This topic is locked
Hello,
So, I've seen a few other posts on this forum with people having a similar issue to my own so hopefully we can find a solution. Since earlier today I have been trying my best to kill whatever virus I somehow downloaded onto my computer. Right now, it seems that all is fine but I keep getting this message when I boot up windows: "The module 'C:\Users\Joshu\AppData\Local\...\WmiccShell24.dll' failed to load'" with other secondary text that I'm sure, by this point, you guys already know. I've run Malwarebytes, Panda Antivirus and Panda Cloud Cleaner about a million times, so I think that eliminates the possibility of this being a remenant of the virus, but I'm not sure.
I'm running Windows 10 home 64bit as my operating system.
Here are the two text files generated by FRST. For easy access, I also added their files. Hope that works!
Addition.txt
Additional scan result of Farbar Recovery Scan Tool (x64) Version:09-06-2016
Ran by Joshu (2016-06-09 18:04:31)
Running from B:\Joshua
Windows 10 Home Version 1511 (X64) (2016-05-14 00:54:11)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-708117259-3629779018-2666748752-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-708117259-3629779018-2666748752-503 - Limited - Disabled)
Guest (S-1-5-21-708117259-3629779018-2666748752-501 - Limited - Disabled)
Joshu (S-1-5-21-708117259-3629779018-2666748752-1001 - Administrator - Enabled) => C:\Users\Joshu
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Panda Free Antivirus (Disabled - Up to date) {AAF74A68-8713-CDF1-004F-30003398BE9E}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Panda Free Antivirus (Disabled - Up to date) {1196AB8C-A129-C27F-3AFF-0B72481FF423}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Panda Firewall (Disabled) {92CCCB4D-CD7C-CCA9-2B10-9935CD4BF9E5}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 16.00 (x64) (HKLM\...\7-Zip) (Version: 16.00 - Igor Pavlov)
Acronis True Image 2015 (HKLM-x32\...\{2E51FA82-585D-42B4-B465-A4160DAD4A26}) (Version: 18.0.4061 - Acronis)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.4.194 - Adobe Systems, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.18 - Piriform)
Garry's Mod (HKLM\...\Steam App 4000) (Version: - Facepunch Studios)
Goat Simulator (HKLM\...\Steam App 265930) (Version: - Coffee Stain Studios)
God Mode (HKLM\...\Steam App 227480) (Version: - Old School Games)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.84 - Google Inc.)
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Half-Life (HKLM\...\Steam App 70) (Version: - Valve)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4331 - Intel Corporation)
Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)
Logitech Gaming Software 8.83 (HKLM\...\Logitech Gaming Software) (Version: 8.83.85 - Logitech Inc.)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.6868.2067 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6828.1019 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6828.1019 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6828.1019 - Microsoft Corporation) Hidden
OldSchool RuneScape Launcher 1.2.7 (HKLM-x32\...\{FEDDCE73-34B8-4980-90B8-8619A78C902C}) (Version: 1.2.7 - Jagex Ltd)
Panda Cloud Cleaner (HKLM-x32\...\{92B2B132-C7F0-43DC-921A-4493C04F78A4}_is1) (Version: 1.1.8 - Panda Security)
Panda Devices Agent (x32 Version: 1.03.07 - Panda Security) Hidden
Panda Devices Agent (x32 Version: 1.06.00 - Panda Security) Hidden
Panda Free Antivirus (HKLM-x32\...\Panda Universal Agent Endpoint) (Version: 16.01.02.0000 - Panda Security)
Panda Free Antivirus (Version: 8.21.00 - Panda Security) Hidden
Q.U.B.E: Director's Cut (HKLM\...\Steam App 239430) (Version: - Toxic Games)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Sven Co-op (HKLM\...\Steam App 225840) (Version: - Sven Co-op Team)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Shock 2 (HKLM-x32\...\1207659172_is1) (Version: 2.3.0.11 - GOG.com)
Team Fortress 2 (HKLM\...\Steam App 440) (Version: - Valve)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.3 - VideoLAN)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-708117259-3629779018-2666748752-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Joshu\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0ABC91F3-8160-4F54-8012-B5DB1F8EF541} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-01] (Piriform Ltd)
Task: {1F419E0C-C3B8-4D4A-AD24-01B5FB24A6A7} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-05-15] (Microsoft Corporation)
Task: {29F0EF94-1634-4E90-93E4-C44D70332392} - System32\Tasks\PPI Update => "hxxp://dazwindowsapps.xyz/download/index.php?mn=9995" <==== ATTENTION
Task: {86F214ED-B0B6-417C-A8DC-ED66B658BF15} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-09] (Google Inc.)
Task: {B55463D2-BBF4-4436-83B7-06A57F2C3148} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-05-15] (Microsoft Corporation)
Task: {F28485EA-1654-4485-8EF8-194D34682B9A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-09] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2015-10-30 00:17 - 2015-10-30 00:17 - 00028672 _____ () C:\Windows\SYSTEM32\efsext.dll
2015-10-30 00:18 - 2015-10-30 00:18 - 00185856 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-05-14 14:30 - 2016-05-15 11:51 - 00417480 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
2016-05-14 11:45 - 2016-03-29 03:20 - 02656952 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-05-15 09:39 - 2016-05-15 09:39 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-05-14 11:45 - 2016-03-29 03:20 - 02656952 _____ () C:\Windows\System32\CoreUIComponents.dll
2016-05-25 16:52 - 2016-05-25 16:52 - 00959168 _____ () C:\Users\Joshu\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2016-05-14 14:32 - 2016-05-15 11:51 - 08919752 _____ () C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\1033\GrooveIntlResource.dll
2015-12-19 01:08 - 2015-12-19 01:08 - 00402344 _____ () C:\Windows\system32\igfxTray.exe
2016-02-13 05:54 - 2016-02-13 05:54 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-05-14 11:44 - 2016-04-22 21:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-05-14 11:44 - 2016-04-22 21:02 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-05-14 11:44 - 2016-04-22 20:58 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-05-14 11:45 - 2016-04-22 20:58 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-05-14 11:45 - 2016-04-22 21:01 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-03-06 17:07 - 2015-03-06 17:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2016-04-28 15:49 - 2016-04-28 15:49 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-06 17:07 - 2015-03-06 17:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2016-04-28 15:49 - 2016-04-28 15:49 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2016-01-06 09:41 - 2016-01-06 09:41 - 00062168 _____ () C:\Program Files\CCleaner\branding.dll
2016-05-15 09:44 - 2016-05-15 09:44 - 10256384 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11602.1.26.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2016-06-01 19:55 - 2016-06-01 19:55 - 00016384 ____X () C:\Program Files\WindowsApps\61545TimGrabinat.wAPPerforGmail_1.1.17.0_x64__rcb0qdgx4z9ca\wAPPer for Gmail.exe
2016-06-01 19:55 - 2016-06-01 19:55 - 04863488 ____X () C:\Program Files\WindowsApps\61545TimGrabinat.wAPPerforGmail_1.1.17.0_x64__rcb0qdgx4z9ca\wAPPer for Gmail.dll
2016-06-01 19:54 - 2016-06-01 19:55 - 04069784 _____ () C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\Microsoft.Advertising.dll
2015-10-30 00:18 - 2015-10-30 00:18 - 02100064 _____ () C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
2016-06-09 14:37 - 2016-06-03 18:01 - 02334360 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\libglesv2.dll
2016-06-09 14:37 - 2016-06-03 18:01 - 00105112 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\libegl.dll
2015-12-15 10:17 - 2015-12-15 10:17 - 00618544 _____ () C:\Program Files (x86)\Panda Security\Panda Security Protection\SQLite3.dll
2016-05-15 09:39 - 2016-05-15 09:39 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-05-15 09:39 - 2016-05-15 09:39 - 02941440 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\MessagingNativeCore.dll
2016-05-15 09:39 - 2016-05-15 09:39 - 00583168 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\MessagingEntityExtractionProxy.dll
2016-05-15 09:39 - 2016-05-15 09:39 - 01300992 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\MessagingNativeBase.dll
2016-05-15 09:39 - 2016-05-15 09:39 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-05-25 16:52 - 2016-05-25 16:52 - 00679624 _____ () C:\Users\Joshu\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
2016-05-14 12:25 - 2016-04-29 13:10 - 00785920 _____ () B:\Program Files (x86)\Steam\SDL2.dll
2016-05-14 12:25 - 2015-07-03 09:12 - 04962816 _____ () B:\Program Files (x86)\Steam\v8.dll
2016-05-14 12:25 - 2016-04-29 17:10 - 02549840 _____ () B:\Program Files (x86)\Steam\video.dll
2016-05-14 12:25 - 2015-07-03 09:12 - 01556992 _____ () B:\Program Files (x86)\Steam\icui18n.dll
2016-05-14 12:25 - 2015-07-03 09:12 - 01187840 _____ () B:\Program Files (x86)\Steam\icuuc.dll
2016-05-14 12:25 - 2016-02-08 16:14 - 02549760 _____ () B:\Program Files (x86)\Steam\libavcodec-56.dll
2016-05-14 12:25 - 2016-02-08 16:14 - 00491008 _____ () B:\Program Files (x86)\Steam\libavformat-56.dll
2016-05-14 12:25 - 2016-02-08 16:14 - 00332800 _____ () B:\Program Files (x86)\Steam\libavresample-2.dll
2016-05-14 12:25 - 2016-02-08 16:14 - 00442880 _____ () B:\Program Files (x86)\Steam\libavutil-54.dll
2016-05-14 12:25 - 2016-02-08 16:14 - 00485888 _____ () B:\Program Files (x86)\Steam\libswscale-3.dll
2016-05-14 12:25 - 2016-04-29 17:10 - 00829008 _____ () B:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-05-14 12:25 - 2016-02-17 15:25 - 00281088 _____ () B:\Program Files (x86)\Steam\openvr_api.dll
2015-07-23 18:06 - 2015-07-23 18:06 - 00037696 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\qt_icontray_ex.dll
2015-07-23 18:06 - 2015-07-23 18:06 - 00034624 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll
2016-05-14 12:25 - 2016-04-27 18:00 - 49825056 _____ () B:\Program Files (x86)\Steam\bin\libcef.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 45069312 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\libcef.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 00500736 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\PocoUtil.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 01069568 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\PocoNet.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 01847296 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\PocoData.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 00386048 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\PocoDataSQLite.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 00513536 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\PocoXML.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 01582080 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\PocoFoundation.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 00300544 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\PocoNetSSL.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 00323584 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\PocoJSON.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 00096768 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\zlib.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 00265216 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\PocoZip.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 00672768 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\sqlite.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 00144896 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\expat.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 00418304 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\pcre.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 00150528 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\PocoCrypto.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 01643008 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\libglesv2.dll
2016-06-08 11:54 - 2016-06-08 17:11 - 00074752 _____ () B:\Program Files (x86)\Galaxy Client\GalaxyClient\libegl.dll
2015-07-23 18:13 - 2015-07-23 18:13 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll
2015-07-23 18:07 - 2015-07-23 18:07 - 00129344 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\EXPAT.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSUAService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PSUAService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-708117259-3629779018-2666748752-1001\...\sharepoint.com -> hxxps://studentsspcc-files.sharepoint.com
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2015-10-30 00:24 - 2016-06-09 12:47 - 00000848 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-708117259-3629779018-2666748752-1001\Control Panel\Desktop\\Wallpaper -> B:\Joshua\Pictures\Saved Pictures\1920x1080-Wallpaper-330.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{98FCEFB2-0978-4FE1-BD26-18FFF5C6E784}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{A9B7C8C0-AFDC-4D00-90BE-F51D77C0CA17}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{0A8C04D0-75E0-4838-B655-53FEA81251A6}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{A8BAF8CC-49E8-46E7-8488-369EA6840E72}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{236DE34D-4DD8-4DCB-9F5F-43084FBAD021}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{8C6B8F8B-71EF-4AD5-99C8-A4DB46F15193}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{4C784FA6-C245-4421-AE2A-47C719D273E2}] => (Allow) B:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{126BA5E3-9610-44AB-A3D2-336E1ABD02A8}] => (Allow) B:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F1FA9344-9D5F-4E4B-AAE6-CEB956AA0F7C}] => (Allow) B:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D05696AF-DB80-4F87-95C2-4AD4BB1D0738}] => (Allow) B:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{56223EA6-424F-4F91-B378-56B7468B1181}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{4FB09A2D-E6C4-405E-B365-1AB7B79D1D6A}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{DFE617C9-198B-496D-BF6E-74D379606481}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe
FirewallRules: [{FA517EB0-E1E2-4C86-86BC-B6F6179DC704}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe
FirewallRules: [{6EC51AFB-A95E-4FF6-8209-3FDE1B198413}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\GodMode\bin\GodMode.exe
FirewallRules: [{199BAA40-373F-4E66-A51C-6FF17892B9DD}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\GodMode\bin\GodMode.exe
FirewallRules: [{B6898F4E-0B02-4426-AEC3-BB2C782AC417}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\Half-Life\hl.exe
FirewallRules: [{CC7A7076-EB29-4E47-8635-2E61160E7458}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\Half-Life\hl.exe
