Solved I think my system is infected, windows 10 guest user build automatically

FullStackDev · Jun 15, 2019

Fix result of Farbar Recovery Scan Tool (x64) Version: 05-06-2019
Ran by Administrator (15-06-2019 12:19:54) Run:1
Running from E:\TechSpot_Virus_Removal_Instructions\TechSpot Instruction
Loaded Profiles: Administrator (Available Profiles: Administrator)
Boot Mode: Normal
==============================================

fixlist content:
*****************
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2378293659-431221962-3870085809-500\...\MountPoints2: {94497376-2854-11e8-8b9a-9822ef5d28ca} - "G:\.\StartModem.exe"
GroupPolicy: Restriction ? <==== ATTENTION
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [No File]
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [No File]
S2 Memcached11211; C:\memcached\memcached.exe -d runservice -p 11211 [X]
U3 aswbdisk; no ImagePath
CustomCLSID: HKU\S-1-5-21-2378293659-431221962-3870085809-500_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\18.111.0603.0006\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2378293659-431221962-3870085809-500_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\18.111.0603.0006\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2378293659-431221962-3870085809-500_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\18.111.0603.0006\amd64\FileSyncShell64.dll => No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
FirewallRules: [TCP Query User{3A685FE8-F5AC-4F3A-BB27-081DD88F001D}E:\eclipse-java\eclipse\eclipse.exe] => (Allow) E:\eclipse-java\eclipse\eclipse.exe No File
FirewallRules: [UDP Query User{E364DFF8-FCAD-447B-9306-433451C7160D}E:\eclipse-java\eclipse\eclipse.exe] => (Allow) E:\eclipse-java\eclipse\eclipse.exe No File
FirewallRules: [TCP Query User{F953D62C-1BB2-4E82-81DB-F2CFE8F4322C}E:\xampp\mysql\bin\mysqld.exe] => (Allow) E:\xampp\mysql\bin\mysqld.exe No File
FirewallRules: [UDP Query User{A6DA7857-B515-4AB9-AB32-B7C33FFEAA45}E:\xampp\mysql\bin\mysqld.exe] => (Allow) E:\xampp\mysql\bin\mysqld.exe No File
FirewallRules: [{A4C7C420-60C7-41C4-9CC9-8029BADBA66B}] => (Block) E:\xampp\mysql\bin\mysqld.exe No File
FirewallRules: [{164140E8-4D9B-4066-BBC2-2357CFB0A1C7}] => (Block) E:\xampp\mysql\bin\mysqld.exe No File
FirewallRules: [TCP Query User{F60C26B2-E2D5-4645-A403-393E4B737E61}C:\everything-1.2.1.371.exe] => (Allow) C:\everything-1.2.1.371.exe No File
FirewallRules: [UDP Query User{A3B72C70-1F2F-4FA8-AE00-E1E52340CE1E}C:\everything-1.2.1.371.exe] => (Allow) C:\everything-1.2.1.371.exe No File
FirewallRules: [{0062DAFD-9C22-42FA-8A84-E7F88F00D04E}] => (Block) C:\everything-1.2.1.371.exe No File
FirewallRules: [{7083CDEB-14BE-40F6-ADE9-163998C56547}] => (Block) C:\everything-1.2.1.371.exe No File

*****************

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
HKU\S-1-5-21-2378293659-431221962-3870085809-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{94497376-2854-11e8-8b9a-9822ef5d28ca} => removed successfully
HKLM\Software\Classes\CLSID\{94497376-2854-11e8-8b9a-9822ef5d28ca} => not found
C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.45.2 => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2 => removed successfully
HKLM\System\CurrentControlSet\Services\Memcached11211 => removed successfully
Memcached11211 => service removed successfully
aswbdisk => service not found.
HKU\S-1-5-21-2378293659-431221962-3870085809-500_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => removed successfully
HKU\S-1-5-21-2378293659-431221962-3870085809-500_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => removed successfully
HKU\S-1-5-21-2378293659-431221962-3870085809-500_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3A685FE8-F5AC-4F3A-BB27-081DD88F001D}E:\eclipse-java\eclipse\eclipse.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E364DFF8-FCAD-447B-9306-433451C7160D}E:\eclipse-java\eclipse\eclipse.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F953D62C-1BB2-4E82-81DB-F2CFE8F4322C}E:\xampp\mysql\bin\mysqld.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A6DA7857-B515-4AB9-AB32-B7C33FFEAA45}E:\xampp\mysql\bin\mysqld.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A4C7C420-60C7-41C4-9CC9-8029BADBA66B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{164140E8-4D9B-4066-BBC2-2357CFB0A1C7}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F60C26B2-E2D5-4645-A403-393E4B737E61}C:\everything-1.2.1.371.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A3B72C70-1F2F-4FA8-AE00-E1E52340CE1E}C:\everything-1.2.1.371.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0062DAFD-9C22-42FA-8A84-E7F88F00D04E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7083CDEB-14BE-40F6-ADE9-163998C56547}" => removed successfully

The system needed a reboot.

==== End of Fixlog 12:20:05 ====

Broni · Jun 15, 2019

Last scans...

Download Security Check from here or here and save it to your Desktop.

Double-click SecurityCheck.exe
Follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.
NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.
NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run

Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.
Make sure the following options are checked:

Internet Services
Windows Firewall
System Restore
Security Center
Windows Update
Windows Defender
Other Services

Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.

Download Temp File Cleaner (TFC)
Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe

Double click on TFC.exe to run the program.
Click on Start button to begin cleaning process.
TFC will close all running programs, and it may ask you to restart computer.

Download Sophos Free Virus Removal Tool and save it to your desktop.

Double click the icon and select Run
Click Next
Select I accept the terms in this license agreement, then click Next twice
Click Install
Click Finish to launch the program
Once the virus database has been updated click Start Scanning
If any threats are found click Details, then View log file... (bottom left hand corner)
Copy and paste the results in your reply
Close the Notepad document, close the Threat Details screen, then click Start cleanup
Click Exit to close the program

FullStackDev · Jun 16, 2019

Download all 4 tools and here the results.
Sophos VIrus Removal Take 8 Hours To Complete

