Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Hi Pro's. Been having issues for several years now and would love

Upatre Zeus Kryptik Red Pill Virtualisation Spoofing Sophisticated Attack

  • Please log in to reply

#1
antrlee

antrlee

    New Member

  • Member
  • Pip
  • 1 posts

Hi There

I am hoping that someone can help. For the past 36 months I have been faced with a bit of onslaught of issues with all of my computer devices. The issues that I have been facing are:

1. Slow laptops. Fan going ballistic. svchost.exe, crss.exe, dwm.exe using 100% CPU, even after full format and reinstall from Windows OEM disk.
2. Inability to boot computer from CD (HP Recovery Disks are useless)
3. AV software appears to become false (faux) with the installed programme being sent to a newly established partition and the useless fake left on the active partition to do scans which take a day to finish and never finding anything all the while causing constant pop ups every five minutes.
4. MalwareBytes has discovered the following items TrojanFakeMS, TrojanFakeScan, Win32Nemim, deletion has no effect and they return upon reboot.
5. IE stuck on MSN homepage. Difficult to download alternative web browsers. I use an HP printer CD to get a version of Chrome which quickly becomes useless when a it autonomously gets a bunch of weird extensions.
6. After a recovery there are only two partitions. After running Windows updates the are usually five.
7. Trusted Installer makes it difficult to delete files.
8. All programme icons get an Administrator shield after being run once.
9. Downloaded file Certificates always contain errors particulary in Key Usage.
10. Downloading the same file at times gives differing file sizes.
11. Any advanced data recovery or partition software is difficult to run with activation codes not working. EASEUS download comes with an odd txt file which contains the reference "InstallSPY"
12. Deleted files reappear after restart even after shutting down recovery, and Page File. CMD /powercfg -h off does not work hiberfile is impossible to delete.
13. Computer downloads Cisco software without prompting.
14. I have discovered the existence of hidden apps that disguise their names using a type of wingdings font. I can't read script but I have seen numerous instances of the code script of doggy files being written backwards (eg € t€ l €d  dÎpp A which I read as 'delete AppID') Maybe this is just me going mad.
15. Font files and bad certificates seem to be centre to the start of the issues. Also changing the language settings results in the computer working better at times. Its almost like it kills the malicious processes temporarily.
16. Modem seems to be infected. Will start itself and establish hidden network connections to all devices.
17. Dispite being located in a remote location with only one wifi connection, at times devices will show up to four connections available.
18. Every week I get a couple of emails that contain blatant virus attachments, some even from legitimate NZ Government depts. There are usually .scr or .zip files or PDF's. The emails come from known and trusted contacts who upon being advised of these emails are not able to find them as sent items from their computer. This indicates that whatever is going on has either infected others computers or has the ability to spoof emails.
19. Lenovo and Toshiba laptops have self established Master BIOS passwords. My user password on BIOS works but the Master password is changed.
20. Complete inability to update graphics driver on affected machines. In fact one of the strangest occurrence's occurred when I took a laptop on a fishing trip, left all cell phs onshore, went out 80kms, killed the radio, did a format and replaced CMOS battery, reinstalled Windows 10 from OEM disk. When I logged in for the first time the MS News App opened itself, (the story was about Julian Assange oddly), MS Edge then opened to a random site and an Intel Display Driver started downloading?? Thanks heavens I had witnesses on the boat otherwise I'd be committed writing this. Bare in mind there was no wifi, cell, radio 80kms out to sea - just four guys wearing tinfoil hats lol.
21. Major issues performing Windows Updates. At times it can take two days to install kb2919355.
22. Random pop ups appear to cover other factual warnings from Action Center and other programmes informing of updates etc.
23. System32 folder is constantly growing with new drivers that I haven't installed.
24. Search results are tampered with and exactly the same keywords will give different results if I type into a brand new clean machine in the store.

Basically the list will go on and on. I could write a novel about all the issues that I have had. I have taken laptops to IT specialists who tell me that they believe there is a problem but they can't work it out. Please help. I am on to my sixth laptop and third iPhone (a separate issue but infected with Google updater and Amazonaws malware). I am at my wits end and am hoping someone here can help.

I am posting this with a freshly recovered HP Envy Spectre running Windows 10 X64. This computer appears to be behaving itself but there are still some tell tale signs that there is something wrong. I have to do a recovery almost every week. This will involve formating the SSD and loading from a USB Stick (which is likely to contain some hidden malicious files).

 

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-07-2016
Ran by a (administrator) on AS (04-07-2016 23:15:12)
Running from C:\Users\a\Desktop
Loaded Profiles: a (Available Profiles: a)
Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
() C:\Users\a\Downloads\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Windows\System32\msdt.exe
(Microsoft Corporation) C:\Windows\System32\msdt.exe
(Microsoft Corporation) C:\Windows\System32\sdiagnhost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8b443970-123d-4438-ab8f-0f99d2893faf}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-837244246-4178595089-1212456505-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.f-secure.com/
SearchScopes: HKU\S-1-5-21-837244246-4178595089-1212456505-1001 -> DefaultScope {490AA2E1-127F-49D6-AAC6-751A31302593} URL = hxxps://search.f-secure.com/search?query={searchTerms}&fs_uo=provider&fs_p=default
SearchScopes: HKU\S-1-5-21-837244246-4178595089-1212456505-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-837244246-4178595089-1212456505-1001 -> {490AA2E1-127F-49D6-AAC6-751A31302593} URL = hxxps://search.f-secure.com/search?query={searchTerms}&fs_uo=provider&fs_p=default
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-06-23] (Microsoft Corporation)
BHO: Ghostery Plugin -> {6BF739DD-3323-4C6A-975B-C7E00A50B154} -> C:\Program Files (x86)\Ghostery\bin\ghostery64.dll [2015-10-31] (Ghostery, Inc.)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-23] (Microsoft Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22] (Eyeo GmbH)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-06-23] (Microsoft Corporation)
BHO-x32: Ghostery Plugin -> {6BF739DD-3323-4C6A-975B-C7E00A50B154} -> C:\Program Files (x86)\Ghostery\bin\ghostery.dll [2015-10-31] (Ghostery, Inc.)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-06-23] (Microsoft Corporation)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-23] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-23] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-23] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-23] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-06-23] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-06-23] (Microsoft Corporation)
FF Plugin-x32: @mozilla.zeniko.ch/PDFlite_Browser_Plugin -> C:\Program Files (x86)\PDFlite\npPdfViewer.dll [No File]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2944768 2016-06-10] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2816576 2016-05-27] (ESET)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [359856 2015-07-25] (Intel Corporation)
S4 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [268912 2016-05-27] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
S4 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [227488 2016-05-18] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [209568 2016-05-30] (ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15488 2016-05-30] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [174240 2016-05-18] (ESET)
R1 epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [179368 2016-05-18] (ESET)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [181160 2016-07-04] (ESET)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [341256 2016-03-18] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [88256 2015-06-09] (Intel Corporation)
R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [47008 2013-07-30] ()
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [192312 2015-06-23] (Intel Corporation)
R3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [3485696 2015-10-30] (Intel Corporation)
R3 SensorsAlsDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [216064 2015-10-30] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [79984 2016-05-27] (Synaptics Incorporated)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\Windows\system32\DRIVERS\WirelessButtonDriver64.sys [31656 2016-04-14] (HP)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-07-04 23:15 - 2016-07-04 23:15 - 00008684 _____ C:\Users\a\Desktop\FRST.txt
2016-07-04 23:15 - 2016-07-04 23:15 - 00000000 ____D C:\FRST