FirewallRules: [{06E3DD08-9E4E-4077-841E-C84D8F37FEE7}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\Sven Co-op\svencoop.exe
FirewallRules: [{B05D410E-306F-41CF-8141-4DEB8E64795C}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\Sven Co-op\svencoop.exe
FirewallRules: [{44C07ABD-E919-45A5-BA9D-CC54588B014E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{224E01CC-45D2-4382-88C1-6A55D595E265}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{3DECC9BA-B6C0-470C-8BA6-F49004B4A2F3}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{03AEB8C8-B821-4BF9-AC19-3F0693C13870}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{F8237898-F751-4752-B30C-F83913937983}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{93C45FB4-0A8C-40DE-A642-0751553C7F2D}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{40DD8A8E-EC54-460E-84AB-F6354FBAC22F}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{ED1F0190-B4B3-45B7-B7ED-1A3856BD7622}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\QUBE Directors Cut\Binaries\Win32\QUBEGame.exe
FirewallRules: [{9D0E50B5-F966-4D1A-B9B5-0892649CF9B4}] => (Allow) B:\Program Files (x86)\Steam\steamapps\common\QUBE Directors Cut\Binaries\Win32\QUBEGame.exe
FirewallRules: [{CA075B18-FCA9-43EB-9476-DD8C561E4F9D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Restore Points =========================
ATTENTION: System Restore is disabled
==================== Faulty Device Manager Devices =============
Name: Ethernet Controller
Description: Ethernet Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/09/2016 05:15:57 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FABRITZIO)
Description: Activation of app Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App failed with error: -2147024770 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (06/09/2016 05:10:57 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FABRITZIO)
Description: Activation of app Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App failed with error: -2147024770 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (06/09/2016 05:06:47 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FABRITZIO)
Description: Activation of app Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App failed with error: -2147024770 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (06/09/2016 04:56:47 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FABRITZIO)
Description: Activation of app Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App failed with error: -2147024770 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (06/09/2016 04:51:47 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FABRITZIO)
Description: Activation of app Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App failed with error: -2147024770 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (06/09/2016 04:51:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: svchost.exe, version: 10.0.10586.0, time stamp: 0x5632d7ba
Faulting module name: ESENT.dll, version: 10.0.10586.212, time stamp: 0x56fa1686
Exception code: 0xc0000602
Fault offset: 0x000000000022885f
Faulting process id: 0x8c0
Faulting application start time: 0xsvchost.exe0
Faulting application path: svchost.exe1
Faulting module path: svchost.exe2
Report Id: svchost.exe3
Faulting package full name: svchost.exe4
Faulting package-relative application ID: svchost.exe5
Error: (06/09/2016 04:51:09 PM) (Source: ESENT) (EventID: 908) (User: )
Description: svchost (2240) Terminating process due to non-recoverable failure: PV: 10.0.10586.0 SV: 10.0.10586.0 GLE: 0 ERR: -1603(fucb.cxx:359): dllentry.cxx(103) (ESENT[10.0.10586.0] RETAIL RTM MBCS)
Error: (06/09/2016 04:47:31 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FABRITZIO)
Description: Activation of app Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App failed with error: -2147024770 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (06/09/2016 04:47:28 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FABRITZIO)
Description: Activation of app Microsoft.Messaging_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: -2147009280 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (06/09/2016 04:23:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: svchost.exe, version: 10.0.10586.0, time stamp: 0x5632d7ba
Faulting module name: ESENT.dll, version: 10.0.10586.212, time stamp: 0x56fa1686
Exception code: 0xc0000602
Fault offset: 0x000000000022885f
Faulting process id: 0xa38
Faulting application start time: 0xsvchost.exe0
Faulting application path: svchost.exe1
Faulting module path: svchost.exe2
Report Id: svchost.exe3
Faulting package full name: svchost.exe4
Faulting package-relative application ID: svchost.exe5
System errors:
=============
Error: (06/09/2016 06:01:07 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable
Error: (06/09/2016 05:43:13 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable
Error: (06/09/2016 05:31:21 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: There was an error while attempting to read the local hosts file.
Error: (06/09/2016 05:10:53 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: There was an error while attempting to read the local hosts file.
Error: (06/09/2016 05:10:51 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: There was an error while attempting to read the local hosts file.
Error: (06/09/2016 05:10:45 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: There was an error while attempting to read the local hosts file.
Error: (06/09/2016 05:10:41 PM) (Source: Application Popup) (EventID: 56) (User: )
Description: ACPI5
Error: (06/09/2016 05:10:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The User Data Access_2d9a3 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
Error: (06/09/2016 05:10:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The User Data Storage_2d9a3 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
Error: (06/09/2016 05:10:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Contact Data_2d9a3 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
CodeIntegrity:
===================================
Date: 2016-06-09 16:52:00.077
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\dnsapi.dll that did not meet the Store signing level requirements.
Date: 2016-06-09 16:52:00.041
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\dnsapi.dll that did not meet the Store signing level requirements.
Date: 2016-06-09 16:51:59.934
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\dnsapi.dll that did not meet the Store signing level requirements.
Date: 2016-06-09 16:51:56.063
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\dnsapi.dll that did not meet the Store signing level requirements.
Date: 2016-06-09 16:51:56.042
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\dnsapi.dll that did not meet the Store signing level requirements.
Date: 2016-06-09 16:51:56.023
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\dnsapi.dll that did not meet the Store signing level requirements.
Date: 2016-06-09 16:51:56.004
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\dnsapi.dll that did not meet the Store signing level requirements.
Date: 2016-06-09 16:51:55.984
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\dnsapi.dll that did not meet the Store signing level requirements.
Date: 2016-06-09 16:51:55.964
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\dnsapi.dll that did not meet the Store signing level requirements.
Date: 2016-06-09 16:51:55.943
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\dnsapi.dll that did not meet the Store signing level requirements.
==================== Memory info ===========================
Processor: Intel® Core™ i5-6500 CPU @ 3.20GHz
Percentage of memory in use: 22%
Total physical RAM: 16055.34 MB
Available physical RAM: 12512.19 MB
Total Virtual: 18487.34 MB
Available Virtual: 14448.62 MB
==================== Drives ================================
Drive b: (Western Digital) (Fixed) (Total:931.51 GB) (Free:885.3 GB) NTFS
Drive c: () (Fixed) (Total:111.3 GB) (Free:85.44 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 8616A285)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.3 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: BD6BF45A)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
FRST.txt
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-06-2016
Ran by Joshu (administrator) on FABRITZIO (09-06-2016 18:04:13)
Running from B:\Joshua
Loaded Profiles: Joshu (Available Profiles: Joshu)
Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Valve Corporation) B:\Program Files (x86)\Steam\Steam.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Valve Corporation) B:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(GOG.com) B:\Program Files (x86)\Galaxy Client\GalaxyClient\GalaxyClient.exe
(GOG.com) B:\Program Files (x86)\Galaxy Client\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) B:\Program Files (x86)\Galaxy Client\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) B:\Program Files (x86)\Galaxy Client\GalaxyClient\GalaxyClient Helper.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11602.1.26.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe
() B:\WindowsApps\61545TimGrabinat.wAPPerforGmail_1.1.17.0_x64__rcb0qdgx4z9ca\wAPPer for Gmail.exe
(Microsoft Corporation) C:\Windows\System32\LockAppHost.exe
() C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [570152 2014-08-14] (Acronis)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15818872 2016-04-28] (Logitech Inc.)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5319632 2015-07-23] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [691056 2015-07-20] (Acronis International GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [107520 2016-03-18] (Panda Security, S.L.)
HKU\S-1-5-21-708117259-3629779018-2666748752-1001\...\Run: [Steam] => "B:\Program Files (x86)\Steam\steam.exe" -silent
HKU\S-1-5-21-708117259-3629779018-2666748752-1001\...\Run: [GalaxyClient] => B:\Program Files (x86)\Galaxy Client\GalaxyClient\GalaxyClient.exe /launchViaAutoStart
HKU\S-1-5-21-708117259-3629779018-2666748752-1001\...\Run: [Ovvics] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\Joshu\AppData\Local\Orics\WmiccShell24.dll
HKU\S-1-5-21-708117259-3629779018-2666748752-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8722136 2016-06-01] (Piriform Ltd)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
BootExecute: autocheck autochk * PCloudBroom64.exe \systemroot\system32\BroomData.bit
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{176637bf-b74d-4c43-a972-9e355e417d76}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.exlee.com/?f=1&a=xle_installertech_16_20&cd=2XzuyEtN2Y1L1QzuyCtD0EtAtByBtDyB0FtA0Czy0D0DtC0EtN0D0Tzu0StCyDzyzytN1L2XzutAtFtBtCtFtDtFtDtN1L1Czu2V1I1P1V1L1G1B2Z1T1I1I1P1C2Z1P1R1MtN1L1G1B1V1N2Y1L1Qzu2StBtBzztC0DyBtAtBtGyDtC0AyDtGtBtB0CyCtGtCtCtAyBtG0B0F0F0DtDyDtDyD0ByB0FyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0C0DtAtCyBzytGzytB0AyDtGyEyCtC0BtGzztA0CtAtGyCtBtAzz0BtB0B0EtAyD0FtA2QtN0A0LzuyE&cr=79897421
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.exlee.com/?f=1&a=xle_installertech_16_20&cd=2XzuyEtN2Y1L1QzuyCtD0EtAtByBtDyB0FtA0Czy0D0DtC0EtN0D0Tzu0StCyDzyzytN1L2XzutAtFtBtCtFtDtFtDtN1L1Czu2V1I1P1V1L1G1B2Z1T1I1I1P1C2Z1P1R1MtN1L1G1B1V1N2Y1L1Qzu2StBtBzztC0DyBtAtBtGyDtC0AyDtGtBtB0CyCtGtCtCtAyBtG0B0F0F0DtDyDtDyD0ByB0FyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0C0DtAtCyBzytGzytB0AyDtGyEyCtC0BtGzztA0CtAtGyCtBtAzz0BtB0B0EtAyD0FtA2QtN0A0LzuyE&cr=79897421
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.exlee.com/results.php?f=4&a=xle_installertech_16_20&cd=2XzuyEtN2Y1L1QzuyCtD0EtAtByBtDyB0FtA0Czy0D0DtC0EtN0D0Tzu0StCyDzyzytN1L2XzutAtFtBtCtFtDtFtDtN1L1Czu2V1I1P1V1L1G1B2Z1T1I1I1P1C2Z1P1R1MtN1L1G1B1V1N2Y1L1Qzu2StBtBzztC0DyBtAtBtGyDtC0AyDtGtBtB0CyCtGtCtCtAyBtG0B0F0F0DtDyDtDyD0ByB0FyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0C0DtAtCyBzytGzytB0AyDtGyEyCtC0BtGzztA0CtAtGyCtBtAzz0BtB0B0EtAyD0FtA2QtN0A0LzuyE&cr=79897421&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.exlee.com/results.php?f=4&a=xle_installertech_16_20&cd=2XzuyEtN2Y1L1QzuyCtD0EtAtByBtDyB0FtA0Czy0D0DtC0EtN0D0Tzu0StCyDzyzytN1L2XzutAtFtBtCtFtDtFtDtN1L1Czu2V1I1P1V1L1G1B2Z1T1I1I1P1C2Z1P1R1MtN1L1G1B1V1N2Y1L1Qzu2StBtBzztC0DyBtAtBtGyDtC0AyDtGtBtB0CyCtGtCtCtAyBtG0B0F0F0DtDyDtDyD0ByB0FyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtB0C0DtAtCyBzytGzytB0AyDtGyEyCtC0BtGzztA0CtAtGyCtBtAzz0BtB0B0EtAyD0FtA2QtN0A0LzuyE&cr=79897421&q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-05-15] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-05-15] (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-05-14] (Oracle Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-14] (Oracle Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-15] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-15] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-15] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-15] (Microsoft Corporation)
FireFox:
========
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-14] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-14] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-05-15] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-09] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-09] (Google Inc.)
Chrome:
=======
CHR Profile: C:\Users\Joshu\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Joshu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-06-09]
CHR Extension: (Google Docs) - C:\Users\Joshu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-06-09]
CHR Extension: (Google Drive) - C:\Users\Joshu\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-09]
CHR Extension: (YouTube) - C:\Users\Joshu\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-09]
CHR Extension: (Google Sheets) - C:\Users\Joshu\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-06-09]
CHR Extension: (Google Docs Offline) - C:\Users\Joshu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-06-09]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Joshu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-09]
CHR Extension: (Adblock Pro) - C:\Users\Joshu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch [2016-06-09]
CHR Extension: (Gmail) - C:\Users\Joshu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-09]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2911472 2016-05-15] (Microsoft Corporation)
S3 cplspcon; C:\Windows\system32\IntelCpHDCPSvc.exe [621472 2015-12-19] (Intel Corporation)
S3 GalaxyClientService; B:\Program Files (x86)\Galaxy Client\GalaxyClient\GalaxyClientService.exe [245312 2016-06-08] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6211648 2016-06-08] (GOG.com)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373160 2015-12-19] (Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-04-28] (Logitech Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [150528 2016-03-18] (Panda Security, S.L.)
