,019,546 | ---- | C] () -- C:\Users\Tomasz\AppData\Roaming\Wartości oddzielone przecinkami.CAL
  1555. [2016.12.29 18:15:42 | 000,000,135 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
  1556. [2016.12.16 02:17:51 | 000,000,020 | -HS- | C] () -- C:\Users\Tomasz\AppData\Roaming\Programs8187ConfigDB.dat
  1557. [2016.12.16 02:17:51 | 000,000,020 | -HS- | C] () -- C:\Users\Tomasz\AppData\Roaming\1816CA7466166.ind
  1558. [2016.12.14 01:10:14 | 000,001,561 | ---- | C] () -- C:\Users\Tomasz\AppData\Local\recently-used.xbel
  1559. [2016.11.19 22:04:52 | 002,936,512 | ---- | C] () -- C:\WINDOWS\SysWow64\BootMan.exe
  1560. [2016.11.19 22:04:52 | 000,088,160 | ---- | C] () -- C:\WINDOWS\SysWow64\setupempdrv03.exe
  1561. [2016.11.19 22:04:52 | 000,021,496 | ---- | C] () -- C:\WINDOWS\SysWow64\epmntdrv.sys
  1562. [2016.11.19 22:04:52 | 000,021,088 | ---- | C] () -- C:\WINDOWS\SysWow64\EuEpmGdi.dll
  1563. [2016.11.19 22:04:52 | 000,010,208 | ---- | C] () -- C:\WINDOWS\SysWow64\EuGdiDrv.sys
  1564. [2016.10.21 15:05:11 | 000,020,075 | ---- | C] () -- C:\ProgramData\agent.1477055109.bdinstall.bin
  1565. [2016.10.21 01:20:42 | 000,026,801 | ---- | C] () -- C:\ProgramData\agent.1477005640.bdinstall.bin
  1566. [2016.10.21 01:20:36 | 000,024,894 | ---- | C] () -- C:\ProgramData\1477005633.bdinstall.bin
  1567. [2016.10.21 01:20:07 | 000,026,805 | ---- | C] () -- C:\ProgramData\agent.1477005604.bdinstall.bin
  1568. [2016.10.21 01:19:59 | 000,024,619 | ---- | C] () -- C:\ProgramData\1477005597.bdinstall.bin
  1569. [2016.10.21 01:19:22 | 000,026,805 | ---- | C] () -- C:\ProgramData\agent.1477005560.bdinstall.bin
  1570. [2016.10.21 01:19:14 | 000,024,895 | ---- | C] () -- C:\ProgramData\1477005551.bdinstall.bin
  1571. [2016.10.21 01:18:49 | 000,026,806 | ---- | C] () -- C:\ProgramData\agent.1477005526.bdinstall.bin
  1572. [2016.10.21 01:18:36 | 000,042,745 | ---- | C] () -- C:\ProgramData\1477005514.bdinstall.bin
  1573. [2016.10.21 00:21:03 | 000,240,431 | ---- | C] () -- C:\ProgramData\1477002017.bdinstall.bin
  1574. [2016.10.08 01:36:44 | 000,000,266 | RHS- | C] () -- C:\Users\Tomasz\ntuser.pol
  1575. [2016.10.08 01:36:29 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  1576. [2016.10.08 01:27:42 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
  1577. [2016.07.16 13:47:57 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
  1578. [2016.07.16 13:47:57 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
  1579. [2016.07.16 13:43:04 | 000,055,296 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
  1580. [2016.07.16 13:42:55 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
  1581. [2016.07.16 13:42:53 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
  1582. [2016.07.16 13:42:49 | 000,304,640 | ---- | C] () -- C:\WINDOWS\SysWow64\HrtfApo.dll
  1583. [2016.07.16 13:42:48 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
  1584. [2016.07.16 13:42:43 | 000,002,307 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
  1585. [2016.07.16 13:42:12 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
  1586. [2016.02.12 12:32:49 | 000,000,022 | ---- | C] () -- C:\Users\Tomasz\AppData\Roaming\langInstall.exe
  1587. [2016.02.08 01:55:19 | 000,007,626 | ---- | C] () -- C:\Users\Tomasz\AppData\Local\Resmon.ResmonCfg
  1588. [2016.01.27 20:52:47 | 000,000,001 | ---- | C] () -- C:\Users\Tomasz\AppData\Local\llftool.4.40.agreement
  1589. [2016.01.03 11:46:19 | 000,077,248 | ---- | C] () -- C:\WINDOWS\hpqins06.dat
  1590. [2015.07.05 00:45:25 | 000,053,248 | ---- | C] () -- C:\WINDOWS\SysWow64\CommonDL.dll
  1591. [2015.07.05 00:45:25 | 000,002,411 | ---- | C] () -- C:\WINDOWS\SysWow64\lgAxconfig.ini
  1592. [2015.04.21 00:53:15 | 000,000,220 | ---- | C] () -- C:\Users\Tomasz\AppData\Local\5D515C96_stp.CIS.part
  1593. [2015.04.21 00:53:13 | 000,385,602 | ---- | C] () -- C:\Users\Tomasz\AppData\Local\5D515C96_stp.CIS