2016-07-04 23:14 - 2016-07-04 23:14 - 02390016 _____ (Farbar) C:\Users\a\Desktop\FRST64.exe
2016-07-04 22:23 - 2016-07-04 22:24 - 01338652 _____ C:\TDSSKiller.3.1.0.9_04.07.2016_22.23.19_log.txt
2016-07-04 22:22 - 2016-07-04 22:22 - 00005836 _____ C:\TDSSKiller.3.1.0.9_04.07.2016_22.22.27_log.txt
2016-07-04 22:20 - 2016-07-04 22:20 - 01647616 _____ C:\Users\a\Documents\Final 08052016xx.xls
2016-07-04 22:20 - 2016-07-04 22:20 - 01182017 _____ C:\Users\a\Documents\Final 02052016 .xlsx
2016-07-04 22:17 - 2016-07-04 22:17 - 00464491 _____ C:\Users\a\Downloads\RootRepeal.zip
2016-07-04 22:17 - 2016-07-04 22:17 - 00000000 ____D C:\Users\a\Downloads\RootRepeal
2016-07-04 22:08 - 2016-07-04 22:08 - 00026454 _____ C:\Users\a\Downloads\Shortcut.txt
2016-07-04 22:07 - 2016-07-04 22:08 - 00020149 _____ C:\Users\a\Downloads\Addition.txt
2016-07-04 21:57 - 2016-07-04 21:57 - 00852798 _____ C:\Users\a\Downloads\SecurityCheck.exe
2016-07-04 21:48 - 2016-07-04 21:48 - 00042722 _____ C:\Users\a\Downloads\f.txt
2016-07-04 21:15 - 2016-07-04 21:16 - 00000000 ____D C:\Users\a\AppData\LocalLow\Adblock Plus for IE
2016-07-04 21:15 - 2016-07-04 21:15 - 00000000 ____D C:\Program Files\Adblock Plus for IE
2016-07-04 21:14 - 2016-07-04 21:15 - 06468104 _____ ( ) C:\Users\a\Downloads\adblockplusie-1.5.exe
2016-07-04 21:08 - 2016-07-04 22:19 - 00000000 ____D C:\Users\a\AppData\LocalLow\Ghostery
2016-07-04 21:08 - 2016-07-04 21:08 - 00000000 ____D C:\Program Files (x86)\Ghostery
2016-07-04 21:07 - 2016-07-04 21:07 - 03248696 _____ (Ghostery Inc) C:\Users\a\Downloads\ghostery-ie.exe
2016-07-04 21:04 - 2016-07-04 21:04 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-07-04 21:04 - 2016-07-04 21:04 - 00000000 ____D C:\Program Files (x86)\Intel
2016-07-04 20:36 - 2016-07-04 20:36 - 00000000 ___HD C:\OneDriveTemp
2016-07-04 18:57 - 2016-07-04 18:57 - 00000000 ____D C:\Users\a\Documents\log
2016-07-04 18:31 - 2016-07-04 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2016-07-04 18:31 - 2016-07-04 20:13 - 00000000 ____D C:\Program Files (x86)\WinPcap
2016-07-04 18:17 - 2016-07-04 18:17 - 00000000 ____D C:\QtWebCache
2016-07-04 17:37 - 2016-07-04 20:13 - 00000000 ____D C:\Program Files\7-Zip
2016-07-04 16:09 - 2016-07-04 16:09 - 08389120 _____ C:\Users\a\Documents\klobjdb.dat
2016-07-04 15:45 - 2016-07-04 15:45 - 00027466 _____ C:\Users\a\Downloads\Untitled spreadsheet.xlsx
2016-07-04 15:35 - 2016-07-04 15:37 - 114150296 _____ C:\Users\a\Downloads\Microsoft-Windows-MediaFeaturePack-OOB-Package_x64.msu
2016-07-04 15:22 - 2016-07-04 15:22 - 00313366 _____ C:\Users\a\Downloads\WindowsUpdateDiagnostic.diagcab
2016-07-04 15:05 - 2016-07-04 18:04 - 00001228 _____ C:\Users\a\Desktop\warnlog.txt
2016-07-04 15:05 - 2016-07-04 15:05 - 00000132 _____ C:\Users\a\Desktop\devctrllog.txt
2016-07-04 15:05 - 2016-07-04 15:05 - 00000130 _____ C:\Users\a\Desktop\virlog.txt
2016-07-04 15:05 - 2016-07-04 15:05 - 00000096 _____ C:\Users\a\Desktop\hipslog.txt
2016-07-04 15:05 - 2016-07-04 15:05 - 00000092 _____ C:\Users\a\Desktop\urllog.txt
2016-07-04 15:05 - 2016-07-04 15:05 - 00000062 _____ C:\Users\a\Desktop\webcamlog.txt
2016-07-04 15:05 - 2016-07-04 15:05 - 00000000 ____D C:\Users\a\Desktop\eScan
2016-07-04 14:57 - 2016-07-04 14:57 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-07-04 14:49 - 2016-07-04 14:49 - 00000499 _____ C:\Users\a\Downloads\Appsdiagnostic10.diagcab
2016-07-04 13:47 - 2016-07-04 13:47 - 00000000 ___HD C:\Windows\AxInstSV
2016-07-04 13:36 - 2016-07-04 13:36 - 00000000 ____D C:\Users\a\AppData\LocalLow\GhosteryConfig
2016-07-04 12:19 - 2016-07-04 12:19 - 00000000 _____ C:\SophosBootTasks.txt
2016-07-04 09:08 - 2016-07-04 09:08 - 00000165 ____H C:\Users\a\Documents\~$Final 160516.xlsx
2016-07-04 09:04 - 2016-07-04 09:04 - 00000165 ____H C:\Users\a\Documents\~$Final 160516 with corrections.xlsx
2016-07-04 09:04 - 2016-07-04 09:04 - 00000000 ____D C:\Users\a\AppData\Local\ActiveSync
2016-06-24 22:17 - 2016-06-24 22:17 - 01176203 _____ C:\Users\a\Documents\Final 160516 with cohrrections.xlsx
2016-06-24 22:17 - 2016-06-24 22:17 - 01174607 _____ C:\Users\a\Documents\Final 160516.xlsx
2016-06-24 22:16 - 2016-06-24 22:16 - 00000000 ____D C:\Users\a\Documents\Custom Office Templates
2016-06-24 17:22 - 2016-06-24 17:22 - 01642496 _____ C:\Users\a\Documents\Final 08052016j.xls
2016-06-24 16:49 - 2016-06-24 16:49 - 00263981 ____T C:\Users\a\Desktop\weird microsoft.pdf
2016-06-24 16:49 - 2016-06-24 16:49 - 00000000 ____D C:\Users\a\AppData\LocalLow\Temp
2016-06-24 16:38 - 2016-07-04 20:13 - 00000000 ____D C:\Windows\SoftwareDistribution.bck
2016-06-23 21:00 - 2016-06-23 20:04 - 00000000 ____D C:\Windows\Panther
2016-06-23 20:51 - 2016-06-23 15:23 - 00000000 ____D C:\Windows.old.000
2016-06-23 20:37 - 2016-06-23 20:59 - 00000000 ____D C:\Users\a\Documents\mail
2016-06-23 20:14 - 2016-06-23 17:02 - 00000000 ____D C:\Users\a\AppData\Local\MicrosoftEdge
2016-06-23 20:14 - 2016-06-23 08:46 - 00002351 _____ C:\Users\a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-06-23 20:13 - 2016-06-23 20:13 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-06-23 20:12 - 2016-07-04 20:53 - 00000000 ____D C:\Users\a\AppData\Local\Packages
2016-06-23 20:12 - 2016-07-04 20:15 - 00000000 ____D C:\Users\a
2016-06-23 20:12 - 2016-06-23 20:12 - 00000020 ___SH C:\Users\a\ntuser.ini
2016-06-23 20:12 - 2016-06-23 20:12 - 00000000 _SHDL C:\Users\a\My Documents
2016-06-23 20:12 - 2016-06-23 20:12 - 00000000 ____D C:\Users\a\AppData\Roaming\Adobe
2016-06-23 20:12 - 2016-06-23 20:12 - 00000000 ____D C:\Users\a\AppData\Local\VirtualStore
2016-06-23 20:12 - 2016-06-23 20:12 - 00000000 ____D C:\Users\a\AppData\Local\TileDataLayer
2016-06-23 20:12 - 2016-06-23 20:12 - 00000000 ____D C:\Users\a\AppData\Local\Publishers
2016-06-23 20:12 - 2016-06-23 09:06 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-06-23 20:09 - 2016-07-04 22:27 - 00834360 _____ C:\Windows\system32\PerfStringBackup.INI
2016-06-23 20:07 - 2016-05-28 17:55 - 02718208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2016-06-23 20:06 - 2016-06-23 20:06 - 00000000 ____D C:\ProgramData\USOShared
2016-06-23 20:05 - 2016-07-04 22:23 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-23 20:05 - 2016-06-23 20:05 - 00000000 _SHDL C:\Users\Public\Documents\My Videos
2016-06-23 20:05 - 2016-06-23 20:05 - 00000000 _SHDL C:\Users\Public\Documents\My Pictures
2016-06-23 20:05 - 2016-06-23 20:05 - 00000000 _SHDL C:\Users\Public\Documents\My Music
2016-06-23 20:05 - 2016-06-23 20:05 - 00000000 _SHDL C:\Users\Default\My Documents
2016-06-23 20:05 - 2016-06-23 20:05 - 00000000 _SHDL C:\Users\Default\Documents\My Videos
2016-06-23 20:05 - 2016-06-23 20:05 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures
2016-06-23 20:05 - 2016-06-23 20:05 - 00000000 _SHDL C:\Users\Default\Documents\My Music
2016-06-23 20:05 - 2016-06-23 20:05 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos
2016-06-23 20:05 - 2016-06-23 20:05 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures
2016-06-23 20:05 - 2016-06-23 20:05 - 00000000 _SHDL C:\Users\Default User\Documents\My Music
2016-06-23 20:05 - 2016-06-23 20:05 - 00000000 _SHDL C:\ProgramData\Documents\My Videos
2016-06-23 20:05 - 2016-06-23 20:05 - 00000000 _SHDL C:\ProgramData\Documents\My Pictures
2016-06-23 20:05 - 2016-06-23 20:05 - 00000000 _SHDL C:\ProgramData\Documents\My Music
2016-06-23 20:02 - 2016-06-23 20:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-06-23 20:02 - 2016-06-23 20:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_SensorsAlsDriver_01_11_00.Wdf
2016-06-23 20:02 - 2016-06-23 09:04 - 00332240 _____ C:\Windows\system32\FNTCACHE.DAT
2016-06-23 19:36 - 2016-06-23 15:22 - 00000000 ____D C:\Windows.old
2016-06-23 19:28 - 2016-07-04 19:09 - 00000000 ____D C:\Users\a\Documents\QtWebCache
2016-06-23 19:23 - 2016-06-23 19:24 - 00000000 ___HD C:\$SysReset
2016-06-23 19:18 - 2016-06-23 19:18 - 00001098 _____ C:\Users\a\Desktop\fhmd.txt
2016-06-23 19:15 - 2016-06-23 19:15 - 00004381 _____ C:\Users\a\Documents\i.xml
2016-06-23 19:15 - 2016-06-23 19:15 - 00003850 _____ C:\Users\a\Desktop\hjl_logo_sm_jpg.txt
2016-06-23 19:15 - 2016-06-23 19:15 - 00000648 _____ C:\Users\a\Desktop\Linkedin_jpg.jpeg
2016-06-23 19:15 - 2016-06-23 19:15 - 00000580 _____ C:\Users\a\Desktop\Facebook_jpg.jpeg
2016-06-23 19:04 - 2016-07-04 18:03 - 00000000 ____D C:\Users\a\AppData\Local\ElevatedDiagnostics
2016-06-23 19:02 - 2016-07-04 20:13 - 00000000 ____D C:\Windows\sold.old
2016-06-23 19:01 - 2016-07-04 20:13 - 00000000 ____D C:\UWT
2016-06-23 17:55 - 2016-06-23 17:55 - 00016132 _____ C:\Users\a\Desktop\earningsInformation.pdf
2016-06-23 17:55 - 2016-06-23 17:55 - 00000000 ____D C:\Users\a\OneDrive
2016-06-23 17:54 - 2016-06-23 17:54 - 00659979 _____ C:\Users\a\Desktop\LowIncome.pdf
2016-06-23 17:52 - 2016-06-23 17:52 - 00660015 _____ C:\Users\a\Documents\LowIncome.pdf
2016-06-23 17:41 - 2016-06-23 17:41 - 00000000 ____D C:\Users\a\AppData\Roaming\Nitro
2016-06-23 17:39 - 2016-07-04 20:13 - 00000000 ____D C:\Users\a\Desktop\x64
2016-06-23 17:39 - 2016-06-23 17:39 - 00000000 ____D C:\Users\a\Desktop\rc
2016-06-23 17:39 - 2016-06-23 17:39 - 00000000 ____D C:\Users\a\Desktop\plug_ins
2016-06-23 17:39 - 2016-06-23 17:39 - 00000000 ____D C:\Users\a\Desktop\locales
2016-06-23 17:39 - 2016-06-23 17:39 - 00000000 ____D C:\Users\a\Desktop\IRIS_OCR
2016-06-23 17:39 - 2016-06-23 17:39 - 00000000 ____D C:\ProgramData\Nitro
2016-06-23 17:39 - 2016-06-23 17:39 - 00000000 ____D C:\Program Files\Common Files\Nitro