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [73176 2016-02-22] (Panda Security, S.L.)
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [38136 2016-03-17] (Panda Security, S.L.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 CorsairVBusDriver; C:\Windows\System32\drivers\CorsairVBusDriver.sys [47840 2016-01-20] (Corsair)
S3 CorsairVHidDriver; C:\Windows\System32\drivers\CorsairVHidDriver.sys [21728 2016-01-20] (Corsair)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [296736 2016-05-14] (Acronis International GmbH)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [85160 2016-04-18] (Logitech Inc.)
S3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-06-09] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [204032 2016-01-19] (Intel Corporation)
R1 NNSALPC; C:\Windows\system32\DRIVERS\NNSALPC.sys [103856 2015-12-10] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\system32\DRIVERS\NNSHTTP.sys [210864 2015-12-10] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\system32\DRIVERS\NNSHTTPS.sys [120240 2015-12-10] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\system32\DRIVERS\NNSIDS.sys [120240 2015-12-10] (Panda Security, S.L.)
R1 NNSNAHSL; C:\Windows\system32\DRIVERS\NNSNAHSL.sys [58616 2015-06-19] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\system32\DRIVERS\NNSPICC.sys [112560 2015-12-10] (Panda Security, S.L.)
R1 NNSPIHSW; C:\Windows\system32\DRIVERS\NNSPIHSW.sys [82864 2016-03-17] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\system32\DRIVERS\NNSPOP3.sys [133552 2015-12-10] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\system32\DRIVERS\NNSPROT.sys [309680 2015-12-10] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\system32\DRIVERS\NNSPRV.sys [179632 2016-02-18] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\system32\DRIVERS\NNSSMTP.sys [122800 2015-12-10] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\system32\DRIVERS\NNSSTRM.sys [267184 2016-02-18] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\system32\DRIVERS\NNSTLSC.sys [115632 2015-12-10] (Panda Security, S.L.)
S0 PsBoot; C:\Windows\System32\Drivers\PsBoot.sys [42624 2015-06-16] (Panda Security, S.L.)
R2 PSINAflt; C:\Windows\system32\DRIVERS\PSINAflt.sys [174000 2016-02-18] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [129456 2016-02-18] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\system32\DRIVERS\PSINKNC.sys [207280 2016-02-18] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [133552 2016-02-18] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\system32\DRIVERS\PSINProt.sys [146864 2016-02-24] (Panda Security, S.L.)
R2 PSINReg; C:\Windows\system32\DRIVERS\PSINReg.sys [117168 2016-02-18] (Panda Security, S.L.)
R2 tib; C:\Windows\system32\DRIVERS\tib.sys [1058632 2016-05-14] (Acronis International GmbH)
R2 tib_mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [248648 2016-05-14] (Acronis International GmbH)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-06-09 18:02 - 2015-06-16 07:41 - 00042624 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PsBoot.sys
2016-06-09 17:11 - 2016-06-09 17:11 - 00000000 ___HD C:\OneDriveTemp
2016-06-09 16:06 - 2016-06-09 17:55 - 00000000 ____D C:\Program Files\Recuva
2016-06-09 16:06 - 2016-06-09 16:06 - 00001699 _____ C:\Users\Public\Desktop\Recuva.lnk
2016-06-09 16:06 - 2016-06-09 16:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2016-06-09 15:51 - 2016-06-09 15:51 - 00002858 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-06-09 15:51 - 2016-06-09 15:51 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-06-09 15:51 - 2016-06-09 15:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-06-09 15:51 - 2016-06-09 15:51 - 00000000 ____D C:\Program Files\CCleaner
2016-06-09 15:30 - 2016-06-09 18:04 - 00000000 ____D C:\FRST
2016-06-09 14:37 - 2016-06-09 17:10 - 00000922 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-09 14:37 - 2016-06-09 16:47 - 00000926 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-09 14:37 - 2016-06-09 14:42 - 00003984 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-06-09 14:37 - 2016-06-09 14:42 - 00003752 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-06-09 14:37 - 2016-06-09 14:37 - 00002344 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-09 14:37 - 2016-06-09 14:37 - 00002332 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-06-09 14:37 - 2016-06-09 14:37 - 00000000 ____D C:\Users\Joshu\AppData\Local\Deployment
2016-06-09 14:37 - 2016-06-09 14:37 - 00000000 ____D C:\Users\Joshu\AppData\Local\Apps\2.0
2016-06-09 14:17 - 2015-06-16 07:41 - 00062080 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys
2016-06-09 14:16 - 2016-06-09 14:16 - 00001378 _____ C:\Windows\SysWOW64\BroomData.bit
2016-06-09 14:16 - 2013-04-08 16:30 - 00022752 _____ C:\Windows\system32\PCloudBroom64.exe
2016-06-09 14:11 - 2016-06-09 14:11 - 00001355 _____ C:\Users\Public\Desktop\Panda Cloud Cleaner.lnk
2016-06-09 14:10 - 2016-06-09 14:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security
2016-06-09 12:50 - 2016-06-09 14:29 - 00000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2016-06-09 12:19 - 2016-06-09 17:10 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-06-09 12:19 - 2016-06-09 12:35 - 00001165 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-06-09 12:19 - 2016-06-09 12:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-06-09 12:19 - 2016-06-09 12:19 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-06-09 12:19 - 2016-06-09 12:19 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-06-09 12:19 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-06-09 12:19 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-06-09 12:19 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-06-08 22:33 - 2016-06-09 17:10 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-06-08 22:26 - 2016-06-09 12:54 - 00000000 ____D C:\Windows\AutoKMS
2016-06-08 22:25 - 2016-06-08 22:25 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2016-06-08 22:17 - 2016-06-08 22:17 - 00000000 ____D C:\Windows\system32\wek
2016-06-08 22:15 - 2016-06-08 22:15 - 00000000 ____D C:\Users\Joshu\AppData\Local\Shortcut Installer
2016-06-08 22:14 - 2016-06-09 16:09 - 00000000 ____D C:\uninst
2016-06-08 22:14 - 2016-06-09 12:34 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\Gijae
2016-06-08 22:14 - 2016-06-09 12:34 - 00000000 ____D C:\Users\Joshu\AppData\LocalLow\Company
2016-06-08 22:14 - 2016-06-08 22:14 - 00000000 ____D C:\Users\Joshu\AppData\Local\Tempfolder
2016-06-08 22:13 - 2016-06-09 12:31 - 00000000 ____D C:\Users\Joshu\AppData\Local\Acwworks
2016-06-08 22:05 - 2016-06-08 22:06 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\QuickCleaner
2016-06-08 22:04 - 2016-06-08 22:12 - 00128512 _____ C:\Users\Joshu\AppData\Roaming\Installer.dat
2016-06-08 22:02 - 2016-06-09 12:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Toolkit Final
2016-06-08 22:02 - 2016-06-08 22:11 - 00003606 _____ C:\Windows\System32\Tasks\PPI Update
2016-06-08 11:59 - 2016-06-09 12:35 - 00001376 _____ C:\Users\Public\Desktop\System Shock 2.lnk
2016-06-08 11:59 - 2016-06-08 11:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Shock 2 [GOG.com]
2016-06-08 11:54 - 2016-06-09 12:35 - 00000964 _____ C:\Users\Public\Desktop\GOG Galaxy.lnk
2016-06-08 11:54 - 2016-06-08 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2016-06-08 11:54 - 2016-06-08 11:54 - 00000000 ____D C:\ProgramData\GOG.com
2016-06-08 11:33 - 2016-06-08 11:33 - 00000222 _____ C:\Users\Joshu\Desktop\Q.U.B.E Director's Cut.url
2016-06-04 21:00 - 2016-06-04 21:00 - 00000000 ____D C:\Users\Joshu\Documents\My Games
2016-06-04 20:57 - 2016-06-04 20:57 - 00000219 _____ C:\Users\Joshu\Desktop\Team Fortress 2.url
2016-06-04 11:38 - 2016-06-04 11:38 - 00000000 ____D C:\ProgramData\LogiShrd
2016-06-04 11:36 - 2016-06-04 11:36 - 00000000 ____D C:\Users\Joshu\AppData\Local\Logitech
2016-06-04 11:33 - 2016-06-09 12:35 - 00001014 _____ C:\Users\Joshu\Desktop\Logitech Gaming Software 8.83.lnk
2016-06-04 11:33 - 2016-06-04 11:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2016-06-04 11:33 - 2016-06-04 11:33 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2016-06-04 11:33 - 2016-06-04 11:33 - 00000000 ____D C:\Program Files\Logitech Gaming Software
2016-06-04 11:28 - 2016-06-04 11:28 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\Logitech
2016-06-04 11:28 - 2016-06-04 11:28 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\Logishrd
2016-05-31 17:15 - 2016-05-31 17:15 - 00000000 ____D C:\Users\Joshu\AppData\Local\ElevatedDiagnostics
2016-05-31 17:09 - 2016-05-31 17:14 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\Corsair
2016-05-31 17:09 - 2016-05-31 17:14 - 00000000 ____D C:\Users\Joshu\AppData\Local\Corsair
2016-05-26 17:55 - 2016-06-09 17:35 - 00004154 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D0646C2C-9C14-4548-800F-D8E57C9AF2A8}
2016-05-20 23:13 - 2016-05-20 23:13 - 03941528 _____ (Logitech, Inc.) C:\Windows\system32\LogiLDA.DLL
2016-05-20 23:12 - 2016-05-20 23:12 - 02466968 _____ (Logitech, Inc.) C:\Windows\system32\LdaCx2.dll
2016-05-18 21:03 - 2016-06-09 12:35 - 00001082 _____ C:\Users\Joshu\Desktop\7-Zip.lnk
2016-05-18 21:01 - 2016-05-18 21:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-05-18 20:59 - 2016-06-09 12:35 - 00001595 _____ C:\Users\Joshu\Desktop\Minecraft.lnk
2016-05-18 20:50 - 2016-05-18 20:59 - 00000000 ____D C:\Program Files (x86)\Minecraft
2016-05-18 20:50 - 2016-05-18 20:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
2016-05-18 20:30 - 2016-06-09 14:10 - 00000000 ____D C:\Program Files (x86)\Panda Security
2016-05-18 20:30 - 2016-06-09 12:35 - 00002260 _____ C:\Users\Public\Desktop\Panda Free Antivirus.lnk
2016-05-18 20:30 - 2016-06-09 12:35 - 00002257 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Free Antivirus.lnk
2016-05-18 20:30 - 2016-05-18 20:30 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\Panda Security
2016-05-18 20:30 - 2016-05-18 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Free Antivirus
2016-05-18 20:30 - 2016-02-24 05:26 - 00146864 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSINProt.sys
2016-05-18 20:30 - 2016-02-18 09:37 - 00207280 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSINKNC.sys
2016-05-18 20:30 - 2016-02-18 09:37 - 00174000 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSINAflt.sys
2016-05-18 20:30 - 2016-02-18 09:37 - 00133552 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSINProc.sys
2016-05-18 20:30 - 2016-02-18 09:37 - 00129456 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSINFile.sys
2016-05-18 20:30 - 2016-02-18 09:37 - 00117168 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSINReg.sys
2016-05-18 20:28 - 2016-05-18 20:30 - 00000000 ____D C:\ProgramData\Panda Security
2016-05-18 20:26 - 2016-05-18 20:26 - 00002576 _____ C:\Windows\SysWOW64\servers.def.vpx
2016-05-18 20:26 - 2016-05-18 20:26 - 00000445 _____ C:\Windows\SysWOW64\prod-pgm.vpx
2016-05-18 20:24 - 2016-05-18 20:24 - 00000258 __RSH C:\ProgramData\ntuser.pol
2016-05-18 20:24 - 2016-05-18 20:24 - 00000000 ____D C:\Program Files (x86)\Y_H
2016-05-18 20:18 - 2016-06-05 13:39 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\.minecraft
2016-05-18 20:18 - 2016-05-18 20:18 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\java
2016-05-15 19:34 - 2016-05-15 19:34 - 00000000 ____D C:\Windows\SysWOW64\vbox
2016-05-15 19:34 - 2016-05-15 19:34 - 00000000 ____D C:\Windows\system32\vbox
2016-05-15 17:01 - 2016-05-15 17:01 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\dvdcss
2016-05-15 17:00 - 2016-06-09 12:35 - 00000843 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-05-15 17:00 - 2016-05-15 17:02 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\vlc
2016-05-15 16:22 - 2016-05-15 16:22 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-05-15 09:31 - 2016-05-15 09:31 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\Macromedia
2016-05-14 14:56 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2016-05-14 14:56 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2016-05-14 14:56 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2016-05-14 14:56 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2016-05-14 14:56 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2016-05-14 14:56 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2016-05-14 14:56 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2016-05-14 14:56 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2016-05-14 14:56 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2016-05-14 14:56 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2016-05-14 14:56 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2016-05-14 14:56 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2016-05-14 14:56 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2016-05-14 14:56 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2016-05-14 14:56 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2016-05-14 14:56 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2016-05-14 14:56 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2016-05-14 14:56 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2016-05-14 14:56 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2016-05-14 14:56 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2016-05-14 14:56 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2016-05-14 14:56 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2016-05-14 14:56 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2016-05-14 14:56 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2016-05-14 14:56 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2016-05-14 14:56 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2016-05-14 14:56 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2016-05-14 14:56 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2016-05-14 14:56 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2016-05-14 14:56 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2016-05-14 14:56 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2016-05-14 14:56 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2016-05-14 14:56 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2016-05-14 14:56 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2016-05-14 14:56 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2016-05-14 14:56 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2016-05-14 14:56 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2016-05-14 14:56 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2016-05-14 14:56 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2016-05-14 14:56 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2016-05-14 14:56 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2016-05-14 14:56 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2016-05-14 14:56 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2016-05-14 14:56 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2016-05-14 14:56 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2016-05-14 14:56 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2016-05-14 14:56 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2016-05-14 14:56 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2016-05-14 14:56 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2016-05-14 14:56 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2016-05-14 14:56 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2016-05-14 14:56 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2016-05-14 14:56 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2016-05-14 14:56 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2016-05-14 14:56 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2016-05-14 14:56 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2016-05-14 14:56 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2016-05-14 14:56 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2016-05-14 14:56 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2016-05-14 14:56 