Aiuto Malware

di **Stecco** » 30/03/16 21:47

Buona sera,
mi appello a voi perchè so che riuscirete a darmi delle risposte, e soprattutto quelle che cerco...
Da un po di tempo mentre navigo su google chrome o microsoft edge, mi si apre una pagina chiamata "wonderlands.com", un sito che spamma pubblicità a tutta forza, mi chiedo come eliminarlo x favore... spero mi possiate aiutare, grazie in anticipo.

di **shel** » 30/03/16 22:15

Scarica Farbar Recovery Scan Tool sul desktop www.bleepingcomputer.com/download/farba ... scan-tool/
n.b. Devi scaricare la versione(32 o 64 bit compatibile con il tuo sistema)

•Doppio click per avviarlo.
•Quando ti chiede di accettare le condizioni clicca su yes.
•Clicca sul pulsante SCAN
•Quando finito il tool creerà nella stessa directory di dove è posizionato FRST un log chiamato FRST.txt.
•La prima volta che FRST sarà avviato verrà creato un altro log chiamato Addition.txt
•Allega entrambi i log

di **Stecco** » 31/03/16 23:33

Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by giuseppe (2016-04-01 00:24:17)
Running from C:\Users\giuseppe\Downloads
Windows 10 Home Version 1511 (X64) (2016-03-31 21:51:02)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2385086943-1329575824-235044043-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2385086943-1329575824-235044043-503 - Limited - Disabled)
giuseppe (S-1-5-21-2385086943-1329575824-235044043-1001 - Administrator - Enabled) => C:\Users\giuseppe
Guest (S-1-5-21-2385086943-1329575824-235044043-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2385086943-1329575824-235044043-1003 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.4 - Synaptics Incorporated)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2946BD54-2650-4940-BDB7-FB946ACD73B8} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {719F320B-0633-4555-830A-F82698B111BA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {B5FC3BE6-6391-4E9A-9B76-8375E5C223AF} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {E03C8786-4C3A-41C4-AEF3-F909A1BA0073} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {F27862CA-4739-48E5-BF23-F969A330EA7F} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02654872 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-09-30 20:39 - 2015-09-30 20:39 - 00415128 _____ () C:\WINDOWS\system32\igfxTray.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 02654872 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-02-13 14:53 - 2016-02-13 14:53 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-02-13 14:53 - 2016-02-13 14:53 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-02-13 14:53 - 2016-02-13 14:53 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-02-13 14:53 - 2016-02-13 14:53 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-02-13 14:53 - 2016-02-13 14:53 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 00044032 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-02-13 15:06 - 2016-02-13 15:06 - 00151040 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 02884096 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\MessagingNativeCore.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 00583168 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\MessagingEntityExtractionProxy.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 01280000 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\MessagingNativeBase.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 00156160 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\MessagingNativeSkypeExternal.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 01845248 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkypeCore.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 18818048 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkyWrap.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2385086943-1329575824-235044043-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 80.243.191.66 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============

Name: Dispositivo High Definition Audio
Description: Dispositivo High Definition Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

==================== Event log errors: =========================

Application errors:
==================
Error: (04/01/2016 12:20:33 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-GIUSEPPE)
Description: Attivazione dell'app Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App non riuscita con errore: -2147024770 Per ulteriori informazioni, consulta il registro Microsoft-Windows-TWinUI/Operativo.

Error: (04/01/2016 12:16:06 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-GIUSEPPE)
Description: Attivazione dell'app Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App non riuscita con errore: -2147024770 Per ulteriori informazioni, consulta il registro Microsoft-Windows-TWinUI/Operativo.

Error: (04/01/2016 12:10:58 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-GIUSEPPE)
Description: Attivazione dell'app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI non riuscita con errore: -2144927141 Per ulteriori informazioni, consulta il registro Microsoft-Windows-TWinUI/Operativo.

Error: (03/31/2016 11:47:43 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: 0x8007085A

Error: (03/31/2016 11:45:07 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: 0x8007085A

Error: (03/31/2016 11:45:07 PM) (Source: MSDTC 2) (EventID: 4104) (User: )
Description: 0x8007085A

Error: (03/31/2016 11:45:07 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: 0x8007085A

System errors:
=============
Error: (04/01/2016 12:15:42 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}

Error: (04/01/2016 12:10:58 AM) (Source: DCOM) (EventID: 10010) (User: PC-GIUSEPPE)
Description: CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mca

Error: (04/01/2016 12:10:57 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}

Error: (04/01/2016 12:10:55 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Accesso dati utente_1b2053 è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 10000 millisecondi: Riavvia il servizio.

Error: (04/01/2016 12:10:55 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Archiviazione dati utente_1b2053 è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 10000 millisecondi: Riavvia il servizio.

Error: (04/01/2016 12:10:55 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Dati contatti_1b2053 è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 10000 millisecondi: Riavvia il servizio.

Error: (04/01/2016 12:10:55 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Sincronizza host_1b2053 è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 10000 millisecondi: Riavvia il servizio.

Error: (04/01/2016 12:10:54 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: impostazioni specifiche dell'applicazioneLocaleAttivazione{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (tramite LRPC)Non disponibileNon disponibile

Error: (03/31/2016 11:54:49 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}

Error: (03/31/2016 11:49:11 PM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Il computer è configurato come membro di un gruppo di lavoro, non
come membro di un dominio. Non è necessario eseguire il servizio
Accesso rete in questa configurazione.

