Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by giuseppe (2016-04-01 00:24:17)
Running from C:\Users\giuseppe\Downloads
Windows 10 Home Version 1511 (X64) (2016-03-31 21:51:02)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2385086943-1329575824-235044043-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2385086943-1329575824-235044043-503 - Limited - Disabled)
giuseppe (S-1-5-21-2385086943-1329575824-235044043-1001 - Administrator - Enabled) => C:\Users\giuseppe
Guest (S-1-5-21-2385086943-1329575824-235044043-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2385086943-1329575824-235044043-1003 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.4 - Synaptics Incorporated)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2946BD54-2650-4940-BDB7-FB946ACD73B8} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {719F320B-0633-4555-830A-F82698B111BA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {B5FC3BE6-6391-4E9A-9B76-8375E5C223AF} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {E03C8786-4C3A-41C4-AEF3-F909A1BA0073} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {F27862CA-4739-48E5-BF23-F969A330EA7F} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02654872 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-09-30 20:39 - 2015-09-30 20:39 - 00415128 _____ () C:\WINDOWS\system32\igfxTray.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 02654872 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-02-13 14:53 - 2016-02-13 14:53 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-02-13 14:53 - 2016-02-13 14:53 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-02-13 14:53 - 2016-02-13 14:53 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-02-13 14:53 - 2016-02-13 14:53 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-02-13 14:53 - 2016-02-13 14:53 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 00044032 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-02-13 15:06 - 2016-02-13 15:06 - 00151040 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 02884096 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\MessagingNativeCore.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 00583168 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\MessagingEntityExtractionProxy.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 01280000 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\MessagingNativeBase.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 00156160 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\MessagingNativeSkypeExternal.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 01845248 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkypeCore.dll
2016-02-13 15:06 - 2016-02-13 15:06 - 18818048 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkyWrap.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2385086943-1329575824-235044043-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 80.243.191.66 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============

Name: Dispositivo High Definition Audio
Description: Dispositivo High Definition Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/01/2016 12:20:33 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-GIUSEPPE)
Description: Attivazione dell'app Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App non riuscita con errore: -2147024770 Per ulteriori informazioni, consulta il registro Microsoft-Windows-TWinUI/Operativo.

Error: (04/01/2016 12:16:06 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-GIUSEPPE)
Description: Attivazione dell'app Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App non riuscita con errore: -2147024770 Per ulteriori informazioni, consulta il registro Microsoft-Windows-TWinUI/Operativo.

Error: (04/01/2016 12:10:58 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-GIUSEPPE)
Description: Attivazione dell'app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI non riuscita con errore: -2144927141 Per ulteriori informazioni, consulta il registro Microsoft-Windows-TWinUI/Operativo.

Error: (03/31/2016 11:47:43 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: 0x8007085A

Error: (03/31/2016 11:45:07 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: 0x8007085A

Error: (03/31/2016 11:45:07 PM) (Source: MSDTC 2) (EventID: 4104) (User: )
Description: 0x8007085A

Error: (03/31/2016 11:45:07 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: 0x8007085A


System errors:
=============
Error: (04/01/2016 12:15:42 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}

Error: (04/01/2016 12:10:58 AM) (Source: DCOM) (EventID: 10010) (User: PC-GIUSEPPE)
Description: CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mca

Error: (04/01/2016 12:10:57 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}

Error: (04/01/2016 12:10:55 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Accesso dati utente_1b2053 è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 10000 millisecondi: Riavvia il servizio.

Error: (04/01/2016 12:10:55 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Archiviazione dati utente_1b2053 è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 10000 millisecondi: Riavvia il servizio.

Error: (04/01/2016 12:10:55 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Dati contatti_1b2053 è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 10000 millisecondi: Riavvia il servizio.

Error: (04/01/2016 12:10:55 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Sincronizza host_1b2053 è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 10000 millisecondi: Riavvia il servizio.

Error: (04/01/2016 12:10:54 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: impostazioni specifiche dell'applicazioneLocaleAttivazione{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (tramite LRPC)Non disponibileNon disponibile

Error: (03/31/2016 11:54:49 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}

Error: (03/31/2016 11:49:11 PM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Il computer è configurato come membro di un gruppo di lavoro, non
come membro di un dominio. Non è necessario eseguire il servizio 
Accesso rete in questa configurazione.


