Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Running slow, memory always >80%, fan running nonstop

Started by ndskykng , Apr 21 2017 08:59 PM

Page 3 of 8
1
2
3
4
5

Please log in to reply

#31
RKinner

Posted 25 April 2017 - 11:41 AM

Malware Expert

Expert
24,625 posts

That seems to have made a big difference. Oddly enough we still have the same error message:

~FontCache-FontFace.dat C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-FontFace.dat (An error occurred while reading or writing to a file)

~FontCache-S-1-5-21-1530735055-4101794070-4272422381-1001.dat C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-S-1-5-21-1530735055-4101794070-4272422381-1001.dat (An error occurred while reading or writing to a file)

~FontCache-System.dat C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-System.dat (An error occurred while reading or writing to a file)

Perhaps we should check the RAM?

http://www.thewindow...ol-in-windows-7

#32
ndskykng

Posted 25 April 2017 - 04:44 PM

Member

Topic Starter
Member
166 posts

Ran it, as far as I know it didn't find anything because it automatically rebooted and there was no popup or log file that came up.

Process CPU Private Bytes Working Set PID Description Company Name Verified Signer

System Idle Process 54.82 0 K 4 K 0

explorer.exe 14.52 80,124 K 86,524 K 3396 Windows Explorer Microsoft Corporation (Verified) Microsoft Windows

procexp64.exe 6.23 53,760 K 42,364 K 6812 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation

chrome.exe 5.23 97,924 K 385,472 K 9952 Google Chrome Google Inc. (Verified) Google Inc

dwm.exe 3.04 48,032 K 32,704 K 996

Interrupts 3.12 0 K 0 K n/a Hardware Interrupts and DPCs

chrome.exe 3.38 137,828 K 141,872 K 7960 Google Chrome Google Inc. (Verified) Google Inc

chrome.exe 3.04 116,448 K 91,024 K 7608 Google Chrome Google Inc. (Verified) Google Inc

MsMpEng.exe 0.26 147,588 K 74,884 K 2444 Antimalware Service Executable Microsoft Corporation (Verified) Microsoft Corporation

System 1.16 128 K 20 K 4

HPNetworkCommunicatorCom.exe 0.04 3,116 K 12,044 K 1628 HPNetworkCommunicatorCom Hewlett-Packard Development Company, LP (Verified) Hewlett Packard

Taskmgr.exe 2.15 14,788 K 35,796 K 9860

csrss.exe 0.57 2,364 K 7,308 K 564

MotionControl.exe 0.36 23,036 K 9,328 K 7236 (Verified) Lenovo (Beijing) Limited

TabTip.exe 0.34 17,976 K 30,396 K 5356

svchost.exe 0.18 8,184 K 12,752 K 1176 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 0.28 5,476 K 6,924 K 876 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

googledrivesync.exe 0.34 78,836 K 46,376 K 7252 Google Drive Google (Verified) Google Inc

svchost.exe < 0.01 10,144 K 11,864 K 748 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

ScanToPCActivationApp.exe 0.03 3,512 K 6,204 K 6388 ScanToPCActivationApp Hewlett-Packard Development Company, LP (Verified) Hewlett Packard

NisSrv.exe 0.15 17,744 K 12,216 K 3264 Microsoft Network Realtime Inspection Service Microsoft Corporation (Verified) Microsoft Corporation

audiodg.exe 0.18 8,304 K 15,424 K 2588

chrome.exe 0.06 154,880 K 168,696 K 8272 Google Chrome Google Inc. (Verified) Google Inc

chrome.exe 0.02 188,748 K 99,060 K 9616 Google Chrome Google Inc. (Verified) Google Inc

WUDFHost.exe 0.06 2,632 K 3,468 K 1972

excel.exe 0.04 67,904 K 87,672 K 6920 Microsoft Excel Microsoft Corporation (Verified) Microsoft Corporation

chrome.exe 0.03 88,660 K 85,696 K 8008 Google Chrome Google Inc. (Verified) Google Inc

svchost.exe 0.18 15,272 K 18,804 K 1192 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

Lenovo Transition.exe 0.03 11,212 K 13,040 K 3880 Lenovo (Verified) Lenovo (Beijing) Limited

svchost.exe 0.02 5,020 K 4,516 K 1708 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

SearchIndexer.exe 0.03 34,268 K 18,792 K 4540 Microsoft Windows Search Indexer Microsoft Corporation (Verified) Microsoft Windows

lsass.exe < 0.01 6,164 K 6,952 K 648 Local Security Authority Process Microsoft Corporation (Verified) Microsoft Windows Publisher

fmapp.exe 0.02 912 K 756 K 5888 FMAPP Application (Verified) Fortemedia Inc

svchost.exe < 0.01 13,960 K 10,728 K 404 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

dasHost.exe 3,940 K 3,108 K 436

chrome.exe < 0.01 77,588 K 101,152 K 10192 Google Chrome Google Inc. (Verified) Google Inc

svchost.exe < 0.01 27,260 K 25,300 K 300 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

iPodService.exe < 0.01 2,024 K 1,652 K 6620 iPodService Module (64-bit) Apple Inc. (Verified) Apple Inc.

svchost.exe 0.01 21,888 K 19,168 K 1136 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

csrss.exe < 0.01 1,412 K 1,444 K 444

taskhostw.exe 7,756 K 12,064 K 376 Host Process for Windows Tasks Microsoft Corporation (Verified) Microsoft Windows

svchost.exe < 0.01 3,700 K 4,280 K 1456 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 8,684 K 13,092 K 2252 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

HPNetworkCommunicatorCom.exe 0.01 3,120 K 3,504 K 6968 HPNetworkCommunicatorCom Hewlett-Packard Development Company, LP (Verified) Hewlett Packard

concentr.exe < 0.01 1,892 K 2,084 K 7464 Citrix online plug-in Connection Center Citrix Systems, Inc. (Verified) Citrix Systems

RuntimeBroker.exe < 0.01 20,884 K 44,648 K 2356 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

SynTPEnh.exe < 0.01 6,132 K 1,952 K 3540 Synaptics TouchPad 64-bit Enhancements Synaptics Incorporated (Verified) Synaptics Incorporated

notepad.exe < 0.01 3,068 K 16,556 K 6848 Notepad Microsoft Corporation (Verified) Microsoft Windows

notepad.exe < 0.01 2,640 K 12,576 K 7396 Notepad Microsoft Corporation (Verified) Microsoft Windows

svchost.exe 0.01 13,660 K 10,936 K 288 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

ScanToPCActivationApp.exe < 0.01 4,700 K 5,200 K 6904 ScanToPCActivationApp Hewlett-Packard Development Company, LP (Verified) Hewlett Packard

wfcrun32.exe < 0.01 2,768 K 3,128 K 7504 Citrix Citrix Systems, Inc. (Verified) Citrix Systems

iTunesHelper.exe < 0.01 3,668 K 1,792 K 6340 iTunesHelper Apple Inc. (Verified) Apple Inc.

Memory Compression 0.05 736 K 188,484 K 2564

spoolsv.exe < 0.01 10,224 K 8,484 K 1860 Spooler SubSystem App Microsoft Corporation (Verified) Microsoft Windows

YouCamTray.exe 2,032 K 1,672 K 7344 CyberLink YouCam Tray CyberLink Corp. (A certificate was explicitly revoked by its issuer) CyberLink Corp.

yogaserver.exe 2,004 K 1,544 K 4204 (Verified) Lenovo (Beijing) Limited

yogaserver.exe 1,928 K 1,436 K 6128 (Verified) Lenovo (Beijing) Limited

WUDFHost.exe 24,980 K 2,484 K 1492

winlogon.exe 2,304 K 3,512 K 816

wininit.exe 988 K 340 K 556

Video.UI.exe Suspended 17,028 K 27,668 K 3088 Video Application Microsoft Corporation (Verified) Microsoft Corporation

utility.exe 12,228 K 2,152 K 6224 Lenovo Battery Management Software Ver 8.0 Lenovo(beijing) Limited (Verified) Lenovo (Beijing) Limited

TabTip32.exe 1,196 K 28 K 5708

SystemSettings.exe Suspended 15,792 K 39,400 K 5984 Settings Microsoft Corporation (Verified) Microsoft Windows

SynTPHelper.exe 936 K 344 K 6136

svchost.exe 8,208 K 9,880 K 1612 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,628 K 5,892 K 1380 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe < 0.01 5,148 K 5,664 K 2344 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe < 0.01 9,504 K 13,272 K 760 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 6,840 K 11,080 K 2336 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,596 K 732 K 2720 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

smss.exe 368 K 12 K 320

SkypeHost.exe Suspended 34,748 K 96 K 5124 Microsoft Skype Microsoft Corporation (No signature was present in the subject) Microsoft Corporation

sihost.exe 6,196 K 11,612 K 656 Shell Infrastructure Host Microsoft Corporation (Verified) Microsoft Windows

ShellExperienceHost.exe Suspended 36,692 K 33,340 K 4324 Windows Shell Experience Host Microsoft Corporation (Verified) Microsoft Windows

SettingSyncHost.exe 18,708 K 14,792 K 5836 Host Process for Setting Synchronization Microsoft Corporation (Verified) Microsoft Windows

services.exe 0.01 3,176 K 4,288 K 632

SearchUI.exe Suspended 51,492 K 152 K 4752 Search and Cortana application Microsoft Corporation (Verified) Microsoft Windows