CodeIntegrity:
===================================
Date: 2016-04-01 00:07:02.556
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-31 23:46:08.470
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-31 23:36:16.287
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Intel(R) Celeron(R) 2955U @ 1.40GHz
Percentage of memory in use: 19%
Total physical RAM: 8072.27 MB
Available physical RAM: 6482.6 MB
Total Virtual: 9992.27 MB
Available Virtual: 8453.35 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.03 GB) (Free:898.64 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or

(Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt ============================

di **Stecco** » 31/03/16 23:34

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by giuseppe (administrator) on PC-GIUSEPPE (01-04-2016 00:22:54)
Running from C:\Users\giuseppe\Downloads
Loaded Profiles: giuseppe (Available Profiles: giuseppe)
Platform: Windows 10 Home Version 1511 (X64) Language: Italiano (Italia)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\NetworkUXBroker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-06-04] (Synaptics Incorporated)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 80.243.191.66 8.8.8.8
Tcpip\..\Interfaces\{93c0944d-4b56-4d6e-9b5a-0914968e3920}: [DhcpNameServer] 80.243.191.66 8.8.8.8

Internet Explorer:
==================
HKU\S-1-5-21-2385086943-1329575824-235044043-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.it/

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-2385086943-1329575824-235044043-1001 -> hxxp://www.google.it/