CodeIntegrity:
===================================
Date: 2016-04-01 00:07:02.556
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-31 23:46:08.470
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-31 23:36:16.287
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Processor: Intel(R) Celeron(R) 2955U @ 1.40GHz
Percentage of memory in use: 19%
Total physical RAM: 8072.27 MB
Available physical RAM: 6482.6 MB
Total Virtual: 9992.27 MB
Available Virtual: 8453.35 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.03 GB) (Free:898.64 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt ============================


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by giuseppe (administrator) on PC-GIUSEPPE (01-04-2016 00:22:54)
Running from C:\Users\giuseppe\Downloads
Loaded Profiles: giuseppe (Available Profiles: giuseppe)
Platform: Windows 10 Home Version 1511 (X64) Language: Italiano (Italia)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\NetworkUXBroker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-06-04] (Synaptics Incorporated)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 80.243.191.66 8.8.8.8
Tcpip\..\Interfaces\{93c0944d-4b56-4d6e-9b5a-0914968e3920}: [DhcpNameServer] 80.243.191.66 8.8.8.8

Internet Explorer:
==================
HKU\S-1-5-21-2385086943-1329575824-235044043-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.it/

Edge: 
======
Edge HomeButtonPage: HKU\S-1-5-21-2385086943-1329575824-235044043-1001 -> hxxp://www.google.it/

