Olimpo Informatico

[markusax]

salve,dopo un aggiornamento mi sono ritrovato questo MPC.
Ho provato ad disinstallarlo anche tramite diversi programmi ...anche cancellando la sua cartella in programmi ...ma sta sempre là !
Avete qualche sistema ?

[Maary79]

Ciao!
Te lo sei ritrovato dopo un aggiornamento di cosa?
Da quanto leggo potrebbe essere un malware, ti linko la guida:


http://forum.zeusnews.com/viewtopic.php?t=65236

Posta i log.
Se si tratta di malware eventualmente spostiamo la discussione.

[markusax]

un aggiornamento del sistema operativo. Quando l'ho spento diceva 'installa aggiornamento e chiudi'.
La cartella di MPC sta in C/programmi ...e se la cancelli,ritorna.
Forse se la cancello in mod provv ...come si entra con w10 ?

La scansione con Mbam ha trovato dei PUP Optional MorePowerfullCleaner (MPC) c'entra qualcosa ?

[Maary79]

Di certo non era un aggiornamento del sistema operativo, ma qualcosa di malevolo, visto che Malware Bytes te lo ha rilevato.
Aspetta per la modalità provvisoria, cerchiamo di rimuoverlo tramite tool specifici.
Hai fatto le altre scansioni?
Puoi postare i log, come indicato nella guida?

[markusax]

Posto i log

Malwarebytes Anti-Malware
www.malwarebytes.org

Data scansione: 10/08/2016
Ora scansione: 18:27
File di log: log Mbam.txt
Amministratore: Sì

Versione: 2.2.1.1043
Database malware: v2016.08.10.09
Database rootkit: v2016.08.09.01
Licenza: Gratuito
Protezione da malware: Disattivata
Protezione da siti web nocivi: Disattivata
Auto-protezione: Disattivata

SO: Windows 10
CPU: x64
File system: NTFS
Utente: marco

Tipo di scansione: Ricerca elementi nocivi
Risultati: Completata
Elementi analizzati: 312385
Tempo impiegato: 1 ore, 15 min, 11 sec

Memoria: Attivata
Esecuzioni automatiche: Attivata
File system: Attivata
Archivi compressi: Attivata
Rootkit: Attivata
Euristiche: Attivata
PUP: Attivata
PUM: Attivata

Processi: 2
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe, 1816, Elimina al riavvio, [b6bb53f64159280ee07e6254f410b14f]
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\MPCTray.exe, 1192, Elimina al riavvio, [a0d122271c7ef640322cebcb2bd9b64a]