2016-06-23 17:38 - 2016-06-23 17:38 - 00000000 ____D C:\Users\a\AppData\Roaming\Downloaded Installations
2016-06-23 17:37 - 2016-06-23 17:37 - 00030110 ____T C:\Users\a\Downloads\fhs.pdf
2016-06-23 17:33 - 2016-06-23 17:37 - 116526864 _____ (Nitro PDF Software) C:\Users\a\Downloads\nitro_pro10_xy64.exe
2016-06-23 17:33 - 2016-06-23 17:33 - 02512848 _____ (Nitro) C:\Users\a\Downloads\nitro_upro10.exe
2016-06-23 17:33 - 2016-06-23 17:33 - 02512848 _____ (Nitro) C:\Users\a\Downloads\nitro_phro10.exe
2016-06-23 17:28 - 2016-06-23 17:29 - 02512840 _____ (Nitro) C:\Users\a\Downloads\nitro_pro10.exe
2016-06-23 17:19 - 2016-06-23 17:19 - 00000000 ____D C:\Users\a\Desktop\Tor Browser
2016-06-23 16:52 - 2013-08-27 00:12 - 00046080 _____ C:\Windows\system32\unredmon.exe
2016-06-23 16:51 - 2016-06-23 16:51 - 00000000 ____D C:\Users\a\AppData\Roaming\Macromedia
2016-06-23 16:43 - 2016-06-23 16:43 - 00000000 ____D C:\Users\a\AppData\Local\VS Revo Group
2016-06-23 16:42 - 2016-07-04 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2016-06-23 16:42 - 2016-06-23 16:42 - 00001122 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2016-06-23 16:42 - 2016-06-23 16:42 - 00001122 _____ C:\ProgramData\Desktop\Revo Uninstaller Pro.lnk
2016-06-23 16:42 - 2016-06-23 16:42 - 00000000 ____D C:\ProgramData\VS Revo Group
2016-06-23 16:42 - 2016-06-23 16:42 - 00000000 ____D C:\Program Files\VS Revo Group
2016-06-23 16:42 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2016-06-23 16:37 - 2016-06-23 16:40 - 00000000 ____D C:\ProgramData\HP
2016-06-23 16:17 - 2016-06-23 16:17 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-06-23 12:12 - 2016-06-23 12:12 - 00000783 _____ C:\Users\a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2016-06-23 12:12 - 2016-06-23 12:12 - 00000753 _____ C:\Users\a\Desktop\Start Tor Browser.lnk
2016-06-23 12:02 - 2016-06-23 12:02 - 00000368 _____ C:\Users\a\Desktop\wr.reg
2016-06-23 11:35 - 2013-09-09 12:22 - 07881016 _____ (QtWeb.NET) C:\Users\a\Documents\QtWeb.exe
2016-06-23 11:34 - 2016-07-04 22:22 - 00000000 ___RD C:\Users\a\Desktop\OneDrive
2016-06-23 09:21 - 2016-07-04 18:20 - 00000000 ____D C:\Users\a\AppData\Local\ESET
2016-06-23 09:13 - 2016-07-04 22:15 - 00181160 _____ (ESET) C:\Windows\system32\Drivers\ESETCleanersDriver.sys
2016-06-23 09:06 - 2016-06-23 09:06 - 00000000 ____D C:\Users\a\AppData\Roaming\Synaptics
2016-06-23 09:06 - 2016-06-23 09:06 - 00000000 ____D C:\ProgramData\Synaptics
2016-06-23 08:53 - 2016-07-04 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2016-06-23 08:53 - 2016-07-04 20:12 - 00000000 ____D C:\Program Files\ESET
2016-06-23 08:53 - 2016-06-23 08:53 - 00000000 ____D C:\ProgramData\ESET
2016-06-23 08:51 - 2016-06-23 08:57 - 00000714 _____ C:\Users\a\Desktop\hgd.txt
2016-06-23 08:44 - 2016-06-23 08:44 - 00000000 ____D C:\Users\a\AppData\Roaming\ESET
2016-06-23 08:37 - 2016-07-04 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
2016-06-23 08:37 - 2016-06-23 08:37 - 00002534 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2016-06-23 08:37 - 2016-06-23 08:37 - 00002498 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2016-06-23 08:37 - 2016-06-23 08:37 - 00002493 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-06-23 08:37 - 2016-06-23 08:37 - 00002492 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-06-23 08:37 - 2016-06-23 08:37 - 00002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-06-23 08:37 - 2016-06-23 08:37 - 00002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-06-23 08:37 - 2016-06-23 08:37 - 00002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-06-23 08:37 - 2016-06-23 08:37 - 00002435 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-06-23 08:37 - 2016-06-23 08:37 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-06-23 08:36 - 2016-06-23 08:50 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-06-23 08:36 - 2016-06-23 08:36 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-06-23 08:36 - 2016-06-23 08:36 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-06-23 08:31 - 2016-07-04 20:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-06-23 08:31 - 2016-07-04 20:12 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-06-23 01:33 - 2016-06-16 08:40 - 00484008 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-06-23 01:30 - 2016-06-23 01:31 - 00000000 ____D C:\Windows\system32\MRT
2016-06-23 01:30 - 2016-06-23 01:30 - 142482544 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-06-23 01:29 - 2016-07-04 22:23 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-06-23 01:29 - 2016-07-04 22:23 - 00000000 __SHD C:\Users\a\IntelGraphicsProfiles
2016-06-23 01:29 - 2016-07-04 21:04 - 00000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2016-06-23 01:29 - 2016-07-04 20:53 - 00000000 ____D C:\Users\a\AppData\Local\Comms
2016-06-23 01:29 - 2016-05-28 18:13 - 01401024 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-06-23 01:29 - 2016-05-28 18:13 - 01184960 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-06-23 01:29 - 2016-05-28 18:13 - 00514752 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-06-23 01:29 - 2016-05-28 18:13 - 00290496 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-06-23 01:29 - 2016-05-28 18:13 - 00046784 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-06-23 01:29 - 2016-05-28 17:22 - 07474528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-06-23 01:29 - 2016-05-28 17:08 - 00693600 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-06-23 01:29 - 2016-05-28 17:07 - 03675512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-06-23 01:29 - 2016-05-28 17:07 - 02921880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-06-23 01:29 - 2016-05-28 17:06 - 22561256 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-06-23 01:29 - 2016-05-28 17:06 - 04074160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-06-23 01:29 - 2016-05-28 17:06 - 00303216 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-06-23 01:29 - 2016-05-28 17:05 - 04515264 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-06-23 01:29 - 2016-05-28 16:58 - 01996640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-06-23 01:29 - 2016-05-28 16:58 - 00379232 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-06-23 01:29 - 2016-05-28 16:57 - 02548944 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-06-23 01:29 - 2016-05-28 16:57 - 01594416 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-06-23 01:29 - 2016-05-28 16:57 - 00649792 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-06-23 01:29 - 2016-05-28 16:57 - 00521664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-06-23 01:29 - 2016-05-28 16:35 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\tdlrecover.exe
2016-06-23 01:29 - 2016-05-28 16:29 - 22379008 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-06-23 01:29 - 2016-05-28 16:19 - 24605696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-06-23 01:29 - 2016-05-28 16:18 - 11545088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-06-23 01:29 - 2016-05-28 16:18 - 07977472 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-06-23 01:29 - 2016-05-28 16:17 - 09918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-06-23 01:29 - 2016-05-28 16:16 - 19344384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-06-23 01:29 - 2016-05-28 16:16 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2016-06-23 01:29 - 2016-05-28 16:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2016-06-23 01:29 - 2016-05-28 16:15 - 00853504 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-06-23 01:29 - 2016-05-28 16:14 - 18674176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-06-23 01:29 - 2016-05-28 16:14 - 01716736 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2016-06-23 01:29 - 2016-05-28 16:14 - 00965632 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2016-06-23 01:29 - 2016-05-28 16:14 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-06-23 01:29 - 2016-05-28 16:13 - 01387520 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-06-23 01:29 - 2016-05-28 16:13 - 00939520 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-06-23 01:29 - 2016-05-28 16:08 - 13385728 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-06-23 01:29 - 2016-05-28 16:08 - 06295552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2016-06-23 01:29 - 2016-05-28 16:06 - 12128256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-06-23 01:29 - 2016-05-28 16:06 - 07200256 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-06-23 01:29 - 2016-05-28 16:06 - 01339904 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-06-23 01:29 - 2016-05-28 16:05 - 03994624 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-06-23 01:29 - 2016-05-28 16:05 - 03664896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-06-23 01:29 - 2016-05-28 16:05 - 02582016 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-06-23 01:29 - 2016-05-28 16:05 - 01797120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-06-23 01:29 - 2016-05-28 16:04 - 06973952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-06-23 01:29 - 2016-05-28 16:03 - 05323776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-06-23 01:29 - 2016-05-28 16:03 - 05205504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2016-06-23 01:29 - 2016-05-28 16:03 - 02609664 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-06-23 01:29 - 2016-05-28 16:03 - 01185280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationFramework.dll