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2016-05-14 14:56 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2016-05-14 14:56 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2016-05-14 14:56 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2016-05-14 14:56 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2016-05-14 14:56 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2016-05-14 14:56 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2016-05-14 14:56 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2016-05-14 14:56 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2016-05-14 14:56 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2016-05-14 14:56 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2016-05-14 14:56 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2016-05-14 14:56 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2016-05-14 14:56 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-05-14 14:56 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2016-05-14 14:56 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-05-14 14:56 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2016-05-14 14:56 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-05-14 14:56 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2016-05-14 14:56 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2016-05-14 14:56 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2016-05-14 14:56 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2016-05-14 14:56 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2016-05-14 14:56 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2016-05-14 14:56 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2016-05-14 14:56 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2016-05-14 14:56 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2016-05-14 14:56 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2016-05-14 14:56 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2016-05-14 14:56 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2016-05-14 14:56 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2016-05-14 14:56 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2016-05-14 14:56 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2016-05-14 14:56 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2016-05-14 14:56 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2016-05-14 14:56 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2016-05-14 14:56 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2016-05-14 14:56 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2016-05-14 14:56 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2016-05-14 14:56 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2016-05-14 14:56 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2016-05-14 14:56 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2016-05-14 14:56 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2016-05-14 14:56 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2016-05-14 14:56 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2016-05-14 14:56 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2016-05-14 14:56 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2016-05-14 14:56 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2016-05-14 14:56 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2016-05-14 14:56 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2016-05-14 14:56 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2016-05-14 14:56 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2016-05-14 14:56 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2016-05-14 14:56 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2016-05-14 14:56 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2016-05-14 14:56 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2016-05-14 14:56 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2016-05-14 14:56 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2016-05-14 14:56 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2016-05-14 14:56 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2016-05-14 14:56 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2016-05-14 14:56 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2016-05-14 14:56 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2016-05-14 14:56 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2016-05-14 14:56 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2016-05-14 14:56 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2016-05-14 14:56 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2016-05-14 14:56 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2016-05-14 14:56 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2016-05-14 14:56 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2016-05-14 14:56 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2016-05-14 14:56 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2016-05-14 14:56 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2016-05-14 14:56 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2016-05-14 14:56 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2016-05-14 14:56 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2016-05-14 14:56 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2016-05-14 14:56 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2016-05-14 14:56 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2016-05-14 14:56 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2016-05-14 14:56 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2016-05-14 14:56 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2016-05-14 14:56 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2016-05-14 14:56 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2016-05-14 14:56 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2016-05-14 14:56 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2016-05-14 14:56 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2016-05-14 14:56 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2016-05-14 14:56 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2016-05-14 14:56 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2016-05-14 14:56 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2016-05-14 14:56 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2016-05-14 14:56 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2016-05-14 14:56 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2016-05-14 14:56 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2016-05-14 14:56 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2016-05-14 14:56 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2016-05-14 14:56 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2016-05-14 14:56 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2016-05-14 14:56 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2016-05-14 14:56 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2016-05-14 14:56 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2016-05-14 14:56 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2016-05-14 14:56 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2016-05-14 14:56 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2016-05-14 14:56 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2016-05-14 14:56 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2016-05-14 14:56 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2016-05-14 14:56 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2016-05-14 14:56 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2016-05-14 14:56 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2016-05-14 14:56 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2016-05-14 14:56 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2016-05-14 14:56 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2016-05-14 14:56 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2016-05-14 14:56 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2016-05-14 14:56 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2016-05-14 14:56 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2016-05-14 14:56 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2016-05-14 14:56 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2016-05-14 14:56 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2016-05-14 14:56 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2016-05-14 14:56 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2016-05-14 14:52 - 2016-06-05 20:10 - 00000024 _____ C:\Users\Joshu\random.dat
2016-05-14 14:52 - 2016-06-05 20:04 - 00000023 _____ C:\Users\Joshu\jagexappletviewer.preferences
2016-05-14 14:52 - 2016-06-05 20:03 - 00000044 _____ C:\Users\Joshu\jagex_cl_oldschool_LIVE.dat
2016-05-14 14:52 - 2016-05-14 14:52 - 00000000 ____D C:\.jagex_cache_32
2016-05-14 14:46 - 2016-05-14 14:46 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-05-14 14:46 - 2016-05-14 14:46 - 00000000 ____D C:\Program Files\MSBuild
2016-05-14 14:46 - 2016-05-14 14:46 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-05-14 14:46 - 2016-05-14 14:46 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-05-14 14:45 - 2016-06-08 11:35 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-14 14:45 - 2016-05-14 14:45 - 00000000 __RHD C:\AHCache
2016-05-14 14:45 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2016-05-14 14:45 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-05-14 14:45 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-05-14 14:45 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2016-05-14 14:45 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-05-14 14:45 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-05-14 14:38 - 2016-06-09 12:35 - 00001872 _____ C:\Users\Joshu\Desktop\PowerPoint 2016.lnk
2016-05-14 14:38 - 2016-06-09 12:35 - 00001832 _____ C:\Users\Joshu\Desktop\Word 2016.lnk
2016-05-14 14:38 - 2016-06-09 12:35 - 00001816 _____ C:\Users\Joshu\Desktop\Excel 2016.lnk
2016-05-14 14:35 - 2016-06-09 12:35 - 00002481 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-05-14 14:35 - 2016-06-09 12:35 - 00002480 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-05-14 14:35 - 2016-06-09 12:35 - 00002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-05-14 14:35 - 2016-06-09 12:35 - 00002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-05-14 14:35 - 2016-06-09 12:35 - 00002437 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-05-14 14:35 - 2016-06-09 12:35 - 00002431 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-05-14 14:35 - 2016-06-09 12:35 - 00002423 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-05-14 14:35 - 2016-05-14 14:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
2016-05-14 14:35 - 2016-05-14 14:35 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-05-14 13:16 - 2016-05-14 13:16 - 00000000 ____D C:\ProgramData\dllescort
2016-05-14 12:49 - 2016-05-27 18:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-05-14 12:41 - 2016-05-14 12:41 - 00000222 _____ C:\Users\Joshu\Desktop\Sven Co-op.url
2016-05-14 12:40 - 2016-05-14 12:40 - 00000218 _____ C:\Users\Joshu\Desktop\Half-Life.url
2016-05-14 12:37 - 2016-05-14 12:37 - 00000222 _____ C:\Users\Joshu\Desktop\God Mode.url
2016-05-14 12:35 - 2016-05-14 12:35 - 00000222 _____ C:\Users\Joshu\Desktop\Goat Simulator.url
2016-05-14 12:32 - 2016-06-09 12:35 - 00002106 _____ C:\Users\Joshu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OldSchool RuneScape.lnk
2016-05-14 12:32 - 2016-06-09 12:35 - 00002076 _____ C:\Users\Joshu\Desktop\OldSchool RuneScape.lnk
2016-05-14 12:32 - 2016-05-14 14:52 - 00000000 ____D C:\Users\Joshu\jagexcache
2016-05-14 12:32 - 2016-05-14 12:32 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OldSchool RuneScape
2016-05-14 12:31 - 2016-05-14 12:31 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2016-05-14 12:27 - 2016-05-14 12:27 - 00000220 _____ C:\Users\Joshu\Desktop\Garry's Mod.url
2016-05-14 12:26 - 2016-06-09 16:14 - 00000000 ____D C:\Users\Joshu\.oracle_jre_usage
2016-05-14 12:26 - 2016-05-14 12:26 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-05-14 12:26 - 2016-05-14 12:26 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\Sun
2016-05-14 12:26 - 2016-05-14 12:26 - 00000000 ____D C:\Users\Joshu\AppData\LocalLow\Sun
2016-05-14 12:26 - 2016-05-14 12:26 - 00000000 ____D C:\ProgramData\Oracle
2016-05-14 12:26 - 2016-05-14 12:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-05-14 12:26 - 2016-05-14 12:26 - 00000000 ____D C:\Program Files (x86)\Java
2016-05-14 12:25 - 2016-05-14 12:25 - 00000000 ____D C:\Users\Joshu\AppData\LocalLow\Oracle
2016-05-14 12:24 - 2016-06-09 12:35 - 00000746 _____ C:\Users\Public\Desktop\Steam.lnk
2016-05-14 12:24 - 2016-05-14 12:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-05-14 12:09 - 2016-05-14 12:09 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\Acronis
2016-05-14 12:07 - 2016-06-09 12:35 - 00001274 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis True Image 2015.lnk
2016-05-14 12:07 - 2016-06-09 12:35 - 00001268 _____ C:\Users\Public\Desktop\Acronis True Image 2015.lnk
2016-05-14 12:07 - 2016-05-14 12:07 - 01058632 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys
2016-05-14 12:07 - 2016-05-14 12:07 - 00304416 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\snapman.sys
2016-05-14 12:07 - 2016-05-14 12:07 - 00296736 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\file_tracker.sys
2016-05-14 12:07 - 2016-05-14 12:07 - 00248648 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib_mounter.sys
2016-05-14 12:07 - 2016-05-14 12:07 - 00134432 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\fltsrv.sys
2016-05-14 12:07 - 2016-05-14 12:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
2016-05-14 12:07 - 2016-05-14 12:07 - 00000000 ____D C:\ProgramData\Acronis
2016-05-14 12:07 - 2016-05-14 12:07 - 00000000 ____D C:\Program Files (x86)\Acronis
2016-05-14 12:02 - 2016-05-14 12:02 - 00000000 ____D C:\Users\Joshu\AppData\Local\Steam
2016-05-14 12:02 - 2016-05-14 12:02 - 00000000 ____D C:\Users\Joshu\AppData\Local\CEF
2016-05-14 11:53 - 2016-05-31 17:17 - 00000000 ____D C:\ProgramData\AVAST Software
2016-05-14 11:45 - 2016-05-14 11:47 - 00000000 ____D C:\Windows\system32\MRT