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [370064 2015-09-30] (Intel Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [249032 2015-06-04] (Synaptics Incorporated)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-12-19] (Intel Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-04] (Synaptics Incorporated)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-01 00:34 - 2016-03-31 23:51 - 00000000 ___DC C:\WINDOWS\Panther
2016-04-01 00:30 - 2016-04-01 00:30 - 00000000 ____D C:\Windows.old
2016-04-01 00:29 - 2016-04-01 00:29 - 24600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 22376960 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 12586496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 09919488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 08705672 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 07533568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 06972416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 06952088 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 06740992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 06607080 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 05661696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 05321728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 04827136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 03425792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02793472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02654872 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02635264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02581504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02273792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02152288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 02061312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01997152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01859960 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01847808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 01831936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01818696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01799168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01613664 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01497088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01390592 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-04-01 00:29 - 2016-04-01 00:29 - 01224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01098752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-04-01 00:29 - 2016-04-01 00:29 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00997376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00990720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-04-01 00:29 - 2016-04-01 00:29 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00882720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00848168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00791744 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00779384 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00769536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00652392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00640472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00625000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00572272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00563552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00538736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00534368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-04-01 00:29 - 2016-04-01 00:29 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00523752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-04-01 00:29 - 2016-04-01 00:29 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00476728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00450912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00430944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00420928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-04-01 00:29 - 2016-04-01 00:29 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00394080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00389992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00376536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00358752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00294752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00287712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cemapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00220064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cemapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00187744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwbase.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00146272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00141560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00127840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2016-04-01 00:29 - 2016-04-01 00:29 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-04-01 00:29 - 2016-04-01 00:29 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PimIndexMaintenanceClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
2016-04-01 00:23 - 2016-04-01 00:23 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-04-01 00:22 - 2016-04-01 00:23 - 00004679 _____ C:\Users\giuseppe\Downloads\FRST.txt
2016-04-01 00:22 - 2016-04-01 00:22 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-04-01 00:22 - 2016-04-01 00:22 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-04-01 00:22 - 2016-04-01 00:22 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-04-01 00:22 - 2016-04-01 00:22 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-04-01 00:22 - 2016-04-01 00:22 - 00000000 ____D C:\FRST
2016-04-01 00:21 - 2016-04-01 00:22 - 02374144 _____ (Farbar) C:\Users\giuseppe\Downloads\FRST64.exe
2016-04-01 00:18 - 2016-04-01 00:18 - 120720280 _____ C:\Users\giuseppe\Downloads\VGA_Intel_10.18.15.4248_W10x64_A.zip.4mx8dye.partial
2016-04-01 00:13 - 2016-04-01 00:13 - 00000000 ___HD C:\OneDriveTemp
2016-04-01 00:06 - 2015-12-09 05:39 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-04-01 00:05 - 2016-04-01 00:06 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-04-01 00:05 - 2016-04-01 00:05 - 143659408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-31 23:59 - 2016-03-31 23:59 - 00001949 _____ C:\Users\giuseppe\Desktop\Questo PC.lnk
2016-03-31 23:58 - 2016-04-01 00:08 - 00000000 ____D C:\Users\giuseppe\AppData\Local\MicrosoftEdge
2016-03-31 23:56 - 2016-03-31 23:56 - 00000000 ____D C:\Users\giuseppe\AppData\Local\NetworkTiles
2016-03-31 23:55 - 2016-03-31 23:55 - 00002430 _____ C:\Users\giuseppe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-03-31 23:54 - 2016-03-31 23:54 - 00000000 ____D C:\Users\giuseppe\AppData\Local\ActiveSync
2016-03-31 23:53 - 2016-03-31 23:53 - 00000000 ____D C:\Users\giuseppe\AppData\Local\Publishers