FullStackDev · Jun 16, 2019

Results of screen317's Security Check version 1.014 --- 12/23/15
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Windows Firewall Disabled!
Windows Defender
ESET Smart Security
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Java version 32-bit out of Date!
Adobe Flash Player 31.0.0.122
````````Process Check: objlist.exe by Laurent````````
ESET NOD32 Antivirus egui.exe
ESET NOD32 Antivirus ekrn.exe
TechSpot Instruction SecurityCheck.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````

FullStackDev · Jun 16, 2019

Farbar Service Scanner Version: 27-01-2016
Ran by Administrator (administrator) on 16-06-2019 at 10:56:25
Running from "E:\TechSpot_Virus_Removal_Instructions\TechSpot Instruction"
Microsoft Windows 10 Enterprise (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Attempt to access Google IP returned error. Google IP is unreachable
Attempt to access Google.com returned error: Other errors
Attempt to access Yahoo.com returned error: Other errors

Windows Firewall:
=============

Firewall Disabled Policy:
==================
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall"=DWORD:0

System Restore:
============

System Restore Policy:
========================

Security Center:
============

Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is set to Demand. The default start type is Auto.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv service is OK.

Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend: ""C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MsMpEng.exe"".

Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1

Other Services:
==============

File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed

**** End of log ****

FullStackDev · Jun 16, 2019

2019-06-16 06:31:01.426 Sophos Virus Removal Tool version 2.7.0
2019-06-16 06:31:01.426 Copyright (c) 2009-2018 Sophos Limited. All rights reserved.

2019-06-16 06:31:01.426 This tool will scan your computer for viruses and other threats. If it finds any, it will give you the option to remove them.

2019-06-16 06:31:01.426 Windows version 6.2 SP 0.0 build 9200 SM=0x100 PT=0x1 WOW64
2019-06-16 06:31:01.426 Checking for updates...
2019-06-16 06:31:01.457 Update progress: proxy server not available
2019-06-16 06:31:03.051 Update error: failed to read remote metadata (error 4)
[V46381] SU::Handle::readRemoteMetadata + SU::Handle::readRemoteMetadata()
[V75884] SU::Metadata::readRemoteMetadata SU::Metadata::readRemoteMetadata()
[I40394] Downloading customer file from sophos:1:1
[V81533] SU::createCachedPackageSource creating cached package source for sophos:1:1: url=SOPHOS
[V81533] SU::createCachedPackageSource creating http_source_specific_data to download customer file
[V81533] SU::createCachedPackageSource creating package source to download customer file
[E26245] Error fetching data from http://dci.sophosupd.com/update/1/6c/16c4d85f89f044ddac3c52b38fad4968.dat: WinHttpSendRequest (error 12007)
[I26245] No proxy was used.
[I40394] Downloading customer file from sophos:2:1
[V81533] SU::createCachedPackageSource creating cached package source for sophos:2:1: url=SOPHOS
[V81533] SU::createCachedPackageSource creating http_source_specific_data to download customer file
[V81533] SU::createCachedPackageSource creating package source to download customer file
[E26245] Error fetching data from http://dci.sophosupd.net/update/1/6c/16c4d85f89f044ddac3c52b38fad4968.dat: WinHttpSendRequest (error 12007)
[I26245] No proxy was used.
[I40394] Downloading customer file from sophos:3:1
[V81533] SU::createCachedPackageSource creating cached package source for sophos:3:1: url=SOPHOS
[V81533] SU::createCachedPackageSource creating http_source_specific_data to download customer file
[V81533] SU::createCachedPackageSource creating package source to download customer file
[E75373] Ran out of sophos aliases for this update source
[E35369] Out of update sources
[E99999] Out of sources
2019-06-16 06:31:17.802 Option all = no
2019-06-16 06:31:17.802 Option recurse = yes
2019-06-16 06:31:17.802 Option archive = no
2019-06-16 06:31:17.802 Option service = yes
2019-06-16 06:31:17.802 Option confirm = yes
2019-06-16 06:31:17.802 Option sxl = yes
2019-06-16 06:31:17.802 Option max-data-age = 35
2019-06-16 06:31:17.802 Option vdl-logging = yes
2019-06-16 06:31:17.818 Customer ID: 094260ca9b3af99f9d4a3909fc47a743
2019-06-16 06:31:17.818 Machine ID: 192a8885cf364650979e0916d821d65f
2019-06-16 06:31:17.818 Component SVRTcli.exe version 2.7.0
2019-06-16 06:31:17.818 Component control.dll version 2.7.0
2019-06-16 06:31:17.818 Component SVRTservice.exe version 2.7.0
2019-06-16 06:31:17.818 Component engine\osdp.dll version 1.44.1.2443
2019-06-16 06:31:17.818 Component engine\veex.dll version 3.75.0.2443
2019-06-16 06:31:17.818 Component engine\savi.dll version 9.0.13.2443
2019-06-16 06:31:17.818 Component rkdisk.dll version 1.5.33.1
2019-06-16 06:31:17.818 Version info: Product version 2.7.0
2019-06-16 06:31:17.818 Version info: Detection engine 3.75.0
2019-06-16 06:31:17.818 Version info: Detection data 5.61
2019-06-16 06:31:17.818 Version info: Build date 3/12/2019
2019-06-16 06:31:17.818 Version info: Data files added 487
2019-06-16 06:31:17.818 Version info: Last successful update (not yet updated)
2019-06-16 06:31:37.711 Error level 1

2019-06-16 06:31:37.711 Scan completed.
2019-06-16 06:31:37.711

------------------------------------------------------------

2019-06-16 06:31:41.539 Sophos Virus Removal Tool version 2.7.0
2019-06-16 06:31:41.539 Copyright (c) 2009-2018 Sophos Limited. All rights reserved.

2019-06-16 06:31:41.539 This tool will scan your computer for viruses and other threats. If it finds any, it will give you the option to remove them.

2019-06-16 06:31:41.539 Windows version 6.2 SP 0.0 build 9200 SM=0x100 PT=0x1 WOW64
2019-06-16 06:31:41.539 Checking for updates...
2019-06-16 06:31:41.555 Update progress: proxy server not available
2019-06-16 06:31:59.177 Option all = no
2019-06-16 06:31:59.177 Option recurse = yes
2019-06-16 06:31:59.177 Option archive = no
2019-06-16 06:31:59.177 Option service = yes
2019-06-16 06:31:59.177 Option confirm = yes
2019-06-16 06:31:59.177 Option sxl = yes
2019-06-16 06:31:59.192 Option max-data-age = 35
2019-06-16 06:31:59.192 Option vdl-logging = yes
2019-06-16 06:31:59.192 Customer ID: 094260ca9b3af99f9d4a3909fc47a743
2019-06-16 06:31:59.192 Machine ID: 192a8885cf364650979e0916d821d65f
2019-06-16 06:31:59.208 Component SVRTcli.exe version 2.7.0
2019-06-16 06:31:59.208 Component control.dll version 2.7.0
2019-06-16 06:31:59.208 Component SVRTservice.exe version 2.7.0
2019-06-16 06:31:59.208 Component engine\osdp.dll version 1.44.1.2443
2019-06-16 06:31:59.208 Component engine\veex.dll version 3.75.0.2443
2019-06-16 06:31:59.208 Component engine\savi.dll version 9.0.13.2443
2019-06-16 06:31:59.208 Component rkdisk.dll version 1.5.33.1
2019-06-16 06:31:59.208 Version info: Product version 2.7.0
2019-06-16 06:31:59.208 Version info: Detection engine 3.75.0
2019-06-16 06:31:59.208 Version info: Detection data 5.61
2019-06-16 06:31:59.208 Version info: Build date 3/12/2019
2019-06-16 06:31:59.208 Version info: Data files added 487
2019-06-16 06:31:59.208 Version info: Last successful update (not yet updated)
2019-06-16 06:32:08.498 Update error: invalid login credentials (error 5)
[V46381] SU::Handle::readRemoteMetadata + SU::Handle::readRemoteMetadata()
[V75884] SU::Metadata::readRemoteMetadata SU::Metadata::readRemoteMetadata()
[I40394] Downloading customer file from sophos:1:1
[V81533] SU::createCachedPackageSource creating cached package source for sophos:1:1: url=SOPHOS
[V81533] SU::createCachedPackageSource creating http_source_specific_data to download customer file
[V81533] SU::createCachedPackageSource creating package source to download customer file
[E19127] Couldn't find DCI for user. URL was: http://dci.sophosupd.com/update
[I19127] No proxy was used.
[I40394] Downloading customer file from sophos:2:1
[V81533] SU::createCachedPackageSource creating cached package source for sophos:2:1: url=SOPHOS
[V81533] SU::createCachedPackageSource creating http_source_specific_data to download customer file
[V81533] SU::createCachedPackageSource creating package source to download customer file
[E19127] Couldn't find DCI for user. URL was: http://dci.sophosupd.net/update
[I19127] No proxy was used.
[I40394] Downloading customer file from sophos:3:1
[V81533] SU::createCachedPackageSource creating cached package source for sophos:3:1: url=SOPHOS
[V81533] SU::createCachedPackageSource creating http_source_specific_data to download customer file
[V81533] SU::createCachedPackageSource creating package source to download customer file
[E75373] Ran out of sophos aliases for this update source
[E72139] Couldn't find DCI for user. URL was: http://dci.sophosupd.net/update
[I72139] No proxy was used.
[E54187] Couldn't find DCI for user. URL was: http://dci.sophosupd.net/update

2019-06-16 09:52:13.511 Could not open C:\hiberfil.sys
2019-06-16 10:07:27.328 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\acpidev.inf
2019-06-16 10:07:27.328 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\acpipagr.inf
2019-06-16 10:07:27.343 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\acpitime.inf
2019-06-16 10:07:27.343 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\battery.inf
2019-06-16 10:07:27.343 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\cmbatt.inf
2019-06-16 10:07:27.343 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_1394.inf
2019-06-16 10:07:27.359 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_61883.inf
2019-06-16 10:07:27.359 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_apo.inf
2019-06-16 10:07:27.359 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_avc.inf
2019-06-16 10:07:27.359 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_battery.inf
2019-06-16 10:07:27.359 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_biometric.inf
2019-06-16 10:07:27.359 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_bluetooth.inf
2019-06-16 10:07:27.359 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_camera.inf
2019-06-16 10:07:27.375 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_cdrom.inf
2019-06-16 10:07:27.375 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_computer.inf
2019-06-16 10:07:27.375 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_diskdrive.inf
2019-06-16 10:07:27.375 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_display.inf
2019-06-16 10:07:27.375 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_dot4.inf
2019-06-16 10:07:27.375 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_dot4print.inf
2019-06-16 10:07:27.375 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_extension.inf
2019-06-16 10:07:27.390 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fdc.inf
2019-06-16 10:07:27.390 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_firmware.inf
2019-06-16 10:07:27.390 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_floppydisk.inf
2019-06-16 10:07:27.390 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fsactivitymonitor.inf