Moduli: 31
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\MpcSafeDll.dll, Elimina al riavvio, [ee838dbc2e6c46f02a340fa737cd8080],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\MpcSafeDll.dll, Elimina al riavvio, [ee838dbc2e6c46f02a340fa737cd8080],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\MpcSafeDll.dll, Elimina al riavvio, [ee838dbc2e6c46f02a340fa737cd8080],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\MpcSafeDll.dll, Elimina al riavvio, [ee838dbc2e6c46f02a340fa737cd8080],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\MpcSafeDll.dll, Elimina al riavvio, [ee838dbc2e6c46f02a340fa737cd8080],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\MpcSafeDll.dll, Elimina al riavvio, [ee838dbc2e6c46f02a340fa737cd8080],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\MpcSafeDll.dll, Elimina al riavvio, [ee838dbc2e6c46f02a340fa737cd8080],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\LpcManager.dll, Elimina al riavvio, [00716ddcdfbb092dd886e9cd17ed55ab],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\LpcManager.dll, Elimina al riavvio, [00716ddcdfbb092dd886e9cd17ed55ab],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\WinService.dll, Elimina al riavvio, [b4bdb9904e4c87afb2ac308624e0e51b],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\XProcessBus.dll, Elimina al riavvio, [9cd5eb5edcbe84b292cc7d3936cef60a],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\XProcessBus.dll, Elimina al riavvio, [9cd5eb5edcbe84b292cc7d3936cef60a],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Support.dll, Elimina al riavvio, [a2cf2227f8a2cf675d019422e42043bd],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Support.dll, Elimina al riavvio, [a2cf2227f8a2cf675d019422e42043bd],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Utility.dll, Elimina al riavvio, [86ebfd4c0d8d61d5adb13a7c54b0ee12],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Utility.dll, Elimina al riavvio, [86ebfd4c0d8d61d5adb13a7c54b0ee12],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Report.dll, Elimina al riavvio, [a5cc014877239e98124ca80eef157789],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Report.dll, Elimina al riavvio, [a5cc014877239e98124ca80eef157789],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\XSkin.dll, Elimina al riavvio, [bfb271d88b0f4ee8aeb04c6abe4625db],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\XBus.dll, Elimina al riavvio, [4f22d475d9c164d2a8b6c6f0bd473fc1],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\TrayFrame.dll, Elimina al riavvio, [acc521286238dc5afd61823450b4c838],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Monitor.dll, Elimina al riavvio, [e9880940b3e7d561d38b3185b45040c0],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Database.dll, Elimina al riavvio, [95dcd0790397e5518ad4bef847bda759],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\LogReport.dll, Elimina al riavvio, [6f0290b9fb9f44f25a040fa73dc77a86],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Cleaner.dll, Elimina al riavvio, [98d9c287ebaf88ae8dd19125ad578d73],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\SafeProtect.dll, Elimina al riavvio, [056c4405c7d3360077e7dadc59abf010],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\BrowserPlugIn.dll, Elimina al riavvio, [b8b948018218cb6bf767d3e36a9a7e82],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Update.dll, Elimina al riavvio, [41307bce67333afcde80a90dc53f4bb5],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Web.dll, Elimina al riavvio, [5b1657f2e4b668ce83dbc5f1aa5a35cb],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\SafeNavi.dll, Elimina al riavvio, [b4bda8a13268d95d96c82d89966e0ff1],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\SafeNavi.dll, Elimina al riavvio, [b4bda8a13268d95d96c82d89966e0ff1],

Chiavi di registro: 4
PUP.Optional.MorePowerfulCleaner, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MPCProtectService, Elimina al riavvio, [b6bb53f64159280ee07e6254f410b14f],
PUP.Optional.MorePowerfulCleaner, HKLM\SOFTWARE\WOW6432NODE\MPC, Elimina al riavvio, [363bb792b9e1da5ce8b4b53cf40f3ec2],
PUP.Optional.MorePowerfulCleaner, HKLM\SOFTWARE\WOW6432NODE\MPC DESKTOP, In quarantena, [b9b8a4a5237763d3b47ea659ed1618e8],
PUP.Optional.MorePowerfulCleaner, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MPCKpt, Elimina al riavvio, [c6ab3e0bceccda5ca7dd9732eb17f709],

Valori di registro: 5
PUP.Optional.MorePowerfulCleaner, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT|MPCInstalled, , In quarantena, [bbb64801405ad75f2eb49a6542c1c739]
PUP.Optional.MorePowerfulCleaner, HKLM\SOFTWARE\WOW6432NODE\MPC|Location, C:\Program Files (x86)\MPC Cleaner, Elimina al riavvio, [363bb792b9e1da5ce8b4b53cf40f3ec2]
PUP.Optional.MorePowerfulCleaner, HKLM\SOFTWARE\WOW6432NODE\MPC DESKTOP|Location, C:\Program Files (x86)\MPC Cleaner, In quarantena, [b9b8a4a5237763d3b47ea659ed1618e8]
PUP.Optional.MorePowerfulCleaner, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MPCPROTECTSERVICE|ImagePath, "C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe", Elimina al riavvio, [beb38cbd7624c2745c177f73c043ce32]
PUM.Optional.ProxyHijacker, HKU\S-1-5-21-2516839701-2501448869-332624899-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, 127.0.0.1:18159, In quarantena, [0071bf8aa0fa0a2cb002a42d1ae92ed2]

Dati di registro: 0
(Nessun elemento nocivo rilevato)