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [370064 2015-09-30] (Intel Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [249032 2015-06-04] (Synaptics Incorporated)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-12-19] (Intel Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-04] (Synaptics Incorporated)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-01 00:34 - 2016-03-31 23:51 - 00000000 ___DC C:\WINDOWS\Panther
2016-04-01 00:30 - 2016-04-01 00:30 - 00000000 ____D C:\Windows.old
2016-04-01 00:29 - 2016-04-01 00:29 - 24600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 22376960 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 12586496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 09919488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 08705672 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 07533568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 06972416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 06952088 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 06740992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 06607080 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 05661696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 05321728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 04827136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 03425792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02793472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02654872 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02635264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02581504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02273792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 02152288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 02061312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01997152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01859960 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01847808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 01831936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01818696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01799168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01613664 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01497088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01390592 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-04-01 00:29 - 2016-04-01 00:29 - 01224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01098752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-04-01 00:29 - 2016-04-01 00:29 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00997376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00990720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-04-01 00:29 - 2016-04-01 00:29 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00882720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00848168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00791744 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00779384 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00769536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00652392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00640472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00625000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00572272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00563552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00538736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00534368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-04-01 00:29 - 2016-04-01 00:29 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00523752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-04-01 00:29 - 2016-04-01 00:29 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00476728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00450912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00430944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00420928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-04-01 00:29 - 2016-04-01 00:29 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00394080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00389992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00376536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00358752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00294752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00287712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cemapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00220064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cemapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00187744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwbase.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00146272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00141560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00127840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2016-04-01 00:29 - 2016-04-01 00:29 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-04-01 00:29 - 2016-04-01 00:29 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PimIndexMaintenanceClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-04-01 00:29 - 2016-04-01 00:29 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-04-01 00:29 - 2016-04-01 00:29 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2016-04-01 00:29 - 2016-04-01 00:29 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
2016-04-01 00:23 - 2016-04-01 00:23 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-04-01 00:22 - 2016-04-01 00:23 - 00004679 _____ C:\Users\giuseppe\Downloads\FRST.txt
2016-04-01 00:22 - 2016-04-01 00:22 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-04-01 00:22 - 2016-04-01 00:22 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-04-01 00:22 - 2016-04-01 00:22 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-04-01 00:22 - 2016-04-01 00:22 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-04-01 00:22 - 2016-04-01 00:22 - 00000000 ____D C:\FRST
2016-04-01 00:21 - 2016-04-01 00:22 - 02374144 _____ (Farbar) C:\Users\giuseppe\Downloads\FRST64.exe
2016-04-01 00:18 - 2016-04-01 00:18 - 120720280 _____ C:\Users\giuseppe\Downloads\VGA_Intel_10.18.15.4248_W10x64_A.zip.4mx8dye.partial
2016-04-01 00:13 - 2016-04-01 00:13 - 00000000 ___HD C:\OneDriveTemp
2016-04-01 00:06 - 2015-12-09 05:39 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-04-01 00:05 - 2016-04-01 00:06 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-04-01 00:05 - 2016-04-01 00:05 - 143659408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-31 23:59 - 2016-03-31 23:59 - 00001949 _____ C:\Users\giuseppe\Desktop\Questo PC.lnk
2016-03-31 23:58 - 2016-04-01 00:08 - 00000000 ____D C:\Users\giuseppe\AppData\Local\MicrosoftEdge
2016-03-31 23:56 - 2016-03-31 23:56 - 00000000 ____D C:\Users\giuseppe\AppData\Local\NetworkTiles
2016-03-31 23:55 - 2016-03-31 23:55 - 00002430 _____ C:\Users\giuseppe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-03-31 23:54 - 2016-03-31 23:54 - 00000000 ____D C:\Users\giuseppe\AppData\Local\ActiveSync
2016-03-31 23:53 - 2016-03-31 23:53 - 00000000 ____D C:\Users\giuseppe\AppData\Local\Publishers
2016-03-31 23:52 - 2016-03-31 23:52 - 00000000 ____D C:\Users\giuseppe\AppData\Local\Comms
2016-03-31 23:51 - 2016-04-01 00:19 - 01743930 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-31 23:51 - 2016-04-01 00:12 - 00000000 __SHD C:\Users\giuseppe\IntelGraphicsProfiles
2016-03-31 23:51 - 2016-03-31 23:51 - 00000020 ___SH C:\Users\giuseppe\ntuser.ini
2016-03-31 23:51 - 2016-03-31 23:51 - 00000000 ____D C:\Users\giuseppe\AppData\Roaming\Synaptics
2016-03-31 23:51 - 2016-03-31 23:51 - 00000000 ____D C:\Users\giuseppe\AppData\Local\TileDataLayer
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Risorse di stampa
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Risorse di rete
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Recenti
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Modelli
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Menu Avvio
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Impostazioni locali
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Documents\Video
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Documents\Musica
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Documents\Immagini
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Documenti
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\Dati applicazioni
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programmi
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dati applicazioni
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default\AppData\Local\Cronologia
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\Documents\Video
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\Documents\Musica
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\Documents\Immagini
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programmi
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dati applicazioni
2016-03-31 23:49 - 2016-03-31 23:49 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Cronologia
2016-03-31 23:47 - 2016-03-31 23:47 - 00022928 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-03-31 23:42 - 2016-03-31 23:42 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-03-31 23:41 - 2016-03-31 23:41 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2016-03-31 23:40 - 2016-03-31 23:51 - 00000000 ____D C:\Users\giuseppe
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Risorse di stampa
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Risorse di rete
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Recenti
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Modelli
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Menu Avvio
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Impostazioni locali
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Documents\Video
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Documents\Musica
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Documents\Immagini
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Documenti
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\Dati applicazioni
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\AppData\Roaming\Microsoft\Windows\Start Menu\Programmi
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\AppData\Local\Dati applicazioni
2016-03-31 23:40 - 2016-03-31 23:40 - 00000000 _SHDL C:\Users\giuseppe\AppData\Local\Cronologia
2016-03-31 23:37 - 2016-04-01 00:12 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-03-31 23:37 - 2016-03-31 23:37 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2016-03-31 23:37 - 2016-03-31 23:37 - 00000000 ____D C:\Program Files\Intel
2016-03-31 23:37 - 2015-09-30 20:39 - 00105472 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2016-03-31 23:37 - 2015-09-30 20:39 - 00099856 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____D C:\Program Files\Synaptics
2016-03-31 23:36 - 2016-03-31 23:36 - 00000000 ____D C:\Program Files\Common Files\Atheros
2016-03-31 23:13 - 2016-03-31 23:48 - 00009528 _____ C:\WINDOWS\diagwrn.xml
2016-03-31 23:13 - 2016-03-31 23:48 - 00009528 _____ C:\WINDOWS\diagerr.xml
2016-03-31 23:05 - 2016-03-31 23:51 - 00000000 ____D C:\Intel
2016-03-31 23:05 - 2016-03-31 23:05 - 00000000 ____D C:\Program Files (x86)\Intel
2016-03-31 18:36 - 2016-03-31 23:47 - 00003104 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{3B3A32FF-A7F2-4DA1-B607-8465048A2111}
2016-03-31 18:36 - 2016-03-31 18:36 - 00000000 __SHD C:\Users\giuseppe\AppData\LocalLow\EmieSiteList
2016-03-31 18:36 - 2016-03-31 18:36 - 00000000 __SHD C:\Users\giuseppe\AppData\Local\EmieUserList
2016-03-31 18:36 - 2016-03-31 18:36 - 00000000 __SHD C:\Users\giuseppe\AppData\Local\EmieSiteList
2016-03-31 18:36 - 2016-03-31 18:36 - 00000000 __SHD C:\Users\giuseppe\AppData\Local\EmieBrowserModeList
2016-03-31 18:35 - 2016-04-01 00:13 - 00000000 ___RD C:\Users\giuseppe\OneDrive
2016-03-31 18:35 - 2016-03-31 18:35 - 00000000 ____D C:\Users\giuseppe\AppData\Local\GWX
2016-03-31 18:34 - 2016-03-31 23:47 - 00002810 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2385086943-1329575824-235044043-1001
2016-03-31 18:28 - 2016-04-01 00:16 - 00000000 ____D C:\Users\giuseppe\AppData\Local\PackageStaging
2016-03-31 18:27 - 2016-04-01 00:21 - 00000000 ____D C:\Users\giuseppe\AppData\Local\Packages
2016-03-31 18:27 - 2016-03-31 18:27 - 00000000 ____D C:\Users\giuseppe\AppData\Roaming\Adobe
2016-03-31 18:27 - 2016-03-31 18:27 - 00000000 ____D C:\Users\giuseppe\AppData\Local\VirtualStore
2016-03-31 18:24 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Public\Documents\Video
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Public\Documents\Musica
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Public\Documents\Immagini
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Risorse di stampa
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Risorse di rete
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Recenti
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Modelli
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Menu Avvio
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Impostazioni locali
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Video
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Musica
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Immagini
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Documenti
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\Dati applicazioni
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programmi
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Dati applicazioni
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Cronologia
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Programmi
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Modelli
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programmi
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Menu Avvio
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Documenti
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\ProgramData\Dati applicazioni
2016-03-31 18:16 - 2016-03-31 18:16 - 00000000 _SHDL C:\Program Files\File comuni