  1594. [2015.03.11 03:13:44 | 000,000,010 | -HS- | C] () -- C:\Users\Tomasz\AppData\Roaming\3.0.0.1
  1595. [2015.03.11 03:13:07 | 000,000,010 | -HS- | C] () -- C:\Users\Tomasz\AppData\Roaming\3.0.0.3
  1596.  
  1597. [color=#E56717]========== ZeroAccess Check ==========[/color]
  1598.  
  1599.  
  1600. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  1601.  
  1602. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  1603.  
  1604. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  1605.  
  1606. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  1607.  
  1608. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  1609. "" = C:\Windows\SysNative\windows.storage.dll -- [2017.03.28 08:10:41 | 007,220,184 | ---- | M] (Microsoft Corporation)
  1610. "ThreadingModel" = Apartment
  1611.  
  1612. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  1613. "" = %SystemRoot%\system32\windows.storage.dll -- [2017.03.28 08:04:38 | 005,721,808 | ---- | M] (Microsoft Corporation)
  1614. "ThreadingModel" = Apartment
  1615.  
  1616. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  1617. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2016.07.16 13:42:31 | 000,977,920 | ---- | M] (Microsoft Corporation)
  1618. "ThreadingModel" = Free
  1619.  
  1620. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  1621. "" = %systemroot%\system32\wbem\fastprox.dll -- [2016.07.16 13:42:56 | 000,779,776 | ---- | M] (Microsoft Corporation)
  1622. "ThreadingModel" = Free
  1623.  
  1624. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  1625. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2016.07.16 13:42:31 | 000,518,656 | ---- | M] (Microsoft Corporation)
  1626. "ThreadingModel" = Both
  1627.  
  1628. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  1629.  
  1630. [color=#E56717]========== LOP Check ==========[/color]
  1631.  
  1632. [2016.03.03 16:25:59 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\.minecraft
  1633. [2016.10.21 15:02:32 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\.Tribler
  1634. [2017.03.04 22:37:26 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\abgx360
  1635. [2016.02.04 23:27:45 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Ableton
  1636. [2017.04.11 00:12:25 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\AIMP
  1637. [2016.08.05 23:26:35 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\All Free YouTube to Converter
  1638. [2017.03.31 21:32:16 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Anvsoft
  1639. [2016.03.30 19:19:28 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Autodesk
  1640. [2016.03.26 16:28:58 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Axolot Games
  1641. [2016.12.30 18:18:14 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Azureus
  1642. [2017.04.20 09:58:06 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Bitdefender
  1643. [2017.02.18 22:52:58 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\com.efile.epity
  1644. [2017.04.20 11:25:10 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\DAEMON Tools Lite
  1645. [2016.04.15 12:24:58 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Dropbox
  1646. [2016.11.19 23:38:09 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\epm
  1647. [2017.04.20 11:25:31 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\ESET
  1648. [2016.12.20 20:29:51 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Fenrir Inc
  1649. [2016.07.24 14:23:44 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Foxit AgentInformation
  1650. [2016.09.28 20:42:18 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Foxit Software
  1651. [2017.03.20 02:07:59 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Franz
  1652. [2016.12.29 18:15:42 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\GHISLER
  1653. [2016.10.26 23:14:46 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\GlarySoft