Cartelle: 30
PUP.Optional.MCorp, C:\Users\marco\AppData\Roaming\MCorp\1147, In quarantena, [fe7355f46931f640621eb84517ec7888],
PUP.Optional.MCorp, C:\Users\marco\AppData\Roaming\MCorp, In quarantena, [fe7355f46931f640621eb84517ec7888],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Config, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Config\DB, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Drivers, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Exe, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Log, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Microsoft.VC90.CRT, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Module, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Skin, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Skin\AdCleaner, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Skin\Cleaner, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Skin\CrashReport, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Skin\Desktop, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Skin\DesktopSetup, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Skin\DesktopUninstall, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Skin\News, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Skin\Tray, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Skin\Uninstall, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\TEMP, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\TEMP\Rule, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\TEMP\Rule\CommonRule, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\TEMP\Rule\CommonRule\Module, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\TEMP\Rule\SpecialRule, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\TEMP\Rule\SpecialRule\Module, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Image, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Image\SearchIcon, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Image\SgIcon, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Image\SoIcon, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],

File: 33
PUP.Optional.MorePowerfulCleaner, C:\WINDOWS\SYSTEM32\drivers\MPCKpt.sys, Elimina al riavvio, [a7914c0b673017264e880137dbe3720c],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\MpcSafeDll.dll, Elimina al riavvio, [ee838dbc2e6c46f02a340fa737cd8080],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe, Elimina al riavvio, [b6bb53f64159280ee07e6254f410b14f],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\LpcManager.dll, Elimina al riavvio, [00716ddcdfbb092dd886e9cd17ed55ab],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\WinService.dll, Elimina al riavvio, [b4bdb9904e4c87afb2ac308624e0e51b],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\XProcessBus.dll, Elimina al riavvio, [9cd5eb5edcbe84b292cc7d3936cef60a],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Support.dll, Elimina al riavvio, [a2cf2227f8a2cf675d019422e42043bd],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Utility.dll, Elimina al riavvio, [86ebfd4c0d8d61d5adb13a7c54b0ee12],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Report.dll, Elimina al riavvio, [a5cc014877239e98124ca80eef157789],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\MPCTray.exe, Elimina al riavvio, [a0d122271c7ef640322cebcb2bd9b64a],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\XSkin.dll, Elimina al riavvio, [bfb271d88b0f4ee8aeb04c6abe4625db],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\XBus.dll, Elimina al riavvio, [4f22d475d9c164d2a8b6c6f0bd473fc1],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\TrayFrame.dll, Elimina al riavvio, [acc521286238dc5afd61823450b4c838],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Monitor.dll, Elimina al riavvio, [e9880940b3e7d561d38b3185b45040c0],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Database.dll, Elimina al riavvio, [95dcd0790397e5518ad4bef847bda759],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\LogReport.dll, Elimina al riavvio, [6f0290b9fb9f44f25a040fa73dc77a86],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Cleaner.dll, Elimina al riavvio, [98d9c287ebaf88ae8dd19125ad578d73],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\SafeProtect.dll, Elimina al riavvio, [056c4405c7d3360077e7dadc59abf010],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\BrowserPlugIn.dll, Elimina al riavvio, [b8b948018218cb6bf767d3e36a9a7e82],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Update.dll, Elimina al riavvio, [41307bce67333afcde80a90dc53f4bb5],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Web.dll, Elimina al riavvio, [5b1657f2e4b668ce83dbc5f1aa5a35cb],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\SafeNavi.dll, Elimina al riavvio, [b4bda8a13268d95d96c82d89966e0ff1],
HackTool.Agent.KMS, C:\Windows\KMS-QADhook.dll, Elimina al riavvio, [442d4aff089280b6dbbd5cf2d230718f],
PUP.Optional.MCorp, C:\Users\marco\AppData\Roaming\MCorp\1147\udpx, In quarantena, [fe7355f46931f640621eb84517ec7888],
PUP.Optional.MorePowerfulCleaner, C:\Users\marco\AppData\Roaming\Microsoft\Windows\SendTo\MPC Desktop.lnk, In quarantena, [601158f1e2b82c0a969bd52a58abb54b],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\nmlct, In quarantena, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Config\Clean.xf, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Config\DB\as.db, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Config\DB\cf.db, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Config\DB\run.db, In quarantena, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Config\DB\st.db, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Skin\Tray\Lang.xf, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],
PUP.Optional.MorePowerfulCleaner, C:\Program Files (x86)\MPC Cleaner\Skin\Tray\Skin.xf, Elimina al riavvio, [5b16ba8f4f4b3303c39ba32617eb28d8],