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-01 00:34 - 2015-10-30 09:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-04-01 00:30 - 2016-02-13 15:04 - 00000000 ____D C:\Program Files\Windows Journal
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 __RSD C:\WINDOWS\Media
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-04-01 00:30 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-04-01 00:30 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-04-01 00:30 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-04-01 00:21 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-04-01 00:19 - 2016-02-13 14:50 - 00777400 _____ C:\WINDOWS\system32\perfh010.dat
2016-04-01 00:19 - 2016-02-13 14:50 - 00144220 _____ C:\WINDOWS\system32\perfc010.dat
2016-04-01 00:19 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-04-01 00:18 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-04-01 00:12 - 2016-02-13 15:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-04-01 00:11 - 2015-10-30 08:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-04-01 00:06 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-31 23:51 - 2016-02-13 15:24 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-03-31 23:51 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-03-31 23:49 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-03-31 23:49 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows NT
2016-03-31 23:48 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Registration
2016-03-31 23:45 - 2015-10-30 09:24 - 00000000 __RHD C:\Users\Public\Libraries
2016-03-31 23:43 - 2016-02-13 06:14 - 00205352 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-31 23:43 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-03-31 23:43 - 2013-08-22 15:36 - 00000000 ____D C:\Users\Default.migrated
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\et-EE
2016-03-31 23:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-03-31 23:42 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2016-03-31 23:42 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2016-03-31 23:41 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\InputMethod
2016-03-31 23:41 - 2014-11-21 12:58 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Embedded Lockdown Manager
2016-03-31 23:41 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2016-03-31 23:41 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\ADFS
2016-03-31 23:39 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-03-31 23:13 - 2016-02-13 16:32 - 00000000 ___HD C:\$WINDOWS.~BT
2016-03-08 09:12 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-03-08 09:12 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-03-31 23:34

==================== End of FRST.txt ============================