2016-03-31 23:52 - 2016-03-31 23:52 - 00000000 ____D C:\Users\giuseppe\AppData\Local\Comms
2016-03-31 23:51 - 2016-04-01 00:19 - 01743930 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-31 23:51 - 2016-04-01 00:12 - 00000000 __SHD C:\Users\giuseppe\IntelGraphicsProfiles
2016-03-31 23:51 - 2016-03-31 23:51 - 00000020 ___SH C:\Users\giuseppe\ntuser.ini
2016-03-31 23:51 - 2016-03-31 23:51 - 00000000 ____D C:\Users\giuseppe\AppData\Roaming\Synaptics
2016-03-31 23:51 - 2016-03-31 23:51 - 00000000 ____D C:\Users\giuseppe\AppData\Local\TileDataLayer
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Risorse di stampa
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Risorse di rete
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Recenti
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Modelli
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Menu Avvio
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Impostazioni locali
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Documents\Video
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Documents\Musica
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Documents\Immagini
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Documenti
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Dati applicazioni
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programmi
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dati applicazioni
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\AppData\Local\Cronologia
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\Documents\Video
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\Documents\Musica
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\Documents\Immagini
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programmi
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dati applicazioni
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Cronologia
2016-03-31 23:47 - 2016-03-31 23:47 - 00022928 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-03-31 23:42 - 2016-03-31 23:42 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-03-31 23:41 - 2016-03-31 23:41 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2016-03-31 23:40 - 2016-03-31 23:51 - 00000000 ____D C:\Users\giuseppe
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Risorse di stampa
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Risorse di rete
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Recenti
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Modelli
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Menu Avvio
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Impostazioni locali
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Documents\Video
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Documents\Musica
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Documents\Immagini
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Documenti
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Dati applicazioni
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\AppData\Roaming\Microsoft\Windows\Start Menu\Programmi
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\AppData\Local\Dati applicazioni
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\AppData\Local\Cronologia
2016-03-31 23:37 - 2016-04-01 00:12 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-03-31 23:37 - 2016-03-31 23:37 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2016-03-31 23:37 - 2016-03-31 23:37 - 00000000 ____D C:\Program Files\Intel
2016-03-31 23:37 - 2015-09-30 20:39 - 00105472 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2016-03-31 23:37 - 2015-09-30 20:39 - 00099856 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____D C:\Program Files\Synaptics
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____D C:\Program Files\Common Files\Atheros
2016-03-31 23:13 - 2016-03-31 23:48 - 00009528 _____ C:\WINDOWS\diagwrn.xml
2016-03-31 23:13 - 2016-03-31 23:48 - 00009528 _____ C:\WINDOWS\diagerr.xml
2016-03-31 23:05 - 2016-03-31 23:51 - 00000000 ____D C:\Intel
2016-03-31 23:05 - 2016-03-31 23:05 - 00000000 ____D C:\Program Files (x86)\Intel
2016-03-31 18:36 - 2016-03-31 23:47 - 00003104 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{3B3A32FF-A7F2-4DA1-B607-8465048A2111}
2016-03-31 18:36 - 2016-03-31 18:36 - 00000000 __SHD C:\Users\giuseppe\AppData\LocalLow\EmieSiteList
2016-03-31 18:36 - 2016-03-31 18:36 - 00000000 __SHD C:\Users\giuseppe\AppData\Local\EmieUserList
2016-03-31 18:36 - 2016-03-31 18:36 - 00000000 __SHD C:\Users\giuseppe\AppData\Local\EmieSiteList
2016-03-31 18:36 - 2016-03-31 18:36 - 00000000 __SHD C:\Users\giuseppe\AppData\Local\EmieBrowserModeList
2016-03-31 18:35 - 2016-04-01 00:13 - 00000000 ___RD C:\Users\giuseppe\OneDrive
2016-03-31 18:35 - 2016-03-31 18:35 - 00000000 ____D C:\Users\giuseppe\AppData\Local\GWX
2016-03-31 18:34 - 2016-03-31 23:47 - 00002810 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2385086943-1329575824-235044043-1001
2016-03-31 18:28 - 2016-04-01 00:16 - 00000000 ____D C:\Users\giuseppe\AppData\Local\PackageStaging
2016-03-31 18:27 - 2016-04-01 00:21 - 00000000 ____D C:\Users\giuseppe\AppData\Local\Packages
2016-03-31 18:27 - 2016-03-31 18:27 - 00000000 ____D C:\Users\giuseppe\AppData\Roaming\Adobe
2016-03-31 18:27 - 2016-03-31 18:27 - 00000000 ____D C:\Users\giuseppe\AppData\Local\VirtualStore
2016-03-31 18:24 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Public\Documents\Video
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Public\Documents\Musica
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Public\Documents\Immagini
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Risorse di stampa
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Risorse di rete
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Recenti
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Modelli
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Menu Avvio
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Impostazioni locali
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Video
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Musica
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Immagini
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Documenti
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Dati applicazioni
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programmi
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Dati applicazioni
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Cronologia
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Programmi
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Modelli
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programmi
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Menu Avvio
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Documenti
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Dati applicazioni
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Program Files\File comuni