2016-05-14 11:45 - 2016-05-14 11:45 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-14 11:45 - 2016-04-29 23:31 - 03591168 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-05-14 11:45 - 2016-04-22 23:12 - 01401024 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-05-14 11:45 - 2016-04-22 23:12 - 01184960 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-05-14 11:45 - 2016-04-22 23:12 - 00514752 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-05-14 11:45 - 2016-04-22 23:12 - 00294592 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-05-14 11:45 - 2016-04-22 23:12 - 00046784 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-05-14 11:45 - 2016-04-22 22:28 - 01557768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-05-14 11:45 - 2016-04-22 22:28 - 01542816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-05-14 11:45 - 2016-04-22 22:24 - 07474528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-14 11:45 - 2016-04-22 22:24 - 01997328 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-05-14 11:45 - 2016-04-22 22:24 - 01819208 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-14 11:45 - 2016-04-22 22:10 - 03673424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-14 11:45 - 2016-04-22 22:10 - 02919832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-05-14 11:45 - 2016-04-22 22:09 - 22561256 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-05-14 11:45 - 2016-04-22 22:09 - 21123320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-05-14 11:45 - 2016-04-22 22:09 - 05240960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2016-05-14 11:45 - 2016-04-22 22:09 - 04074160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-05-14 11:45 - 2016-04-22 22:08 - 06605504 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-05-14 11:45 - 2016-04-22 22:08 - 04515256 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-05-14 11:45 - 2016-04-22 22:01 - 01996640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-14 11:45 - 2016-04-22 22:01 - 00577368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-05-14 11:45 - 2016-04-22 21:31 - 13018112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-05-14 11:45 - 2016-04-22 21:30 - 22379008 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-05-14 11:45 - 2016-04-22 21:28 - 16984576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-05-14 11:45 - 2016-04-22 21:25 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-05-14 11:45 - 2016-04-22 21:24 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-05-14 11:45 - 2016-04-22 21:23 - 11545088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-05-14 11:45 - 2016-04-22 21:22 - 09918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-05-14 11:45 - 2016-04-22 21:20 - 19344384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-05-14 11:45 - 2016-04-22 21:20 - 18676224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-05-14 11:45 - 2016-04-22 21:19 - 07977472 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-05-14 11:45 - 2016-04-22 21:19 - 00970752 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-05-14 11:45 - 2016-04-22 21:18 - 24604672 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-14 11:45 - 2016-04-22 21:16 - 01319424 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2016-05-14 11:45 - 2016-04-22 21:15 - 00792064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-05-14 11:45 - 2016-04-22 21:15 - 00673280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2016-05-14 11:45 - 2016-04-22 21:14 - 13383168 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-14 11:45 - 2016-04-22 21:13 - 07200256 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-05-14 11:45 - 2016-04-22 21:13 - 06295552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2016-05-14 11:45 - 2016-04-22 21:13 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2016-05-14 11:45 - 2016-04-22 21:10 - 12125696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-14 11:45 - 2016-04-22 21:09 - 03666432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-05-14 11:45 - 2016-04-22 21:09 - 02582016 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-05-14 11:45 - 2016-04-22 21:08 - 02061824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-05-14 11:45 - 2016-04-22 21:07 - 05205504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2016-05-14 11:45 - 2016-04-22 21:07 - 01500160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-14 11:45 - 2016-04-22 21:06 - 06974464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-05-14 11:45 - 2016-04-22 21:05 - 05502976 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-05-14 11:45 - 2016-04-22 21:05 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-05-14 11:45 - 2016-04-22 21:05 - 01946112 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-05-14 11:45 - 2016-04-22 21:05 - 01626624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-05-14 11:45 - 2016-04-22 21:04 - 04759040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-05-14 11:45 - 2016-04-22 21:04 - 01731072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-14 11:45 - 2016-04-22 21:03 - 05660160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-05-14 11:45 - 2016-04-22 21:03 - 04894208 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-14 11:45 - 2016-04-22 21:03 - 02280960 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-05-14 11:45 - 2016-04-22 21:03 - 02000896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2016-05-14 11:45 - 2016-04-22 21:02 - 07832576 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-05-14 11:45 - 2016-04-22 21:02 - 02444288 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-05-14 11:45 - 2016-04-01 21:13 - 00369912 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-05-14 11:45 - 2016-04-01 20:19 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-05-14 11:45 - 2016-04-01 20:14 - 03994624 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-05-14 11:45 - 2016-03-29 03:20 - 02656952 _____ C:\Windows\system32\CoreUIComponents.dll
2016-05-14 11:45 - 2016-03-29 02:56 - 01297752 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-05-14 11:45 - 2016-03-29 02:37 - 01862008 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2016-05-14 11:45 - 2016-03-29 02:11 - 00605440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-05-14 11:45 - 2016-03-29 00:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
2016-05-14 11:45 - 2016-03-29 00:58 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-05-14 11:45 - 2016-03-29 00:34 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-05-14 11:45 - 2016-03-29 00:12 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininetlui.dll
2016-05-14 11:45 - 2016-03-29 00:12 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-05-14 11:45 - 2016-03-29 00:02 - 02624512 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2016-05-14 11:45 - 2016-03-29 00:00 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2016-05-14 11:45 - 2016-03-28 23:36 - 03351040 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-05-14 11:45 - 2016-03-28 23:32 - 01588224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-05-14 11:45 - 2016-03-28 23:32 - 01098240 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-05-14 11:45 - 2016-03-28 23:28 - 01944576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2016-05-14 11:45 - 2016-03-28 23:27 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll
2016-05-14 11:45 - 2016-03-28 23:26 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-14 11:45 - 2016-03-28 23:19 - 02635776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-05-14 11:45 - 2016-03-28 23:10 - 03671040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-05-14 11:45 - 2016-03-28 23:05 - 01388032 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-14 11:45 - 2016-03-28 23:02 - 02229760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-05-14 11:45 - 2016-03-28 22:58 - 01799680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-05-14 11:45 - 2016-03-28 22:45 - 03078144 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-05-14 11:45 - 2016-03-28 22:43 - 03428864 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-05-14 11:45 - 2016-03-28 22:38 - 02798080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-05-14 11:45 - 2016-03-28 22:36 - 02722816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2016-05-14 11:45 - 2016-02-29 22:31 - 00848168 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-05-14 11:45 - 2016-02-29 22:22 - 00709688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-05-14 11:45 - 2016-02-24 02:28 - 03449168 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2016-05-14 11:45 - 2016-02-23 23:18 - 01490432 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
2016-05-14 11:45 - 2016-02-23 22:05 - 12586496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-05-14 11:45 - 2016-02-23 22:03 - 14252544 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-05-14 11:45 - 2016-02-23 03:32 - 08705672 _____ (Microsoft Corp.) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2016-05-14 11:45 - 2016-02-23 03:32 - 02544264 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-05-14 11:45 - 2016-02-23 03:31 - 00536256 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-05-14 11:45 - 2016-02-23 03:31 - 00408120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-05-14 11:45 - 2016-02-23 02:45 - 02773096 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-05-14 11:45 - 2016-02-23 02:38 - 06952088 _____ (Microsoft Corp.) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-05-14 11:45 - 2016-02-23 02:38 - 02180136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-05-14 11:45 - 2016-02-23 01:56 - 02186864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-05-14 11:45 - 2016-02-23 01:29 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SmsRouterSvc.dll
2016-05-14 11:45 - 2016-02-23 01:28 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-05-14 11:45 - 2016-02-23 00:52 - 00456704 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2016-05-14 11:45 - 2016-02-23 00:24 - 04827136 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-05-14 11:45 - 2016-02-22 23:41 - 02912256 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2016-05-14 11:45 - 2016-02-22 23:35 - 07533568 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-05-14 11:45 - 2016-02-22 23:33 - 02604032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2016-05-14 11:45 - 2016-02-22 23:28 - 06740992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-05-14 11:44 - 2016-05-14 11:44 - 00686976 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-05-14 11:44 - 2016-05-14 11:44 - 00535080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-05-14 11:44 - 2016-05-05 21:53 - 00095072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdport.sys
2016-05-14 11:44 - 2016-05-05 21:03 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2016-05-14 11:44 - 2016-05-05 20:53 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2016-05-14 11:44 - 2016-05-05 20:49 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrSvc.dll
2016-05-14 11:44 - 2016-05-05 20:44 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2016-05-14 11:44 - 2016-05-05 20:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\ngcpopkeysrv.dll
2016-05-14 11:44 - 2016-04-29 23:42 - 01387520 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-05-14 11:44 - 2016-04-22 23:12 - 00713920 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-05-14 11:44 - 2016-04-22 23:12 - 00190144 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-05-14 11:44 - 2016-04-22 23:12 - 00092352 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-05-14 11:44 - 2016-04-22 22:26 - 00707608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-05-14 11:44 - 2016-04-22 22:24 - 00754664 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2016-05-14 11:44 - 2016-04-22 22:22 - 01161120 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-05-14 11:44 - 2016-04-22 22:13 - 00502104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2016-05-14 11:44 - 2016-04-22 22:13 - 00306832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2016-05-14 11:44 - 2016-04-22 22:12 - 00925064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-05-14 11:44 - 2016-04-22 22:12 - 00451928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2016-05-14 11:44 - 2016-04-22 22:12 - 00413536 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2016-05-14 11:44 - 2016-04-22 22:11 - 01092464 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-05-14 11:44 - 2016-04-22 22:11 - 00696672 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-05-14 11:44 - 2016-04-22 22:11 - 00498960 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2016-05-14 11:44 - 2016-04-22 22:11 - 00390496 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-05-14 11:44 - 2016-04-22 22:10 - 00330072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-05-14 11:44 - 2016-04-22 22:09 - 00569744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2016-05-14 11:44 - 2016-04-22 22:09 - 00565600 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-05-14 11:44 - 2016-04-22 22:09 - 00465760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2016-05-14 11:44 - 2016-04-22 22:09 - 00303216 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-05-14 11:44 - 2016-04-22 22:09 - 00255168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2016-05-14 11:44 - 2016-04-22 22:08 - 00725776 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2016-05-14 11:44 - 2016-04-22 22:07 - 01848072 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-05-14 11:44 - 2016-04-22 22:07 - 01536088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-05-14 11:44 - 2016-04-22 22:07 - 00204048 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2016-05-14 11:44 - 2016-04-22 22:06 - 00291360 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2016-05-14 11:44 - 2016-04-22 22:02 - 00188256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2016-05-14 11:44 - 2016-04-22 22:01 - 00650304 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-05-14 11:44 - 2016-04-22 22:01 - 00619296 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-05-14 11:44 - 2016-04-22 22:01 - 00522176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-05-14 11:44 - 2016-04-22 22:01 - 00513368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-05-14 11:44 - 2016-04-22 22:01 - 00393568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-05-14 11:44 - 2016-04-22 22:01 - 00217440 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2016-05-14 11:44 - 2016-04-22 22:00 - 01776768 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-05-14 11:44 - 2016-04-22 22:00 - 01594920 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-05-14 11:44 - 2016-04-22 22:00 - 01522152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-05-14 11:44 - 2016-04-22 22:00 - 01399224 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-05-14 11:44 - 2016-04-22 22:00 - 01372304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-05-14 11:44 - 2016-04-22 22:00 - 01337240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-05-14 11:44 - 2016-04-22 22:00 - 00550656 _____ (Microsoft Corporation) C:\Windows\system32\directmanipulation.dll
2016-05-14 11:44 - 2016-04-22 22:00 - 00453472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll
2016-05-14 11:44 - 2016-04-22 21:35 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\MosHostClient.dll
2016-05-14 11:44 - 2016-04-22 21:31 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-05-14 11:44 - 2016-04-22 21:30 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosHostClient.dll
2016-05-14 11:44 - 2016-04-22 21:29 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2016-05-14 11:44 - 2016-04-22 21:28 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2016-05-14 11:44 - 2016-04-22 21:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll
2016-05-14 11:44 - 2016-04-22 21:26 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-05-14 11:44 - 2016-04-22 21:26 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll
2016-05-14 11:44 - 2016-04-22 21:25 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
2016-05-14 11:44 - 2016-04-22 21:25 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2016-05-14 11:44 - 2016-04-22 21:25 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2016-05-14 11:44 - 2016-04-22 21:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-05-14 11:44 - 2016-04-22 21:24 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2016-05-14 11:44 - 2016-04-22 21:24 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2016-05-14 11:44 - 2016-04-22 21:24 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2016-05-14 11:44 - 2016-04-22 21:24 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll
2016-05-14 11:44 - 2016-04-22 21:22 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-05-14 11:44 - 2016-04-22 21:21 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-05-14 11:44 - 2016-04-22 21:20 - 00606720 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2016-05-14 11:44 - 2016-04-22 21:20 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2016-05-14 11:44 - 2016-04-22 21:20 - 00484352 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-05-14 11:44 - 2016-04-22 21:20 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2016-05-14 11:44 - 2016-04-22 21:20 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