2019-06-16 10:07:27.390 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fsantivirus.inf
2019-06-16 10:07:27.390 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fscfsmetadataserver.inf
2019-06-16 10:07:27.390 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fscompression.inf
2019-06-16 10:07:27.406 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fscontentscreener.inf
2019-06-16 10:07:27.406 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fscontinuousbackup.inf
2019-06-16 10:07:27.406 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fscopyprotection.inf
2019-06-16 10:07:27.406 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fsencryption.inf
2019-06-16 10:07:27.406 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fshsm.inf
2019-06-16 10:07:27.406 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fsinfrastructure.inf
2019-06-16 10:07:27.406 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fsopenfilebackup.inf
2019-06-16 10:07:27.421 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fsphysicalquotamgmt.inf
2019-06-16 10:07:27.421 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fsquotamgmt.inf
2019-06-16 10:07:27.421 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fsreplication.inf
2019-06-16 10:07:27.421 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fssecurityenhancer.inf
2019-06-16 10:07:27.421 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fssystem.inf
2019-06-16 10:07:27.421 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fssystemrecovery.inf
2019-06-16 10:07:27.421 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fsundelete.inf
2019-06-16 10:07:27.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_fsvirtualization.inf
2019-06-16 10:07:27.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_hdc.inf
2019-06-16 10:07:27.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_hidclass.inf
2019-06-16 10:07:27.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_image.inf
2019-06-16 10:07:27.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_infrared.inf
2019-06-16 10:07:27.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_keyboard.inf
2019-06-16 10:07:27.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_legacydriver.inf
2019-06-16 10:07:27.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_mcx.inf
2019-06-16 10:07:27.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_media.inf
2019-06-16 10:07:27.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_mediumchanger.inf
2019-06-16 10:07:27.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_memory.inf
2019-06-16 10:07:27.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_modem.inf
2019-06-16 10:07:27.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_monitor.inf
2019-06-16 10:07:27.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_mouse.inf
2019-06-16 10:07:27.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_mtd.inf
2019-06-16 10:07:27.468 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_multifunction.inf
2019-06-16 10:07:27.468 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_multiportserial.inf
2019-06-16 10:07:27.468 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_net.inf
2019-06-16 10:07:27.468 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_netdriver.inf
2019-06-16 10:07:27.468 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_netservice.inf
2019-06-16 10:07:27.468 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_nettrans.inf
2019-06-16 10:07:27.468 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_pcmcia.inf
2019-06-16 10:07:27.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_pnpprinters.inf
2019-06-16 10:07:27.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_ports.inf
2019-06-16 10:07:27.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_printer.inf
2019-06-16 10:07:27.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_processor.inf
2019-06-16 10:07:27.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_proximity.inf
2019-06-16 10:07:27.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_sbp2.inf
2019-06-16 10:07:27.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_scmdisk.inf
2019-06-16 10:07:27.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_scmvolume.inf
2019-06-16 10:07:27.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_scsiadapter.inf
2019-06-16 10:07:27.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_sdhost.inf
2019-06-16 10:07:27.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_securitydevices.inf
2019-06-16 10:07:27.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_sensor.inf
2019-06-16 10:07:27.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_smartcard.inf
2019-06-16 10:07:27.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_smartcardfilter.inf
2019-06-16 10:07:27.515 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_smartcardreader.inf
2019-06-16 10:07:27.515 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_smrdisk.inf
2019-06-16 10:07:27.515 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_smrvolume.inf
2019-06-16 10:07:27.515 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_sslaccel.inf
2019-06-16 10:07:27.515 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_swcomponent.inf
2019-06-16 10:07:27.515 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_swdevice.inf
2019-06-16 10:07:27.515 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_system.inf
2019-06-16 10:07:27.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_tapedrive.inf
2019-06-16 10:07:27.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_unknown.inf
2019-06-16 10:07:27.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_usb.inf
2019-06-16 10:07:27.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_usbdevice.inf
2019-06-16 10:07:27.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_usbfn.inf
2019-06-16 10:07:27.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_volsnap.inf
2019-06-16 10:07:27.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_volume.inf
2019-06-16 10:07:27.546 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\c_wceusbs.inf
2019-06-16 10:07:27.562 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\hal.inf
2019-06-16 10:07:27.562 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\halextintclpiodma.inf
2019-06-16 10:07:27.562 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\halextpl080.inf
2019-06-16 10:07:27.562 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\kdnic.inf
2019-06-16 10:07:27.578 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\mssmbios.inf
2019-06-16 10:07:27.593 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\ndisuio.inf
2019-06-16 10:07:27.593 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\npsvctrig.inf
2019-06-16 10:07:27.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\scmvolume.inf
2019-06-16 10:07:27.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\smrdisk.inf
2019-06-16 10:07:27.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\smrvolume.inf
2019-06-16 10:07:27.640 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\INF\volume.inf
2019-06-16 10:07:27.921 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\adtschema.dll
2019-06-16 10:07:27.984 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\advapi32res.dll
2019-06-16 10:07:28.015 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ARP.EXE
2019-06-16 10:07:28.015 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\attrib.exe
2019-06-16 10:07:28.015 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\auditpol.exe
2019-06-16 10:07:28.031 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\auditpolcore.dll
2019-06-16 10:07:28.046 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\autochk.exe
2019-06-16 10:07:28.046 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\basesrv.dll
2019-06-16 10:07:28.046 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\bcd.dll
2019-06-16 10:07:28.218 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\bootstr.dll
2019-06-16 10:07:28.218 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\BOOTVID.DLL
2019-06-16 10:07:28.234 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\cabapi.dll
2019-06-16 10:07:28.234 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\cabinet.dll
2019-06-16 10:07:28.812 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\certca.dll
2019-06-16 10:07:28.812 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\certcli.dll
2019-06-16 10:07:28.812 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\CertEnroll.dll
2019-06-16 10:07:28.812 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\CertEnrollCtrl.exe
2019-06-16 10:07:28.828 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\CExecSvc.exe
2019-06-16 10:07:28.828 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\cfgmgr32.dll
2019-06-16 10:07:28.828 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\cfmifs.dll
2019-06-16 10:07:28.828 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\cfmifsproxy.dll
2019-06-16 10:07:28.828 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\chkdsk.exe
2019-06-16 10:07:28.859 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\cmd.exe
2019-06-16 10:07:28.984 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\config\BCD-Template
2019-06-16 10:07:29.047 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\conkbd.dll
2019-06-16 10:07:29.125 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\cryptbase.dll
2019-06-16 10:07:29.140 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\cryptdll.dll
2019-06-16 10:07:29.140 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\cryptnet.dll
2019-06-16 10:07:29.140 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\cryptsp.dll
2019-06-16 10:07:29.140 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\cryptsvc.dll
2019-06-16 10:07:29.156 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\csrsrv.dll
2019-06-16 10:07:29.156 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\csrss.exe
2019-06-16 10:07:29.156 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\cupdate.exe
2019-06-16 10:07:29.218 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\dabapi.dll
2019-06-16 10:07:29.218 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\dbgcore.dll
2019-06-16 10:07:29.281 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\dbghelp.dll
2019-06-16 10:07:29.328 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\devobj.dll
2019-06-16 10:07:29.328 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\devrtl.dll
2019-06-16 10:07:29.343 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\dfscli.dll
2019-06-16 10:07:29.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\DiskSnapshot.exe
2019-06-16 10:07:29.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\dllhost.exe
2019-06-16 10:07:29.547 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\dpapi.dll
2019-06-16 10:07:29.547 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\dpapisrv.dll
2019-06-16 10:07:29.547 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\dpx.dll