Settori fisici: 0
(Nessun elemento nocivo rilevato)

# AdwCleaner v5.201 - File registro eventi creato 12/08/2016 a 15:28:55
# Aggiornato 30/06/2016 by ToolsLib
# Database : 2016-08-12.1 [Server]
# Sistema operativo : Windows 10 Pro (X64)
# Nome utente : marco - MARCO-PC
# In esecuzione da : C:\Users\marco\Desktop\adwcleaner_5.201.exe
# Opzione : Pulizia
# Supporto : https://toolslib.net/forum

***** [ Servizi ] *****


***** [ Cartelle ] *****


***** [ File ] *****


***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Collegamenti ] *****


***** [ Attività pianificate ] *****


***** [ Registro ] *****

[-] Chiave Eliminato : HKLM\SOFTWARE\MPC

***** [ Browser web ] *****


*************************

:: Chiavi "Tracing" eliminate
:: Impostazioni Winsock ripristinate

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [2879 byte] - [30/07/2016 12:55:30]
C:\AdwCleaner\AdwCleaner[C2].txt - [1677 byte] - [31/07/2016 13:12:35]
C:\AdwCleaner\AdwCleaner[C3].txt - [1637 byte] - [03/08/2016 15:54:10]
C:\AdwCleaner\AdwCleaner[C4].txt - [1019 byte] - [12/08/2016 15:28:55]
C:\AdwCleaner\AdwCleaner[S1].txt - [2719 byte] - [30/07/2016 12:45:53]
C:\AdwCleaner\AdwCleaner[S2].txt - [1452 byte] - [31/07/2016 13:03:31]
C:\AdwCleaner\AdwCleaner[S3].txt - [1424 byte] - [03/08/2016 15:41:26]
C:\AdwCleaner\AdwCleaner[S4].txt - [1280 byte] - [12/08/2016 15:26:50]

########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [1379 byte] ##########

[R16]

Ciao.
Hai fatto il riavvio del pc come richiesto da Malwarebytes?
Devi postare tutti i log della guida segnalata da Maary79.
Specialmente quelli di FRST.txt e quello di Addition.txt.
Sono fondamentali per tentare la soluzione del problema.

Per avviare Windows 10 in Modalità Provvisoria:
link

[markusax]

ho scaricato FRST ma il sistema non me lo fa avviare : 'windows Smartscreen' ha impedito ad una app sconosciuta di avviarsi ....NON ESEGUIRE.
Nessun altra opzione...

[Maary79]

Basta che premi su: ulteriori informazioni, e poi su: esegui comunque.

[markusax]

Grazie,fatto...
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-08-2016
Ran by marco (administrator) on MARCO-PC (18-08-2016 17:01:25)
Running from C:\Users\marco\Desktop
Loaded Profiles: marco (Available Profiles: marco & DefaultAppPool)
Platform: Windows 10 Pro Version 1511 (X64) Language: Italiano (Italia)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() C:\Windows\KMS-R@1n.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
() C:\Windows\KMS-R@1nhook.exe
(Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe
(eM Client s.r.o.) C:\Program Files (x86)\eM Client\MailClient.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(eM Client s.r.o.) C:\Program Files (x86)\eM Client\MailClient.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_22_0_0_209.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_22_0_0_209.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-2516839701-2501448869-332624899-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8722136 2016-06-01] (Piriform Ltd)
HKU\S-1-5-21-2516839701-2501448869-332624899-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
IFEO\OSppSvc.exe: [Debugger] KMS-R@1nhook.exe
IFEO\SppExtComObj.exe: [Debugger] KMS-R@1nhook.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{0d57bc99-2954-483c-a404-484e5ff11c13}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{d8af0b2c-7735-41fb-a082-af3cea143adb}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{d8af0b2c-7735-41fb-a082-af3cea143adb}: [DhcpNameServer] 192.168.1.1 192.168.1.1
ManualProxies:

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKU\S-1-5-21-2516839701-2501448869-332624899-1000\Software\Microsoft\Internet Explorer\Main,Start Page =
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-2516839701-2501448869-332624899-1000 -> {F154C596-75A9-4028-90E8-9752BD7CA05B} URL = hxxp://www.google.com/search?q={searchTerms}

FireFox:
========
FF ProfilePath: C:\Users\marco\AppData\Roaming\Mozilla\Firefox\Profiles\2mmbyc5c.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-26] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-26] ()
FF Extension: Router Wi-Fi Plus - C:\Users\marco\AppData\Roaming\Mozilla\Firefox\Profiles\2mmbyc5c.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-06-12]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [26112 2016-06-14] () [File not signed]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-28] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-08-18 17:01 - 2016-08-18 17:02 - 00005239 _____ C:\Users\marco\Desktop\FRST.txt
2016-08-18 17:01 - 2016-08-18 17:01 - 00000000 ____D C:\FRST
2016-08-17 20:05 - 2016-08-18 17:01 - 02394624 _____ (Farbar) C:\Users\marco\Desktop\FRST64.exe
2016-08-15 18:08 - 2016-08-15 19:58 - 00000000 ____D C:\ProgramData\eMule
2016-08-15 18:08 - 2016-08-15 18:08 - 00000000 ____D C:\Users\marco\Downloads\eMule
2016-08-14 13:08 - 2016-08-14 13:08 - 00702908 _____ C:\Users\marco\Desktop\certificato.pdf
2016-08-13 14:42 - 2016-08-13 14:42 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\Risorse di stampa
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\Risorse di rete
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\Recenti
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\Modelli
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\Menu Avvio
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\Impostazioni locali
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Video
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Musica
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Immagini
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\Documenti
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\Dati applicazioni
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programmi
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Dati applicazioni
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Cronologia
2016-08-13 14:42 - 2016-08-13 14:42 - 00000000 ____D C:\Users\DefaultAppPool
2016-08-13 14:42 - 2016-07-28 17:27 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Media Center Programs
2016-08-11 15:46 - 2016-08-03 11:44 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-08-11 15:46 - 2016-08-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2016-08-11 15:46 - 2016-08-03 06:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2016-08-11 15:45 - 2016-08-03 13:14 - 01505984 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-08-11 15:45 - 2016-08-03 13:14 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-08-11 15:45 - 2016-08-03 13:14 - 00050368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-08-11 15:45 - 2016-08-03 12:36 - 07469408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-08-11 15:45 - 2016-08-03 12:36 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-08-11 15:45 - 2016-08-03 12:36 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2016-08-11 15:45 - 2016-08-03 12:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-08-11 15:45 - 2016-08-03 12:23 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-08-11 15:45 - 2016-08-03 12:23 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-08-11 15:45 - 2016-08-03 12:22 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-08-11 15:45 - 2016-08-03 12:22 - 00465248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2016-08-11 15:45 - 2016-08-03 12:22 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-08-11 15:45 - 2016-08-03 12:21 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-08-11 15:45 - 2016-08-03 12:21 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-08-11 15:45 - 2016-08-03 12:21 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-08-11 15:45 - 2016-08-03 12:20 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-08-11 15:45 - 2016-08-03 12:20 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-08-11 15:45 - 2016-08-03 12:19 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-08-11 15:45 - 2016-08-03 12:19 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-08-11 15:45 - 2016-08-03 12:13 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-08-11 15:45 - 2016-08-03 12:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-08-11 15:45 - 2016-08-03 12:13 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-08-11 15:45 - 2016-08-03 11:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
2016-08-11 15:45 - 2016-08-03 11:51 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-08-11 15:45 - 2016-08-03 11:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2016-08-11 15:45 - 2016-08-03 11:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2016-08-11 15:45 - 2016-08-03 11:43 - 16985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-08-11 15:45 - 2016-08-03 11:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-08-11 15:45 - 2016-08-03 11:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-08-11 15:45 - 2016-08-03 11:40 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-08-11 15:45 - 2016-08-03 11:40 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2016-08-11 15:45 - 2016-08-03 11:39 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-08-11 15:45 - 2016-08-03 11:39 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2016-08-11 15:45 - 2016-08-03 11:38 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-08-11 15:45 - 2016-08-03 11:37 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-08-11 15:45 - 2016-08-03 11:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-08-11 15:45 - 2016-08-03 11:36 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2016-08-11 15:45 - 2016-08-03 11:35 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2016-08-11 15:45 - 2016-08-03 11:33 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-08-11 15:45 - 2016-08-03 11:31 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-08-11 15:45 - 2016-08-03 11:31 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2016-08-11 15:45 - 2016-08-03 11:30 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-08-11 15:45 - 2016-08-03 11:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-08-11 15:45 - 2016-08-03 11:29 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2016-08-11 15:45 - 2016-08-03 11:29 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-08-11 15:45 - 2016-08-03 11:28 