2016-05-14 11:44 - 2016-04-22 21:19 - 01056256 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-05-14 11:44 - 2016-04-22 21:19 - 00853504 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-05-14 11:44 - 2016-04-22 21:19 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2016-05-14 11:44 - 2016-04-22 21:18 - 00988672 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2016-05-14 11:44 - 2016-04-22 21:18 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-05-14 11:44 - 2016-04-22 21:18 - 00939520 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-05-14 11:44 - 2016-04-22 21:18 - 00870400 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2016-05-14 11:44 - 2016-04-22 21:18 - 00804352 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-05-14 11:44 - 2016-04-22 21:18 - 00605184 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-05-14 11:44 - 2016-04-22 21:18 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-05-14 11:44 - 2016-04-22 21:18 - 00515072 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-05-14 11:44 - 2016-04-22 21:18 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2016-05-14 11:44 - 2016-04-22 21:18 - 00349696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2016-05-14 11:44 - 2016-04-22 21:17 - 01213440 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-05-14 11:44 - 2016-04-22 21:17 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2016-05-14 11:44 - 2016-04-22 21:17 - 00388608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-05-14 11:44 - 2016-04-22 21:16 - 00848896 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-05-14 11:44 - 2016-04-22 21:16 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2016-05-14 11:44 - 2016-04-22 21:15 - 01073152 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-05-14 11:44 - 2016-04-22 21:15 - 00865792 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2016-05-14 11:44 - 2016-04-22 21:15 - 00400896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2016-05-14 11:44 - 2016-04-22 21:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2016-05-14 11:44 - 2016-04-22 21:14 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2016-05-14 11:44 - 2016-04-22 21:14 - 00821760 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2016-05-14 11:44 - 2016-04-22 21:14 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2016-05-14 11:44 - 2016-04-22 21:14 - 00647680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-05-14 11:44 - 2016-04-22 21:14 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-05-14 11:44 - 2016-04-22 21:14 - 00354304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2016-05-14 11:44 - 2016-04-22 21:13 - 00434688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2016-05-14 11:44 - 2016-04-22 21:12 - 00667648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2016-05-14 11:44 - 2016-04-22 21:10 - 00639488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2016-05-14 11:44 - 2016-04-22 21:08 - 05324288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-05-14 11:44 - 2016-04-22 21:07 - 02598912 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-05-14 11:44 - 2016-04-22 21:07 - 00848896 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-05-14 11:44 - 2016-04-22 21:05 - 02066432 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-05-14 11:44 - 2016-04-22 21:05 - 00613376 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-05-14 11:44 - 2016-04-22 21:03 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2016-05-14 11:44 - 2016-04-22 21:03 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2016-05-14 11:44 - 2016-04-22 21:01 - 04775424 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-05-14 11:44 - 2016-04-22 21:00 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-05-14 11:44 - 2016-04-22 21:00 - 00984576 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-05-14 11:44 - 2016-04-22 20:45 - 00461824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2016-05-14 11:44 - 2016-04-22 19:10 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-05-14 11:44 - 2016-04-01 21:10 - 00730344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2016-05-14 11:44 - 2016-04-01 20:07 - 03575296 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-05-14 11:44 - 2016-03-29 03:23 - 00277856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2016-05-14 11:44 - 2016-03-29 03:22 - 01030416 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-05-14 11:44 - 2016-03-29 03:22 - 00874968 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-05-14 11:44 - 2016-03-29 03:20 - 01317640 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-05-14 11:44 - 2016-03-29 03:20 - 01141504 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-05-14 11:44 - 2016-03-29 03:18 - 02152280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-05-14 11:44 - 2016-03-29 03:15 - 00100232 _____ (Microsoft Corporation) C:\Windows\system32\omadmapi.dll
2016-05-14 11:44 - 2016-03-29 03:05 - 01152864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-05-14 11:44 - 2016-03-29 03:02 - 00989536 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2016-05-14 11:44 - 2016-03-29 02:25 - 00258912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ufx01000.sys
2016-05-14 11:44 - 2016-03-29 02:19 - 00296488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2016-05-14 11:44 - 2016-03-29 02:18 - 00185184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2016-05-14 11:44 - 2016-03-29 02:13 - 00986976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2016-05-14 11:44 - 2016-03-29 02:08 - 00358752 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-05-14 11:44 - 2016-03-29 02:08 - 00261376 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2016-05-14 11:44 - 2016-03-29 01:41 - 00630632 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-05-14 11:44 - 2016-03-29 01:26 - 02403680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-05-14 11:44 - 2016-03-29 01:26 - 01089888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-05-14 11:44 - 2016-03-29 01:24 - 00294752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-05-14 11:44 - 2016-03-29 01:21 - 00378208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2016-05-14 11:44 - 2016-03-29 01:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\policymanagerprecheck.dll
2016-05-14 11:44 - 2016-03-29 01:01 - 00541304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2016-05-14 11:44 - 2016-03-29 00:57 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-05-14 11:44 - 2016-03-29 00:51 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2016-05-14 11:44 - 2016-03-29 00:50 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2016-05-14 11:44 - 2016-03-29 00:48 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2016-05-14 11:44 - 2016-03-29 00:46 - 00365568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-05-14 11:44 - 2016-03-29 00:44 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\DAFWSD.dll
2016-05-14 11:44 - 2016-03-29 00:39 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-05-14 11:44 - 2016-03-29 00:36 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2016-05-14 11:44 - 2016-03-29 00:36 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2016-05-14 11:44 - 2016-03-29 00:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-05-14 11:44 - 2016-03-29 00:35 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2016-05-14 11:44 - 2016-03-29 00:34 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-05-14 11:44 - 2016-03-29 00:33 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2016-05-14 11:44 - 2016-03-29 00:30 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-05-14 11:44 - 2016-03-29 00:30 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-05-14 11:44 - 2016-03-29 00:27 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2016-05-14 11:44 - 2016-03-29 00:26 - 00169472 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2016-05-14 11:44 - 2016-03-29 00:23 - 00694784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2016-05-14 11:44 - 2016-03-29 00:23 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2016-05-14 11:44 - 2016-03-29 00:22 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\AccountsRt.dll
2016-05-14 11:44 - 2016-03-29 00:20 - 00948736 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2016-05-14 11:44 - 2016-03-29 00:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2016-05-14 11:44 - 2016-03-29 00:19 - 00556032 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2016-05-14 11:44 - 2016-03-29 00:17 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2016-05-14 11:44 - 2016-03-29 00:15 - 01714688 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2016-05-14 11:44 - 2016-03-29 00:14 - 00965632 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2016-05-14 11:44 - 2016-03-29 00:14 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-05-14 11:44 - 2016-03-29 00:13 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-05-14 11:44 - 2016-03-29 00:11 - 00881664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2016-05-14 11:44 - 2016-03-29 00:11 - 00161280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2016-05-14 11:44 - 2016-03-29 00:09 - 01239552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2016-05-14 11:44 - 2016-03-29 00:08 - 00888320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2016-05-14 11:44 - 2016-03-29 00:08 - 00841216 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-05-14 11:44 - 2016-03-29 00:07 - 01902592 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-05-14 11:44 - 2016-03-29 00:06 - 01575936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-05-14 11:44 - 2016-03-29 00:05 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-05-14 11:44 - 2016-03-29 00:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Devices.dll
2016-05-14 11:44 - 2016-03-29 00:03 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-05-14 11:44 - 2016-03-29 00:02 - 01211904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2016-05-14 11:44 - 2016-03-29 00:02 - 00303104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-05-14 11:44 - 2016-03-29 00:00 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-05-14 11:44 - 2016-03-28 23:59 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2016-05-14 11:44 - 2016-03-28 23:56 - 00415232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2016-05-14 11:44 - 2016-03-28 23:55 - 01052160 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2016-05-14 11:44 - 2016-03-28 23:53 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2016-05-14 11:44 - 2016-03-28 23:53 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovhost.dll
2016-05-14 11:44 - 2016-03-28 23:49 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2016-05-14 11:44 - 2016-03-28 23:44 - 00498176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2016-05-14 11:44 - 2016-03-28 23:43 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AccountsRt.dll
2016-05-14 11:44 - 2016-03-28 23:42 - 01410560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2016-05-14 11:44 - 2016-03-28 23:41 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2016-05-14 11:44 - 2016-03-28 23:40 - 00787456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2016-05-14 11:44 - 2016-03-28 23:39 - 00564224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2016-05-14 11:44 - 2016-03-28 23:37 - 01444352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRHInproc.dll
2016-05-14 11:44 - 2016-03-28 23:37 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2016-05-14 11:44 - 2016-03-28 23:36 - 00649728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-05-14 11:44 - 2016-03-28 23:34 - 00682496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2016-05-14 11:44 - 2016-03-28 23:34 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2016-05-14 11:44 - 2016-03-28 23:32 - 00854528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2016-05-14 11:44 - 2016-03-28 23:32 - 00638464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2016-05-14 11:44 - 2016-03-28 23:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-05-14 11:44 - 2016-03-28 23:32 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2016-05-14 11:44 - 2016-03-28 23:31 - 01117184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2016-05-14 11:44 - 2016-03-28 23:30 - 01139712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2016-05-14 11:44 - 2016-03-28 23:29 - 00555520 _____ (Microsoft Corporation) C:\Windows\system32\SyncController.dll
2016-05-14 11:44 - 2016-03-28 23:29 - 00256000 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll
2016-05-14 11:44 - 2016-03-28 23:28 - 00764928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll
2016-05-14 11:44 - 2016-03-28 23:27 - 00133632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2016-05-14 11:44 - 2016-03-28 23:23 - 00777728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2016-05-14 11:44 - 2016-03-28 23:17 - 00765952 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-05-14 11:44 - 2016-03-28 23:14 - 01072128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2016-05-14 11:44 - 2016-03-28 23:13 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2016-05-14 11:44 - 2016-03-28 23:06 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2016-05-14 11:44 - 2016-03-28 23:05 - 00450560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncController.dll
2016-05-14 11:44 - 2016-03-28 23:05 - 00361472 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-05-14 11:44 - 2016-03-28 23:04 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-05-14 11:44 - 2016-03-28 23:01 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-05-14 11:44 - 2016-03-28 22:45 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\ncbservice.dll
2016-05-14 11:44 - 2016-03-28 22:43 - 00521728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2016-05-14 11:44 - 2016-03-28 22:26 - 00958976 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2016-05-14 11:44 - 2016-03-28 22:26 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-05-14 11:44 - 2016-03-28 22:25 - 00712704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
2016-05-14 11:44 - 2016-02-24 02:34 - 01613664 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-05-14 11:44 - 2016-02-24 01:58 - 00794888 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-05-14 11:44 - 2016-02-24 01:51 - 01322248 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-05-14 11:44 - 2016-02-24 01:50 - 00808800 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-05-14 11:44 - 2016-02-24 01:43 - 00625000 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2016-05-14 11:44 - 2016-02-24 01:19 - 00670928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-05-14 11:44 - 2016-02-24 01:11 - 00957608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-05-14 11:44 - 2016-02-24 01:11 - 00703840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-05-14 11:44 - 2016-02-24 01:11 - 00258280 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2016-05-14 11:44 - 2016-02-24 01:09 - 00640472 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-05-14 11:44 - 2016-02-24 00:35 - 00220064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll
2016-05-14 11:44 - 2016-02-24 00:33 - 00538736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-05-14 11:44 - 2016-02-24 00:20 - 00195072 _____ (Microsoft Corporation) C:\Windows\system32\VCardParser.dll
2016-05-14 11:44 - 2016-02-24 00:02 - 00161280 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll
2016-05-14 11:44 - 2016-02-24 00:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2016-05-14 11:44 - 2016-02-23 23:59 - 00450560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2016-05-14 11:44 - 2016-02-23 23:59 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2016-05-14 11:44 - 2016-02-23 23:55 - 00790528 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2016-05-14 11:44 - 2016-02-23 23:55 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll
2016-05-14 11:44 - 2016-02-23 23:54 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
2016-05-14 11:44 - 2016-02-23 23:52 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2016-05-14 11:44 - 2016-02-23 23:49 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2016-05-14 11:44 - 2016-02-23 23:44 - 00915456 _____ (Microsoft Corporation) C:\Windows\system32\configurationclient.dll