2019-06-16 10:07:29.640 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\AcpiDev.sys
2019-06-16 10:07:29.640 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\acpiex.sys
2019-06-16 10:07:29.640 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\acpipagr.sys
2019-06-16 10:07:29.640 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\acpitime.sys
2019-06-16 10:07:29.750 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\battc.sys
2019-06-16 10:07:29.750 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\CEA.sys
2019-06-16 10:07:29.750 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\Classpnp.sys
2019-06-16 10:07:29.750 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\ClipSp.sys
2019-06-16 10:07:29.765 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\CmBatt.sys
2019-06-16 10:07:29.781 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\condrv.sys
2019-06-16 10:07:29.797 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\crashdmp.sys
2019-06-16 10:07:29.859 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\Dumpata.sys
2019-06-16 10:07:29.890 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\exfat.sys
2019-06-16 10:07:29.890 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\fastfat.sys
2019-06-16 10:07:30.281 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\hwpolicy.sys
2019-06-16 10:07:30.422 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\kdnic.sys
2019-06-16 10:07:30.562 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\mssmbios.sys
2019-06-16 10:07:30.719 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\NetAdapterCx.sys
2019-06-16 10:07:30.750 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\npsvctrig.sys
2019-06-16 10:07:30.937 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\SleepStudyHelper.sys
2019-06-16 10:07:31.109 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\tdi.sys
2019-06-16 10:07:31.156 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\VerifierExt.sys
2019-06-16 10:07:31.203 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\volume.sys
2019-06-16 10:07:31.203 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\Wdf01000.sys
2019-06-16 10:07:31.203 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\WdfLdr.sys
2019-06-16 10:07:31.203 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\werkernel.sys
2019-06-16 10:07:31.219 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\wmilib.sys
2019-06-16 10:07:31.219 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\WppRecorder.sys
2019-06-16 10:07:31.219 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\WUDFPf.sys
2019-06-16 10:07:31.219 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\drivers\WUDFRd.sys
2019-06-16 10:07:31.219 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\dsparse.dll
2019-06-16 10:07:31.219 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\dsrole.dll
2019-06-16 10:07:31.219 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\dssenh.dll
2019-06-16 10:07:31.422 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\adtschema.dll.mui
2019-06-16 10:07:31.422 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\advapi32res.dll.mui
2019-06-16 10:07:31.422 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\arp.exe.mui
2019-06-16 10:07:31.422 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\attrib.exe.mui

Broni · Jun 16, 2019

Your computer is clean https://www.bleepstatic.com/fhost/uploads/6/snag-0004.jpg[/URL]]

1. This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
[COLOR=#ff0000][B]This is a very crucial step so make sure you don't skip it.[/B][/COLOR]
Download [IMG]http://www.imgdumper.nl/uploads6/51a5ce45267c1/51a5ce45263de-delfix.pngDelFix by Xplode to your desktop. Delfix will delete all the used tools and logfiles.

Double-click Delfix.exe to start the tool.
Make sure the following items are checked:

Activate UAC (optional; some users prefer to keep it off)
Remove disinfection tools
Create registry backup
Purge System Restore
Reset system settings

Now click "Run" and wait patiently.
Once finished a logfile will be created. You don't have to attach it to your next reply.

2. Make sure Windows Updates are current.

3. If any trojans, rootkits or bootkits were listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

4. Check if your browser plugins are up to date.
Firefox - https://www.mozilla.org/en-US/plugincheck/
other browsers: https://browsercheck.qualys.com/ (click on "Scan without installing plugin" and then on "Scan now")

5. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

6. Run Temporary File Cleaner (TFC) and AdwCleaner weekly (you need to redownload these tools since they were removed by DelFix).

7. (optional) If you want to keep all your programs up to date, download and install FileHippo App Manager.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

8. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

9. Read:
How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html
Simple and easy ways to keep your computer safe and secure on the Internet: http://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/
About those Toolbars and Add-ons - Potentially Unwanted Programs (PUPs) which change your browser settings: http://www.bleepingcomputer.com/for...curity-questions-best-practices/#entry3187642

10. Please, let me know, how your computer is doing.

FullStackDev · Jun 16, 2019

2019-06-16 10:07:31.422 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\auditpol.exe.mui
2019-06-16 10:07:31.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\auditpolcore.dll.mui
2019-06-16 10:07:31.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\autochk.exe.mui
2019-06-16 10:07:31.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\bcdedit.exe.mui
2019-06-16 10:07:31.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\bcrypt.dll.mui
2019-06-16 10:07:31.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\bootstr.dll.mui
2019-06-16 10:07:31.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\BrokerLib.dll.mui
2019-06-16 10:07:31.437 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\certca.dll.mui
2019-06-16 10:07:31.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\certcli.dll.mui
2019-06-16 10:07:31.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\CertEnroll.dll.mui
2019-06-16 10:07:31.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\CertEnrollCtrl.exe.mui
2019-06-16 10:07:31.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\chkdsk.exe.mui
2019-06-16 10:07:31.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ci.dll.mui
2019-06-16 10:07:31.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\cmd.exe.mui
2019-06-16 10:07:31.453 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\combase.dll.mui
2019-06-16 10:07:31.469 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\crypt32.dll.mui
2019-06-16 10:07:31.469 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\cryptsvc.dll.mui
2019-06-16 10:07:31.469 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\csrsrv.dll.mui
2019-06-16 10:07:31.469 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\csrss.exe.mui
2019-06-16 10:07:31.469 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\dab.dll.mui
2019-06-16 10:07:31.469 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\dabapi.dll.mui
2019-06-16 10:07:31.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\dhcpcore.dll.mui
2019-06-16 10:07:31.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\dhcpcore6.dll.mui
2019-06-16 10:07:31.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\dhcpcsvc.dll.mui
2019-06-16 10:07:31.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\dhcpcsvc6.dll.mui
2019-06-16 10:07:31.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\diagtrack.dll.mui
2019-06-16 10:07:31.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\dnsapi.dll.mui
2019-06-16 10:07:31.484 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\dnsrslvr.dll.mui
2019-06-16 10:07:31.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\dpapisrv.dll.mui
2019-06-16 10:07:31.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\dssenh.dll.mui
2019-06-16 10:07:31.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ESENT.dll.mui
2019-06-16 10:07:31.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ETWESEProviderResources.dll.mui
2019-06-16 10:07:31.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\expand.exe.mui
2019-06-16 10:07:31.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\faultrep.dll.mui
2019-06-16 10:07:31.500 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\findstr.exe.mui
2019-06-16 10:07:31.516 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\finger.exe.mui
2019-06-16 10:07:31.516 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\FirewallAPI.dll.mui
2019-06-16 10:07:31.516 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\FlightSettings.dll.mui
2019-06-16 10:07:31.516 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\fltlib.dll.mui
2019-06-16 10:07:31.516 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\fltMC.exe.mui
2019-06-16 10:07:31.516 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\hostname.exe.mui
2019-06-16 10:07:31.516 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ICacls.exe.mui
2019-06-16 10:07:31.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ifmon.dll.mui
2019-06-16 10:07:31.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\iologmsg.dll.mui
2019-06-16 10:07:31.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ipconfig.exe.mui
2019-06-16 10:07:31.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\iphlpapi.dll.mui
2019-06-16 10:07:31.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\KdsCli.dll.mui
2019-06-16 10:07:31.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\kerberos.dll.mui
2019-06-16 10:07:31.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\kernel32legacy.dll.mui
2019-06-16 10:07:31.562 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\keyiso.dll.mui
2019-06-16 10:07:31.578 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\lmhsvc.dll.mui
2019-06-16 10:07:31.578 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\loadperf.dll.mui
2019-06-16 10:07:31.594 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\lodctr.exe.mui
2019-06-16 10:07:31.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\microsoft-windows-battery-events.dll.mui
2019-06-16 10:07:31.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\microsoft-windows-hal-events.dll.mui
2019-06-16 10:07:31.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\microsoft-windows-kernel-pnp-events.dll.mui
2019-06-16 10:07:31.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\microsoft-windows-kernel-power-events.dll.mui
2019-06-16 10:07:31.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\microsoft-windows-kernel-processor-power-events.dll.mui
2019-06-16 10:07:31.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\microsoft-windows-pdc.dll.mui
2019-06-16 10:07:31.625 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\microsoft-windows-processor-aggregator-events.dll.mui
2019-06-16 10:07:31.625 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\microsoft-windows-system-events.dll.mui