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-01 00:34 - 2015-10-30 09:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-04-01 00:30 - 2016-02-13 15:04 - 00000000 ____D C:\Program Files\Windows Journal
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 __RSD C:\WINDOWS\Media
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-04-01 00:30 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-04-01 00:30 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-04-01 00:21 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-04-01 00:19 - 2016-02-13 14:50 - 00777400 _____ C:\WINDOWS\system32\perfh010.dat
2016-04-01 00:19 - 2016-02-13 14:50 - 00144220 _____ C:\WINDOWS\system32\perfc010.dat
2016-04-01 00:19 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-04-01 00:18 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-04-01 00:12 - 2016-02-13 15:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-04-01 00:11 - 2015-10-30 08:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-04-01 00:06 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-31 23:51 - 2016-02-13 15:24 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-03-31 23:51 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-03-31 23:49 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-03-31 23:49 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows NT
2016-03-31 23:48 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Registration
2016-03-31 23:45 - 2015-10-30 09:24 - 00000000 __RHD C:\Users\Public\Libraries
2016-03-31 23:43 - 2016-02-13 06:14 - 00205352 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-31 23:43 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-03-31 23:43 - 2013-08-22 15:36 - 00000000 ____D C:\Users\Default.migrated
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\et-EE
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-03-31 23:42 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2016-03-31 23:42 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2016-03-31 23:41 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\InputMethod
2016-03-31 23:41 - 2014-11-21 12:58 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Embedded Lockdown Manager
2016-03-31 23:41 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2016-03-31 23:41 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\ADFS
2016-03-31 23:39 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-03-31 23:13 - 2016-02-13 16:32 - 00000000 ___HD C:\$WINDOWS.~BT
2016-03-08 09:12 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-03-08 09:12 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-03-31 23:34

==================== End of FRST.txt ============================

di **Stecco** » 06/04/16 18:33

Una mano??

di **nikita75** » 06/04/16 19:03

di **nikita75** » 07/04/16 18:16

scarica sul desktop ed esegui ADW Cleaner > a fine scansione Clean > riavvia pc e posta il log sul forum ( AdwCleaner log)

https://toolslib.net/downloads/finish/1/

Scarica Junkware Removal Tool sul desktop > disattiva il tuo antivirus > poi tasto destro sul file > doppio click > eseguilo come AMMINISTRATORE e aspetta il termine della scansione .
Posta il file jrt.txt sul forum

http://thisisudax.org/downloads/JRT.exe

Esegui una nuova scansione con Run Farbar Recovery Scan Tool e posta il log sul forum

AdwCleaner log
JRT.txt
Frst.txt

di **nikita75** » 09/04/16 10:02

nikita75 ha scritto:scarica sul desktop ed esegui ADW Cleaner > a fine scansione Clean > riavvia pc e posta il log sul forum ( AdwCleaner log)

https://toolslib.net/downloads/finish/1/

Scarica Junkware Removal Tool sul desktop > disattiva il tuo antivirus > poi tasto destro sul file > doppio click > eseguilo come AMMINISTRATORE e aspetta il termine della scansione .
Posta il file jrt.txt sul forum

http://thisisudax.org/downloads/JRT.exe

Esegui una nuova scansione con Run Farbar Recovery Scan Tool e posta il log sul forum

AdwCleaner log
JRT.txt
Frst.txt

steeeecco dove seiii??

di **fax71ita** » 09/04/16 11:01

Il malware lo ha fagocitato. :0))

di **Stecco** » 11/04/16 15:49

Scusate per la mia assenza...
mi metto a fare tutto ora... spero di risolverlo anche perchè è una cosa alquanto fastidiosa...

di **Stecco** » 11/04/16 15:57

# AdwCleaner v5.110 - File di log creato 11/04/2016 a 16:49:35
# Aggiornato 10/04/2016 da Xplode
# Database : 2016-04-11.1 [Server]
# Sistema operativo : Windows 10 Home (X64)
# Nome utente : giuseppe - PC-GIUSEPPE
# Eseguendo da : C:\Users\giuseppe\Desktop\AdwCleaner.exe
# Opzione : Analizza
# Supporto : http://toolslib.net/forum

***** [ Servizi ] *****

***** [ Cartelle ] *****

***** [ File ] *****

***** [ DLL ] *****

***** [ Collegamenti ] *****

***** [ Attività pianificate ] *****

***** [ Registro ] *****

***** [ Browser web ] *****

*************************

C:\AdwCleaner\AdwCleaner[S1].txt - [773 byte] - [11/04/2016 16:46:07]
C:\AdwCleaner\AdwCleaner[S2].txt - [694 byte] - [11/04/2016 16:49:35]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [765 byte] ##########

di **Stecco** » 11/04/16 16:02

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.4 (03.14.2016)
Operating System: Windows 10 Home x64
Ran by giuseppe (Administrator) on 11/04/2016 at 16:54:12,35
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 0

Registry: 0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 11/04/2016 at 16:55:40,49
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

di **Stecco** » 11/04/16 16:07

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:10-04-2016 01
Ran by giuseppe (administrator) on PC-GIUSEPPE (11-04-2016 16:59:00)
Running from C:\Users\giuseppe\Desktop
Loaded Profiles: giuseppe (Available Profiles: giuseppe)
Platform: Windows 10 Home Version 1511 (X64) Language: Italiano (Italia)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-06-04] (Synaptics Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595992 2016-03-20] (Oracle Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25577864 2016-03-12] (Dropbox, Inc.)
HKU\S-1-5-21-2385086943-1329575824-235044043-1001\...\RunOnce: [Uninstall C:\Users\giuseppe\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\giuseppe\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-03-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll [2016-03-12] (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 80.243.191.66 8.8.8.8
Tcpip\..\Interfaces\{8d703b40-e03a-4177-a119-169979000cd8}: [DhcpNameServer] 10.0.1.254 192.168.1.60 194.243.154.62 195.31.190.31
Tcpip\..\Interfaces\{93c0944d-4b56-4d6e-9b5a-0914968e3920}: [DhcpNameServer] 80.243.191.66 8.8.8.8

Internet Explorer:
==================
HKU\S-1-5-21-2385086943-1329575824-235044043-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.it/
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_77\bin\ssv.dll [2016-04-06] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-04-06] (Oracle Corporation)

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-2385086943-1329575824-235044043-1001 -> hxxp://www.google.it/

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-04-06] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-04-06] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-11] (Google Inc.)