  1654. [2017.04.10 09:56:01 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\GofinDruki
  1655. [2017.01.04 09:58:08 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\HandBrake Team
  1656. [2015.09.20 01:07:48 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Hard Disk Sentinel
  1657. [2016.03.25 00:57:56 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\HTC
  1658. [2015.04.14 20:24:29 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\ImgBurn
  1659. [2015.12.28 02:02:23 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\IrfanView
  1660. [2016.03.16 21:31:33 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\JetBrains
  1661. [2017.03.18 12:51:58 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\KeePass
  1662. [2016.02.21 21:03:17 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Kingosoft
  1663. [2017.01.28 19:29:43 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\LEGO Company
  1664. [2015.07.19 01:38:32 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\LG Electronics
  1665. [2017.04.16 01:46:29 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Mp3tag
  1666. [2015.03.11 11:02:53 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\MultiCommander
  1667. [2017.03.13 01:56:03 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Navigator
  1668. [2016.08.06 00:16:54 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\New Version Available
  1669. [2017.02.25 02:33:52 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\nuclear
  1670. [2015.02.05 19:33:44 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\ODIN
  1671. [2015.12.28 02:18:43 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\OfficeRecovery
  1672. [2016.05.23 22:21:36 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Opera Software
  1673. [2017.04.03 15:43:35 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\PeaZip
  1674. [2016.12.06 11:36:54 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\PhotoScape
  1675. [2017.02.28 19:24:54 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Poikosoft
  1676. [2015.09.05 22:23:22 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\ProcessLasso
  1677. [2016.10.20 23:29:22 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\QuickScan
  1678. [2016.02.21 20:55:06 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Shuame
  1679. [2016.03.30 15:22:04 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\SmartSteamEmu
  1680. [2017.04.10 23:15:26 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Spotify
  1681. [2016.11.20 16:00:19 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Steam
  1682. [2017.03.19 14:56:17 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\TAC
  1683. [2016.10.20 22:26:02 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\TagScanner
  1684. [2015.03.27 16:11:05 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\TeamViewer
  1685. [2016.12.29 17:54:02 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Thunderbird
  1686. [2017.04.17 00:30:40 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\TIDAL
  1687. [2015.05.24 14:24:39 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Unity
  1688. [2015.02.07 23:35:35 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\VS Revo Group
  1689. [2015.05.25 19:53:40 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Warner Bros. Interactive Entertainment
  1690. [2015.10.25 12:26:52 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\WindSolutions
  1691. [2016.12.16 02:30:36 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\Wise Uninstaller
  1692. [2016.12.29 15:23:33 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\WiseUpdate
  1693. [2015.05.03 20:08:17 | 000,000,000 | ---D | M] -- C:\Users\Tomasz\AppData\Roaming\ZJMedia
  1694.  
  1695. [color=#E56717]========== Purity Check ==========[/color]
  1696.  
  1697.  
  1698.  
  1699. [color=#E56717]========== Alternate Data Streams ==========[/color]
  1700.  