2019-06-16 10:07:31.625 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\mintdh.dll.mui
2019-06-16 10:07:31.625 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\mountvol.exe.mui
2019-06-16 10:07:31.625 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\mpr.dll.mui
2019-06-16 10:07:31.625 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\mpsdrv.sys.mui
2019-06-16 10:07:31.625 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\mpssvc.dll.mui
2019-06-16 10:07:31.641 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\mrinfo.exe.mui
2019-06-16 10:07:31.641 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\msaudite.dll.mui
2019-06-16 10:07:31.641 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\msobjs.dll.mui
2019-06-16 10:07:31.641 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\msprivs.dll.mui
2019-06-16 10:07:31.641 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\msv1_0.dll.mui
2019-06-16 10:07:31.641 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\mswsock.dll.mui
2019-06-16 10:07:31.641 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\msxml6r.dll.mui
2019-06-16 10:07:31.656 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ncrypt.dll.mui
2019-06-16 10:07:31.656 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ncryptprov.dll.mui
2019-06-16 10:07:31.672 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\neth.dll.mui
2019-06-16 10:07:31.672 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\netiohlp.dll.mui
2019-06-16 10:07:31.672 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\netlogon.dll.mui
2019-06-16 10:07:31.687 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\netmsg.dll.mui
2019-06-16 10:07:31.687 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\NetSetupSvc.dll.mui
2019-06-16 10:07:31.687 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\netsh.exe.mui
2019-06-16 10:07:31.687 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\netstat.exe.mui
2019-06-16 10:07:31.687 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\NIHOST.exe.mui
2019-06-16 10:07:31.687 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\nsisvc.dll.mui
2019-06-16 10:07:31.687 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\NSRC.exe.mui
2019-06-16 10:07:31.703 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ntasn1.dll.mui
2019-06-16 10:07:31.719 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ntlanman.dll.mui
2019-06-16 10:07:31.719 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ntmarta.dll.mui
2019-06-16 10:07:31.734 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\pathping.exe.mui
2019-06-16 10:07:31.734 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\pcwum.dll.mui
2019-06-16 10:07:31.734 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\pdh.dll.mui
2019-06-16 10:07:31.734 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\perfctrs.dll.mui
2019-06-16 10:07:31.734 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\perfdisk.dll.mui
2019-06-16 10:07:31.734 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\perfnet.dll.mui
2019-06-16 10:07:31.734 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\perfos.dll.mui
2019-06-16 10:07:31.750 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\perfproc.dll.mui
2019-06-16 10:07:31.750 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ping.exe.mui
2019-06-16 10:07:31.750 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\poqexec.exe.mui
2019-06-16 10:07:31.750 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\powrprof.dll.mui
2019-06-16 10:07:31.750 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\profsvc.dll.mui
2019-06-16 10:07:31.750 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\pshed.dll.mui
2019-06-16 10:07:31.750 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\rdrleakdiag.exe.mui
2019-06-16 10:07:31.766 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\reg.exe.mui
2019-06-16 10:07:31.766 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\regsvr32.exe.mui
2019-06-16 10:07:31.766 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\route.exe.mui
2019-06-16 10:07:31.766 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\RpcEpMap.dll.mui
2019-06-16 10:07:31.766 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\rpcrt4.dll.mui
2019-06-16 10:07:31.766 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\rsaenh.dll.mui
2019-06-16 10:07:31.766 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\samsrv.dll.mui
2019-06-16 10:07:31.781 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\sc.exe.mui
2019-06-16 10:07:31.781 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\schannel.dll.mui
2019-06-16 10:07:31.781 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\schedsvc.dll.mui
2019-06-16 10:07:31.781 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\schtasks.exe.mui
2019-06-16 10:07:31.781 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\sechost.dll.mui
2019-06-16 10:07:31.781 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\seclogon.dll.mui
2019-06-16 10:07:31.781 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\services.exe.mui
2019-06-16 10:07:31.797 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\setx.exe.mui
2019-06-16 10:07:31.797 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\SHCore.dll.mui
2019-06-16 10:07:31.797 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\smss.exe.mui
2019-06-16 10:07:31.797 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\sort.exe.mui
2019-06-16 10:07:31.797 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\srvsvc.dll.mui
2019-06-16 10:07:31.797 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\sscore.dll.mui
2019-06-16 10:07:31.797 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\svchost.exe.mui
2019-06-16 10:07:31.812 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\SystemEventsBrokerServer.dll.mui
2019-06-16 10:07:31.812 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\taskhostw.exe.mui
2019-06-16 10:07:31.812 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\taskschd.dll.mui
2019-06-16 10:07:31.812 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\tdh.dll.mui
2019-06-16 10:07:31.812 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\TimeBrokerServer.dll.mui
2019-06-16 10:07:31.812 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\tracert.exe.mui
2019-06-16 10:07:31.828 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ubpm.dll.mui
2019-06-16 10:07:31.844 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ulib.dll.mui
2019-06-16 10:07:31.844 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\umpo.dll.mui
2019-06-16 10:07:31.844 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\unlodctr.exe.mui
2019-06-16 10:07:31.844 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\userenv.dll.mui
2019-06-16 10:07:31.844 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\userinit.exe.mui
2019-06-16 10:07:31.844 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\usermgr.dll.mui
2019-06-16 10:07:31.844 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\VaultCli.dll.mui
2019-06-16 10:07:31.859 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\vaultsvc.dll.mui
2019-06-16 10:07:31.859 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\webio.dll.mui
2019-06-16 10:07:31.859 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\webservices.dll.mui
2019-06-16 10:07:31.859 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\Websocket.dll.mui
2019-06-16 10:07:31.859 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wer.dll.mui
2019-06-16 10:07:31.859 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\WerFault.exe.mui
2019-06-16 10:07:31.859 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\WerFaultSecure.exe.mui
2019-06-16 10:07:31.875 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wersvc.dll.mui
2019-06-16 10:07:31.875 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wevtapi.dll.mui
2019-06-16 10:07:31.875 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wevtsvc.dll.mui
2019-06-16 10:07:31.875 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wevtutil.exe.mui
2019-06-16 10:07:31.875 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\winhttp.dll.mui
2019-06-16 10:07:31.875 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wininit.exe.mui
2019-06-16 10:07:31.875 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\winnlsres.dll.mui
2019-06-16 10:07:31.891 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\winsrv.dll.mui
2019-06-16 10:07:31.891 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wintypes.dll.mui
2019-06-16 10:07:31.891 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wkssvc.dll.mui
2019-06-16 10:07:31.891 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wldap32.dll.mui
2019-06-16 10:07:31.891 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wldp.dll.mui
2019-06-16 10:07:31.891 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\ws2_32.dll.mui
2019-06-16 10:07:31.891 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wship6.dll.mui
2019-06-16 10:07:31.906 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wshtcpip.dll.mui
2019-06-16 10:07:31.906 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wsock32.dll.mui
2019-06-16 10:07:31.906 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\WUDFHost.exe.mui
2019-06-16 10:07:31.906 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\en-US\wudfplatform.dll.mui
2019-06-16 10:07:31.906 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\EncDump.dll
2019-06-16 10:07:31.906 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\esent.dll
2019-06-16 10:07:31.922 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ETWESEProviderResources.dll
2019-06-16 10:07:31.922 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\EtwRundown.dll
2019-06-16 10:07:31.922 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\EventAggregation.dll
2019-06-16 10:07:31.922 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\expand.exe
2019-06-16 10:07:31.922 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\Faultrep.dll
2019-06-16 10:07:31.922 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\findstr.exe
2019-06-16 10:07:31.922 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\finger.exe
2019-06-16 10:07:31.953 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\FlightSettings.dll
2019-06-16 10:07:31.953 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\fltLib.dll
2019-06-16 10:07:31.953 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\fltMC.exe
2019-06-16 10:07:31.953 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\fmifs.dll
2019-06-16 10:07:31.953 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\format.com
2019-06-16 10:07:32.203 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\fwmdmcsp.dll
2019-06-16 10:07:32.219 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\gmsaclient.dll
2019-06-16 10:07:32.250 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\HalExtIntcLpioDMA.dll
2019-06-16 10:07:32.250 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\HalExtPL080.dll