ScanToPCActivationApp.exe 3,388 K 6,108 K 6736 ScanToPCActivationApp Hewlett-Packard Development Company, LP (Verified) Hewlett Packard

procexp.exe 3,340 K 680 K 6716 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation

OneDrive.exe 8,200 K 6,408 K 6516 Microsoft OneDrive Microsoft Corporation (Verified) Microsoft Corporation

MSASCuiL.exe 3,952 K 2,620 K 6260 Windows Defender notification icon Microsoft Corporation (Verified) Microsoft Windows

Microsoft.Photos.exe Suspended 148,168 K 70,160 K 9268 (No signature was present in the subject)

integratedoffice.exe 30,732 K 7,788 K 2312 Microsoft Office Click-to-Run Microsoft Corporation (Verified) Microsoft Corporation

InputPersonalization.exe 3,400 K 18,756 K 3336 Input Personalization Server Microsoft Corporation (Verified) Microsoft Windows

hpwuschd2.exe 1,144 K 1,224 K 7632 hpwuSchd Application Hewlett-Packard (Verified) Hewlett-Packard Company

googledrivesync.exe 1,012 K 60 K 6368 Google Drive Google (Verified) Google Inc

fontdrvhost.exe 760 K 180 K 7680

Energy Management.exe 6,620 K 3,364 K 6188 Lenovo Energy Management Software 8.0 Lenovo (Beijing) Limited (Verified) Lenovo (Beijing) Limited

chrome.exe 3,332 K 2,040 K 8024 Google Chrome Google Inc. (Verified) Google Inc

chrome.exe 3,000 K 1,356 K 8076 Google Chrome Google Inc. (Verified) Google Inc

CAudioFilterAgent64.exe 2,060 K 3,040 K 5236 Conexant High Definition Audio Filter Agent Conexant Systems, Inc. (Verified) Conexant Systems

ApplicationFrameHost.exe 17,932 K 28,220 K 4388 Application Frame Host Microsoft Corporation (Verified) Microsoft Windows

Process: explorer.exe Pid: 3396

Name Description Company Name Path Verified Signer

{1F0DE82D-EAD7-4CF3-BA10-2C95268C2191}.2.ver0x0000000000000002.db C:\ProgramData\Microsoft\Windows\Caches\{1F0DE82D-EAD7-4CF3-BA10-2C95268C2191}.2.ver0x0000000000000002.db (The form specified for the subject is not one supported or known by the specified trust provider)

{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000040.db C:\Users\Michael\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000040.db (The form specified for the subject is not one supported or known by the specified trust provider)

{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000a.db C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000a.db (The form specified for the subject is not one supported or known by the specified trust provider)

{7EAA1722-5D6E-40F6-B198-E1C93179EFD3}.2.ver0x0000000000000002.db C:\ProgramData\Microsoft\Windows\Caches\{7EAA1722-5D6E-40F6-B198-E1C93179EFD3}.2.ver0x0000000000000002.db (The form specified for the subject is not one supported or known by the specified trust provider)

{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db C:\Users\Michael\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db (The form specified for the subject is not one supported or known by the specified trust provider)

{C1A6860D-00CB-4975-8597-4DC917ACD481}.2.ver0x0000000000000002.db C:\ProgramData\Microsoft\Windows\Caches\{C1A6860D-00CB-4975-8597-4DC917ACD481}.2.ver0x0000000000000002.db (The form specified for the subject is not one supported or known by the specified trust provider)

{D938C424-1F8D-4C19-BCE7-1A4F5732153A}.2.ver0x0000000000000003.db C:\ProgramData\Microsoft\Windows\Caches\{D938C424-1F8D-4C19-BCE7-1A4F5732153A}.2.ver0x0000000000000003.db (The form specified for the subject is not one supported or known by the specified trust provider)

{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db (The form specified for the subject is not one supported or known by the specified trust provider)

~FontCache-FontFace.dat C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-FontFace.dat (An error occurred while reading or writing to a file)

~FontCache-S-1-5-21-1530735055-4101794070-4272422381-1001.dat C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-S-1-5-21-1530735055-4101794070-4272422381-1001.dat (An error occurred while reading or writing to a file)

~FontCache-System.dat C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-System.dat (An error occurred while reading or writing to a file)

3957446711.pri C:\Windows\rescache\_merged\502829797\3957446711.pri (The form specified for the subject is not one supported or known by the specified trust provider)

AboveLockAppHost.dll AboveLockAppHost Microsoft Corporation C:\Windows\System32\AboveLockAppHost.dll (Verified) Microsoft Windows

ActionCenter.dll Security and Maintenance Microsoft Corporation C:\Windows\System32\ActionCenter.dll (Verified) Microsoft Windows

actxprxy.dll ActiveX Interface Marshaling Library Microsoft Corporation C:\Windows\System32\actxprxy.dll (Verified) Microsoft Windows

advapi32.dll Advanced Windows 32 Base API Microsoft Corporation C:\Windows\System32\advapi32.dll (Verified) Microsoft Windows

apphelp.dll Application Compatibility Client Library Microsoft Corporation C:\Windows\System32\apphelp.dll (Verified) Microsoft Windows

ApplicationFrame.dll Application Frame Microsoft Corporation C:\Windows\System32\ApplicationFrame.dll (Verified) Microsoft Windows

ApplicationFrame.dll.mui Application Frame Microsoft Corporation C:\Windows\System32\en-US\ApplicationFrame.dll.mui (Verified) Microsoft Windows

atl.dll ATL Module for Windows XP (Unicode) Microsoft Corporation C:\Windows\System32\atl.dll (Verified) Microsoft Windows

atl100.dll ATL Module for Windows Microsoft Corporation C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\atl100.dll (Verified) Microsoft Corporation

atlthunk.dll atlthunk.dll Microsoft Corporation C:\Windows\System32\atlthunk.dll (Verified) Microsoft Windows

AudioSes.dll Audio Session Microsoft Corporation C:\Windows\System32\AudioSes.dll (Verified) Microsoft Windows

batmeter.dll Battery Meter Helper DLL Microsoft Corporation C:\Windows\System32\batmeter.dll (Verified) Microsoft Windows

BCP47Langs.dll BCP47 Language Classes Microsoft Corporation C:\Windows\System32\BCP47Langs.dll (Verified) Microsoft Windows

bcrypt.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\System32\bcrypt.dll (Verified) Microsoft Windows

bcryptprimitives.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\System32\bcryptprimitives.dll (Verified) Microsoft Windows

BluetoothApis.dll Bluetooth Usermode Api host Microsoft Corporation C:\Windows\System32\BluetoothApis.dll (Verified) Microsoft Windows

browcli.dll Browser Service Client DLL Microsoft Corporation C:\Windows\System32\browcli.dll (Verified) Microsoft Windows

bthprops.cpl Bluetooth Control Panel Applet Microsoft Corporation C:\Windows\System32\bthprops.cpl (Verified) Microsoft Windows

C_1255.NLS C:\Windows\System32\C_1255.NLS (Verified) Microsoft Windows

cdp.dll Microsoft ® CDP Client API Microsoft Corporation C:\Windows\System32\cdp.dll (Verified) Microsoft Windows

cfgmgr32.dll Configuration Manager DLL Microsoft Corporation C:\Windows\System32\cfgmgr32.dll (Verified) Microsoft Windows

clbcatq.dll COM+ Configuration Catalog Microsoft Corporation C:\Windows\System32\clbcatq.dll (Verified) Microsoft Windows

combase.dll Microsoft COM for Windows Microsoft Corporation C:\Windows\System32\combase.dll (Verified) Microsoft Windows

comctl32.dll User Experience Controls Library Microsoft Corporation C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.953_none_42151e83c686086b\comctl32.dll (Verified) Microsoft Windows

coml2.dll Microsoft COM for Windows Microsoft Corporation C:\Windows\System32\coml2.dll (Verified) Microsoft Windows

container.dll Windows Containers Microsoft Corporation C:\Windows\System32\container.dll (Verified) Microsoft Windows

CoreMessaging.dll Microsoft CoreMessaging Dll Microsoft Corporation C:\Windows\System32\CoreMessaging.dll (Verified) Microsoft Windows

CoreUIComponents.dll C:\Windows\System32\CoreUIComponents.dll (Verified) Microsoft Windows

counters.dat C:\Users\Michael\AppData\Local\Microsoft\Windows\INetCache\counters.dat (An error occurred while reading or writing to a file)

crypt32.dll Crypto API32 Microsoft Corporation C:\Windows\System32\crypt32.dll (Verified) Microsoft Windows

cryptbase.dll Base cryptographic API DLL Microsoft Corporation C:\Windows\System32\cryptbase.dll (Verified) Microsoft Windows

cryptsp.dll Cryptographic Service Provider API Microsoft Corporation C:\Windows\System32\cryptsp.dll (Verified) Microsoft Windows

cscapi.dll Offline Files Win32 API Microsoft Corporation C:\Windows\System32\cscapi.dll (Verified) Microsoft Windows

cversions.2.db C:\ProgramData\Microsoft\Windows\Caches\cversions.2.db (The form specified for the subject is not one supported or known by the specified trust provider)

cversions.3.db C:\Users\Michael\AppData\Local\Microsoft\Windows\Caches\cversions.3.db (The form specified for the subject is not one supported or known by the specified trust provider)

d2d1.dll Microsoft D2D Library Microsoft Corporation C:\Windows\System32\d2d1.dll (Verified) Microsoft Windows

d3d11.dll Direct3D 11 Runtime Microsoft Corporation C:\Windows\System32\d3d11.dll (Verified) Microsoft Windows