2016-06-23 01:29 - 2016-05-28 16:02 - 03590144 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-06-23 01:29 - 2016-05-28 16:02 - 02061824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-06-23 01:29 - 2016-05-28 16:02 - 01534464 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2016-06-23 01:29 - 2016-05-28 16:01 - 01799680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-06-23 01:29 - 2016-05-28 16:01 - 01500160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-06-23 01:29 - 2016-05-28 16:00 - 05660160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-06-23 01:29 - 2016-05-28 16:00 - 03585536 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-06-23 01:29 - 2016-05-28 16:00 - 02635776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-06-23 01:29 - 2016-05-28 16:00 - 02230272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-06-23 01:29 - 2016-05-28 16:00 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-06-23 01:29 - 2016-05-28 16:00 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-06-23 01:29 - 2016-05-28 16:00 - 01707520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActiveSyncProvider.dll
2016-06-23 01:29 - 2016-05-28 15:58 - 07832576 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-06-23 01:29 - 2016-05-28 15:58 - 04896256 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-06-23 01:29 - 2016-05-28 15:58 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-06-23 01:29 - 2016-05-28 15:58 - 02066432 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-06-23 01:29 - 2016-05-28 15:58 - 01996288 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2016-06-23 01:29 - 2016-05-28 15:57 - 02281472 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-06-23 01:29 - 2016-05-28 15:55 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-06-23 01:29 - 2016-05-05 16:50 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-06-23 01:29 - 2016-04-23 18:12 - 00713920 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-06-23 01:29 - 2016-04-23 18:12 - 00190144 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-06-23 01:29 - 2016-04-23 17:28 - 01557768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-06-23 01:29 - 2016-04-23 17:28 - 01542816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-06-23 01:29 - 2016-04-23 17:24 - 01997328 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-06-23 01:29 - 2016-04-23 17:24 - 01819208 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-06-23 01:29 - 2016-04-23 17:24 - 00754664 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2016-06-23 01:29 - 2016-04-23 17:22 - 01161120 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-06-23 01:29 - 2016-04-23 17:12 - 00925064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-06-23 01:29 - 2016-04-23 17:12 - 00451928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2016-06-23 01:29 - 2016-04-23 17:12 - 00413536 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2016-06-23 01:29 - 2016-04-23 17:11 - 01092464 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-06-23 01:29 - 2016-04-23 17:11 - 00498960 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2016-06-23 01:29 - 2016-04-23 17:09 - 21123320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-06-23 01:29 - 2016-04-23 17:09 - 05240960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2016-06-23 01:29 - 2016-04-23 17:09 - 00569744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2016-06-23 01:29 - 2016-04-23 17:09 - 00565600 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-06-23 01:29 - 2016-04-23 17:09 - 00465760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2016-06-23 01:29 - 2016-04-23 17:08 - 06605504 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-06-23 01:29 - 2016-04-23 17:08 - 00725776 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2016-06-23 01:29 - 2016-04-23 17:07 - 01848072 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-06-23 01:29 - 2016-04-23 17:07 - 01536088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-06-23 01:29 - 2016-04-23 17:06 - 00291360 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2016-06-23 01:29 - 2016-04-23 17:01 - 00619296 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-06-23 01:29 - 2016-04-23 17:01 - 00513368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-06-23 01:29 - 2016-04-23 17:00 - 01776768 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-06-23 01:29 - 2016-04-23 17:00 - 01522152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-06-23 01:29 - 2016-04-23 17:00 - 01399224 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-06-23 01:29 - 2016-04-23 17:00 - 01337240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-06-23 01:29 - 2016-04-23 17:00 - 00550656 _____ (Microsoft Corporation) C:\Windows\system32\directmanipulation.dll
2016-06-23 01:29 - 2016-04-23 16:56 - 00534872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2016-06-23 01:29 - 2016-04-23 16:31 - 13018112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-06-23 01:29 - 2016-04-23 16:28 - 16984576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-06-23 01:29 - 2016-04-23 16:25 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
2016-06-23 01:29 - 2016-04-23 16:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-06-23 01:29 - 2016-04-23 16:24 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2016-06-23 01:29 - 2016-04-23 16:24 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2016-06-23 01:29 - 2016-04-23 16:21 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-06-23 01:29 - 2016-04-23 16:20 - 00606720 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2016-06-23 01:29 - 2016-04-23 16:20 - 00484352 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-06-23 01:29 - 2016-04-23 16:20 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2016-06-23 01:29 - 2016-04-23 16:19 - 00970752 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-06-23 01:29 - 2016-04-23 16:19 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2016-06-23 01:29 - 2016-04-23 16:18 - 00870400 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2016-06-23 01:29 - 2016-04-23 16:18 - 00804352 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-06-23 01:29 - 2016-04-23 16:18 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-06-23 01:29 - 2016-04-23 16:18 - 00515072 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-06-23 01:29 - 2016-04-23 16:18 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2016-06-23 01:29 - 2016-04-23 16:17 - 01213440 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-06-23 01:29 - 2016-04-23 16:17 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2016-06-23 01:29 - 2016-04-23 16:17 - 00388608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-06-23 01:29 - 2016-04-23 16:16 - 01319424 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2016-06-23 01:29 - 2016-04-23 16:16 - 00848896 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-06-23 01:29 - 2016-04-23 16:15 - 00865792 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2016-06-23 01:29 - 2016-04-23 16:15 - 00792064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-06-23 01:29 - 2016-04-23 16:15 - 00673280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2016-06-23 01:29 - 2016-04-23 16:15 - 00400896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2016-06-23 01:29 - 2016-04-23 16:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2016-06-23 01:29 - 2016-04-23 16:14 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2016-06-23 01:29 - 2016-04-23 16:14 - 00821760 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2016-06-23 01:29 - 2016-04-23 16:14 - 00647680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-06-23 01:29 - 2016-04-23 16:14 - 00354304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2016-06-23 01:29 - 2016-04-23 16:13 - 00705536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-06-23 01:29 - 2016-04-23 16:13 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2016-06-23 01:29 - 2016-04-23 16:13 - 00434688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2016-06-23 01:29 - 2016-04-23 16:12 - 00667648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2016-06-23 01:29 - 2016-04-23 16:10 - 00639488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2016-06-23 01:29 - 2016-04-23 16:05 - 05502976 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-06-23 01:29 - 2016-04-23 16:05 - 01946112 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-06-23 01:29 - 2016-04-23 16:05 - 01626624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-06-23 01:29 - 2016-04-23 16:05 - 00613376 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-06-23 01:29 - 2016-04-23 16:04 - 04759040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-06-23 01:29 - 2016-04-23 16:03 - 02193408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-06-23 01:29 - 2016-04-23 16:03 - 02000896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2016-06-23 01:29 - 2016-04-23 16:03 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2016-06-23 01:29 - 2016-04-23 16:03 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2016-06-23 01:29 - 2016-04-23 16:02 - 02444288 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-06-23 01:29 - 2016-04-23 16:01 - 04775424 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-06-23 01:29 - 2016-04-23 16:00 - 00984576 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-06-23 01:29 - 2016-04-23 15:45 - 00461824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2016-06-23 01:29 - 2016-04-02 16:13 - 00369912 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-06-23 01:29 - 2016-04-02 15:19 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-06-23 01:29 - 2016-03-29 22:20 - 02656952 _____ C:\Windows\system32\CoreUIComponents.dll