2019-06-16 10:07:32.250 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\HOSTNAME.EXE
2019-06-16 10:07:32.250 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\icacls.exe
2019-06-16 10:07:32.266 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\icmp.dll
2019-06-16 10:07:32.266 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ifmon.dll
2019-06-16 10:07:32.281 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ifsutil.dll
2019-06-16 10:07:32.281 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\imagehlp.dll
2019-06-16 10:07:32.281 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\inetmib1.dll
2019-06-16 10:07:32.281 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\iologmsg.dll
2019-06-16 10:07:32.281 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ipconfig.exe
2019-06-16 10:07:32.281 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\IPHLPAPI.DLL
2019-06-16 10:07:32.281 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\KBDUS.DLL
2019-06-16 10:07:32.297 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\kd.dll
2019-06-16 10:07:32.297 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\kdcom.dll
2019-06-16 10:07:32.313 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\KdsCli.dll
2019-06-16 10:07:32.344 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\KerbClientShared.dll
2019-06-16 10:07:32.359 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\kernel32legacy.dll
2019-06-16 10:07:32.438 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\KernelTraceControl.dll
2019-06-16 10:07:32.469 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\loadperf.dll
2019-06-16 10:07:32.469 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\lodctr.exe
2019-06-16 10:07:32.531 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\lz32.dll
2019-06-16 10:07:32.547 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\microsoft-windows-battery-events.dll
2019-06-16 10:07:32.547 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\microsoft-windows-hal-events.dll
2019-06-16 10:07:32.547 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\microsoft-windows-kernel-pnp-events.dll
2019-06-16 10:07:32.547 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\microsoft-windows-kernel-power-events.dll
2019-06-16 10:07:32.547 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\microsoft-windows-kernel-processor-power-events.dll
2019-06-16 10:07:32.547 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\microsoft-windows-pdc.dll
2019-06-16 10:07:32.547 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\microsoft-windows-processor-aggregator-events.dll
2019-06-16 10:07:32.563 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\mintdh.dll
2019-06-16 10:07:32.563 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\more.com
2019-06-16 10:07:32.578 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\mountvol.exe
2019-06-16 10:07:32.578 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\mpr.dll
2019-06-16 10:07:32.578 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\mprapi.dll
2019-06-16 10:07:32.594 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\MRINFO.EXE
2019-06-16 10:07:32.594 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\msasn1.dll
2019-06-16 10:07:32.594 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\msaudite.dll
2019-06-16 10:07:32.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\msdelta.dll
2019-06-16 10:07:32.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\msobjs.dll
2019-06-16 10:07:32.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\mspatcha.dll
2019-06-16 10:07:32.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\mspatchc.dll
2019-06-16 10:07:32.609 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\msprivs.dll
2019-06-16 10:07:32.781 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\msvcirt.dll
2019-06-16 10:07:32.813 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\msvcp120.dll
2019-06-16 10:07:32.844 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\msvcr120.dll
2019-06-16 10:07:32.891 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\mswsock.dll
2019-06-16 10:07:32.984 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\MuiUnattend.exe
2019-06-16 10:07:33.000 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\nci.dll
2019-06-16 10:07:33.000 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ncrypt.dll
2019-06-16 10:07:33.016 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\net.exe
2019-06-16 10:07:33.031 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\net1.exe
2019-06-16 10:07:33.047 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\neth.dll
2019-06-16 10:07:33.047 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\netiohlp.dll
2019-06-16 10:07:33.063 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\netmsg.dll
2019-06-16 10:07:33.125 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\netsh.exe
2019-06-16 10:07:33.125 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\NETSTAT.EXE
2019-06-16 10:07:33.141 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\netutils.dll
2019-06-16 10:07:33.141 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\NIHOST.exe
2019-06-16 10:07:33.141 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\normaliz.dll
2019-06-16 10:07:33.235 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\NSRC.exe
2019-06-16 10:07:33.235 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ntasn1.dll
2019-06-16 10:07:33.297 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ntlanman.dll
2019-06-16 10:07:33.297 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\NtlmShared.dll
2019-06-16 10:07:33.313 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ntmarta.dll
2019-06-16 10:07:37.657 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\PATHPING.EXE
2019-06-16 10:07:37.673 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\pcwum.dll
2019-06-16 10:07:37.673 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\pdh.dll
2019-06-16 10:07:37.719 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\PING.EXE
2019-06-16 10:07:37.719 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\powrprof.dll
2019-06-16 10:07:37.735 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\profapi.dll
2019-06-16 10:07:37.751 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\provthrd.dll
2019-06-16 10:07:37.751 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\PSHED.DLL

FullStackDev · Jun 16, 2019

2019-06-16 10:07:37.797 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\reg.exe
2019-06-16 10:07:37.813 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ROUTE.EXE
2019-06-16 10:07:37.813 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\RpcEpMap.dll
2019-06-16 10:07:37.860 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\RpcRtRemote.dll
2019-06-16 10:07:37.923 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\samcli.dll
2019-06-16 10:07:37.954 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\sc.exe
2019-06-16 10:07:37.985 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\schedcli.dll
2019-06-16 10:07:38.016 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\schtasks.exe
2019-06-16 10:07:38.079 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\setx.exe
2019-06-16 10:07:38.110 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ShellHostExt.dll
2019-06-16 10:07:38.126 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\smss.exe
2019-06-16 10:07:38.126 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\snmpapi.dll
2019-06-16 10:07:38.126 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\sort.exe
2019-06-16 10:07:38.126 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\srvcli.dll
2019-06-16 10:07:38.173 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\svchost.exe
2019-06-16 10:07:38.204 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\taskhostw.exe
2019-06-16 10:07:38.204 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\taskschd.dll
2019-06-16 10:07:38.204 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\TaskSchdPS.dll
2019-06-16 10:07:38.204 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\TCPSVCS.EXE
2019-06-16 10:07:38.204 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\tdh.dll
2019-06-16 10:07:38.235 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\TRACERT.EXE
2019-06-16 10:07:38.329 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\uexfat.dll
2019-06-16 10:07:38.329 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ufat.dll
2019-06-16 10:07:38.329 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ulib.dll
2019-06-16 10:07:38.376 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\unlodctr.exe
2019-06-16 10:07:38.376 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\untfs.dll
2019-06-16 10:07:38.391 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\userenv.dll
2019-06-16 10:07:38.391 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\userinit.exe
2019-06-16 10:07:38.407 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\usermgrcli.dll
2019-06-16 10:07:38.407 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\UserMgrProxy.dll
2019-06-16 10:07:38.423 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\vaultcli.dll
2019-06-16 10:07:38.423 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\vaultsvc.dll
2019-06-16 10:07:38.485 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wbem\ntevt.dll
2019-06-16 10:07:38.532 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wdscore.dll
2019-06-16 10:07:38.641 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\Websocket.dll
2019-06-16 10:07:38.719 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\WerFault.exe
2019-06-16 10:07:38.719 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\WerFaultSecure.exe
2019-06-16 10:07:38.735 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wersvc.dll
2019-06-16 10:07:38.735 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wevtapi.dll
2019-06-16 10:07:38.782 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wevtutil.exe
2019-06-16 10:07:38.813 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\windowsperformancerecordercontrol.dll
2019-06-16 10:07:38.907 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wininit.exe
2019-06-16 10:07:39.016 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wkscli.dll
2019-06-16 10:07:39.063 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wmi.dll
2019-06-16 10:07:39.063 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wmiclnt.dll
2019-06-16 10:07:39.063 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wmsgapi.dll
2019-06-16 10:07:39.063 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\WppRecorderUM.dll
2019-06-16 10:07:39.079 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wpr.exe
2019-06-16 10:07:39.079 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\ws2_32.dll
2019-06-16 10:07:39.079 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wshhyperv.dll
2019-06-16 10:07:39.079 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wship6.dll
2019-06-16 10:07:39.079 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\WSHTCPIP.DLL