DataExchange.dll Data exchange Microsoft Corporation C:\Windows\System32\DataExchange.dll (Verified) Microsoft Windows

davclnt.dll Web DAV Client DLL Microsoft Corporation C:\Windows\System32\davclnt.dll (Verified) Microsoft Windows

davhlpr.dll DAV Helper DLL Microsoft Corporation C:\Windows\System32\davhlpr.dll (Verified) Microsoft Windows

daxexec.dll daxexec Microsoft Corporation C:\Windows\System32\daxexec.dll (Verified) Microsoft Windows

dcomp.dll Microsoft DirectComposition Library Microsoft Corporation C:\Windows\System32\dcomp.dll (Verified) Microsoft Windows

DevDispItemProvider.dll DeviceItem inproc devquery subsystem Microsoft Corporation C:\Windows\System32\DevDispItemProvider.dll (Verified) Microsoft Windows

DeviceSetupManagerAPI.dll Device Setup Manager Client API Microsoft Corporation C:\Windows\System32\DeviceSetupManagerAPI.dll (Verified) Microsoft Windows

devobj.dll Device Information Set DLL Microsoft Corporation C:\Windows\System32\devobj.dll (Verified) Microsoft Windows

devrtl.dll Device Management Run Time Library Microsoft Corporation C:\Windows\System32\devrtl.dll (Verified) Microsoft Windows

dfscli.dll Windows NT Distributed File System Client DLL Microsoft Corporation C:\Windows\System32\dfscli.dll (Verified) Microsoft Windows

dhcpcsvc.dll DHCP Client Service Microsoft Corporation C:\Windows\System32\dhcpcsvc.dll (Verified) Microsoft Windows

dhcpcsvc6.dll DHCPv6 Client Microsoft Corporation C:\Windows\System32\dhcpcsvc6.dll (Verified) Microsoft Windows

dlnashext.dll DLNA Namespace DLL Microsoft Corporation C:\Windows\System32\dlnashext.dll (Verified) Microsoft Windows

dnsapi.dll DNS Client API DLL Microsoft Corporation C:\Windows\System32\dnsapi.dll (Verified) Microsoft Windows

dpapi.dll Data Protection API Microsoft Corporation C:\Windows\System32\dpapi.dll (Verified) Microsoft Windows

drprov.dll Microsoft Remote Desktop Session Host Server Network Provider Microsoft Corporation C:\Windows\System32\drprov.dll (Verified) Microsoft Windows

dsclient.dll Data Sharing Service Client DLL Microsoft Corporation C:\Windows\System32\dsclient.dll (Verified) Microsoft Windows

dsreg.dll AD/AAD User Device Registration Microsoft Corporation C:\Windows\System32\dsreg.dll (Verified) Microsoft Windows

dtsh.dll Detection and Sharing Status API Microsoft Corporation C:\Windows\System32\dtsh.dll (Verified) Microsoft Windows

dui70.dll Windows DirectUI Engine Microsoft Corporation C:\Windows\System32\dui70.dll (Verified) Microsoft Windows

duser.dll Windows DirectUser Engine Microsoft Corporation C:\Windows\System32\duser.dll (Verified) Microsoft Windows

dwmapi.dll Microsoft Desktop Window Manager API Microsoft Corporation C:\Windows\System32\dwmapi.dll (Verified) Microsoft Windows

DWrite.dll Microsoft DirectX Typography Services Microsoft Corporation C:\Windows\System32\DWrite.dll (Verified) Microsoft Windows

dxgi.dll DirectX Graphics Infrastructure Microsoft Corporation C:\Windows\System32\dxgi.dll (Verified) Microsoft Windows

DXP.dll Device Stage Shell Extension Microsoft Corporation C:\Windows\System32\DXP.dll (Verified) Microsoft Windows

edputil.dll EDP util Microsoft Corporation C:\Windows\System32\edputil.dll (Verified) Microsoft Windows

EhStorAPI.dll Windows Enhanced Storage API Microsoft Corporation C:\Windows\System32\EhStorAPI.dll (Verified) Microsoft Windows

EhStorShell.dll Windows Enhanced Storage Shell Extension DLL Microsoft Corporation C:\Windows\System32\EhStorShell.dll (Verified) Microsoft Windows

es.dll COM+ Microsoft Corporation C:\Windows\System32\es.dll (Verified) Microsoft Windows

EthernetMediaManager.dll Windows Ethernet Media Manager DLL Microsoft Corporation C:\Windows\System32\EthernetMediaManager.dll (Verified) Microsoft Windows

EventAggregation.dll Event Aggregation User Mode Library Microsoft Corporation C:\Windows\System32\EventAggregation.dll (Verified) Microsoft Windows

execmodelproxy.dll ExecModelProxy Microsoft Corporation C:\Windows\System32\execmodelproxy.dll (Verified) Microsoft Windows

explorer.exe Windows Explorer Microsoft Corporation C:\Windows\explorer.exe (Verified) Microsoft Windows

ExplorerFrame.dll ExplorerFrame Microsoft Corporation C:\Windows\System32\ExplorerFrame.dll (Verified) Microsoft Windows

explorerframe.dll.mui ExplorerFrame Microsoft Corporation C:\Windows\System32\en-US\explorerframe.dll.mui (Verified) Microsoft Windows

fdProxy.dll Function Discovery Proxy Dll Microsoft Corporation C:\Windows\System32\fdProxy.dll (Verified) Microsoft Windows

fdWCN.dll Windows Connect Now - Config Function Discovery Provider DLL Microsoft Corporation C:\Windows\System32\fdWCN.dll (Verified) Microsoft Windows

fdWNet.dll Function Discovery WNet Provider Dll Microsoft Corporation C:\Windows\System32\fdWNet.dll (Verified) Microsoft Windows

FileSyncShell64.dll Microsoft OneDrive Shell Extension Microsoft Corporation C:\Users\Michael\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\amd64\FileSyncShell64.dll (Verified) Microsoft Corporation

FirewallAPI.dll Windows Firewall API Microsoft Corporation C:\Windows\System32\FirewallAPI.dll (Verified) Microsoft Windows

fltLib.dll Filter Library Microsoft Corporation C:\Windows\System32\fltLib.dll (Verified) Microsoft Windows

framedynos.dll WMI SDK Provider Framework Microsoft Corporation C:\Windows\System32\framedynos.dll (Verified) Microsoft Windows

fundisc.dll Function Discovery Dll Microsoft Corporation C:\Windows\System32\fundisc.dll (Verified) Microsoft Windows

FunDisc.dll.mui Function Discovery Dll Microsoft Corporation C:\Windows\System32\en-US\FunDisc.dll.mui (Verified) Microsoft Windows

fwbase.dll Firewall Base DLL Microsoft Corporation C:\Windows\System32\fwbase.dll (Verified) Microsoft Windows

fwpolicyiomgr.dll FwPolicyIoMgr DLL Microsoft Corporation C:\Windows\System32\fwpolicyiomgr.dll (Verified) Microsoft Windows

FWPUCLNT.DLL FWP/IPsec User-Mode API Microsoft Corporation C:\Windows\System32\FWPUCLNT.DLL (Verified) Microsoft Windows

gdi32.dll GDI Client DLL Microsoft Corporation C:\Windows\System32\gdi32.dll (Verified) Microsoft Windows

gdi32full.dll GDI Client DLL Microsoft Corporation C:\Windows\System32\gdi32full.dll (Verified) Microsoft Windows

GdiPlus.dll Microsoft GDI+ Microsoft Corporation C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.14393.953_none_7300116921188239\GdiPlus.dll (Verified) Microsoft Windows

globinputhost.dll Windows Globalization Extension API for Input Microsoft Corporation C:\Windows\System32\globinputhost.dll (Verified) Microsoft Windows

GROOVEEX.DLL Microsoft SkyDrive Pro Extensions Microsoft Corporation C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Verified) Microsoft Corporation

GrooveIntlResource.dll Microsoft SkyDrive Pro Intl Resource Module Microsoft Corporation C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll (Verified) Microsoft Corporation

hcproviders.dll Security and Maintenance Providers Microsoft Corporation C:\Windows\System32\hcproviders.dll (Verified) Microsoft Windows

hgcpl.dll HomeGroup Control Panel Microsoft Corporation C:\Windows\System32\hgcpl.dll (Verified) Microsoft Windows

hgcpl.dll.mui HomeGroup Control Panel Microsoft Corporation C:\Windows\System32\en-US\hgcpl.dll.mui (Verified) Microsoft Windows

hid.dll Hid User Library Microsoft Corporation C:\Windows\System32\hid.dll (Verified) Microsoft Windows

iconcache_32.db C:\Users\Michael\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db (An error occurred while reading or writing to a file)

iconcache_idx.db C:\Users\Michael\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db (An error occurred while reading or writing to a file)

IconCodecService.dll Converts a PNG part of the icon to a legacy bmp icon Microsoft Corporation C:\Windows\System32\IconCodecService.dll (Verified) Microsoft Windows