Chrome:
=======
CHR Profile: C:\Users\giuseppe\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Presentazioni Google) - C:\Users\giuseppe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-11]
CHR Extension: (Documenti Google) - C:\Users\giuseppe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-11]
CHR Extension: (Google Drive) - C:\Users\giuseppe\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-11]
CHR Extension: (YouTube) - C:\Users\giuseppe\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-11]
CHR Extension: (Fogli Google) - C:\Users\giuseppe\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-11]
CHR Extension: (Google Documenti offline) - C:\Users\giuseppe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-11]
CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\giuseppe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-11]
CHR Extension: (Gmail) - C:\Users\giuseppe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-11]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-04-07] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-04-07] (Dropbox, Inc.)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [370064 2015-09-30] (Intel Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [249032 2015-06-04] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-12-19] (Intel Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-04] (Synaptics Incorporated)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-11 16:59 - 2016-04-11 16:59 - 00010412 _____ C:\Users\giuseppe\Desktop\FRST.txt
2016-04-11 16:58 - 2016-04-11 16:58 - 02375168 _____ (Farbar) C:\Users\giuseppe\Desktop\FRST64.exe
2016-04-11 16:55 - 2016-04-11 16:55 - 00000550 _____ C:\Users\giuseppe\Desktop\JRT.txt
2016-04-11 16:54 - 2016-04-11 16:54 - 00000845 _____ C:\Users\giuseppe\Desktop\AdwCleaner[S2].txt
2016-04-11 16:52 - 2016-04-11 16:54 - 01610352 _____ (Malwarebytes) C:\Users\giuseppe\Desktop\JRT.exe
2016-04-11 16:45 - 2016-04-11 16:49 - 00000000 ____D C:\AdwCleaner
2016-04-11 16:45 - 2016-04-11 16:45 - 03465280 _____ C:\Users\giuseppe\Desktop\AdwCleaner.exe
2016-04-11 16:45 - 2016-04-11 16:45 - 00000000 _____ C:\Users\giuseppe\Desktop\Nuovo documento di testo (2).txt
2016-04-11 08:39 - 2016-04-11 08:39 - 00000176 _____ C:\Users\giuseppe\Desktop\CancellaUltimo.txt
2016-04-11 08:17 - 2016-04-11 08:18 - 00000612 _____ C:\Users\giuseppe\Desktop\Nuovo documento di testo.txt
2016-04-11 08:17 - 2016-04-11 08:17 - 00002342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-11 08:17 - 2016-04-11 08:17 - 00002330 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-04-11 08:16 - 2016-04-11 11:21 - 00001178 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-11 08:16 - 2016-04-11 09:57 - 00000000 ____D C:\Users\giuseppe\AppData\Local\Google
2016-04-11 08:16 - 2016-04-11 08:21 - 00001174 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-11 08:16 - 2016-04-11 08:17 - 00000000 ____D C:\Program Files (x86)\Google
2016-04-11 08:16 - 2016-04-11 08:16 - 00004236 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-04-11 08:16 - 2016-04-11 08:16 - 00004004 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-04-10 15:22 - 2016-04-10 15:22 - 00000000 ___HD C:\OneDriveTemp
2016-04-10 11:31 - 2016-04-10 11:32 - 00000000 ____D C:\Users\giuseppe\Desktop\FIP
2016-04-10 11:31 - 2016-04-10 11:31 - 00000000 ____D C:\Users\giuseppe\Desktop\Vacca
2016-04-10 11:31 - 2016-04-10 11:31 - 00000000 ____D C:\Users\giuseppe\Desktop\Musica isa
2016-04-10 11:30 - 2016-04-10 11:30 - 00000000 ____D C:\Users\giuseppe\Desktop\JavaScript
2016-04-07 09:30 - 2016-04-10 15:20 - 00000000 ___RD C:\Users\giuseppe\Desktop\Dropbox
2016-04-07 09:25 - 2016-04-07 09:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-04-07 09:23 - 2016-04-07 09:23 - 00000000 ____D C:\Users\giuseppe\AppData\Roaming\Dropbox
2016-04-07 09:14 - 2016-04-11 11:19 - 00001136 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2016-04-07 09:14 - 2016-04-11 09:19 - 00001132 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2016-04-07 09:14 - 2016-04-07 09:14 - 00004196 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA
2016-04-07 09:14 - 2016-04-07 09:14 - 00003964 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore
2016-04-07 09:13 - 2016-04-10 15:20 - 00000000 ____D C:\Users\giuseppe\AppData\Local\Dropbox
2016-04-07 09:13 - 2016-04-07 09:25 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-04-07 09:13 - 2016-04-07 09:13 - 00000000 ____D C:\ProgramData\Dropbox
2016-04-06 16:34 - 2016-04-06 18:42 - 00000000 ____D C:\Users\giuseppe\AppData\Roaming\Notepad++
2016-04-06 16:34 - 2016-04-06 16:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2016-04-06 16:34 - 2016-04-06 16:34 - 00000000 ____D C:\Program Files (x86)\Notepad++
2016-04-06 16:29 - 2016-04-06 16:29 - 00000000 ____D C:\Users\giuseppe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Eclipse
2016-04-06 16:17 - 2016-04-06 16:17 - 00000000 ____D C:\Users\giuseppe\eclipse
2016-04-06 16:12 - 2016-04-06 16:19 - 00000000 ____D C:\Users\giuseppe\.p2
2016-04-06 16:12 - 2016-04-06 16:17 - 00000000 ____D C:\Users\giuseppe\.eclipse
2016-04-06 16:10 - 2016-04-06 16:12 - 00000000 ____D C:\Users\giuseppe\.oracle_jre_usage
2016-04-06 16:10 - 2016-04-06 16:10 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2016-04-06 16:10 - 2016-04-06 16:10 - 00000000 ____D C:\Users\giuseppe\AppData\Roaming\Sun
2016-04-06 16:10 - 2016-04-06 16:10 - 00000000 ____D C:\Users\giuseppe\AppData\LocalLow\Sun
2016-04-06 16:10 - 2016-04-06 16:10 - 00000000 ____D C:\ProgramData\Oracle
2016-04-06 16:10 - 2016-04-06 16:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-04-06 16:01 - 2016-04-06 16:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2016-04-06 16:01 - 2016-04-06 16:10 - 00000000 ____D C:\Program Files\Java
2016-04-06 16:00 - 2016-04-06 16:00 - 00000000 ____D C:\Users\giuseppe\AppData\LocalLow\Oracle
2016-04-05 23:05 - 2016-04-05 23:05 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-04-02 13:22 - 2016-04-11 10:13 - 00000000 ____D C:\Users\giuseppe\Desktop\Scuola
2016-04-02 12:05 - 2016-04-02 12:05 - 00000000 ____D C:\Users\giuseppe\AppData\Roaming\Macromedia
2016-04-02 12:03 - 2016-04-02 12:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-04-02 12:01 - 2016-04-10 11:34 - 00000000 ____D C:\Users\giuseppe\Documents\GIUSEPPE
2016-04-02 12:00 - 2016-04-02 12:00 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-04-01 00:34 - 2016-03-31 23:51 - 00000000 ___DC C:\WINDOWS\Panther
2016-04-01 00:30 - 2016-04-01 00:30 - 00000000 ____D C:\Windows.old
2016-04-01 00:29 - 2016-04-01 00:29 - 24600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 22376960 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 12586496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 09919488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 08705672 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 07533568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 06972416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 06952088 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 06740992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 06607080 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 05661696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 05321728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 04827136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 03425792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02793472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02654872 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02635264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02581504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02273792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02152288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 02061312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01997152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01859960 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01847808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 01831936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01818696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01799168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01613664 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01497088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01390592 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-04-01 00:29 - 2016-04-01 00:29 - 01224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01098752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-04-01 00:29 - 2016-04-01 00:29 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00997376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00990720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-04-01 00:29 - 2016-04-01 00:29 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00882720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00848168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00791744 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00779384 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00769536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00652392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00640472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00625000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00572272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00563552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00538736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00534368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-04-01 00:29 - 2016-04-01 00:29 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00523752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-04-01 00:29 - 2016-04-01 00:29 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00476728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll

di **Stecco** » 11/04/16 16:08

2016-04-01 00:29 - 2016-04-01 00:29 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00450912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00430944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00420928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-04-01 00:29 - 2016-04-01 00:29 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00394080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00389992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00376536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00358752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00294752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00287712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cemapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00220064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cemapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00187744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwbase.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00146272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00141560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00127840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2016-04-01 00:29 - 2016-04-01 00:29 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-04-01 00:29 - 2016-04-01 00:29 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PimIndexMaintenanceClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
2016-04-01 00:23 - 2016-04-01 00:23 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-04-01 00:22 - 2016-04-11 16:59 - 00000000 ____D C:\FRST
2016-04-01 00:22 - 2016-04-01 00:22 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-04-01 00:22 - 2016-04-01 00:22 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-04-01 00:22 - 2016-04-01 00:22 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-04-01 00:22 - 2016-04-01 00:22 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-04-01 00:06 - 2015-12-09 05:39 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-04-01 00:05 - 2016-04-01 00:06 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-04-01 00:05 - 2016-04-01 00:05 - 143659408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-31 23:59 - 2016-03-31 23:59 - 00001949 _____ C:\Users\giuseppe\Desktop\Questo PC.lnk
2016-03-31 23:58 - 2016-04-01 00:08 - 00000000 ____D C:\Users\giuseppe\AppData\Local\MicrosoftEdge
2016-03-31 23:56 - 2016-03-31 23:56 - 00000000 ____D C:\Users\giuseppe\AppData\Local\NetworkTiles
2016-03-31 23:55 - 2016-04-02 12:00 - 00002459 _____ C:\Users\giuseppe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-03-31 23:54 - 2016-03-31 23:54 - 00000000 ____D C:\Users\giuseppe\AppData\Local\ActiveSync
2016-03-31 23:53 - 2016-03-31 23:53 - 00000000 ____D C:\Users\giuseppe\AppData\Local\Publishers
2016-03-31 23:52 - 2016-04-06 15:27 - 00000000 ____D C:\Users\giuseppe\AppData\Local\Comms
2016-03-31 23:51 - 2016-04-11 16:43 - 01743930 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-31 23:51 - 2016-04-10 11:28 - 00000000 __SHD C:\Users\giuseppe\IntelGraphicsProfiles
2016-03-31 23:51 - 2016-03-31 23:51 - 00000020 ___SH C:\Users\giuseppe\ntuser.ini
2016-03-31 23:51 - 2016-03-31 23:51 - 00000000 ____D C:\Users\giuseppe\AppData\Roaming\Synaptics
2016-03-31 23:51 - 2016-03-31 23:51 - 00000000 ____D C:\Users\giuseppe\AppData\Local\TileDataLayer
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Risorse di stampa
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Risorse di rete
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Recenti
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Modelli
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Menu Avvio
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Impostazioni locali
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Documents\Video
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Documents\Musica
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Documents\Immagini
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Documenti
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Dati applicazioni
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programmi
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dati applicazioni
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\AppData\Local\Cronologia
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\Documents\Video
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\Documents\Musica
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\Documents\Immagini
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programmi
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dati applicazioni
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Cronologia
2016-03-31 23:47 - 2016-03-31 23:47 - 00022928 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-03-31 23:42 - 2016-03-31 23:42 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-03-31 23:41 - 2016-03-31 23:41 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2016-03-31 23:40 - 2016-04-06 16:17 - 00000000 ____D C:\Users\giuseppe
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Risorse di stampa
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Risorse di rete
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Recenti
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Modelli
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Menu Avvio
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Impostazioni locali
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Documents\Video
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Documents\Musica
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Documents\Immagini
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Documenti
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Dati applicazioni
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\AppData\Roaming\Microsoft\Windows\Start Menu\Programmi
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\AppData\Local\Dati applicazioni
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\AppData\Local\Cronologia
2016-03-31 23:37 - 2016-04-10 11:28 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-03-31 23:37 - 2016-03-31 23:37 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2016-03-31 23:37 - 2016-03-31 23:37 - 00000000 ____D C:\Program Files\Intel
2016-03-31 23:37 - 2015-09-30 20:39 - 00105472 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2016-03-31 23:37 - 2015-09-30 20:39 - 00099856 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____D C:\Program Files\Synaptics
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____D C:\Program Files\Common Files\Atheros
2016-03-31 23:13 - 2016-03-31 23:48 - 00009528 _____ C:\WINDOWS\diagwrn.xml
2016-03-31 23:13 - 2016-03-31 23:48 - 00009528 _____ C:\WINDOWS\diagerr.xml
2016-03-31 23:05 - 2016-03-31 23:51 - 00000000 ____D C:\Intel
2016-03-31 23:05 - 2016-03-31 23:05 - 00000000 ____D C:\Program Files (x86)\Intel
2016-03-31 18:36 - 2016-04-11 16:43 - 00004184 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{3B3A32FF-A7F2-4DA1-B607-8465048A2111}
2016-03-31 18:36 - 2016-03-31 18:36 - 00000000 __SHD C:\Users\giuseppe\AppData\LocalLow\EmieSiteList
2016-03-31 18:36 - 2016-03-31 18:36 - 00000000 __SHD C:\Users\giuseppe\AppData\Local\EmieUserList
2016-03-31 18:36 - 2016-03-31 18:36 - 00000000 __SHD C:\Users\giuseppe\AppData\Local\EmieSiteList
2016-03-31 18:36 - 2016-03-31 18:36 - 00000000 __SHD C:\Users\giuseppe\AppData\Local\EmieBrowserModeList
2016-03-31 18:35 - 2016-04-11 16:54 - 00000000 ___RD C:\Users\giuseppe\OneDrive
2016-03-31 18:35 - 2016-03-31 18:35 - 00000000 ____D C:\Users\giuseppe\AppData\Local\GWX
2016-03-31 18:34 - 2016-03-31 23:47 - 00002810 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2385086943-1329575824-235044043-1001
2016-03-31 18:28 - 2016-04-01 00:16 - 00000000 ____D C:\Users\giuseppe\AppData\Local\PackageStaging
2016-03-31 18:27 - 2016-04-07 09:29 - 00000000 ____D C:\Users\giuseppe\AppData\Local\VirtualStore
2016-03-31 18:27 - 2016-04-01 00:21 - 00000000 ____D C:\Users\giuseppe\AppData\Local\Packages
2016-03-31 18:27 - 2016-03-31 18:27 - 00000000 ____D C:\Users\giuseppe\AppData\Roaming\Adobe
2016-03-31 18:24 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Public\Documents\Video
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Public\Documents\Musica
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Public\Documents\Immagini
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Risorse di stampa
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Risorse di rete
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Recenti
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Modelli
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Menu Avvio
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Impostazioni locali
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Video
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Musica
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Immagini
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Documenti
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Dati applicazioni
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programmi
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Dati applicazioni
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Cronologia
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Programmi
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Modelli
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programmi
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Menu Avvio
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Documenti
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Dati applicazioni
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Program Files\File comuni