2019-06-16 10:07:39.079 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\wsock32.dll
2019-06-16 10:07:39.095 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\WUDFCompanionHost.exe
2019-06-16 10:07:39.095 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\WUDFHost.exe
2019-06-16 10:07:39.095 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\WUDFPlatform.dll
2019-06-16 10:07:39.095 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\WUDFx02000.dll
2019-06-16 10:07:39.095 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\xcopy.exe
2019-06-16 10:07:39.095 Could not open C:\ProgramData\Docker\windowsfilter\54561bb1c923e3b4dbcebbf2fa73a44aef7c68f8167a96b48b067d645f1b81bf\Files\Windows\System32\xmllite.dll
2019-06-16 10:09:58.516 Could not open C:\swapfile.sys
2019-06-16 10:26:13.823 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\01B16CDBADE7DB774141D7E30D50EC69
2019-06-16 10:26:13.823 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\0270780F846F08BEFE0DD8112D932FEF
2019-06-16 10:26:13.823 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\0AB67BD4882FB0E09822529CFEB33A58
2019-06-16 10:26:13.839 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\0DA515F703BB9B49479E8697ADB0B955_7DC3E633EDFAEFC3AA3C99552548EC2F
2019-06-16 10:26:13.839 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\3538626A1FCCCA43C7E18F220BDD9B02
2019-06-16 10:26:13.839 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\3B6E683A7A45CC59BF035C9BA8C7AB9D
2019-06-16 10:26:13.839 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\41E729636896BD186E9FDA558705F775
2019-06-16 10:26:13.839 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220
2019-06-16 10:26:13.839 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_CBB16B7A61CE4E298043181730D3CE9B
2019-06-16 10:26:13.854 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4
2019-06-16 10:26:13.854 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\5B9763FB83E74617D0DB58992800F69B
2019-06-16 10:26:13.854 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\6DB145CFEEC544B1582FED1ADA3370DD
2019-06-16 10:26:13.854 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6
2019-06-16 10:26:13.854 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\75CA58072B9926F763A91F0CC2798706_93E4B2BA79A897B3100CCB27F2D3BF4F
2019-06-16 10:26:13.870 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_57EEEA60B88FF91F499D1AF069A5EB0D
2019-06-16 10:26:13.870 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_6C952508008E25F159088D276CFA7ED6
2019-06-16 10:26:13.870 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_7B277426DCB14B883ECB2C6A7AE8C2B2
2019-06-16 10:26:13.870 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56
2019-06-16 10:26:13.870 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\82CB34DD3343FE727DF8890D352E0D8F
2019-06-16 10:26:13.870 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\8828F39C7C0CE9A14B25C7EB321181BA_BD8B98368542C3BBAE3413A0EF3BB623
2019-06-16 10:26:13.870 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\8A574ED5927B3CEC9626151D220C7448
2019-06-16 10:26:13.886 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\AB4621686DD9F70C2CA89F124AF3223E
2019-06-16 10:26:13.886 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62
2019-06-16 10:26:13.886 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894
2019-06-16 10:26:13.886 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\C07822D66105396A1B8E01486E66C5F3
2019-06-16 10:26:13.886 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\CC42971B7939A9CA55C44CFC893D7C1D
2019-06-16 10:26:13.901 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\CFE86DBBE02D859DC92F1E17E0574EE8_FDB452422670E72EDD3FB3D65568F821
2019-06-16 10:26:13.901 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F0060A9F9287878B15AB61E0E47645E5
2019-06-16 10:26:13.901 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_02513D667D49F10A37A474910C3DF1E1
2019-06-16 10:26:13.901 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_169B7DA2787DC533F2592008818AE950
2019-06-16 10:26:13.901 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_2644F09E3FC2A5728B256560C7B11371
2019-06-16 10:26:13.901 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_28EE9FA497D7B69D049F5A5B64A10597
2019-06-16 10:26:13.917 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_43E8924E79BE0284A8C2DDC52EBA0008
2019-06-16 10:26:13.917 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_483D5C3B04E8FA9D51FB150FC3978366
2019-06-16 10:26:13.917 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_9049438BAF2C5E70FE0C80AED9572639
2019-06-16 10:26:13.917 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_92E4B00CB68903D019FB9FA8482C4013
2019-06-16 10:26:13.917 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_A51E831883B3FD72C19BCD59D9908A07
2019-06-16 10:26:13.917 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_BEF4CDE80E51D159F8270D013736736C
2019-06-16 10:26:13.917 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_DFE29F7C2AF458E74F2DC041FED179C7
2019-06-16 10:26:13.932 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_EC06FF9D80CA858B909BC225C5FD3933
2019-06-16 10:26:13.932 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_EFF7682848F0C388052CD59C70DF297E
2019-06-16 10:26:13.932 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_FD8A9504FAD758DA7E14E26789D5E23D
2019-06-16 10:26:13.932 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_FF9D3097DE59BF460E903E2D8C6AB17E
2019-06-16 10:26:13.995 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0270780F846F08BEFE0DD8112D932FEF
2019-06-16 10:26:13.995 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\41E729636896BD186E9FDA558705F775
2019-06-16 10:26:13.995 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220
2019-06-16 10:26:13.995 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4
2019-06-16 10:26:14.011 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5B9763FB83E74617D0DB58992800F69B
2019-06-16 10:26:14.011 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6DB145CFEEC544B1582FED1ADA3370DD
2019-06-16 10:26:14.011 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6
2019-06-16 10:26:14.011 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\75CA58072B9926F763A91F0CC2798706_93E4B2BA79A897B3100CCB27F2D3BF4F
2019-06-16 10:26:14.011 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_57EEEA60B88FF91F499D1AF069A5EB0D
2019-06-16 10:26:14.026 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_6C952508008E25F159088D276CFA7ED6
2019-06-16 10:26:14.026 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_7B277426DCB14B883ECB2C6A7AE8C2B2
2019-06-16 10:26:14.026 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56
2019-06-16 10:26:14.026 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\82CB34DD3343FE727DF8890D352E0D8F
2019-06-16 10:26:14.026 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AB4621686DD9F70C2CA89F124AF3223E
2019-06-16 10:26:14.026 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62
2019-06-16 10:26:14.042 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894
2019-06-16 10:26:14.042 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CC42971B7939A9CA55C44CFC893D7C1D
2019-06-16 10:26:14.042 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CFE86DBBE02D859DC92F1E17E0574EE8_FDB452422670E72EDD3FB3D65568F821
2019-06-16 10:26:14.042 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0060A9F9287878B15AB61E0E47645E5
2019-06-16 10:26:14.042 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_02513D667D49F10A37A474910C3DF1E1
2019-06-16 10:26:14.042 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_169B7DA2787DC533F2592008818AE950
2019-06-16 10:26:14.042 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_2644F09E3FC2A5728B256560C7B11371
2019-06-16 10:26:14.057 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_28EE9FA497D7B69D049F5A5B64A10597
2019-06-16 10:26:14.057 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_43E8924E79BE0284A8C2DDC52EBA0008
2019-06-16 10:26:14.057 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_483D5C3B04E8FA9D51FB150FC3978366
2019-06-16 10:26:14.057 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_9049438BAF2C5E70FE0C80AED9572639
2019-06-16 10:26:14.057 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_92E4B00CB68903D019FB9FA8482C4013
2019-06-16 10:26:14.057 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_A51E831883B3FD72C19BCD59D9908A07
2019-06-16 10:26:14.073 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_BEF4CDE80E51D159F8270D013736736C
2019-06-16 10:26:14.073 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_DFE29F7C2AF458E74F2DC041FED179C7
2019-06-16 10:26:14.073 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_EC06FF9D80CA858B909BC225C5FD3933
2019-06-16 10:26:14.073 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_EFF7682848F0C388052CD59C70DF297E
2019-06-16 10:26:14.073 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_FD8A9504FAD758DA7E14E26789D5E23D
2019-06-16 10:26:14.073 Could not open C:\Users\Administrator\AppData\Local\Packages\45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_FF9D3097DE59BF460E903E2D8C6AB17E
2019-06-16 10:26:26.090 Could not open C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalCache\Local\Microsoft\OneDrive\OneDrive.exe
2019-06-16 10:26:26.215 Could not open C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\Content\82CB34DD3343FE727DF8890D352E0D8F
2019-06-16 10:26:26.231 Could not open C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalCache\LocalLow\Microsoft\CryptnetUrlCache\MetaData\82CB34DD3343FE727DF8890D352E0D8F
2019-06-16 10:40:29.071 Could not open C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
2019-06-16 10:40:29.071 Could not open C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
2019-06-16 10:40:39.806 Could not open C:\Windows\System32\config\BBI
2019-06-16 10:40:39.869 Could not open C:\Windows\System32\config\RegBack\DEFAULT
2019-06-16 10:40:39.869 Could not open C:\Windows\System32\config\RegBack\SAM
2019-06-16 10:40:39.884 Could not open C:\Windows\System32\config\RegBack\SECURITY
2019-06-16 10:40:39.884 Could not open C:\Windows\System32\config\RegBack\SOFTWARE
2019-06-16 10:40:39.900 Could not open C:\Windows\System32\config\RegBack\SYSTEM
2019-06-16 12:35:51.171 Could not open D:\pagefile.sys
2019-06-16 12:43:49.050 >>> Virus 'Troj/Agent-AZXO' found in file D:\Portable\Utorrent\Data\downloads\JUPITER THEME V8.7.8 Wordpress 2018 NULLED\JUPITER THEME V7.6.7 Wordpress 2018 NULLED.exe\FILE:0000\FILE:0000
2019-06-16 12:43:49.050 Disinfection not offered
2019-06-16 13:39:52.347 Could not open D:\Program Files (x86)\Jenkins\jobs\Demo\builds\lastStableBuild
2019-06-16 13:39:52.347 Could not open D:\Program Files (x86)\Jenkins\jobs\Demo\builds\lastSuccessfulBuild
2019-06-16 13:39:52.363 Could not open D:\Program Files (x86)\Jenkins\jobs\Demo\builds\lastUnstableBuild
2019-06-16 13:39:52.378 Could not open D:\Program Files (x86)\Jenkins\jobs\Demo\lastStable
2019-06-16 13:39:52.394 Could not open D:\Program Files (x86)\Jenkins\jobs\Demo\lastSuccessful