IDStore.dll Identity Store Microsoft Corporation C:\Windows\System32\IDStore.dll (Verified) Microsoft Windows

ieframe.dll Internet Browser Microsoft Corporation C:\Windows\System32\ieframe.dll (Verified) Microsoft Windows

ieframe.dll.mui Internet Browser Microsoft Corporation C:\Windows\System32\en-US\ieframe.dll.mui (Verified) Microsoft Windows

ieproxy.dll IE ActiveX Interface Marshaling Library Microsoft Corporation C:\Windows\System32\ieproxy.dll (Verified) Microsoft Windows

iertutil.dll Run time utility for Internet Explorer Microsoft Corporation C:\Windows\System32\iertutil.dll (Verified) Microsoft Windows

igd10iumd64.dll User Mode Driver for Intel® Graphics Technology Intel Corporation C:\Windows\System32\igd10iumd64.dll (Verified) Microsoft Windows Hardware Compatibility Publisher

igdusc64.dll Unified Shader Compiler for Intel® Graphics Accelerator Intel Corporation C:\Windows\System32\igdusc64.dll (Verified) Microsoft Windows Hardware Compatibility Publisher

imageres.dll Windows Image Resource Microsoft Corporation C:\Windows\System32\imageres.dll (Verified) Microsoft Windows

imapi2.dll Image Mastering API v2 Microsoft Corporation C:\Windows\System32\imapi2.dll (Verified) Microsoft Windows

imm32.dll Multi-User Windows IMM32 API Client DLL Microsoft Corporation C:\Windows\System32\imm32.dll (Verified) Microsoft Windows

InputSwitch.dll Microsoft Windows Input Switcher Microsoft Corporation C:\Windows\System32\InputSwitch.dll (Verified) Microsoft Windows

IPHLPAPI.DLL IP Helper API Microsoft Corporation C:\Windows\System32\IPHLPAPI.DLL (Verified) Microsoft Windows

keepaliveprovider.dll Keep alive provider API Microsoft Corporation C:\Windows\System32\keepaliveprovider.dll (Verified) Microsoft Windows

kernel.appcore.dll AppModel API Host Microsoft Corporation C:\Windows\System32\kernel.appcore.dll (Verified) Microsoft Windows

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\System32\kernel32.dll (Verified) Microsoft Windows

KernelBase.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\System32\KernelBase.dll (Verified) Microsoft Windows

linkinfo.dll Windows Volume Tracking Microsoft Corporation C:\Windows\System32\linkinfo.dll (Verified) Microsoft Windows

locale.nls C:\Windows\System32\locale.nls (Verified) Microsoft Windows

LoggingPlatform64.dll Logging Platform Microsoft Corporation C:\Users\Michael\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\amd64\LoggingPlatform64.dll (Verified) Microsoft Corporation

mdnsNSP.dll Bonjour Namespace Provider Apple Inc. C:\Program Files\Bonjour\mdnsNSP.dll (Verified) Apple Inc.

mfplat.dll Media Foundation Platform DLL Microsoft Corporation C:\Windows\System32\mfplat.dll (Verified) Microsoft Windows

mlang.dll Multi Language Support DLL Microsoft Corporation C:\Windows\System32\mlang.dll (Verified) Microsoft Windows

MMDevAPI.dll MMDevice API Microsoft Corporation C:\Windows\System32\MMDevAPI.dll (Verified) Microsoft Windows

mpr.dll Multiple Provider Router DLL Microsoft Corporation C:\Windows\System32\mpr.dll (Verified) Microsoft Windows

MrmCoreR.dll Microsoft Windows MRM Microsoft Corporation C:\Windows\System32\MrmCoreR.dll (Verified) Microsoft Windows

msasn1.dll ASN.1 Runtime APIs Microsoft Corporation C:\Windows\System32\msasn1.dll (Verified) Microsoft Windows

msctf.dll MSCTF Server DLL Microsoft Corporation C:\Windows\System32\msctf.dll (Verified) Microsoft Windows

msftedit.dll Rich Text Edit Control, v8.5 Microsoft Corporation C:\Windows\System32\msftedit.dll (Verified) Microsoft Windows

msi.dll Windows Installer Microsoft Corporation C:\Windows\System32\msi.dll (Verified) Microsoft Windows

msiltcfg.dll Windows Installer Configuration API Stub Microsoft Corporation C:\Windows\System32\msiltcfg.dll (Verified) Microsoft Windows

mskeyprotect.dll Microsoft Key Protection Provider Microsoft Corporation C:\Windows\System32\mskeyprotect.dll (Verified) Microsoft Windows

mssprxy.dll Microsoft Search Proxy Microsoft Corporation C:\Windows\System32\mssprxy.dll (Verified) Microsoft Windows

msvcp_win.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\System32\msvcp_win.dll (Verified) Microsoft Windows

msvcp100.dll Microsoft® C Runtime Library Microsoft Corporation C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\msvcp100.dll (Verified) Microsoft Corporation

msvcp110_win.dll Microsoft® STL110 C++ Runtime Library Microsoft Corporation C:\Windows\System32\msvcp110_win.dll (Verified) Microsoft Windows

msvcp120.dll Microsoft® C Runtime Library Microsoft Corporation C:\Users\Michael\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\amd64\msvcp120.dll (Verified) Microsoft Corporation

msvcr100.dll Microsoft® C Runtime Library Microsoft Corporation C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\msvcr100.dll (Verified) Microsoft Corporation

msvcr120.dll Microsoft® C Runtime Library Microsoft Corporation C:\Users\Michael\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\amd64\msvcr120.dll (Verified) Microsoft Corporation

msvcrt.dll Windows NT CRT DLL Microsoft Corporation C:\Windows\System32\msvcrt.dll (Verified) Microsoft Windows

MSWB7.dll MSWB7 DLL Microsoft Corporation C:\Windows\System32\MSWB7.dll (Verified) Microsoft Windows

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation C:\Windows\System32\mswsock.dll (Verified) Microsoft Windows

msxml6.dll MSXML 6.0 Microsoft Corporation C:\Windows\System32\msxml6.dll (Verified) Microsoft Windows

msxml6r.dll XML Resources Microsoft Corporation C:\Windows\System32\msxml6r.dll (Verified) Microsoft Windows

ncrypt.dll Windows NCrypt Router Microsoft Corporation C:\Windows\System32\ncrypt.dll (Verified) Microsoft Windows

ncryptsslp.dll Microsoft SChannel Provider Microsoft Corporation C:\Windows\System32\ncryptsslp.dll (Verified) Microsoft Windows

netapi32.dll Net Win32 API DLL Microsoft Corporation C:\Windows\System32\netapi32.dll (Verified) Microsoft Windows

netprofm.dll Network List Manager Microsoft Corporation C:\Windows\System32\netprofm.dll (Verified) Microsoft Windows

netutils.dll Net Win32 API Helpers DLL Microsoft Corporation C:\Windows\System32\netutils.dll (Verified) Microsoft Windows

networkexplorer.dll Network Explorer Microsoft Corporation C:\Windows\System32\networkexplorer.dll (Verified) Microsoft Windows

networkitemfactory.dll NetworkItem Factory Microsoft Corporation C:\Windows\System32\networkitemfactory.dll (Verified) Microsoft Windows

NetworkItemFactory.dll.mui NetworkItem Factory Microsoft Corporation C:\Windows\System32\en-US\NetworkItemFactory.dll.mui (Verified) Microsoft Windows

NetworkUXBroker.dll NetworkUXBroker DLL Microsoft Corporation C:\Windows\System32\NetworkUXBroker.dll (Verified) Microsoft Windows

ninput.dll Microsoft Pen and Touch Input Component Microsoft Corporation C:\Windows\System32\ninput.dll (Verified) Microsoft Windows

nlaapi.dll Network Location Awareness 2 Microsoft Corporation C:\Windows\System32\nlaapi.dll (Verified) Microsoft Windows

NotificationController.dll NotificationController Microsoft Corporation C:\Windows\System32\NotificationController.dll (Verified) Microsoft Windows

NotificationController.dll.mui NotificationController Microsoft Corporation C:\Windows\System32\en-US\NotificationController.dll.mui (Verified) Microsoft Windows

NotificationControllerPS.dll NotificationController Proxy Stub Microsoft Corporation C:\Windows\System32\NotificationControllerPS.dll (Verified) Microsoft Windows

NotificationObjFactory.dll Notifications Object Factory Microsoft Corporation C:\Windows\System32\NotificationObjFactory.dll (Verified) Microsoft Windows

npmproxy.dll Network List Manager Proxy Microsoft Corporation C:\Windows\System32\npmproxy.dll (Verified) Microsoft Windows

NPSM.dll NPSM Microsoft Corporation C:\Windows\System32\NPSM.dll (Verified) Microsoft Windows

NPSMDesktopProvider.dll <d> NPSM Desktop Local Provider DLL Microsoft Corporation C:\Windows\System32\NPSMDesktopProvider.dll (Verified) Microsoft Windows

nsi.dll NSI User-mode interface DLL Microsoft Corporation C:\Windows\System32\nsi.dll (Verified) Microsoft Windows

ntasn1.dll Microsoft ASN.1 API Microsoft Corporation C:\Windows\System32\ntasn1.dll (Verified) Microsoft Windows

ntdll.dll NT Layer DLL Microsoft Corporation C:\Windows\System32\ntdll.dll (Verified) Microsoft Windows

ntlanman.dll Microsoft® Lan Manager Microsoft Corporation C:\Windows\System32\ntlanman.dll (Verified) Microsoft Windows

ntmarta.dll Windows NT MARTA provider Microsoft Corporation C:\Windows\System32\ntmarta.dll (Verified) Microsoft Windows

ntoskrnl.exe NT Kernel & System Microsoft Corporation C:\Windows\System32\ntoskrnl.exe (Verified) Microsoft Windows

ntshrui.dll Shell extensions for sharing Microsoft Corporation C:\Windows\System32\ntshrui.dll (Verified) Microsoft Windows