2016-06-23 01:29 - 2016-03-29 21:56 - 01297752 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-06-23 01:29 - 2016-03-29 21:37 - 01862008 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2016-06-23 01:29 - 2016-03-29 21:13 - 00986976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2016-06-23 01:29 - 2016-03-29 19:22 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\AccountsRt.dll
2016-06-23 01:29 - 2016-03-29 19:20 - 00948736 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2016-06-23 01:29 - 2016-03-29 19:14 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-06-23 01:29 - 2016-03-29 19:06 - 01575936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-06-23 01:29 - 2016-03-29 19:02 - 02624512 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2016-06-23 01:29 - 2016-03-29 19:02 - 01211904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2016-06-23 01:29 - 2016-03-29 18:36 - 00649728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-06-23 01:29 - 2016-03-29 18:32 - 01098240 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-06-23 01:29 - 2016-03-29 18:14 - 01072128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2016-06-23 01:29 - 2016-03-29 17:45 - 03078144 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-06-23 01:29 - 2016-03-29 17:43 - 03428864 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-06-23 01:29 - 2016-03-29 17:38 - 02798080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-06-23 01:29 - 2016-03-29 17:36 - 02722816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2016-06-23 01:29 - 2016-03-29 17:26 - 00958976 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2016-06-23 01:29 - 2016-03-01 17:31 - 00848168 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-06-23 01:29 - 2016-03-01 17:22 - 00709688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-06-23 01:29 - 2016-02-24 21:34 - 01613664 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-06-23 01:29 - 2016-02-24 21:28 - 03449168 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2016-06-23 01:29 - 2016-02-24 20:58 - 00794888 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-06-23 01:29 - 2016-02-24 20:43 - 00625000 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2016-06-23 01:29 - 2016-02-24 20:19 - 00670928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-06-23 01:29 - 2016-02-24 20:09 - 00640472 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-06-23 01:29 - 2016-02-24 19:33 - 00538736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-06-23 01:29 - 2016-02-24 18:59 - 00450560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2016-06-23 01:29 - 2016-02-24 18:59 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2016-06-23 01:29 - 2016-02-24 18:44 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2016-06-23 01:29 - 2016-02-24 18:43 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2016-06-23 01:29 - 2016-02-24 18:40 - 01224704 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2016-06-23 01:29 - 2016-02-24 18:34 - 00938496 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2016-06-23 01:29 - 2016-02-24 18:21 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2016-06-23 01:29 - 2016-02-24 18:18 - 01490432 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
2016-06-23 01:29 - 2016-02-24 18:09 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll
2016-06-23 01:29 - 2016-02-24 18:07 - 00949248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2016-06-23 01:29 - 2016-02-24 18:04 - 01497088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2016-06-23 01:29 - 2016-02-24 18:03 - 00769536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
2016-06-23 01:29 - 2016-02-24 17:05 - 12586496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-06-23 01:29 - 2016-02-24 17:03 - 14252544 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-06-23 01:29 - 2016-02-23 22:32 - 08705672 _____ (Microsoft Corp.) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2016-06-23 01:29 - 2016-02-23 22:32 - 02544264 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-06-23 01:29 - 2016-02-23 22:32 - 01152328 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2016-06-23 01:29 - 2016-02-23 22:32 - 01062480 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-06-23 01:29 - 2016-02-23 22:31 - 01017032 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2016-06-23 01:29 - 2016-02-23 22:31 - 00819648 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2016-06-23 01:29 - 2016-02-23 22:31 - 00536256 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-06-23 01:29 - 2016-02-23 22:22 - 00572272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll
2016-06-23 01:29 - 2016-02-23 21:45 - 02773096 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-06-23 01:29 - 2016-02-23 21:38 - 06952088 _____ (Microsoft Corp.) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-06-23 01:29 - 2016-02-23 21:38 - 02180136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-06-23 01:29 - 2016-02-23 21:38 - 00980352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2016-06-23 01:29 - 2016-02-23 21:38 - 00895080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2016-06-23 01:29 - 2016-02-23 21:38 - 00882720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2016-06-23 01:29 - 2016-02-23 21:37 - 00713824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2016-06-23 01:29 - 2016-02-23 21:27 - 00376536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
2016-06-23 01:29 - 2016-02-23 21:20 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSave.dll
2016-06-23 01:29 - 2016-02-23 20:56 - 02186864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-06-23 01:29 - 2016-02-23 20:38 - 00287712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
2016-06-23 01:29 - 2016-02-23 20:36 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\QuickActionsDataModel.dll
2016-06-23 01:29 - 2016-02-23 20:31 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2016-06-23 01:29 - 2016-02-23 20:29 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SmsRouterSvc.dll
2016-06-23 01:29 - 2016-02-23 20:27 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2016-06-23 01:29 - 2016-02-23 20:26 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2016-06-23 01:29 - 2016-02-23 20:22 - 00567808 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2016-06-23 01:29 - 2016-02-23 20:20 - 00847360 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-06-23 01:29 - 2016-02-23 20:20 - 00493568 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2016-06-23 01:29 - 2016-02-23 20:14 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2016-06-23 01:29 - 2016-02-23 20:10 - 00997376 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-06-23 01:29 - 2016-02-23 20:04 - 01131520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2016-06-23 01:29 - 2016-02-23 20:04 - 00382464 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-06-23 01:29 - 2016-02-23 20:02 - 00755712 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2016-06-23 01:29 - 2016-02-23 19:58 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\TimeBrokerServer.dll
2016-06-23 01:29 - 2016-02-23 19:48 - 00838144 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2016-06-23 01:29 - 2016-02-23 19:38 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2016-06-23 01:29 - 2016-02-23 19:37 - 01118208 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-06-23 01:29 - 2016-02-23 19:36 - 00713728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2016-06-23 01:29 - 2016-02-23 19:36 - 00379392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll
2016-06-23 01:29 - 2016-02-23 19:31 - 00585216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AccountsControl.dll
2016-06-23 01:29 - 2016-02-23 19:24 - 04827136 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-06-23 01:29 - 2016-02-23 19:24 - 01105920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2016-06-23 01:29 - 2016-02-23 19:01 - 02295808 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2016-06-23 01:29 - 2016-02-23 18:56 - 04412928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-06-23 01:29 - 2016-02-23 18:41 - 02912256 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2016-06-23 01:29 - 2016-02-23 18:35 - 07533568 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-06-23 01:29 - 2016-02-23 18:33 - 02604032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2016-06-23 01:29 - 2016-02-23 18:28 - 06740992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-06-23 01:29 - 2016-01-27 17:57 - 01824264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-06-23 01:29 - 2016-01-27 17:57 - 00820704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-06-23 01:29 - 2016-01-27 17:46 - 02606824 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-06-23 01:29 - 2016-01-27 17:46 - 01270072 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-06-23 01:29 - 2016-01-16 18:23 - 00785088 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-06-23 01:29 - 2016-01-16 18:21 - 01750440 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2016-06-23 01:29 - 2016-01-16 18:20 - 00652312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-06-23 01:29 - 2016-01-16 18:19 - 00405568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-06-23 01:29 - 2016-01-16 18:12 - 01415200 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-06-23 01:29 - 2016-01-16 18:08 - 01174008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-06-23 01:29 - 2016-01-16 18:08 - 00440152 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-06-23 01:29 - 2016-01-16 17:31 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2016-06-23 01:29 - 2016-01-16 17:30 - 02127360 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-06-23 01:29 - 2016-01-16 17:29 - 01500672 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2016-06-23 01:29 - 2016-01-16 17:26 - 00260608 _____ C:\Windows\system32\MTFServer.dll