  1701. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\WLXPGSS.SCR:$CmdTcID
  1702. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\unvise32.exe:$CmdTcID
  1703. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\zipfldr.dll:$CmdTcID
  1704. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xolehlp.dll:$CmdTcID
  1705. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xinput1_3.dll:$CmdTcID
  1706. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xinput1_2.dll:$CmdTcID
  1707. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xinput1_1.dll:$CmdTcID
  1708. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_7.dll:$CmdTcID
  1709. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_6.dll:$CmdTcID
  1710. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_5.dll:$CmdTcID
  1711. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_4.dll:$CmdTcID
  1712. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_3.dll:$CmdTcID
  1713. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_2.dll:$CmdTcID
  1714. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_1.dll:$CmdTcID
  1715. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAudio2_0.dll:$CmdTcID
  1716. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAPOFX1_5.dll:$CmdTcID
  1717. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAPOFX1_4.dll:$CmdTcID
  1718. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAPOFX1_3.dll:$CmdTcID
  1719. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAPOFX1_2.dll:$CmdTcID
  1720. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAPOFX1_1.dll:$CmdTcID
  1721. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\XAPOFX1_0.dll:$CmdTcID
  1722. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_7.dll:$CmdTcID
  1723. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_6.dll:$CmdTcID
  1724. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_5.dll:$CmdTcID
  1725. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_4.dll:$CmdTcID
  1726. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_3.dll:$CmdTcID
  1727. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_2.dll:$CmdTcID
  1728. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_1.dll:$CmdTcID
  1729. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine3_0.dll:$CmdTcID
  1730. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_9.dll:$CmdTcID
  1731. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_8.dll:$CmdTcID
  1732. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_7.dll:$CmdTcID
  1733. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_6.dll:$CmdTcID
  1734. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_5.dll:$CmdTcID
  1735. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_4.dll:$CmdTcID
  1736. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_3.dll:$CmdTcID
  1737. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_2.dll:$CmdTcID
  1738. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_10.dll:$CmdTcID
  1739. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_1.dll:$CmdTcID
  1740. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\xactengine2_0.dll:$CmdTcID
  1741. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\X3DAudio1_7.dll:$CmdTcID
  1742. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\X3DAudio1_6.dll:$CmdTcID
  1743. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\X3DAudio1_5.dll:$CmdTcID
  1744. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\X3DAudio1_4.dll:$CmdTcID
  1745. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\X3DAudio1_3.dll:$CmdTcID
  1746. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\X3DAudio1_2.dll:$CmdTcID
  1747. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\x3daudio1_1.dll:$CmdTcID
  1748. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\x3daudio1_0.dll:$CmdTcID
  1749. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\WSManHTTPConfig.exe:$CmdTcID
  1750. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wsecedit.dll:$CmdTcID
  1751. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wscinterop.dll:$CmdTcID
  1752. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\WordBreakers.dll:$CmdTcID
  1753. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wmpshell.dll:$CmdTcID
  1754. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wmpeffects.dll:$CmdTcID
  1755. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wmpdxm.dll:$CmdTcID
  1756. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wininetlui.dll:$CmdTcID
  1757. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\Windows.StateRepository.dll:$CmdTcID
  1758. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\Windows.Security.Authentication.OnlineId.dll:$CmdTcID
  1759. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll:$CmdTcID
  1760. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\Windows.Media.Playback.MediaPlayer.dll:$CmdTcID
  1761. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\Windows.Media.Playback.BackgroundMediaPlayer.dll:$CmdTcID
  1762. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\wincorlib.dll:$CmdTcID
  1763. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\weretw.dll:$CmdTcID
  1764. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\user32.dll:$CmdTcID
  1765. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\UIAutomationCore.dll:$CmdTcID
  1766. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\UIAnimation.dll:$CmdTcID
  1767. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\TsWpfWrp.exe:$CmdTcID
  1768. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\TSpkg.dll:$CmdTcID
  1769. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\systemcpl.dll:$CmdTcID
  1770. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\stobject.dll:$CmdTcID
  1771. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\sspicli.dll:$CmdTcID
  1772. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\SndVolSSO.dll:$CmdTcID
  1773. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\setupugc.exe:$CmdTcID
  1774. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\setupempdrv03.exe:$CmdTcID
  1775. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\sendmail.dll:$CmdTcID
  1776. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\RTWorkQ.dll:$CmdTcID