OFFICE.ODF Microsoft Office culture data dll Microsoft Corporation C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE15\Cultures\OFFICE.ODF (Verified) Microsoft Corporation

ole32.dll Microsoft OLE for Windows Microsoft Corporation C:\Windows\System32\ole32.dll (Verified) Microsoft Windows

ole32.dll.mui Microsoft OLE for Windows Microsoft Corporation C:\Windows\System32\en-US\ole32.dll.mui (Verified) Microsoft Windows

oleacc.dll Active Accessibility Core Component Microsoft Corporation C:\Windows\System32\oleacc.dll (Verified) Microsoft Windows

oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation C:\Windows\System32\oleaccrc.dll (Verified) Microsoft Windows

oleaut32.dll OLEAUT32.DLL Microsoft Corporation C:\Windows\System32\oleaut32.dll (Verified) Microsoft Windows

OneCoreCommonProxyStub.dll OneCore Common Proxy Stub Microsoft Corporation C:\Windows\System32\OneCoreCommonProxyStub.dll (Verified) Microsoft Windows

OneDriveSettingSyncProvider.dll OneDrive Setting Sync Microsoft Corporation C:\Windows\System32\OneDriveSettingSyncProvider.dll (Verified) Microsoft Windows

PackageStateRoaming.dll Package State Roaming Microsoft Corporation C:\Windows\System32\PackageStateRoaming.dll (Verified) Microsoft Windows

pcacli.dll Program Compatibility Assistant Client Module Microsoft Corporation C:\Windows\System32\pcacli.dll (Verified) Microsoft Windows

PhotoMetadataHandler.dll Photo Metadata Handler Microsoft Corporation C:\Windows\System32\PhotoMetadataHandler.dll (Verified) Microsoft Windows

PlayToDevice.dll PLAYTODEVICE DLL Microsoft Corporation C:\Windows\System32\PlayToDevice.dll (Verified) Microsoft Windows

pnidui.dll Network System Icon Microsoft Corporation C:\Windows\System32\pnidui.dll (Verified) Microsoft Windows

policymanager.dll Policy Manager DLL Microsoft Corporation C:\Windows\System32\policymanager.dll (Verified) Microsoft Windows

PortableDeviceApi.dll Windows Portable Device API Components Microsoft Corporation C:\Windows\System32\PortableDeviceApi.dll (Verified) Microsoft Windows

PortableDeviceTypes.dll Windows Portable Device (Parameter) Types Component Microsoft Corporation C:\Windows\System32\PortableDeviceTypes.dll (Verified) Microsoft Windows

powrprof.dll Power Profile Helper DLL Microsoft Corporation C:\Windows\System32\powrprof.dll (Verified) Microsoft Windows

prnfldr.dll prnfldr dll Microsoft Corporation C:\Windows\System32\prnfldr.dll (Verified) Microsoft Windows

profapi.dll User Profile Basic API Microsoft Corporation C:\Windows\System32\profapi.dll (Verified) Microsoft Windows

profext.dll profext Microsoft Corporation C:\Windows\System32\profext.dll (Verified) Microsoft Windows

propsys.dll Microsoft Property System Microsoft Corporation C:\Windows\System32\propsys.dll (Verified) Microsoft Windows

provsvc.dll Windows HomeGroup Microsoft Corporation C:\Windows\System32\provsvc.dll (Verified) Microsoft Windows

R00000000000d.clb C:\Windows\Registration\R00000000000d.clb (The form specified for the subject is not one supported or known by the specified trust provider)

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation C:\Windows\System32\rasadhlp.dll (Verified) Microsoft Windows

ResourcePolicyClient.dll Resource Policy Client Microsoft Corporation C:\Windows\System32\ResourcePolicyClient.dll (Verified) Microsoft Windows

rmclient.dll Resource Manager Client Microsoft Corporation C:\Windows\System32\rmclient.dll (Verified) Microsoft Windows

rpcrt4.dll Remote Procedure Call Runtime Microsoft Corporation C:\Windows\System32\rpcrt4.dll (Verified) Microsoft Windows

rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation C:\Windows\System32\rsaenh.dll (Verified) Microsoft Windows

RTWorkQ.dll Realtime WorkQueue DLL Microsoft Corporation C:\Windows\System32\RTWorkQ.dll (Verified) Microsoft Windows

samlib.dll SAM Library DLL Microsoft Corporation C:\Windows\System32\samlib.dll (Verified) Microsoft Windows

schannel.dll TLS / SSL Security Provider Microsoft Corporation C:\Windows\System32\schannel.dll (Verified) Microsoft Windows

SearchFolder.dll SearchFolder Microsoft Corporation C:\Windows\System32\SearchFolder.dll (Verified) Microsoft Windows

sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation C:\Windows\System32\sechost.dll (Verified) Microsoft Windows

secur32.dll Security Support Provider Interface Microsoft Corporation C:\Windows\System32\secur32.dll (Verified) Microsoft Windows

segoeui.ttf C:\Windows\Fonts\segoeui.ttf (Verified) Microsoft Windows

SettingMonitor.dll Setting Synchronization Change Monitor Microsoft Corporation C:\Windows\System32\SettingMonitor.dll (Verified) Microsoft Windows

SettingSync.dll Setting Synchronization Microsoft Corporation C:\Windows\System32\SettingSync.dll (Verified) Microsoft Windows

SettingSyncCore.dll Setting Synchronization Core Microsoft Corporation C:\Windows\System32\SettingSyncCore.dll (Verified) Microsoft Windows

SettingSyncPolicy.dll SettingSync Policy Microsoft Corporation C:\Windows\System32\SettingSyncPolicy.dll (Verified) Microsoft Windows

setupapi.dll Windows Setup API Microsoft Corporation C:\Windows\System32\setupapi.dll (Verified) Microsoft Windows

sfc_os.dll Windows File Protection Microsoft Corporation C:\Windows\System32\sfc_os.dll (Verified) Microsoft Windows

shacct.dll Shell Accounts Classes Microsoft Corporation C:\Windows\System32\shacct.dll (Verified) Microsoft Windows

SharedStartModel.dll Shared Start Model InProc Server Microsoft Corporation C:\Windows\System32\SharedStartModel.dll (Verified) Microsoft Windows

SHCore.dll SHCORE Microsoft Corporation C:\Windows\System32\SHCore.dll (Verified) Microsoft Windows

shdocvw.dll Shell Doc Object and Control Library Microsoft Corporation C:\Windows\System32\shdocvw.dll (Verified) Microsoft Windows

shell32.dll Windows Shell Common Dll Microsoft Corporation C:\Windows\System32\shell32.dll (Verified) Microsoft Windows

shlwapi.dll Shell Light-weight Utility Library Microsoft Corporation C:\Windows\System32\shlwapi.dll (Verified) Microsoft Windows

slc.dll Software Licensing Client Dll Microsoft Corporation C:\Windows\System32\slc.dll (Verified) Microsoft Windows

smartscreenps.dll SmartScreenPS Microsoft Corporation C:\Windows\System32\smartscreenps.dll (Verified) Microsoft Windows

SndVolSSO.dll SCA Volume Microsoft Corporation C:\Windows\System32\SndVolSSO.dll (Verified) Microsoft Windows

SortDefault.nls C:\Windows\Globalization\Sorting\SortDefault.nls (Verified) Microsoft Windows

sppc.dll Software Licensing Client Dll Microsoft Corporation C:\Windows\System32\sppc.dll (Verified) Microsoft Windows

srchadmin.dll Indexing Options Microsoft Corporation C:\Windows\System32\srchadmin.dll (Verified) Microsoft Windows

srvcli.dll Server Service Client DLL Microsoft Corporation C:\Windows\System32\srvcli.dll (Verified) Microsoft Windows

sspicli.dll Security Support Provider Interface Microsoft Corporation C:\Windows\System32\sspicli.dll (Verified) Microsoft Windows

StateRepository.Core.dll StateRepository Core Microsoft Corporation C:\Windows\System32\StateRepository.Core.dll (Verified) Microsoft Windows

StaticCache.dat C:\Windows\Fonts\StaticCache.dat (Verified) Microsoft Windows

stobject.dll Systray shell service object Microsoft Corporation C:\Windows\System32\stobject.dll (Verified) Microsoft Windows

StructuredQuery.dll Structured Query Microsoft Corporation C:\Windows\System32\StructuredQuery.dll (Verified) Microsoft Windows

sxs.dll Fusion 2.5 Microsoft Corporation C:\Windows\System32\sxs.dll (Verified) Microsoft Windows

SyncCenter.dll Microsoft Sync Center Microsoft Corporation C:\Windows\System32\SyncCenter.dll (Verified) Microsoft Windows

Syncreg.dll Microsoft Synchronization Framework Registration Microsoft Corporation C:\Windows\System32\Syncreg.dll (Verified) Microsoft Windows

Tabbtn.dll Microsoft Tablet PC Buttons Component Microsoft Corporation C:\Windows\System32\Tabbtn.dll (Verified) Microsoft Windows