2016-06-23 01:29 - 2016-01-16 17:24 - 02057216 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2016-06-23 01:29 - 2016-01-16 17:24 - 00273408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2016-06-23 01:29 - 2016-01-16 17:18 - 01674240 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-06-23 01:29 - 2016-01-16 17:16 - 01542656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-06-23 01:29 - 2016-01-05 14:45 - 02587696 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-06-23 01:29 - 2016-01-05 14:42 - 02026736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-06-23 01:29 - 2016-01-05 14:37 - 01299504 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-06-23 01:29 - 2016-01-05 14:37 - 00858952 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-06-23 01:29 - 2016-01-05 14:33 - 01118208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2016-06-23 01:29 - 2016-01-05 14:33 - 00701384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2016-06-23 01:29 - 2016-01-05 14:23 - 00786696 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-06-23 01:29 - 2016-01-05 14:17 - 00695752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-06-23 01:29 - 2016-01-05 13:49 - 00749056 _____ (Microsoft Corporation) C:\Windows\system32\PhoneService.dll
2016-06-23 01:29 - 2016-01-05 13:48 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-06-23 01:29 - 2016-01-05 13:45 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2016-06-23 01:29 - 2016-01-05 13:43 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2016-06-23 01:29 - 2016-01-05 13:39 - 00569856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-06-23 01:29 - 2015-12-07 16:48 - 00526856 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2016-06-23 01:29 - 2015-12-07 16:48 - 00462760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2016-06-23 01:29 - 2015-12-07 16:48 - 00337840 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2016-06-23 01:29 - 2015-12-07 16:48 - 00289248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
2016-06-23 01:29 - 2015-12-07 16:15 - 01035776 _____ (Microsoft Corporation) C:\Windows\system32\XboxNetApiSvc.dll
2016-06-23 01:29 - 2015-12-07 16:10 - 00824320 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2016-06-23 01:29 - 2015-12-07 16:06 - 00572928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2016-06-23 01:29 - 2015-12-07 15:45 - 00900608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2016-06-23 01:29 - 2015-12-07 15:45 - 00683008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-06-23 01:29 - 2015-11-24 20:52 - 01717248 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-06-23 01:29 - 2015-11-24 20:49 - 01648640 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-06-23 01:29 - 2015-11-24 19:59 - 01467392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2016-06-23 01:29 - 2015-11-24 19:57 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-06-23 01:29 - 2015-11-24 19:29 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-06-23 01:29 - 2015-11-24 19:04 - 02155008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-06-23 01:29 - 2015-11-22 21:54 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\ETWCoreUIComponentsResources.dll
2016-06-23 01:29 - 2015-11-22 21:42 - 00589312 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApi.dll
2016-06-23 01:29 - 2015-11-22 21:42 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ETWCoreUIComponentsResources.dll
2016-06-23 01:29 - 2015-11-22 21:36 - 01042432 _____ (Microsoft Corporation) C:\Windows\system32\BingOnlineServices.dll
2016-06-23 01:29 - 2015-11-22 21:34 - 02843136 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2016-06-23 01:29 - 2015-11-22 21:32 - 00340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2016-06-23 01:29 - 2015-11-22 21:31 - 00470528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApi.dll
2016-06-23 01:29 - 2015-11-22 21:28 - 00870400 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-06-23 01:29 - 2015-11-22 21:26 - 03355136 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-06-23 01:29 - 2015-11-22 21:26 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingOnlineServices.dll
2016-06-23 01:29 - 2015-11-22 21:20 - 01860096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2016-06-23 01:29 - 2015-11-22 21:18 - 00697856 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2016-06-23 01:29 - 2015-11-22 21:18 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2016-06-23 01:29 - 2015-11-22 21:17 - 02680320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2016-06-23 01:29 - 2015-11-22 21:11 - 00517632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2016-06-23 01:29 - 2015-11-13 18:43 - 00586208 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-06-23 01:29 - 2015-11-13 18:42 - 00516544 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-06-23 01:29 - 2015-11-13 18:33 - 00911648 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2016-06-23 01:29 - 2015-11-13 18:21 - 00511320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-06-23 01:29 - 2015-11-13 18:21 - 00454056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-06-23 01:29 - 2015-07-25 10:12 - 00095232 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2016-06-23 01:29 - 2015-07-25 10:12 - 00091136 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2016-06-23 01:28 - 2016-07-04 20:13 - 00000000 ____D C:\Program Files\Intel
2016-06-23 01:28 - 2016-05-28 18:13 - 00092352 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-06-23 01:28 - 2016-05-28 17:25 - 04268880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2016-06-23 01:28 - 2016-05-28 17:23 - 00388384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2016-06-23 01:28 - 2016-05-28 17:23 - 00312160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-06-23 01:28 - 2016-05-28 17:22 - 04387680 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2016-06-23 01:28 - 2016-05-28 17:22 - 00428896 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-06-23 01:28 - 2016-05-28 17:22 - 00211296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-06-23 01:28 - 2016-05-28 17:22 - 00118624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-06-23 01:28 - 2016-05-28 17:20 - 00430312 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-06-23 01:28 - 2016-05-28 17:18 - 00357216 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-06-23 01:28 - 2016-05-28 17:16 - 00026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-06-23 01:28 - 2016-05-28 17:09 - 00501600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2016-06-23 01:28 - 2016-05-28 17:09 - 00170848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.exe
2016-06-23 01:28 - 2016-05-28 17:09 - 00084832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2016-06-23 01:28 - 2016-05-28 17:08 - 00258912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ufx01000.sys
2016-06-23 01:28 - 2016-05-28 17:08 - 00115040 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-06-23 01:28 - 2016-05-28 17:07 - 01322248 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-06-23 01:28 - 2016-05-28 17:07 - 00957608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-06-23 01:28 - 2016-05-28 17:07 - 00808288 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-06-23 01:28 - 2016-05-28 17:07 - 00703840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-06-23 01:28 - 2016-05-28 17:07 - 00331616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-06-23 01:28 - 2016-05-28 17:06 - 00730344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2016-06-23 01:28 - 2016-05-28 17:06 - 00254656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2016-06-23 01:28 - 2016-05-28 17:04 - 00604928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-06-23 01:28 - 2016-05-28 17:04 - 00431296 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-06-23 01:28 - 2016-05-28 17:04 - 00360480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-06-23 01:28 - 2016-05-28 17:04 - 00161632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-06-23 01:28 - 2016-05-28 17:04 - 00111064 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2016-06-23 01:28 - 2016-05-28 17:04 - 00097096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2016-06-23 01:28 - 2016-05-28 17:03 - 00131248 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-06-23 01:28 - 2016-05-28 16:57 - 02195632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-06-23 01:28 - 2016-05-28 16:57 - 01372312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-06-23 01:28 - 2016-05-28 16:57 - 00636304 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-06-23 01:28 - 2016-05-28 16:57 - 00577376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-06-23 01:28 - 2016-05-28 16:57 - 00546456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2016-06-23 01:28 - 2016-05-28 16:57 - 00316256 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-06-23 01:28 - 2016-05-28 16:35 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