  1777. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\RemoteNaturalLanguage.dll:$CmdTcID
  1778. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ReAgentc.exe:$CmdTcID
  1779. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\rasapi32.dll:$CmdTcID
  1780. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\PresentationNative_v0300.dll:$CmdTcID
  1781. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID
  1782. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\powercfg.exe:$CmdTcID
  1783. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\opencl.dll:$CmdTcID
  1784. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\offreg.dll:$CmdTcID
  1785. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ntshrui.dll:$CmdTcID
  1786. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ntdll.dll:$CmdTcID
  1787. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\NPSM.dll:$CmdTcID
  1788. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\NMAA.dll:$CmdTcID
  1789. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ngccredprov.dll:$CmdTcID
  1790. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\NetSetupShim.dll:$CmdTcID
  1791. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\NetSetupEngine.dll:$CmdTcID
  1792. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\NetSetupApi.dll:$CmdTcID
  1793. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\NetCfgNotifyObjectHost.exe:$CmdTcID
  1794. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\msvproc.dll:$CmdTcID
  1795. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\MSVidCtl.dll:$CmdTcID
  1796. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\msvcr70.dll:$CmdTcID
  1797. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\msinfo32.exe:$CmdTcID
  1798. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\msi.dll:$CmdTcID
  1799. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\MrmCoreR.dll:$CmdTcID
  1800. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\MosStorage.dll:$CmdTcID
  1801. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\migisol.dll:$CmdTcID
  1802. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\mfsensorgroup.dll:$CmdTcID
  1803. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\mfksproxy.dll:$CmdTcID
  1804. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\mfaudiocnv.dll:$CmdTcID
  1805. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\mdmregistration.dll:$CmdTcID
  1806. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\MapsBtSvc.dll:$CmdTcID
  1807. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\MapControlCore.dll:$CmdTcID
  1808. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\JpMapControl.dll:$CmdTcID
  1809. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\iscsiwmi.dll:$CmdTcID
  1810. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\IntelOpenCL32.dll:$CmdTcID
  1811. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\Intel_OpenCL_ICD32.dll:$CmdTcID
  1812. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\InputLocaleManager.dll:$CmdTcID
  1813. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\iglhsip32.dll:$CmdTcID
  1814. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\iglhcp32.dll:$CmdTcID
  1815. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igfxexps32.dll:$CmdTcID
  1816. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igfxcmrt32.dll:$CmdTcID
  1817. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igfxcmjit32.dll:$CmdTcID
  1818. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igfx11cmrt32.dll:$CmdTcID
  1819. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdusc32.dll:$CmdTcID
  1820. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdumdim32.dll:$CmdTcID
  1821. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdrcl32.dll:$CmdTcID
  1822. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdmd32.dll:$CmdTcID
  1823. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdmcl32.dll:$CmdTcID
  1824. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdfcl32.dll:$CmdTcID
  1825. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdde32.dll:$CmdTcID
  1826. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdbcl32.dll:$CmdTcID
  1827. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igdail32.dll:$CmdTcID
  1828. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igd12umd32.dll:$CmdTcID
  1829. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igd11dxva32.dll:$CmdTcID
  1830. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igd10iumd32.dll:$CmdTcID
  1831. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igd10idpp32.dll:$CmdTcID
  1832. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\igc32.dll:$CmdTcID
  1833. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ig75icd32.dll:$CmdTcID
  1834. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\iepeers.dll:$CmdTcID
  1835. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\GlobCollationHost.dll:$CmdTcID
  1836. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\FSClient.dll:$CmdTcID
  1837. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\EuGdiDrv.sys:$CmdTcID
  1838. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\EuEpmGdi.dll:$CmdTcID
  1839. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\esentutl.exe:$CmdTcID
  1840. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\esent.dll:$CmdTcID
  1841. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ErrorDetailsUpdate.dll:$CmdTcID
  1842. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\epmntdrv.sys:$CmdTcID
  1843. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\efsext.dll:$CmdTcID
  1844. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\EditBufferTestHook.dll:$CmdTcID
  1845. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\dtdump.exe:$CmdTcID
  1846. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\dsreg.dll:$CmdTcID
  1847. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\drvstore.dll:$CmdTcID
  1848. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\DolbyDecMFT.dll:$CmdTcID
  1849. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\DeviceFlows.DataModel.dll:$CmdTcID
  1850. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DX9_43.dll:$CmdTcID