Tabbtn.dll.mui Microsoft Tablet PC Buttons Component Microsoft Corporation C:\Windows\System32\en-US\Tabbtn.dll.mui (Verified) Microsoft Windows

TabbtnEx.dll Microsoft Tablet PC Extended Buttons Component Microsoft Corporation C:\Windows\System32\TabbtnEx.dll (Verified) Microsoft Windows

taskschd.dll Task Scheduler COM API Microsoft Corporation C:\Windows\System32\taskschd.dll (Verified) Microsoft Windows

TetheringStation.dll Microsoft Windows Tethering Station DLL Microsoft Corporation C:\Windows\System32\TetheringStation.dll (Verified) Microsoft Windows

thumbcache.dll Microsoft Thumbnail Cache Microsoft Corporation C:\Windows\System32\thumbcache.dll (Verified) Microsoft Windows

thumbcache_idx.db C:\Users\Michael\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db (An error occurred while reading or writing to a file)

TimeBrokerClient.dll Time Broker Client Library Microsoft Corporation C:\Windows\System32\TimeBrokerClient.dll (Verified) Microsoft Windows

tiptsf.dll Touch Keyboard and Handwriting Panel Text Services Framework Microsoft Corporation C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll (Verified) Microsoft Windows

tokenbinding.dll Token Binding Protocol Microsoft Corporation C:\Windows\System32\tokenbinding.dll (Verified) Microsoft Windows

TokenBroker.dll Token Broker Microsoft Corporation C:\Windows\System32\TokenBroker.dll (Verified) Microsoft Windows

twinapi.appcore.dll twinapi.appcore Microsoft Corporation C:\Windows\System32\twinapi.appcore.dll (Verified) Microsoft Windows

twinapi.dll twinapi Microsoft Corporation C:\Windows\System32\twinapi.dll (Verified) Microsoft Windows

twinui.appcore.dll TWINUI.APPCORE Microsoft Corporation C:\Windows\System32\twinui.appcore.dll (Verified) Microsoft Windows

twinui.dll TWINUI Microsoft Corporation C:\Windows\System32\twinui.dll (Verified) Microsoft Windows

twinui.pcshell.dll Twinui.PCShell Microsoft Corporation C:\Windows\System32\twinui.pcshell.dll (Verified) Microsoft Windows

ucrtbase.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\System32\ucrtbase.dll (Verified) Microsoft Windows

UIAnimation.dll Windows Animation Manager Microsoft Corporation C:\Windows\System32\UIAnimation.dll (Verified) Microsoft Windows

UIAutomationCore.dll Microsoft UI Automation Core Microsoft Corporation C:\Windows\System32\UIAutomationCore.dll (Verified) Microsoft Windows

UIRibbon.dll Windows Ribbon Framework Microsoft Corporation C:\Windows\System32\UIRibbon.dll (Verified) Microsoft Windows

UIRibbonRes.dll Windows Ribbon Framework Resources Microsoft Corporation C:\Windows\System32\UIRibbonRes.dll (Verified) Microsoft Windows

urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation C:\Windows\System32\urlmon.dll (Verified) Microsoft Windows

user32.dll Multi-User Windows USER API Client DLL Microsoft Corporation C:\Windows\System32\user32.dll (Verified) Microsoft Windows

userenv.dll Userenv Microsoft Corporation C:\Windows\System32\userenv.dll (Verified) Microsoft Windows

usermgrcli.dll UserMgr API DLL Microsoft Corporation C:\Windows\System32\usermgrcli.dll (Verified) Microsoft Windows

uxtheme.dll Microsoft UxTheme Library Microsoft Corporation C:\Windows\System32\uxtheme.dll (Verified) Microsoft Windows

vaultcli.dll Credential Vault Client Library Microsoft Corporation C:\Windows\System32\vaultcli.dll (Verified) Microsoft Windows

VEEventDispatcher.dll Visual Element Event dispatcher Microsoft Corporation C:\Windows\System32\VEEventDispatcher.dll (Verified) Microsoft Windows

version.dll Version Checking and File Installation Libraries Microsoft Corporation C:\Windows\System32\version.dll (Verified) Microsoft Windows

wcmapi.dll Windows Connection Manager Client API Microsoft Corporation C:\Windows\System32\wcmapi.dll (Verified) Microsoft Windows

WcnApi.dll Windows Connect Now - API Helper DLL Microsoft Corporation C:\Windows\System32\WcnApi.dll (Verified) Microsoft Windows

webio.dll Web Transfer Protocols API Microsoft Corporation C:\Windows\System32\webio.dll (Verified) Microsoft Windows

wer.dll Windows Error Reporting DLL Microsoft Corporation C:\Windows\System32\wer.dll (Verified) Microsoft Windows

werconcpl.dll PRS CPL Microsoft Corporation C:\Windows\System32\werconcpl.dll (Verified) Microsoft Windows

wevtapi.dll Eventing Consumption and Configuration API Microsoft Corporation C:\Windows\System32\wevtapi.dll (Verified) Microsoft Windows

win32u.dll Win32u Microsoft Corporation C:\Windows\System32\win32u.dll (Verified) Microsoft Windows

wincorlib.dll Microsoft Windows ® WinRT core library Microsoft Corporation C:\Windows\System32\wincorlib.dll (Verified) Microsoft Windows

Windows.Globalization.dll Windows Globalization Microsoft Corporation C:\Windows\System32\Windows.Globalization.dll (Verified) Microsoft Windows

windows.immersiveshell.serviceprovider.dll Windows.ImmersiveShell.ServiceProvider Microsoft Corporation C:\Windows\System32\windows.immersiveshell.serviceprovider.dll (Verified) Microsoft Windows

Windows.Internal.Shell.Broker.dll Windows Shell Broker Microsoft Corporation C:\Windows\System32\Windows.Internal.Shell.Broker.dll (Verified) Microsoft Windows

Windows.Networking.Connectivity.dll Windows Networking Connectivity Runtime DLL Microsoft Corporation C:\Windows\System32\Windows.Networking.Connectivity.dll (Verified) Microsoft Windows

Windows.StateRepository.dll Windows StateRepository API Server Microsoft Corporation C:\Windows\System32\Windows.StateRepository.dll (Verified) Microsoft Windows

windows.storage.dll Microsoft WinRT Storage API Microsoft Corporation C:\Windows\System32\windows.storage.dll (Verified) Microsoft Windows

windows.storage.dll.mui Microsoft WinRT Storage API Microsoft Corporation C:\Windows\System32\en-US\windows.storage.dll.mui (Verified) Microsoft Windows

Windows.Storage.Search.dll Windows.Storage.Search Microsoft Corporation C:\Windows\System32\Windows.Storage.Search.dll (Verified) Microsoft Windows

Windows.System.Launcher.dll Windows.System.Launcher Microsoft Corporation C:\Windows\System32\Windows.System.Launcher.dll (Verified) Microsoft Windows

Windows.UI.dll Windows Runtime UI Foundation DLL Microsoft Corporation C:\Windows\System32\Windows.UI.dll (Verified) Microsoft Windows

Windows.UI.Immersive.dll WINDOWS.UI.IMMERSIVE Microsoft Corporation C:\Windows\System32\Windows.UI.Immersive.dll (Verified) Microsoft Windows

Windows.UI.Shell.dll Shell UI Microsoft Corporation C:\Windows\System32\Windows.UI.Shell.dll (Verified) Microsoft Windows

Windows.UI.ShellCommon.pri C:\Windows\SystemResources\Windows.UI.ShellCommon\Windows.UI.ShellCommon.pri (Verified) Microsoft Windows

Windows.Web.dll Web Client DLL Microsoft Corporation C:\Windows\System32\Windows.Web.dll (Verified) Microsoft Windows

WindowsCodecs.dll Microsoft Windows Codecs Library Microsoft Corporation C:\Windows\System32\WindowsCodecs.dll (Verified) Microsoft Windows

winhttp.dll Windows HTTP Services Microsoft Corporation C:\Windows\System32\winhttp.dll (Verified) Microsoft Windows

wininet.dll Internet Extensions for Win32 Microsoft Corporation C:\Windows\System32\wininet.dll (Verified) Microsoft Windows

winmm.dll MCI API DLL Microsoft Corporation C:\Windows\System32\winmm.dll (Verified) Microsoft Windows

winmmbase.dll Base Multimedia Extension API DLL Microsoft Corporation C:\Windows\System32\winmmbase.dll (Verified) Microsoft Windows

winnlsres.dll NLSBuild resource DLL Microsoft Corporation C:\Windows\System32\winnlsres.dll (Verified) Microsoft Windows

winnlsres.dll.mui NLSBuild resource DLL Microsoft Corporation C:\Windows\System32\en-US\winnlsres.dll.mui (Verified) Microsoft Windows

winnsi.dll Network Store Information RPC interface Microsoft Corporation C:\Windows\System32\winnsi.dll (Verified) Microsoft Windows

winsqlite3.dll SQLite is a software library that implements a self-contained, serverless, zero-configuration, transactional SQL database engine. SQLite Development Team C:\Windows\System32\winsqlite3.dll (Verified) Microsoft Windows 3rd party Component

winsta.dll Winstation Library Microsoft Corporation C:\Windows\System32\winsta.dll (Verified) Microsoft Windows

wintrust.dll Microsoft Trust Verification APIs Microsoft Corporation C:\Windows\System32\wintrust.dll (Verified) Microsoft Windows