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-08-11 15:45 - 2016-08-03 11:28 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-08-11 15:45 - 2016-08-03 11:27 - 07536640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-08-11 15:45 - 2016-08-03 11:27 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-08-11 15:45 - 2016-08-03 11:18 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-08-11 15:45 - 2016-08-03 11:18 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-08-11 15:45 - 2016-08-03 11:18 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-08-11 15:45 - 2016-08-03 11:17 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-08-11 15:45 - 2016-08-03 11:16 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2016-08-11 15:45 - 2016-08-03 11:16 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-08-11 15:45 - 2016-08-03 11:16 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-08-11 15:45 - 2016-08-03 11:16 - 01732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-08-11 15:45 - 2016-08-03 11:14 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-08-11 15:45 - 2016-08-03 11:13 - 03025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-08-11 15:45 - 2016-08-03 11:13 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-08-11 15:45 - 2016-08-03 11:12 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2016-08-11 15:45 - 2016-08-03 11:11 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-08-11 15:45 - 2016-08-03 07:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2016-08-11 15:45 - 2016-08-03 07:34 - 00501592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-08-11 15:45 - 2016-08-03 07:34 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-08-11 15:45 - 2016-08-03 07:33 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll
2016-08-11 15:45 - 2016-08-03 07:31 - 02921368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-08-11 15:45 - 2016-08-03 07:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-08-11 15:45 - 2016-08-03 07:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-08-11 15:45 - 2016-08-03 07:30 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-08-11 15:45 - 2016-08-03 07:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-08-11 15:45 - 2016-08-03 07:30 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-08-11 15:45 - 2016-08-03 06:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe
2016-08-11 15:45 - 2016-08-03 06:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
2016-08-11 15:45 - 2016-08-03 06:47 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-08-11 15:45 - 2016-08-03 06:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2016-08-11 15:45 - 2016-08-03 06:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2016-08-11 15:45 - 2016-08-03 06:37 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-08-11 15:45 - 2016-08-03 06:35 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
2016-08-11 15:45 - 2016-08-03 06:34 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-08-11 15:45 - 2016-08-03 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-08-11 15:45 - 2016-08-03 06:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-08-11 15:45 - 2016-08-03 06:32 - 12585984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-08-11 15:45 - 2016-08-03 06:32 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-08-11 15:45 - 2016-08-03 06:32 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-08-11 15:45 - 2016-08-03 06:31 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-08-11 15:45 - 2016-08-03 06:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-08-11 15:45 - 2016-08-03 06:25 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2016-08-11 15:45 - 2016-08-03 06:23 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-08-11 15:45 - 2016-08-03 06:22 - 02501120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-08-11 15:45 - 2016-08-03 06:19 - 02180096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2016-08-11 15:44 - 2016-08-03 12:22 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-08-11 15:44 - 2016-08-03 12:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2016-08-11 15:44 - 2016-08-03 12:21 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-08-11 15:44 - 2016-08-03 12:11 - 00422744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-08-11 15:44 - 2016-08-03 11:46 - 22384128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-08-11 15:44 - 2016-08-03 11:40 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2016-08-11 15:44 - 2016-08-03 11:38 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-08-11 15:44 - 2016-08-03 11:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-08-11 15:44 - 2016-08-03 11:35 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-08-11 15:44 - 2016-08-03 11:34 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-08-11 15:44 - 2016-08-03 11:33 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-08-11 15:44 - 2016-08-03 11:31 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-08-11 15:44 - 2016-08-03 11:30 - 24613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-08-11 15:44 - 2016-08-03 11:30 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-08-11 15:44 - 2016-08-03 11:29 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-08-11 15:44 - 2016-08-03 11:29 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-08-11 15:44 - 2016-08-03 11:28 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-08-11 15:44 - 2016-08-03 11:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-08-11 15:44 - 2016-08-03 11:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-08-11 15:44 - 2016-08-03 11:20 - 13390336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-08-11 15:44 - 2016-08-03 11:15 - 07833088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-08-11 15:44 - 2016-08-03 11:14 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-08-11 15:44 - 2016-08-03 06:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2016-08-11 15:44 - 2016-08-03 06:39 - 19351040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-08-11 15:44 - 2016-08-03 06:37 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-08-11 15:44 - 2016-08-03 06:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2016-08-11 15:44 - 2016-08-03 06:33 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-08-11 15:44 - 2016-08-03 06:33 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-08-11 15:44 - 2016-08-03 06:32 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-08-11 15:44 - 2016-08-03 06:29 - 12133376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-08-11 15:44 - 2016-08-03 06:28 - 03663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-08-11 15:44 - 2016-08-03 06:25 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-08-11 