  1851. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DX9_41.dll:$CmdTcID
  1852. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DX9_40.dll:$CmdTcID
  1853. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DX9_39.dll:$CmdTcID
  1854. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DX9_38.dll:$CmdTcID
  1855. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DX9_37.dll:$CmdTcID
  1856. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_36.dll:$CmdTcID
  1857. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_35.dll:$CmdTcID
  1858. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_34.dll:$CmdTcID
  1859. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_33.dll:$CmdTcID
  1860. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_32.dll:$CmdTcID
  1861. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_30.dll:$CmdTcID
  1862. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_29.dll:$CmdTcID
  1863. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_28.dll:$CmdTcID
  1864. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_27.dll:$CmdTcID
  1865. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_26.dll:$CmdTcID
  1866. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_25.dll:$CmdTcID
  1867. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx9_24.dll:$CmdTcID
  1868. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx11_43.dll:$CmdTcID
  1869. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx11_42.dll:$CmdTcID
  1870. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_43.dll:$CmdTcID
  1871. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_42.dll:$CmdTcID
  1872. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_41.dll:$CmdTcID
  1873. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_40.dll:$CmdTcID
  1874. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_39.dll:$CmdTcID
  1875. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_38.dll:$CmdTcID
  1876. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_37.dll:$CmdTcID
  1877. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_36.dll:$CmdTcID
  1878. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_35.dll:$CmdTcID
  1879. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_34.dll:$CmdTcID
  1880. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10_33.dll:$CmdTcID
  1881. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dx10.dll:$CmdTcID
  1882. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dcsx_43.dll:$CmdTcID
  1883. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3dcsx_42.dll:$CmdTcID
  1884. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_43.dll:$CmdTcID
  1885. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_42.dll:$CmdTcID
  1886. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_41.dll:$CmdTcID
  1887. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_40.dll:$CmdTcID
  1888. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_39.dll:$CmdTcID
  1889. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_38.dll:$CmdTcID
  1890. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_37.dll:$CmdTcID
  1891. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_36.dll:$CmdTcID
  1892. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_35.dll:$CmdTcID
  1893. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_34.dll:$CmdTcID
  1894. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\D3DCompiler_33.dll:$CmdTcID
  1895. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3d9.dll:$CmdTcID
  1896. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3d8.dll:$CmdTcID
  1897. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\d3d10warp.dll:$CmdTcID
  1898. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\cryptngc.dll:$CmdTcID
  1899. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\crypt32.dll:$CmdTcID
  1900. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\credprovs.dll:$CmdTcID
  1901. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\CPFilters.dll:$CmdTcID
  1902. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ConfigureExpandedStorage.dll:$CmdTcID
  1903. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\common_clang32.dll:$CmdTcID
  1904. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\comdlg32.dll:$CmdTcID
  1905. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\comctl32.dll:$CmdTcID
  1906. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\combase.dll:$CmdTcID
  1907. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\cmifw.dll:$CmdTcID
  1908. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\CloudStorageWizard.exe:$CmdTcID
  1909. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\chartv.dll:$CmdTcID
  1910. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\BootMan.exe:$CmdTcID
  1911. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\BluetoothApis.dll:$CmdTcID
  1912. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\bcrypt.dll:$CmdTcID
  1913. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\autoplay.dll:$CmdTcID
  1914. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\AuthExt.dll:$CmdTcID
  1915. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\AppxPackaging.dll:$CmdTcID
  1916. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\AppCapture.dll:$CmdTcID
  1917. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\adsmsext.dll:$CmdTcID
  1918. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ActivationManager.dll:$CmdTcID
  1919. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\SysWow64\ActionCenterCPL.dll:$CmdTcID
  1920. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\splwow64.exe:$CmdTcID
  1921. @Alternate Data Stream - 64 bytes -> C:\WINDOWS\acpimof.dll:$CmdTcID
  1922. @Alternate Data Stream - 64 bytes -> C:\Users\Tomasz\AppData\Local\TempOneClickRoot.exe:$CmdTcID
  1923. @Alternate Data Stream - 64 bytes -> C:\Users\Tomasz\AppData\Local\5D515C96_stp.CIS.part:$CmdTcID
  1924. @Alternate Data Stream - 26 bytes -> C:\Users\Tomasz\Desktop\AlbumArtSmall.jpg:$CmdZnID
  1925. @Alternate Data Stream - 237 bytes -> C:\Users\Tomasz\OneDrive:ms-properties
  1926. @Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:3E7908F7
  1927.  
  1928. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!