WinTypes.dll Windows Base Types DLL Microsoft Corporation C:\Windows\System32\WinTypes.dll (Verified) Microsoft Windows

wkscli.dll Workstation Service Client DLL Microsoft Corporation C:\Windows\System32\wkscli.dll (Verified) Microsoft Windows

wlanapi.dll Windows WLAN AutoConfig Client Side API DLL Microsoft Corporation C:\Windows\System32\wlanapi.dll (Verified) Microsoft Windows

WlanMediaManager.dll Windows WLAN Media Manager DLL Microsoft Corporation C:\Windows\System32\WlanMediaManager.dll (Verified) Microsoft Windows

wldp.dll Windows Lockdown Policy Microsoft Corporation C:\Windows\System32\wldp.dll (Verified) Microsoft Windows

wlidprov.dll Microsoft® Account Provider Microsoft Corporation C:\Windows\System32\wlidprov.dll (Verified) Microsoft Windows

wmiclnt.dll WMI Client API Microsoft Corporation C:\Windows\System32\wmiclnt.dll (Verified) Microsoft Windows

WorkFoldersShell.dll Microsoft © Work Folders Shell Extension Microsoft Corporation C:\Windows\System32\WorkFoldersShell.dll (Verified) Microsoft Windows

WPDShServiceObj.dll Windows Portable Device Shell Service Object Microsoft Corporation C:\Windows\System32\WPDShServiceObj.dll (Verified) Microsoft Windows

wpnapps.dll Windows Push Notification Apps Microsoft Corporation C:\Windows\System32\wpnapps.dll (Verified) Microsoft Windows

wpncore.dll Windows Push Notification Core Microsoft Corporation C:\Windows\System32\wpncore.dll (Verified) Microsoft Windows

wpndatabase.db-shm C:\Users\Michael\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm (An error occurred while reading or writing to a file)

wpnprv.dll Windows Push Notification Platform Connection Provider Microsoft Corporation C:\Windows\System32\wpnprv.dll (Verified) Microsoft Windows

WpPortingLibrary.dll <d> DLL Microsoft Corporation C:\Windows\System32\WpPortingLibrary.dll (Verified) Microsoft Windows

ws2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation C:\Windows\System32\ws2_32.dll (Verified) Microsoft Windows

wscapi.dll Windows Security Center API Microsoft Corporation C:\Windows\System32\wscapi.dll (Verified) Microsoft Windows

wscinterop.dll Windows Health Center WSC Interop Microsoft Corporation C:\Windows\System32\wscinterop.dll (Verified) Microsoft Windows

wscui.cpl Security and Maintenance Microsoft Corporation C:\Windows\System32\wscui.cpl (Verified) Microsoft Windows

wshbth.dll Windows Sockets Helper DLL Microsoft Corporation C:\Windows\System32\wshbth.dll (Verified) Microsoft Windows

wsock32.dll Windows Socket 32-Bit DLL Microsoft Corporation C:\Windows\System32\wsock32.dll (Verified) Microsoft Windows

wtsapi32.dll Windows Remote Desktop Session Host Server SDK APIs Microsoft Corporation C:\Windows\System32\wtsapi32.dll (Verified) Microsoft Windows

xmllite.dll Microsoft XmlLite Library Microsoft Corporation C:\Windows\System32\xmllite.dll (Verified) Microsoft Windows

Edited by ndskykng, 25 April 2017 - 06:56 PM.

#33
RKinner

Posted 25 April 2017 - 08:48 PM

Malware Expert

Expert
24,625 posts

Explorer.exe is acting up again.

I am looking at this on my Win 10:

Process: explorer.exe Pid: 3128

Name   Description   Company Name   Path   Verified Signer
{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000003a.db           C:\Users\Ron\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000003a.db
{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db           C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db
{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000006.db           C:\Users\Ron\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000006.db
{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db           C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
3957446711.pri           C:\Windows\rescache\_merged\502829797\3957446711.pri

And the following is from yours:

Process: explorer.exe Pid: 3396

Name Description Company Name Path Verified Signer

{1F0DE82D-EAD7-4CF3-BA10-2C95268C2191}.2.ver0x0000000000000002.db C:\ProgramData\Microsoft\Windows\Caches\{1F0DE82D-EAD7-4CF3-BA10-2C95268C2191}.2.ver0x0000000000000002.db (The form specified for the subject is not one supported or known by the specified trust provider)

{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000040.db C:\Users\Michael\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000040.db (The form specified for the subject is not one supported or known by the specified trust provider)

{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000a.db C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000a.db (The form specified for the subject is not one supported or known by the specified trust provider)

{7EAA1722-5D6E-40F6-B198-E1C93179EFD3}.2.ver0x0000000000000002.db C:\ProgramData\Microsoft\Windows\Caches\{7EAA1722-5D6E-40F6-B198-E1C93179EFD3}.2.ver0x0000000000000002.db (The form specified for the subject is not one supported or known by the specified trust provider)

{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db C:\Users\Michael\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db (The form specified for the subject is not one supported or known by the specified trust provider)

{C1A6860D-00CB-4975-8597-4DC917ACD481}.2.ver0x0000000000000002.db C:\ProgramData\Microsoft\Windows\Caches\{C1A6860D-00CB-4975-8597-4DC917ACD481}.2.ver0x0000000000000002.db (The form specified for the subject is not one supported or known by the specified trust provider)

{D938C424-1F8D-4C19-BCE7-1A4F5732153A}.2.ver0x0000000000000003.db C:\ProgramData\Microsoft\Windows\Caches\{D938C424-1F8D-4C19-BCE7-1A4F5732153A}.2.ver0x0000000000000003.db (The form specified for the subject is not one supported or known by the specified trust provider)

{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db (The form specified for the subject is not one supported or known by the specified trust provider)

~FontCache-FontFace.dat C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-FontFace.dat (An error occurred while reading or writing to a file)

~FontCache-S-1-5-21-1530735055-4101794070-4272422381-1001.dat C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-S-1-5-21-1530735055-4101794070-4272422381-1001.dat (An error occurred while reading or writing to a file)

~FontCache-System.dat C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-System.dat (An error occurred while reading or writing to a file)

3957446711.pri C:\Windows\rescache\_merged\502829797\3957446711.pri (The form specified for the subject is not one supported or known by the specified trust provider)

I'm not too worried about the (The form specified for the subject is not one supported or known by the specified trust provider) warnings since these files are not signed and can't be verified tho I do wonder why your version of Process Explorer is trying to verify them when mine doesn't.

However, these:

~FontCache-FontFace.dat C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-FontFace.dat (An error occurred while reading or writing to a file)

~FontCache-S-1-5-21-1530735055-4101794070-4272422381-1001.dat C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-S-1-5-21-1530735055-4101794070-4272422381-1001.dat (An error occurred while reading or writing to a file)

~FontCache-System.dat C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-System.dat (An error occurred while reading or writing to a file)

The fix we ran should have cleaned them out but it is still showing the same errors. If the memory isn't bad then perhaps the hard drive has a bad spot and we are trying to write on the bad spot.

Let's do a defrag

http://www.tomshardw...s-computer.html

which should shuffle things around a bit and then do the bat file you downloaded and ran earlier to clear the font cache then reboot and run Process Explorer again as before.

If you are still getting the error then I would try creating a new local user, logging on as the new user and run process Explorer again.

http://www.technical...-to-windows-10/

#34
ndskykng

Posted 25 April 2017 - 08:56 PM

Member

Topic Starter
Member
166 posts

Trying to follow the directions but when I get to the analyze portion, it is greyed out and not an option for me to choose.

#35
RKinner

Posted 25 April 2017 - 09:02 PM

Malware Expert

Expert
24,625 posts

OK. Just hit Optimize

#36
ndskykng

Posted 25 April 2017 - 09:08 PM

Member

Topic Starter
Member
166 posts

Process CPU Private Bytes Working Set PID Description Company Name Verified Signer

procexp64.exe 21.11 49,308 K 62,900 K 4568 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation

System Idle Process 17.51 0 K 4 K 0

MsMpEng.exe 7.37 136,604 K 114,096 K 2432 Antimalware Service Executable Microsoft Corporation (Verified) Microsoft Corporation

explorer.exe 5.23 46,744 K 90,900 K 4452 Windows Explorer Microsoft Corporation (Verified) Microsoft Windows

Interrupts 4.83 0 K 0 K n/a Hardware Interrupts and DPCs

System 3.38 128 K 64 K 4

chrome.exe 3.23 66,028 K 78,020 K 6360 Google Chrome Google Inc. (Verified) Google Inc

svchost.exe 3.18 4,872 K 10,664 K 900 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

chrome.exe 3.17 65,444 K 115,536 K 3888 Google Chrome Google Inc. (Verified) Google Inc

backgroundTaskHost.exe 3.13 3,060 K 13,948 K 6936 Background Task Host Microsoft Corporation (Verified) Microsoft Windows

chrome.exe 2.89 94,728 K 176,088 K 4124 Google Chrome Google Inc. (Verified) Google Inc

audiodg.exe 2.69 11,412 K 17,456 K 7592

svchost.exe 2.32 11,536 K 25,708 K 832 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

sihost.exe 2.17 5,352 K 20,160 K 1508 Shell Infrastructure Host Microsoft Corporation (Verified) Microsoft Windows

dwm.exe 1.94 37,992 K 46,996 K 1012

backgroundTaskHost.exe 1.79 3,852 K 8,216 K 1468 Background Task Host Microsoft Corporation (Verified) Microsoft Windows

backgroundTaskHost.exe 1.72 3,448 K 14,196 K 7292 Background Task Host Microsoft Corporation (Verified) Microsoft Windows

backgroundTaskHost.exe 1.50 5,592 K 11,516 K 3248 Background Task Host Microsoft Corporation (Verified) Microsoft Windows

backgroundTaskHost.exe 1.03 2,540 K 11,212 K 7240 Background Task Host Microsoft Corporation (Verified) Microsoft Windows