2019-06-16 13:39:53.035 Could not open D:\Program Files (x86)\Jenkins\jobs\Demo2\builds\lastUnstableBuild
2019-06-16 13:39:53.628 Could not open D:\Program Files (x86)\Jenkins\jobs\MyPrices_Web-git\builds\lastUnstableBuild
2019-06-16 13:42:49.523 >>> Virus 'Troj/Sirefef-T' found in file D:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe
2019-06-16 13:42:49.523 >>> Virus 'Troj/Sirefef-T' found in file HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\{EE49ED2B-E5A7-4E41-ADFB-E9F1376200FC}
2019-06-16 13:42:49.523 >>> Virus 'Troj/Sirefef-T' found in file HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\{F93975AE-30C4-4E2D-8A39-5703463C2889}
2019-06-16 13:42:49.523 >>> Virus 'Troj/Sirefef-T' found in file HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\{EE49ED2B-E5A7-4E41-ADFB-E9F1376200FC}
2019-06-16 13:42:49.523 >>> Virus 'Troj/Sirefef-T' found in file HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\{F93975AE-30C4-4E2D-8A39-5703463C2889}
2019-06-16 13:42:49.523 >>> Virus 'Troj/Sirefef-T' found in file HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\EnableFirewall
2019-06-16 13:42:49.523 >>> Virus 'Troj/Sirefef-T' found in file HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\EnableFirewall
2019-06-16 13:42:49.523 >>> Virus 'Troj/Sirefef-T' found in file HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\EnableFirewall
2019-06-16 13:42:49.523 >>> Virus 'Troj/Sirefef-T' found in file HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\EnableFirewall
2019-06-16 13:42:49.523 >>> Virus 'Troj/Sirefef-T' found in file HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osppsvc.exe\Debugger
2019-06-16 13:42:49.523 >>> Virus 'Troj/Sirefef-T' found in file HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osppsvc.exe\Debugger
2019-06-16 17:48:17.609 >>> Virus 'Troj/Decept-MD' found in file E:\New Soft\FoxitReader901_enu_Setup_Prom.exe
2019-06-16 17:48:17.609 >>> Virus 'Troj/Decept-MD' found in file HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osppsvc.exe\Debugger
2019-06-16 17:48:17.609 >>> Virus 'Troj/Decept-MD' found in file HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osppsvc.exe\Debugger
2019-06-16 17:49:09.677 >>> Virus 'Mal/EncPk-ANL' found in file E:\New Soft\Malwarebytes.Anti-Malware.Premium.3.7.1.2839.rar.zip\Malwarebytes.Anti-Malware.Premium.3.7.1.2839\Keygen(soft98.ir)\MalwareBytes_Anti-Malware_Keygen_v1.7_URET.exe
2019-06-16 17:49:09.677 >>> Virus 'Mal/EncPk-ANL' found in file HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osppsvc.exe\Debugger
2019-06-16 17:49:09.677 >>> Virus 'Mal/EncPk-ANL' found in file HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osppsvc.exe\Debugger
2019-06-16 18:07:19.246 >>> Virus 'Troj/Decept-MD' found in file E:\Read\Soft\FoxitReader901_enu_Setup_Prom.exe
2019-06-16 18:07:19.246 >>> Virus 'Troj/Decept-MD' found in file HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osppsvc.exe\Debugger
2019-06-16 18:07:19.246 >>> Virus 'Troj/Decept-MD' found in file HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osppsvc.exe\Debugger
2019-06-16 18:12:06.637 Could not open E:\TrueCrypt\Volums\Anroid Resource(Mount On U)
2019-06-16 18:12:06.996 Could not open E:\TrueCrypt\Volums\MyFiles(Mount In L)
2019-06-16 18:12:07.590 Could not open E:\TrueCrypt\Volums\Portable(MountIn M)
2019-06-16 18:21:25.321 >>> Virus 'Mal/PHPIfr-A' found in file E:\دیده بوت\domains\didesaz.com\public_html\instabot\app\modules\abute\views\index.php
2019-06-16 18:21:25.321 Disinfection not offered
2019-06-16 18:22:02.872 >>> Virus 'Mal/PHPIfr-A' found in file E:\دیده بوت\domains\didesaz.com\public_html\instabot\assets\app\modules\abute\views\index.php
2019-06-16 18:22:02.872 Disinfection not offered
2019-06-16 18:24:38.201 Could not open LOGICAL:0005:00000000
2019-06-16 18:24:38.201 Could not open F:\
2019-06-16 19:00:18.365 The following items will be cleaned up:
2019-06-16 19:00:18.365 Troj/Sirefef-T
2019-06-16 19:00:18.365 Troj/Decept-MD
2019-06-16 19:00:18.365 Mal/EncPk-ANL
2019-06-16 19:00:18.365 Troj/Agent-AZXO
2019-06-16 19:00:18.365 Mal/PHPIfr-A
2019-06-16 19:00:18.365 Mal/PHPIfr-A

FullStackDev · Jun 16, 2019

Hi
After Sophos Cleanup I get this message:
" New Threats were found on your computer durring cleanup.To Complete cleanup, exit Sophos Virus Removal Tool and start new scan "

FullStackDev · Jun 16, 2019

OK I Completed The Last Step..
But I have questions:
now my system isn't infected?!
1- What I do with guest11 account? I dont want any one except me have access to system. now when I start my system. I Have two Account my Administrator ( that me and have password ) and guest11 account that dont have any password. and any one that user my laptop can login.

2- In screen shot that attached.. in Users Group I see two other user's. what these user's do here?

3- What this services do?

Windows Push Notifications User Service_4627385 ( Service Name: WpnUserService_4627385 ) Path to execute: C:\Windows\system32\svchost.exe -k UnistackSvcGroup
User Data Access_4627385 ( Service Name: UserDataSvc_4627385 ) Path to execute: C:\Windows\system32\svchost.exe -k UnistackSvcGroup
User Data Storage_4627385 ( Service Name: UnistoreSvc_4627385 ) Path to execute: C:\Windows\System32\svchost.exe -k UnistackSvcGroup
Contact Data_4627385 ( Service Name: PimIndexMaintenanceSvc_4627385 ) Path to execute: C:\Windows\system32\svchost.exe -k UnistackSvcGroup
Sync Host_4627385 ( Service Name: OneSyncSvc_4627385 ) Path to execute: C:\Windows\system32\svchost.exe -k UnistackSvcGroup
Connected Devices Platform User Service_4627385 ( Service Name: CDPUserSvc_4627385 ) Path to execute: C:\Windows\system32\svchost.exe -k UnistackSvcGroup

I can't disable this services at all ( startup type section in service properties window is disabled )

By the way I start clean my old browsers and update them to new version .. and start Mawarebytes scan again.

Broni · Jun 17, 2019

Your computer is clean. As for guest11 I said before, I suspect it's created by Eset. Eset creates phantom account as a part of its antitheft feature.
As for other questions I suggest new topic in Windows forum.

Here...

Your computer is clean https://www.bleepstatic.com/fhost/uploads/6/snag-0004.jpg[/URL]]

1. This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
[COLOR=#ff0000][B]This is a very crucial step so make sure you don't skip it.[/B][/COLOR]
Download [IMG]http://www.imgdumper.nl/uploads6/51a5ce45267c1/51a5ce45263de-delfix.pngDelFix by Xplode to your desktop. Delfix will delete all the used tools and logfiles.

Double-click Delfix.exe to start the tool.
Make sure the following items are checked:

Activate UAC (optional; some users prefer to keep it off)
Remove disinfection tools
Create registry backup
Purge System Restore
Reset system settings

Now click "Run" and wait patiently.
Once finished a logfile will be created. You don't have to attach it to your next reply.

2. Make sure Windows Updates are current.

3. If any trojans, rootkits or bootkits were listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

4. Check if your browser plugins are up to date.
Firefox - https://www.mozilla.org/en-US/plugincheck/
other browsers: https://browsercheck.qualys.com/ (click on "Scan without installing plugin" and then on "Scan now")

5. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

6. Run Temporary File Cleaner (TFC) and AdwCleaner weekly (you need to redownload these tools since they were removed by DelFix).

7. (optional) If you want to keep all your programs up to date, download and install FileHippo App Manager.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

8. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

9. Read:
How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html
Simple and easy ways to keep your computer safe and secure on the Internet: http://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/
About those Toolbars and Add-ons - Potentially Unwanted Programs (PUPs) which change your browser settings: http://www.bleepingcomputer.com/for...curity-questions-best-practices/#entry3187642

10. Please, let me know, how your computer is doing.

FullStackDev · Jun 17, 2019

OK.Thanks for your time.
I'm still checking the system. If there's a problem, I surely post here.
Thanks.

Broni · Jun 17, 2019

Way to go!!

Good luck and stay safe

FullStackDev · Jul 5, 2019

Hi
I think my system is have wired activity
Today my system running very slowly, now I just have chrome browse opened but I see 4 GB memory used.
And when I browse the web suing chrome some popups open and Eset Smart Security detect them as malware and deny access to them.

I delete a phanton user that Eset Anti-Theft Feature used and now there is no guest11 account exists.. thanks to your guidance.

but I think I have some kind of RootKit on my system. I use PCHunter64 RootKit Killer the previous day while the system is in Safe mode... PCHunter detect these things
C:\Windows\HSPERFDATA_Administrator\
is a malware directory and
C:\Windows\Jaksta\AC\x86\jaudcap.dll
AppInit_DLLs
jaudcap.dll
All of DLLs specified in the AppInit_DLLs value are loaded by each Windows-based application running within the current logon session. Default: no items.

and I install Malwarebytes Anti-Rootkit and when I run it gets me this error window that I attached. (I think this related to a previous error on PCHunter)

I don't know, but some things are happening in my system.

Broni · Jul 5, 2019

jaudcap.dll is a part of Jaksta audio capture which I can see running on your system.
So, it's false positive.

FullStackDev · Jul 5, 2019

What about this folder
C:\Windows\HSPERFDATA_Administrator\
and system huge memory usage

Broni · Jul 6, 2019

It's created by Java. Also legit.
What do you mean by system huge memory usage?

FullStackDev · Jul 8, 2019

Sorry for the late response.
for example, the first time that I start windows, it used 2.7 GB of memory .that's normal ....but when I start chrome or firefox and after 30 minutes or more ..my system memory goes up to 4 ~ 4.3 GB.

Broni · Jul 8, 2019

This is pretty normal. Both of those programs can use 1.5-2GB of RAM.

FullStackDev · Jul 10, 2019

Ok. Thanks. and other things, each time I start my chrome ( even though I update it 4 days ago ) some popups open that Eset Block them.

Broni · Jul 10, 2019

Do you have any adblocker installed, like uBlock Origin?

FullStackDev · Jul 12, 2019

No, I don't have any?
Do you think maybe it's good that I install Adblock?

Broni · Jul 12, 2019

Yes, uBlock Origin is better.

FullStackDev · Jul 12, 2019

Ok.Thanks a lot

Solved I think my system is infected, windows 10 guest user build automatically

Posts: 45 +0

Posts: 56,041 +516

Posts: 45 +0

Posts: 45 +0

Posts: 45 +0

Posts: 45 +0

Posts: 56,041 +516

Posts: 45 +0

Posts: 45 +0

Posts: 45 +0

Posts: 45 +0

Attachments

Posts: 56,041 +516

Posts: 45 +0

Posts: 56,041 +516

Posts: 45 +0

Attachments

Posts: 56,041 +516

Posts: 45 +0

Posts: 56,041 +516

Posts: 45 +0

Posts: 56,041 +516

Posts: 45 +0

Posts: 56,041 +516

Posts: 45 +0

Posts: 56,041 +516

Posts: 45 +0

Similar threads