2016-06-23 01:28 - 2016-05-28 16:35 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsdport.sys
2016-06-23 01:28 - 2016-05-28 16:31 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdlrecover.exe
2016-06-23 01:28 - 2016-05-28 16:31 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-06-23 01:28 - 2016-05-28 16:31 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\MosHostClient.dll
2016-06-23 01:28 - 2016-05-28 16:29 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll
2016-06-23 01:28 - 2016-05-28 16:29 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-06-23 01:28 - 2016-05-28 16:29 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\httpprxp.dll
2016-06-23 01:28 - 2016-05-28 16:28 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-06-23 01:28 - 2016-05-28 16:28 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-06-23 01:28 - 2016-05-28 16:28 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-06-23 01:28 - 2016-05-28 16:27 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosHostClient.dll
2016-06-23 01:28 - 2016-05-28 16:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
2016-06-23 01:28 - 2016-05-28 16:26 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-06-23 01:28 - 2016-05-28 16:26 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2016-06-23 01:28 - 2016-05-28 16:26 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
2016-06-23 01:28 - 2016-05-28 16:26 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-06-23 01:28 - 2016-05-28 16:26 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-06-23 01:28 - 2016-05-28 16:25 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys
2016-06-23 01:28 - 2016-05-28 16:25 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-06-23 01:28 - 2016-05-28 16:24 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-06-23 01:28 - 2016-05-28 16:24 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Ndu.sys
2016-06-23 01:28 - 2016-05-28 16:24 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-06-23 01:28 - 2016-05-28 16:24 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-06-23 01:28 - 2016-05-28 16:24 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-06-23 01:28 - 2016-05-28 16:24 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2016-06-23 01:28 - 2016-05-28 16:24 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2016-06-23 01:28 - 2016-05-28 16:24 - 00053760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2016-06-23 01:28 - 2016-05-28 16:23 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-06-23 01:28 - 2016-05-28 16:23 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll
2016-06-23 01:28 - 2016-05-28 16:22 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-06-23 01:28 - 2016-05-28 16:22 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-06-23 01:28 - 2016-05-28 16:22 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-06-23 01:28 - 2016-05-28 16:22 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-06-23 01:28 - 2016-05-28 16:22 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll
2016-06-23 01:28 - 2016-05-28 16:22 - 00161280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2016-06-23 01:28 - 2016-05-28 16:22 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll
2016-06-23 01:28 - 2016-05-28 16:22 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-06-23 01:28 - 2016-05-28 16:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll
2016-06-23 01:28 - 2016-05-28 16:21 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-06-23 01:28 - 2016-05-28 16:21 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\BrokerLib.dll
2016-06-23 01:28 - 2016-05-28 16:21 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2016-06-23 01:28 - 2016-05-28 16:21 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-06-23 01:28 - 2016-05-28 16:20 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-06-23 01:28 - 2016-05-28 16:20 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2016-06-23 01:28 - 2016-05-28 16:20 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-06-23 01:28 - 2016-05-28 16:20 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-06-23 01:28 - 2016-05-28 16:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\GnssAdapter.dll
2016-06-23 01:28 - 2016-05-28 16:20 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Privacy.dll
2016-06-23 01:28 - 2016-05-28 16:20 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2016-06-23 01:28 - 2016-05-28 16:19 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-06-23 01:28 - 2016-05-28 16:19 - 00567808 _____ (Microsoft Corporation) C:\Windows\system32\MBMediaManager.dll
2016-06-23 01:28 - 2016-05-28 16:19 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-06-23 01:28 - 2016-05-28 16:19 - 00355840 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2016-06-23 01:28 - 2016-05-28 16:19 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc.dll
2016-06-23 01:28 - 2016-05-28 16:18 - 00610816 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-06-23 01:28 - 2016-05-28 16:18 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-06-23 01:28 - 2016-05-28 16:18 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-06-23 01:28 - 2016-05-28 16:18 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-06-23 01:28 - 2016-05-28 16:18 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2016-06-23 01:28 - 2016-05-28 16:18 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll
2016-06-23 01:28 - 2016-05-28 16:17 - 00963072 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-06-23 01:28 - 2016-05-28 16:17 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2016-06-23 01:28 - 2016-05-28 16:17 - 00485888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\newdev.dll
2016-06-23 01:28 - 2016-05-28 16:17 - 00415232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2016-06-23 01:28 - 2016-05-28 16:17 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-06-23 01:28 - 2016-05-28 16:17 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2016-06-23 01:28 - 2016-05-28 16:17 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2016-06-23 01:28 - 2016-05-28 16:16 - 00690176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-06-23 01:28 - 2016-05-28 16:16 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-06-23 01:28 - 2016-05-28 16:16 - 00291328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2016-06-23 01:28 - 2016-05-28 16:16 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2016-06-23 01:28 - 2016-05-28 16:15 - 01056256 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-06-23 01:28 - 2016-05-28 16:15 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-06-23 01:28 - 2016-05-28 16:15 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-06-23 01:28 - 2016-05-28 16:15 - 00349696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2016-06-23 01:28 - 2016-05-28 16:15 - 00293888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2016-06-23 01:28 - 2016-05-28 16:15 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-06-23 01:28 - 2016-05-28 16:14 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-06-23 01:28 - 2016-05-28 16:14 - 00784384 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-06-23 01:28 - 2016-05-28 16:14 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2016-06-23 01:28 - 2016-05-28 16:14 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2016-06-23 01:28 - 2016-05-28 16:14 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2016-06-23 01:28 - 2016-05-28 16:13 - 00990208 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2016-06-23 01:28 - 2016-05-28 16:13 - 00982016 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-06-23 01:28 - 2016-05-28 16:13 - 00954368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-06-23 01:28 - 2016-05-28 16:13 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-06-23 01:28 - 2016-05-28 16:13 - 00467456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
2016-06-23 01:28 - 2016-05-28 16:13 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2016-06-23 01:28 - 2016-05-28 16:12 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2016-06-23 01:28 - 2016-05-28 16:12 - 00614400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-06-23 01:28 - 2016-05-28 16:12 - 00521728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-06-23 01:28 - 2016-05-28 16:11 - 01445888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRHInproc.dll
2016-06-23 01:28 - 2016-05-28 16:11 - 00890368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2016-06-23 01:28 - 2016-05-28 16:11 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2016-06-23 01:28 - 2016-05-28 16:11 - 00784896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2016-06-23 01:28 - 2016-05-28 16:11 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2016-06-23 01:28 - 2016-05-28 16:11 - 00687616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-06-23 01:28 - 2016-05-28 16:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-06-23 01:28 - 2016-05-28 16:11 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
2016-06-23 01:28 - 2016-05-28 16:09 - 01073152 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-06-23 01:28 - 2016-05-28 16:04 - 00555520 _____ (Microsoft Corporation) C:\Windows\system32\SyncController.dll
2016-06-23 01:28 - 2016-05-28 16:04 - 00450560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncController.dll
2016-06-23 01:28 - 2016-05-28 16:03 - 00693760 _____ (Microsoft Corporation) C:\Windows\system32\internetmail.dll