NisSrv.exe 0.93 14,196 K 9,992 K 3848 Microsoft Network Realtime Inspection Service Microsoft Corporation (Verified) Microsoft Corporation

svchost.exe 0.92 12,356 K 34,032 K 548 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

HxTsr.exe 0.82 1,816 K 5,072 K 3516 Microsoft Outlook Communications Microsoft Corporation (No signature was present in the subject) Microsoft Corporation

svchost.exe 0.72 8,532 K 28,880 K 1496 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

csrss.exe 0.70 2,024 K 6,020 K 584

OfficeHubTaskHost.exe 0.67 1,152 K 4,068 K 6904 Office Hub Task Host Microsoft Corporation (Verified) Microsoft Corporation

svchost.exe 0.55 15,896 K 29,980 K 1224 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

chrome.exe 0.51 55,116 K 64,848 K 7500 Google Chrome Google Inc. (Verified) Google Inc

lsass.exe 0.44 5,728 K 15,156 K 732 Local Security Authority Process Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 0.39 7,428 K 19,372 K 2420 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 0.39 2,928 K 7,628 K 5576 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 0.36 22,588 K 54,648 K 304 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

googledrivesync.exe 0.26 74,920 K 87,992 K 7848 Google Drive Google (Verified) Google Inc

OneDrive.exe 0.26 5,736 K 24,988 K 6940 Microsoft OneDrive Microsoft Corporation (Verified) Microsoft Corporation

MotionControl.exe 0.19 22,640 K 35,632 K 7408 (Verified) Lenovo (Beijing) Limited

svchost.exe 0.19 5,824 K 16,132 K 1560 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 0.16 4,936 K 15,536 K 1668 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 0.15 7,624 K 17,876 K 1568 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

TabTip.exe 0.15 3,732 K 15,164 K 5856

svchost.exe 0.15 3,788 K 12,384 K 1524 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 0.14 18,068 K 28,576 K 572 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

services.exe 0.13 3,964 K 7,472 K 724

ShellExperienceHost.exe 0.09 34,156 K 61,180 K 4828 Windows Shell Experience Host Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 0.06 6,848 K 27,284 K 4276 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

WUDFHost.exe 0.06 2,696 K 10,020 K 1964

SearchIndexer.exe 0.04 18,140 K 16,656 K 1808 Microsoft Windows Search Indexer Microsoft Corporation (Verified) Microsoft Windows

HPNetworkCommunicatorCom.exe 0.04 3,408 K 12,420 K 6584 HPNetworkCommunicatorCom Hewlett-Packard Development Company, LP (Verified) Hewlett Packard

csrss.exe 0.04 1,384 K 4,168 K 452

HPNetworkCommunicatorCom.exe 0.04 3,284 K 12,252 K 6224 HPNetworkCommunicatorCom Hewlett-Packard Development Company, LP (Verified) Hewlett Packard

Lenovo Transition.exe 0.03 9,744 K 26,932 K 4952 Lenovo (Verified) Lenovo (Beijing) Limited

taskhostw.exe 0.03 5,808 K 17,392 K 3208 Host Process for Windows Tasks Microsoft Corporation (Verified) Microsoft Windows

spoolsv.exe 0.02 9,892 K 25,244 K 1724 Spooler SubSystem App Microsoft Corporation (Verified) Microsoft Windows

ScanToPCActivationApp.exe 0.02 3,288 K 14,464 K 4948 ScanToPCActivationApp Hewlett-Packard Development Company, LP (Verified) Hewlett Packard

svchost.exe 0.02 4,792 K 17,564 K 2352 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

ScanToPCActivationApp.exe 0.02 3,328 K 14,576 K 3832 ScanToPCActivationApp Hewlett-Packard Development Company, LP (Verified) Hewlett Packard

svchost.exe 0.01 5,252 K 19,128 K 2336 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

WUDFHost.exe 0.01 25,152 K 16,316 K 1104

fmapp.exe 0.01 928 K 4,772 K 7052 FMAPP Application (Verified) Fortemedia Inc

backgroundTaskHost.exe 0.01 5,032 K 18,120 K 6152 Background Task Host Microsoft Corporation (Verified) Microsoft Windows

iPodService.exe 0.01 2,024 K 7,840 K 4744 iPodService Module (64-bit) Apple Inc. (Verified) Apple Inc.

svchost.exe < 0.01 2,416 K 9,496 K 1460 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

Memory Compression < 0.01 52 K 22,032 K 2556

svchost.exe < 0.01 7,416 K 20,856 K 76 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe < 0.01 2,596 K 11,288 K 2096 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

HPNetworkCommunicatorCom.exe < 0.01 3,184 K 12,168 K 7284 HPNetworkCommunicatorCom Hewlett-Packard Development Company, LP (Verified) Hewlett Packard

ScanToPCActivationApp.exe < 0.01 4,656 K 16,464 K 7232 ScanToPCActivationApp Hewlett-Packard Development Company, LP (Verified) Hewlett Packard

SynTPEnh.exe < 0.01 6,056 K 3,928 K 4080 Synaptics TouchPad 64-bit Enhancements Synaptics Incorporated (Verified) Synaptics Incorporated

iTunesHelper.exe < 0.01 3,824 K 14,900 K 7156 iTunesHelper Apple Inc. (Verified) Apple Inc.

wfcrun32.exe < 0.01 3,284 K 13,564 K 7556 Citrix Citrix Systems, Inc. (Verified) Citrix Systems

YouCamTray.exe 2,472 K 10,420 K 7472 CyberLink YouCam Tray CyberLink Corp. (A certificate was explicitly revoked by its issuer) CyberLink Corp.

yogaserver.exe 2,196 K 10,652 K 3748 (Verified) Lenovo (Beijing) Limited

winlogon.exe 2,344 K 10,248 K 668

wininit.exe 1,232 K 5,308 K 576

utility.exe 12,308 K 15,384 K 6688 Lenovo Battery Management Software Ver 8.0 Lenovo(beijing) Limited (Verified) Lenovo (Beijing) Limited

TabTip32.exe 1,196 K 4,736 K 5928

SynTPHelper.exe 924 K 820 K 356

svchost.exe 1,704 K 6,828 K 384 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,660 K 6,984 K 3236 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

sppsvc.exe 3,076 K 13,064 K 1676 Microsoft Software Protection Platform Service Microsoft Corporation (Verified) Microsoft Windows

smss.exe 420 K 1,128 K 324

smartscreen.exe 8,456 K 15,100 K 4248 SmartScreen Microsoft Corporation (Verified) Microsoft Windows

SkypeHost.exe Suspended 26,300 K 52,912 K 5408 Microsoft Skype Microsoft Corporation (No signature was present in the subject) Microsoft Corporation

SettingSyncHost.exe 8,980 K 7,604 K 5996 Host Process for Setting Synchronization Microsoft Corporation (Verified) Microsoft Windows

SearchUI.exe Suspended 44,872 K 86,264 K 5100 Search and Cortana application Microsoft Corporation (Verified) Microsoft Windows

procexp.exe 3,452 K 10,764 K 6108 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation

msosync.exe 9,532 K 22,524 K 608 Microsoft Office Document Cache Microsoft Corporation (Verified) Microsoft Corporation

MSASCuiL.exe 3,616 K 13,512 K 7016 Windows Defender notification icon Microsoft Corporation (Verified) Microsoft Windows

integratedoffice.exe 31,648 K 46,132 K 2392 Microsoft Office Click-to-Run Microsoft Corporation (Verified) Microsoft Corporation

hpwuschd2.exe 1,204 K 6,272 K 7828 hpwuSchd Application Hewlett-Packard (Verified) Hewlett-Packard Company

googledrivesync.exe 1,036 K 4,652 K 7044 Google Drive Google (Verified) Google Inc

fontdrvhost.exe 752 K 3,084 K 7988

Energy Management.exe 6,820 K 15,680 K 1288 Lenovo Energy Management Software 8.0 Lenovo (Beijing) Limited (Verified) Lenovo (Beijing) Limited

dasHost.exe 4,896 K 14,212 K 1940

concentr.exe 2,180 K 9,764 K 7492 Citrix online plug-in Connection Center Citrix Systems, Inc. (Verified) Citrix Systems

chrome.exe 3,016 K 9,676 K 6228 Google Chrome Google Inc. (Verified) Google Inc

chrome.exe 3,208 K 9,132 K 3840 Google Chrome Google Inc. (Verified) Google Inc

CAudioFilterAgent64.exe 2,072 K 8,688 K 7080 Conexant High Definition Audio Filter Agent Conexant Systems, Inc. (Verified) Conexant Systems

Process: explorer.exe Pid: 4452

Name Description Company Name Path Verified Signer

{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000013.db C:\Users\Michael\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000013.db (The form specified for the subject is not one supported or known by the specified trust provider)