2016-05-14 11:44 - 2016-02-23 23:44 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2016-05-14 11:44 - 2016-02-23 23:43 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2016-05-14 11:44 - 2016-02-23 23:41 - 00982016 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-05-14 11:44 - 2016-02-23 23:40 - 01224704 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2016-05-14 11:44 - 2016-02-23 23:36 - 01847808 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2016-05-14 11:44 - 2016-02-23 23:34 - 00938496 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2016-05-14 11:44 - 2016-02-23 23:32 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentActivation.dll
2016-05-14 11:44 - 2016-02-23 23:25 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2016-05-14 11:44 - 2016-02-23 23:21 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2016-05-14 11:44 - 2016-02-23 23:18 - 00575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
2016-05-14 11:44 - 2016-02-23 23:18 - 00184832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll
2016-05-14 11:44 - 2016-02-23 23:17 - 00369664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2016-05-14 11:44 - 2016-02-23 23:13 - 00540160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll
2016-05-14 11:44 - 2016-02-23 23:09 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll
2016-05-14 11:44 - 2016-02-23 23:09 - 00228352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2016-05-14 11:44 - 2016-02-23 23:07 - 00949248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2016-05-14 11:44 - 2016-02-23 23:07 - 00890368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2016-05-14 11:44 - 2016-02-23 23:04 - 01497088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2016-05-14 11:44 - 2016-02-23 23:03 - 00769536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
2016-05-14 11:44 - 2016-02-23 22:55 - 01996288 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2016-05-14 11:44 - 2016-02-23 22:34 - 01707520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActiveSyncProvider.dll
2016-05-14 11:44 - 2016-02-23 04:25 - 00563552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2016-05-14 11:44 - 2016-02-23 04:15 - 00779384 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2016-05-14 11:44 - 2016-02-23 03:32 - 01152328 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2016-05-14 11:44 - 2016-02-23 03:32 - 01062480 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-05-14 11:44 - 2016-02-23 03:31 - 01017032 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2016-05-14 11:44 - 2016-02-23 03:31 - 00819648 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2016-05-14 11:44 - 2016-02-23 03:31 - 00476728 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2016-05-14 11:44 - 2016-02-23 03:22 - 00572272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll
2016-05-14 11:44 - 2016-02-23 02:40 - 00430944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-05-14 11:44 - 2016-02-23 02:38 - 00980352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2016-05-14 11:44 - 2016-02-23 02:38 - 00895080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2016-05-14 11:44 - 2016-02-23 02:38 - 00882720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2016-05-14 11:44 - 2016-02-23 02:38 - 00420928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2016-05-14 11:44 - 2016-02-23 02:37 - 00713824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2016-05-14 11:44 - 2016-02-23 02:27 - 00376536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
2016-05-14 11:44 - 2016-02-23 02:20 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSave.dll
2016-05-14 11:44 - 2016-02-23 02:20 - 00238592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2016-05-14 11:44 - 2016-02-23 02:07 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-05-14 11:44 - 2016-02-23 02:06 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\flvprophandler.dll
2016-05-14 11:44 - 2016-02-23 01:55 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2016-05-14 11:44 - 2016-02-23 01:53 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll
2016-05-14 11:44 - 2016-02-23 01:40 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SMSRouter.dll
2016-05-14 11:44 - 2016-02-23 01:39 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2016-05-14 11:44 - 2016-02-23 01:38 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\MSFlacDecoder.dll
2016-05-14 11:44 - 2016-02-23 01:38 - 00287712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
2016-05-14 11:44 - 2016-02-23 01:37 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2016-05-14 11:44 - 2016-02-23 01:36 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\QuickActionsDataModel.dll
2016-05-14 11:44 - 2016-02-23 01:34 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\wifiprofilessettinghandler.dll
2016-05-14 11:44 - 2016-02-23 01:34 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2016-05-14 11:44 - 2016-02-23 01:31 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2016-05-14 11:44 - 2016-02-23 01:27 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2016-05-14 11:44 - 2016-02-23 01:26 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2016-05-14 11:44 - 2016-02-23 01:22 - 00567808 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2016-05-14 11:44 - 2016-02-23 01:20 - 00847360 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-05-14 11:44 - 2016-02-23 01:20 - 00493568 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2016-05-14 11:44 - 2016-02-23 01:19 - 00517632 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2016-05-14 11:44 - 2016-02-23 01:14 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2016-05-14 11:44 - 2016-02-23 01:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2016-05-14 11:44 - 2016-02-23 01:10 - 00997376 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-05-14 11:44 - 2016-02-23 01:04 - 01131520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2016-05-14 11:44 - 2016-02-23 01:04 - 00382464 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-05-14 11:44 - 2016-02-23 01:02 - 00755712 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2016-05-14 11:44 - 2016-02-23 01:02 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-05-14 11:44 - 2016-02-23 00:58 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\TimeBrokerServer.dll
2016-05-14 11:44 - 2016-02-23 00:50 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSFlacDecoder.dll
2016-05-14 11:44 - 2016-02-23 00:49 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2016-05-14 11:44 - 2016-02-23 00:48 - 00838144 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2016-05-14 11:44 - 2016-02-23 00:47 - 00157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WiFiDisplay.dll
2016-05-14 11:44 - 2016-02-23 00:38 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2016-05-14 11:44 - 2016-02-23 00:37 - 01118208 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-05-14 11:44 - 2016-02-23 00:36 - 00713728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2016-05-14 11:44 - 2016-02-23 00:36 - 00379392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll
2016-05-14 11:44 - 2016-02-23 00:35 - 00400896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2016-05-14 11:44 - 2016-02-23 00:31 - 00585216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AccountsControl.dll
2016-05-14 11:44 - 2016-02-23 00:24 - 01105920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2016-05-14 11:44 - 2016-02-23 00:01 - 02295808 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2016-05-14 11:44 - 2016-02-22 23:56 - 04412928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-05-14 11:44 - 2016-02-08 20:18 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2016-05-14 11:44 - 2016-02-08 20:18 - 00237056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2016-05-14 11:44 - 2016-02-08 20:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2016-05-14 11:43 - 2016-05-05 21:05 - 00241664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll
2016-05-14 11:43 - 2016-05-05 20:43 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2016-05-14 11:43 - 2016-04-22 22:24 - 00638816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-05-14 11:43 - 2016-04-22 22:24 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2016-05-14 11:43 - 2016-04-22 22:24 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-05-14 11:43 - 2016-04-22 22:18 - 00026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-05-14 11:43 - 2016-04-22 22:13 - 00084832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2016-05-14 11:43 - 2016-04-22 22:11 - 00131424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ufxsynopsys.sys
2016-05-14 11:43 - 2016-04-22 22:11 - 00115040 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-05-14 11:43 - 2016-04-22 22:07 - 00183904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2016-05-14 11:43 - 2016-04-22 22:00 - 00058208 _____ (Microsoft Corporation) C:\Windows\system32\dwminit.dll
2016-05-14 11:43 - 2016-04-22 21:56 - 00534872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2016-05-14 11:43 - 2016-04-22 21:39 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
2016-05-14 11:43 - 2016-04-22 21:34 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
2016-05-14 11:43 - 2016-04-22 21:34 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\hmkd.dll
2016-05-14 11:43 - 2016-04-22 21:34 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-05-14 11:43 - 2016-04-22 21:33 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2016-05-14 11:43 - 2016-04-22 21:33 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2016-05-14 11:43 - 2016-04-22 21:33 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmCx.sys
2016-05-14 11:43 - 2016-04-22 21:33 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\ByteCodeGenerator.exe
2016-05-14 11:43 - 2016-04-22 21:32 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\wificonnapi.dll
2016-05-14 11:43 - 2016-04-22 21:32 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-05-14 11:43 - 2016-04-22 21:32 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
2016-05-14 11:43 - 2016-04-22 21:30 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-05-14 11:43 - 2016-04-22 21:29 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2016-05-14 11:43 - 2016-04-22 21:29 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2016-05-14 11:43 - 2016-04-22 21:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\filecrypt.sys
2016-05-14 11:43 - 2016-04-22 21:29 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2016-05-14 11:43 - 2016-04-22 21:29 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hmkd.dll
2016-05-14 11:43 - 2016-04-22 21:29 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ByteCodeGenerator.exe
2016-05-14 11:43 - 2016-04-22 21:29 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-05-14 11:43 - 2016-04-22 21:28 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2016-05-14 11:43 - 2016-04-22 21:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-05-14 11:43 - 2016-04-22 21:28 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2016-05-14 11:43 - 2016-04-22 21:27 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-05-14 11:43 - 2016-04-22 21:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2016-05-14 11:43 - 2016-04-22 21:26 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2016-05-14 11:43 - 2016-04-22 21:25 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll
2016-05-14 11:43 - 2016-04-22 21:24 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEDataLayerHelpers.dll
2016-05-14 11:43 - 2016-04-22 21:23 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-05-14 11:43 - 2016-04-22 21:23 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2016-05-14 11:43 - 2016-04-22 21:23 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\BrowserSettingSync.dll
2016-05-14 11:43 - 2016-04-22 21:23 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2016-05-14 11:43 - 2016-04-22 21:22 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll
2016-05-14 11:43 - 2016-04-22 21:21 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-05-14 11:43 - 2016-04-22 21:20 - 00307200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2016-05-14 11:43 - 2016-04-22 21:19 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2016-05-14 11:43 - 2016-04-22 21:19 - 00140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BrowserSettingSync.dll
2016-05-14 11:43 - 2016-04-22 21:18 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-05-14 11:43 - 2016-04-22 21:18 - 00219648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2016-05-14 11:43 - 2016-04-22 21:17 - 00337920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2016-05-14 11:43 - 2016-04-22 21:15 - 00784896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2016-05-14 11:43 - 2016-04-22 21:14 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-05-14 11:43 - 2016-04-22 21:13 - 00705536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-05-14 11:43 - 2016-04-22 21:05 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-05-14 11:43 - 2016-04-22 21:05 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2016-05-14 11:43 - 2016-04-22 21:03 - 02193408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-05-14 11:43 - 2016-04-22 19:10 - 00002186 _____ C:\Windows\system32\AppxProvisioning.xml
2016-05-14 11:43 - 2016-04-18 15:30 - 00002186 _____ C:\Windows\SysWOW64\AppxProvisioning.xml
2016-05-14 11:43 - 2016-04-01 21:10 - 00770640 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2016-05-14 11:43 - 2016-04-01 21:10 - 00374008 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-05-14 11:43 - 2016-04-01 20:25 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll
2016-05-14 11:43 - 2016-04-01 20:25 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NotificationObjFactory.dll
2016-05-14 11:43 - 2016-03-29 03:02 - 00334736 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2016-05-14 11:43 - 2016-03-29 02:25 - 00058400 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.dll
2016-05-14 11:43 - 2016-03-29 02:11 - 00074424 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe
2016-05-14 11:43 - 2016-03-29 02:10 - 00110584 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
2016-05-14 11:43 - 2016-03-29 02:09 - 00078040 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
2016-05-14 11:43 - 2016-03-29 02:07 - 00081144 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-05-14 11:43 - 2016-03-29 01:41 - 00051128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.dll
2016-05-14 11:43 - 2016-03-29 01:26 - 00073872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srvcli.dll
2016-05-14 11:43 - 2016-03-29 01:25 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkscli.dll
2016-05-14 11:43 - 2016-03-29 01:23 - 00069744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2016-05-14 11:43 - 2016-03-29 01:16 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2016-05-14 11:43 - 2016-03-29 01:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.V2.dll
2016-05-14 11:43 - 2016-03-29 01:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\dmenterprisediagnostics.dll
2016-05-14 11:43 - 2016-03-29 01:07 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2016-05-14 11:43 - 2016-03-29 01:06 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-05-14 11:43 - 2016-03-29 01:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\oleacchooks.dll
2016-05-14 11:43 - 2016-03-29 01:02 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-05-14 11:43 - 2016-03-29 01:00 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
2016-05-14 11:43 - 2016-03-29 01:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\fveskybackup.dll
2016-05-14 11:43 - 2016-03-29 00:59 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerShellext.exe
2016-05-14 11:43 - 2016-03-29 00:57 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-05-14 11:43 - 2016-03-29 00:57 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-05-14 11:43 - 2016-03-29 00:55 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\serial.sys
2016-05-14 11:43 - 2016-03-29 00:55 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\tbauth.dll