15:44 - 2016-08-03 06:23 - 05660672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-08-11 15:44 - 2016-08-03 06:22 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-08-11 15:44 - 2016-08-03 06:21 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-08-10 18:24 - 2016-08-12 15:37 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-08-10 18:24 - 2016-08-10 18:24 - 00001171 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-08-10 18:24 - 2016-08-10 18:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-08-10 18:23 - 2016-08-10 18:24 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-08-10 18:23 - 2016-08-10 18:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-08-10 18:23 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-08-10 18:23 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-08-10 18:23 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-08-10 18:22 - 2016-08-10 18:23 - 22851472 _____ (Malwarebytes ) C:\Users\marco\Downloads\mbam-setup-cnet.35891-2.2.1.1043.exe
2016-08-03 20:11 - 2016-08-06 16:40 - 00000000 ____D C:\WINDOWS\Minidump
2016-08-03 16:56 - 2016-08-03 20:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-08-01 16:29 - 2016-08-01 16:29 - 00688992 ____R (Swearware) C:\Users\marco\Downloads\dds.com
2016-07-31 11:06 - 2016-07-31 12:45 - 00000000 ____D C:\Users\marco\AppData\Roaming\WhatsApp
2016-07-31 11:05 - 2016-07-31 11:06 - 00000000 ____D C:\Users\marco\AppData\Local\SquirrelTemp
2016-07-30 12:45 - 2016-08-12 15:28 - 00000000 ____D C:\AdwCleaner
2016-07-30 12:31 - 2016-07-30 13:00 - 01610560 _____ (Malwarebytes) C:\Users\marco\Desktop\JRT.exe
2016-07-30 12:30 - 2016-07-30 12:45 - 03712064 _____ C:\Users\marco\Desktop\adwcleaner_5.201.exe
2016-07-29 13:03 - 2016-07-30 13:23 - 00001942 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfох.lnk
2016-07-28 18:51 - 2016-07-28 18:51 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-07-28 18:12 - 2016-07-29 14:08 - 00000000 ___DC C:\WINDOWS\Panther
2016-07-28 18:08 - 2016-07-28 18:08 - 00000000 ____D C:\Windows.old
2016-07-28 18:06 - 2016-07-28 18:06 - 00000000 ____D C:\Program Files\CMAK
2016-07-28 18:06 - 2016-07-28 18:06 - 00000000 ____D C:\Program Files (x86)\CMAK
2016-07-28 18:04 - 2016-07-28 18:04 - 28851224 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsRaw.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 28083144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsRaw.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 09919488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 06675968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 06471168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 06312448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 04827136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 04646912 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 04515256 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 04413440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 04404736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 04268880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 04170240 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 03671040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 03555840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 03459584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 03415040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 03301376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncCenter.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02902528 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02849792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02731008 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02679808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02632192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02609664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02578432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02563584 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02548944 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02519552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02403168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2016-07-28 18:04 - 2016-07-28 18:04 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02285568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02217984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02152280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-07-28 18:04 - 2016-07-28 18:04 - 02145032 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02102272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02088960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 02062336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01976832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpdshext.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01872896 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01847808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 01819208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01797120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01755648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01750440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01554152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01552104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01508352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmsipc.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01497088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 01434112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01385472 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01349640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01240064 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcnwiz.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01185280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFramework.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01161120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01159168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01152864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2016-07-28 18:04 - 2016-07-28 18:04 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01083656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01063936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01063936 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-07-28 18:04 - 2016-07-28 18:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcsecproc.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00965120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2016-07-28 18:04 - 2016-07-28 18:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00925576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00879616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00847656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmcsnap.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2016-07-28 18:04 - 2016-07-28 18:04 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2016-07-28 18:04 - 2016-07-28 18:04 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sbe.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00770640 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00738816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2016-07-28 18:04 - 2016-07-28 18:04 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00730352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00714240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00709176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00707608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-07-28 18:04 - 2016-07-28 18:04 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00656896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00651776 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00645632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00636304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2016-07-28 18:04 - 2016-07-28 18:04 - 00581632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprefcl.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00569752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00565760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00546816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\StikyNot.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00451936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00442880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00431296 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00413696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WLanConn.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-07-28 18:04 - 2016-07-28 18:04 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2016-07-28 18:04 - 2016-07-28 18:04 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00388896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00388384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00374008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\system32\WmpDui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdechangepin.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AccountsRt.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcfile.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3ui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WmpDui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2016-07-28 18:04 - 2016-07-28 18:04 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00261376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Maps.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2016-07-28 18:04 - 2016-07-28 18:04 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmdskmgr.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GnssAdapter.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00188256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10_1.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingMonitor.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2016-07-28 18:04 - 2016-07-28 18:04 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-07-28 18:04 - 2016-07-28 18:04 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-07-28 18:04 - 2016-07-28 18:04 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\FingerprintEnrollment.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDShServiceObj.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00058208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwminit.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WPDShServiceObj.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpscript.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpscript.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsdport.sys
2016-07-28 18:04 - 2016-07-28 18:04 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsdchngr.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\IconCodecService.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll
2016-07-28 18:04 - 2016-07-28 18:04 - 00002186 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
2016-07-28 18:03 - 2016-07-28 18:03 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 06536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2016-07-28 18:03 - 2016-07-28 18:03 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 05503488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 04775424 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 04456448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 04387680 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 03695104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 03577344 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 03351040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 03078144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 03053568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 03046400 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02771968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02722816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02656408 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02445312 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02444800 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02195632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02103296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs3D.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02012672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmsipc.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01987072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01984000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01902592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01866104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01862008 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01848584 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01776768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01716736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01671168 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01626112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01613664 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01603224 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-07-28 18:03 - 2016-07-28 18:03 - 01588224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2

[R16]

[markusax]

Verificato,MPC eliminato da Programmi...ok anche per la mod provv
Grazie