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-11 16:43 - 2016-02-13 14:50 - 00777400 _____ C:\WINDOWS\system32\perfh010.dat
2016-04-11 16:43 - 2016-02-13 14:50 - 00144220 _____ C:\WINDOWS\system32\perfc010.dat
2016-04-11 16:43 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-04-11 16:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-04-10 15:27 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-04-08 12:02 - 2016-02-13 15:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-04-08 12:01 - 2015-10-30 08:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-04-07 23:49 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-04-02 12:02 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\appcompat
2016-04-01 00:34 - 2015-10-30 09:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-04-01 00:31 - 2015-07-11 05:00 - 00464144 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\IntcDAud.sys
2016-04-01 00:30 - 2016-02-13 15:04 - 00000000 ____D C:\Program Files\Windows Journal
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 __RSD C:\WINDOWS\Media
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-04-01 00:30 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-04-01 00:30 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-03-31 23:51 - 2016-02-13 15:24 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-03-31 23:51 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-03-31 23:49 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-03-31 23:49 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows NT
2016-03-31 23:48 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Registration
2016-03-31 23:45 - 2015-10-30 09:24 - 00000000 __RHD C:\Users\Public\Libraries
2016-03-31 23:43 - 2016-02-13 06:14 - 00205352 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-31 23:43 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-03-31 23:43 - 2013-08-22 15:36 - 00000000 ____D C:\Users\Default.migrated
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\et-EE
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-03-31 23:42 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2016-03-31 23:42 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2016-03-31 23:41 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\InputMethod
2016-03-31 23:41 - 2014-11-21 12:58 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Embedded Lockdown Manager
2016-03-31 23:41 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2016-03-31 23:41 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\ADFS
2016-03-31 23:39 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-03-31 23:13 - 2016-02-13 16:32 - 00000000 ___HD C:\$WINDOWS.~BT

Some files in TEMP:
====================
C:\Users\giuseppe\AppData\Local\Temp\xmlUpdater.exe

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-03-31 23:34

==================== End of FRST.txt ============================

di **shel** » 11/04/16 19:49

ora fai in questo modo: start esegui e scrivi cmd poi dai ok sulla tastiera,nella finestra dos fai copia incolla di questo comando = > nslookup dai ok e scrivi il risultato ottenuto

di **Stecco** » 11/04/16 22:10

mi da solamente un address e mi dice non è in grado di trovare nslookup

di **shel** » 11/04/16 22:15

prova ad inserire questo comando, stessa operazione di prima

reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters

copia il risultato

di **Stecco** » 12/04/16 18:09

non mi dal alcun risultato

di **shel** » 12/04/16 19:27

non mi dal alcun risultato

il risultato lo trovi nella finestra dos, controlla comunque i dns che hai impostato nel router e scrivili, dovrebbe essere infetto

di **nikita75** » 12/04/16 20:18

non è il tuo pc ad essere infettato ma il tuo modem router. E' stato reindirizzato a un server DNS malevolo e quindi devi resettarlo .

Effettua questa correzione :
esegui Farbar Recovery Scan Tool

Aprire il blocco note. Copiare il contenuto della casella di codice qui sotto e incollalo in Blocco note.

salva i file come Fixlist.txt nella stessa cartella FRST - NOTA: E 'importante che entrambi i file, FRST e Fixlist.txt sono nella stessa posizione o la correzione non funziona
esegui FRST64 quindi fare clic su Fix solo una volta e attendi :!:

si creerà un file di registro sul desktop, (Fixlog.txt); invia la risposta nel forum

Codice: Seleziona tutto: Tcpip\Parameters: [DhcpNameServer] 80.243.191.66 8.8.8.8 Tcpip\..\Interfaces\{93c0944d-4b56-4d6e-9b5a-0914968e3920}: [DhcpNameServer] 80.243.191.66 8.8.8.8 Task: {2946BD54-2650-4940-BDB7-FB946ACD73B8} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION Task: {719F320B-0633-4555-830A-F82698B111BA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION Task: {B5FC3BE6-6391-4E9A-9B76-8375E5C223AF} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION Task: {E03C8786-4C3A-41C4-AEF3-F909A1BA0073} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION Task: {F27862CA-4739-48E5-BF23-F969A330EA7F} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION ATTENTION: System Restore is disabled CreateRestorePoint: EmptyTemp:

resetta il tuo modem router infostrada

premi il tastino sul retro per 10 secondi e poi reimposta i dns di infostrada -
cambia la password di default
http://www.aranzulla.it/come-configurar ... 23795.html

---------------------------------------------------------------------------------------------------------

Adesso ripuliamo il DNS

e adesso ripuliamo i DNS sul computer:devi accedere al prompt dei comandi

tieni premuto il tasto R di Windows
apparirà una finestra "run"
Digita cmd e premere Invio
la finestra nera del prompt si aprirà
inserisci il seguente testo in quella finestra e quindi premere Invio:
ipconfig / flushdns

adesso testiamo il modem router

aprire il Blocco note e copia / incolla l'intero contenuto del codebox qui sotto nel blocco note:

Codice: Seleziona tutto: @echo off >Log1.txt ( ipconfig /all nslookup google.com nslookup yahoo.com ping -n 2 google.com ping -n 2 yahoo.com route print ) start Log1.txt del %0

salvare questo file come router.bat

scegliere di salvare come - Tutti i file e salvalo sul desktop- -
quindi chiudere il file di blocco note.
poi doppio click su router.bat per eseguirlo.

si aprirà di nuovo il blocco note >>> invia di nuovo i risultati .

Incudi il Fixlog.txt che verrà generato e fammi sapere se il problema è stato risolto.

Aiuto Malware

Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Re: Aiuto Malware

Topic correlati a "Aiuto Malware":

Chi c’è in linea