2016-05-14 11:43 - 2016-03-29 00:54 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-05-14 11:43 - 2016-03-29 00:53 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2016-05-14 11:43 - 2016-03-29 00:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerCookies.exe
2016-05-14 11:43 - 2016-03-29 00:51 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\tzautoupdate.dll
2016-05-14 11:43 - 2016-03-29 00:50 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2016-05-14 11:43 - 2016-03-29 00:50 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\OnDemandConnRouteHelper.dll
2016-05-14 11:43 - 2016-03-29 00:50 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll
2016-05-14 11:43 - 2016-03-29 00:49 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-05-14 11:43 - 2016-03-29 00:46 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-05-14 11:43 - 2016-03-29 00:34 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-05-14 11:43 - 2016-03-29 00:21 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-05-14 11:43 - 2016-03-29 00:20 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.V2.dll
2016-05-14 11:43 - 2016-03-29 00:20 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsdchngr.dll
2016-05-14 11:43 - 2016-03-29 00:19 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-05-14 11:43 - 2016-03-29 00:19 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacchooks.dll
2016-05-14 11:43 - 2016-03-29 00:18 - 00676352 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2016-05-14 11:43 - 2016-03-29 00:16 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-05-14 11:43 - 2016-03-29 00:11 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-05-14 11:43 - 2016-03-29 00:11 - 00043520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2016-05-14 11:43 - 2016-03-29 00:09 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbauth.dll
2016-05-14 11:43 - 2016-03-29 00:08 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-05-14 11:43 - 2016-03-29 00:06 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerCookies.exe
2016-05-14 11:43 - 2016-03-29 00:05 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll
2016-05-14 11:43 - 2016-03-29 00:00 - 00235008 _____ C:\Windows\system32\MTF.dll
2016-05-14 11:43 - 2016-03-29 00:00 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-05-14 11:43 - 2016-03-28 23:59 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-05-14 11:43 - 2016-03-28 23:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2016-05-14 11:43 - 2016-03-28 23:52 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2016-05-14 11:43 - 2016-03-28 23:42 - 00250880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-05-14 11:43 - 2016-03-28 23:39 - 00496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2016-05-14 11:43 - 2016-03-28 23:32 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll
2016-05-14 11:43 - 2016-03-28 23:27 - 00162816 _____ C:\Windows\SysWOW64\MTF.dll
2016-05-14 11:43 - 2016-03-28 23:27 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputLocaleManager.dll
2016-05-14 11:43 - 2016-03-28 22:35 - 00821248 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2016-05-14 11:43 - 2016-03-28 22:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2016-05-14 11:43 - 2016-03-28 22:27 - 00794112 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-05-14 11:43 - 2016-03-28 22:25 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-05-14 11:43 - 2016-03-28 22:21 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-05-14 11:43 - 2016-02-24 01:54 - 00127840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-05-14 11:43 - 2016-02-24 01:39 - 00141560 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2016-05-14 11:43 - 2016-02-24 01:09 - 00147808 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2016-05-14 11:43 - 2016-02-24 00:39 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTypeHelperUtil.dll
2016-05-14 11:43 - 2016-02-24 00:39 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\ExtrasXmlParser.dll
2016-05-14 11:43 - 2016-02-24 00:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2016-05-14 11:43 - 2016-02-24 00:37 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\UserDataLanguageUtil.dll
2016-05-14 11:43 - 2016-02-24 00:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenanceClient.dll
2016-05-14 11:43 - 2016-02-24 00:33 - 00141664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2016-05-14 11:43 - 2016-02-24 00:30 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll
2016-05-14 11:43 - 2016-02-24 00:28 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\POSyncServices.dll
2016-05-14 11:43 - 2016-02-24 00:23 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-05-14 11:43 - 2016-02-24 00:23 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UserDataPlatformHelperUtil.dll
2016-05-14 11:43 - 2016-02-24 00:22 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll
2016-05-14 11:43 - 2016-02-24 00:19 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2016-05-14 11:43 - 2016-02-24 00:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-05-14 11:43 - 2016-02-24 00:14 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\ExSMime.dll
2016-05-14 11:43 - 2016-02-24 00:13 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentActivation.dll
2016-05-14 11:43 - 2016-02-24 00:12 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\cemapi.dll
2016-05-14 11:43 - 2016-02-24 00:12 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll
2016-05-14 11:43 - 2016-02-24 00:10 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2016-05-14 11:43 - 2016-02-24 00:09 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2016-05-14 11:43 - 2016-02-24 00:09 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll
2016-05-14 11:43 - 2016-02-24 00:07 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll
2016-05-14 11:43 - 2016-02-24 00:03 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-05-14 11:43 - 2016-02-24 00:01 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\profext.dll
2016-05-14 11:43 - 2016-02-24 00:00 - 00214528 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2016-05-14 11:43 - 2016-02-23 23:59 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2016-05-14 11:43 - 2016-02-23 23:58 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\scapi.dll
2016-05-14 11:43 - 2016-02-23 23:55 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExtrasXmlParser.dll
2016-05-14 11:43 - 2016-02-23 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2016-05-14 11:43 - 2016-02-23 23:54 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2016-05-14 11:43 - 2016-02-23 23:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTypeHelperUtil.dll
2016-05-14 11:43 - 2016-02-23 23:53 - 00089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2016-05-14 11:43 - 2016-02-23 23:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataLanguageUtil.dll
2016-05-14 11:43 - 2016-02-23 23:52 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PimIndexMaintenanceClient.dll
2016-05-14 11:43 - 2016-02-23 23:46 - 00020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll
2016-05-14 11:43 - 2016-02-23 23:44 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\POSyncServices.dll
2016-05-14 11:43 - 2016-02-23 23:40 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-05-14 11:43 - 2016-02-23 23:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataPlatformHelperUtil.dll
2016-05-14 11:43 - 2016-02-23 23:39 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll
2016-05-14 11:43 - 2016-02-23 23:38 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VCardParser.dll
2016-05-14 11:43 - 2016-02-23 23:32 - 00223744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExSMime.dll
2016-05-14 11:43 - 2016-02-23 23:31 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cemapi.dll
2016-05-14 11:43 - 2016-02-23 23:31 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll
2016-05-14 11:43 - 2016-02-23 23:28 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2016-05-14 11:43 - 2016-02-23 23:28 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll
2016-05-14 11:43 - 2016-02-23 23:23 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll
2016-05-14 11:43 - 2016-02-23 23:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\profext.dll
2016-05-14 11:43 - 2016-02-23 23:21 - 00168448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2016-05-14 11:43 - 2016-02-23 23:16 - 00394752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2016-05-14 11:43 - 2016-02-23 22:43 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\fwbase.dll
2016-05-14 11:43 - 2016-02-23 22:22 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwbase.dll
2016-05-14 11:43 - 2016-02-23 03:17 - 00146272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-05-14 11:43 - 2016-02-23 02:12 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\provpackageapidll.dll
2016-05-14 11:43 - 2016-02-23 02:10 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
2016-05-14 11:43 - 2016-02-23 02:07 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2016-05-14 11:43 - 2016-02-23 02:01 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys
2016-05-14 11:43 - 2016-02-23 02:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2016-05-14 11:43 - 2016-02-23 01:58 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\irmon.dll
2016-05-14 11:43 - 2016-02-23 01:53 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\srpapi.dll
2016-05-14 11:43 - 2016-02-23 01:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\TimeBrokerClient.dll
2016-05-14 11:43 - 2016-02-23 01:33 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\MBMediaManager.dll
2016-05-14 11:43 - 2016-02-23 01:23 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-05-14 11:43 - 2016-02-23 00:57 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TimeBrokerClient.dll
2016-05-13 18:21 - 2016-04-22 00:57 - 00453288 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-05-13 18:06 - 2016-06-09 14:37 - 00000000 ____D C:\Users\Joshu\AppData\Local\Google
2016-05-13 18:06 - 2016-06-09 14:37 - 00000000 ____D C:\Program Files (x86)\Google
2016-05-13 18:06 - 2016-05-13 18:06 - 00000000 ____D C:\Users\Joshu\AppData\Local\MicrosoftEdge
2016-05-13 18:02 - 2016-06-09 17:11 - 00000000 ___RD C:\Users\Joshu\OneDrive
2016-05-13 18:02 - 2016-06-09 12:35 - 00002363 _____ C:\Users\Joshu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-13 18:02 - 2016-05-15 10:07 - 00000000 ____D C:\Users\Joshu\AppData\Local\Comms
2016-05-13 18:02 - 2016-05-13 18:02 - 00000000 ____D C:\Users\Joshu\AppData\Local\ActiveSync
2016-05-13 18:01 - 2016-06-09 17:10 - 00000000 __SHD C:\Users\Joshu\IntelGraphicsProfiles
2016-05-13 18:01 - 2016-05-13 18:01 - 00000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2016-05-13 18:01 - 2016-05-13 18:01 - 00000000 ____D C:\Users\Joshu\AppData\Local\Publishers
2016-05-13 18:01 - 2016-05-13 18:01 - 00000000 ____D C:\Program Files (x86)\Intel
2016-05-13 18:01 - 2016-05-13 18:01 - 00000000 ____D C:\Intel
2016-05-13 18:01 - 2015-12-19 01:08 - 00103944 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2016-05-13 18:01 - 2015-12-19 01:08 - 00099848 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2016-05-13 18:00 - 2016-05-18 20:36 - 00000000 ____D C:\Users\Joshu\AppData\Local\VirtualStore
2016-05-13 18:00 - 2016-05-15 16:58 - 00000000 ____D C:\Users\Joshu\AppData\Local\Packages
2016-05-13 18:00 - 2016-05-13 18:01 - 00000000 ____D C:\Users\Joshu\AppData\Local\PackageStaging
2016-05-13 18:00 - 2016-05-13 18:00 - 00000000 ____D C:\Users\Joshu\AppData\Roaming\Adobe
2016-05-13 18:00 - 2016-05-13 18:00 - 00000000 ____D C:\Users\Joshu\AppData\Local\TileDataLayer
2016-05-13 18:00 - 2016-05-13 18:00 - 00000000 ____D C:\Program Files\Intel
2016-05-13 17:59 - 2016-06-09 17:56 - 00000000 ____D C:\Users\Joshu
2016-05-13 17:59 - 2016-05-13 17:59 - 00000020 ___SH C:\Users\Joshu\ntuser.ini
2016-05-13 17:59 - 2016-05-13 17:59 - 00000000 _SHDL C:\Users\Joshu\My Documents
2016-05-13 17:59 - 2016-05-13 17:59 - 00000000 _SHDL C:\Users\Joshu\Documents\My Videos
2016-05-13 17:59 - 2016-05-13 17:59 - 00000000 _SHDL C:\Users\Joshu\Documents\My Pictures
2016-05-13 17:59 - 2016-05-13 17:59 - 00000000 _SHDL C:\Users\Joshu\Documents\My Music
2016-05-13 17:57 - 2016-06-09 17:17 - 00879220 _____ C:\Windows\system32\PerfStringBackup.INI
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-06-09 17:41 - 2015-10-30 00:21 - 00000000 ____D C:\Windows\INF
2016-06-09 17:10 - 2016-02-13 06:14 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-09 17:10 - 2015-10-29 23:28 - 00524288 ___SH C:\Windows\system32\config\BBI
2016-06-09 16:51 - 2015-10-30 00:24 - 00000000 ____D C:\Windows\AppReadiness
2016-06-09 15:01 - 2016-01-26 21:52 - 00000000 ____D C:\Windows\Panther
2016-06-09 14:35 - 2015-10-30 00:11 - 00000000 ____D C:\Windows\CbsTemp
2016-06-09 13:36 - 2015-10-30 00:24 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-06-09 12:36 - 2015-10-30 00:24 - 00000000 ____D C:\Windows\L2Schemas
2016-06-09 11:53 - 2015-10-30 00:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-08 12:01 - 2016-02-13 06:11 - 00394952 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-27 18:49 - 2015-10-30 00:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-05-18 20:24 - 2015-10-30 00:24 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-05-18 20:24 - 2015-10-30 00:24 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2016-05-18 19:58 - 2015-10-30 00:24 - 00000000 ____D C:\Windows\appcompat
2016-05-14 14:44 - 2015-10-30 00:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-05-14 12:21 - 2016-02-13 06:20 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-05-14 12:20 - 2016-02-13 06:03 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-14 12:20 - 2015-10-30 00:24 - 00015703 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2016-05-14 12:20 - 2015-10-30 00:24 - 00000000 __RSD C:\Windows\Media
2016-05-14 12:20 - 2015-10-30 00:24 - 00000000 ___RD C:\Windows\PurchaseDialog
2016-05-14 12:20 - 2015-10-30 00:24 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-05-14 12:20 - 2015-10-30 00:24 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2016-05-14 12:20 - 2015-10-30 00:24 - 00000000 ____D C:\Windows\system32\oobe
2016-05-14 12:20 - 2015-10-30 00:24 - 00000000 ____D C:\Windows\system32\appraiser
2016-05-14 12:20 - 2015-10-30 00:24 - 00000000 ____D C:\Windows\Provisioning
2016-05-14 12:20 - 2015-10-30 00:24 - 00000000 ____D C:\Windows\bcastdvr
2016-05-14 12:20 - 2015-10-30 00:24 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-05-14 12:20 - 2015-10-30 00:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-05-14 12:20 - 2015-10-30 00:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-05-14 12:20 - 2015-10-30 00:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-05-14 12:20 - 2015-10-29 23:28 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-05-14 12:20 - 2015-10-29 23:28 - 00000000 ____D C:\Windows\system32\Dism
2016-05-13 18:00 - 2015-10-30 00:24 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2016-05-11 12:57 - 2015-10-30 00:26 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-05-11 12:57 - 2015-10-30 00:26 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
==================== Files in the root of some directories =======
1986-02-01 17:00 - 1986-02-01 17:00 - 0002243 _____ () C:\Users\Joshu\AppData\Roaming\BottleoCashew.RRa
1989-01-03 17:00 - 1989-01-03 17:00 - 0049780 _____ () C:\Users\Joshu\AppData\Roaming\Cheapskate.9nv
2016-06-08 22:04 - 2016-06-08 22:12 - 0128512 _____ () C:\Users\Joshu\AppData\Roaming\Installer.dat
Some files in TEMP:
====================
C:\Users\Joshu\AppData\Local\Temp\dummy.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll
[2016-05-14 11:44] - [2016-05-14 11:44] - 0686976 ____A (Microsoft Corporation) 4AE702EF2AD7DAA6B62D0DBBC6118B6E
C:\Windows\SysWOW64\dnsapi.dll
[2016-05-14 11:44] - [2016-05-14 11:44] - 0535080 ____A (Microsoft Corporation) 6CDC31E4C74DAF7194543CDE80D1BE9B
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-06-06 14:49
==================== End of FRST.txt ============================
Attached Files
-
Addition.txt 33.32KB
160 downloads
-
FRST.txt 132.46KB
166 downloads
Sign In
Create Account