2016-06-23 01:28 - 2016-05-28 16:03 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2016-06-23 01:28 - 2016-05-28 16:02 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2016-06-23 01:28 - 2016-05-28 16:01 - 01582080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-06-23 01:28 - 2016-05-28 16:01 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-06-23 01:28 - 2016-05-28 16:00 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2016-06-23 01:28 - 2016-05-28 16:00 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2016-06-23 01:28 - 2016-05-28 16:00 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2016-06-23 01:28 - 2016-05-28 15:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-06-23 01:28 - 2016-05-28 15:53 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\ngcpopkeysrv.dll
2016-06-23 01:28 - 2016-05-06 16:53 - 00095072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdport.sys
2016-06-23 01:28 - 2016-05-06 16:05 - 00241664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll
2016-06-23 01:28 - 2016-05-06 16:03 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2016-06-23 01:28 - 2016-05-06 15:53 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2016-06-23 01:28 - 2016-05-06 15:49 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrSvc.dll
2016-06-23 01:28 - 2016-05-06 15:44 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2016-06-23 01:28 - 2016-05-06 15:43 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2016-06-23 01:28 - 2016-04-23 17:26 - 00707608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-06-23 01:28 - 2016-04-23 17:24 - 00638816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-06-23 01:28 - 2016-04-23 17:24 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2016-06-23 01:28 - 2016-04-23 17:24 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-06-23 01:28 - 2016-04-23 17:13 - 00306832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2016-06-23 01:28 - 2016-04-23 17:11 - 00390496 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-06-23 01:28 - 2016-04-23 17:11 - 00131424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ufxsynopsys.sys
2016-06-23 01:28 - 2016-04-23 17:07 - 00204048 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2016-06-23 01:28 - 2016-04-23 17:07 - 00183904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2016-06-23 01:28 - 2016-04-23 17:02 - 00188256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2016-06-23 01:28 - 2016-04-23 17:01 - 00393568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-06-23 01:28 - 2016-04-23 17:01 - 00217440 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2016-06-23 01:28 - 2016-04-23 17:00 - 00453472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll
2016-06-23 01:28 - 2016-04-23 17:00 - 00058208 _____ (Microsoft Corporation) C:\Windows\system32\dwminit.dll
2016-06-23 01:28 - 2016-04-23 16:34 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
2016-06-23 01:28 - 2016-04-23 16:34 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\hmkd.dll
2016-06-23 01:28 - 2016-04-23 16:34 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-06-23 01:28 - 2016-04-23 16:33 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2016-06-23 01:28 - 2016-04-23 16:33 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2016-06-23 01:28 - 2016-04-23 16:33 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmCx.sys
2016-06-23 01:28 - 2016-04-23 16:33 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\ByteCodeGenerator.exe
2016-06-23 01:28 - 2016-04-23 16:32 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\wificonnapi.dll
2016-06-23 01:28 - 2016-04-23 16:32 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-06-23 01:28 - 2016-04-23 16:29 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2016-06-23 01:28 - 2016-04-23 16:29 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2016-06-23 01:28 - 2016-04-23 16:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\filecrypt.sys
2016-06-23 01:28 - 2016-04-23 16:29 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2016-06-23 01:28 - 2016-04-23 16:29 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hmkd.dll
2016-06-23 01:28 - 2016-04-23 16:29 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ByteCodeGenerator.exe
2016-06-23 01:28 - 2016-04-23 16:29 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-06-23 01:28 - 2016-04-23 16:28 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2016-06-23 01:28 - 2016-04-23 16:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll
2016-06-23 01:28 - 2016-04-23 16:28 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2016-06-23 01:28 - 2016-04-23 16:28 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2016-06-23 01:28 - 2016-04-23 16:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2016-06-23 01:28 - 2016-04-23 16:26 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2016-06-23 01:28 - 2016-04-23 16:25 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-06-23 01:28 - 2016-04-23 16:25 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2016-06-23 01:28 - 2016-04-23 16:24 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2016-06-23 01:28 - 2016-04-23 16:24 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll
2016-06-23 01:28 - 2016-04-23 16:24 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEDataLayerHelpers.dll
2016-06-23 01:28 - 2016-04-23 16:23 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2016-06-23 01:28 - 2016-04-23 16:23 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\BrowserSettingSync.dll
2016-06-23 01:28 - 2016-04-23 16:23 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2016-06-23 01:28 - 2016-04-23 16:20 - 00307200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2016-06-23 01:28 - 2016-04-23 16:20 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
2016-06-23 01:28 - 2016-04-23 16:19 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2016-06-23 01:28 - 2016-04-23 16:19 - 00140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BrowserSettingSync.dll
2016-06-23 01:28 - 2016-04-23 16:18 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-06-23 01:28 - 2016-04-23 16:17 - 00337920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2016-06-23 01:28 - 2016-04-23 16:14 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-06-23 01:28 - 2016-04-23 16:07 - 00848896 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-06-23 01:28 - 2016-04-23 14:10 - 00002186 _____ C:\Windows\system32\AppxProvisioning.xml
2016-06-23 01:28 - 2016-04-19 10:30 - 00002186 _____ C:\Windows\SysWOW64\AppxProvisioning.xml
2016-06-23 01:28 - 2016-04-02 16:10 - 00770640 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2016-06-23 01:28 - 2016-04-02 16:10 - 00374008 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-06-23 01:28 - 2016-04-02 15:25 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll
2016-06-23 01:28 - 2016-04-02 15:25 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NotificationObjFactory.dll
2016-06-23 01:28 - 2016-03-29 22:23 - 00277856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2016-06-23 01:28 - 2016-03-29 22:22 - 01030416 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-06-23 01:28 - 2016-03-29 22:22 - 00874968 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-06-23 01:28 - 2016-03-29 22:20 - 01317640 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-06-23 01:28 - 2016-03-29 22:20 - 01141504 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-06-23 01:28 - 2016-03-29 22:18 - 02152280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-06-23 01:28 - 2016-03-29 22:15 - 00100232 _____ (Microsoft Corporation) C:\Windows\system32\omadmapi.dll
2016-06-23 01:28 - 2016-03-29 22:11 - 00686976 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-06-23 01:28 - 2016-03-29 22:05 - 01152864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-06-23 01:28 - 2016-03-29 22:02 - 00989536 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2016-06-23 01:28 - 2016-03-29 22:02 - 00334736 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2016-06-23 01:28 - 2016-03-29 21:28 - 00535080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-06-23 01:28 - 2016-03-29 21:25 - 00058400 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.dll
2016-06-23 01:28 - 2016-03-29 21:19 - 00296488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2016-06-23 01:28 - 2016-03-29 21:18 - 00185184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2016-06-23 01:28 - 2016-03-29 21:11 - 00074424 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe
2016-06-23 01:28 - 2016-03-29 21:10 - 00110584 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
2016-06-23 01:28 - 2016-03-29 21:09 - 00078040 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
2016-06-23 01:28 - 2016-03-29 21:08 - 00358752 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-06-23 01:28 - 2016-03-29 21:08 - 00261376 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2016-06-23 01:28 - 2016-03-29 21:07 - 00081144 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-06-23 01:28 - 2016-03-29 20:41 - 00051128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.dll
2016-06-23 01:28 - 2016-03-29 20:26 - 02403680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-06-23 01:28 - 2016-03-29 20:26 - 01089888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-06-23 01:28 - 2016-03-29 20:26 - 00073872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srvcli.dll
2016-06-23 01:28 - 2016-03-29 20:25 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkscli.dll
2016-06-23 01:28 - 2016-03-29 20:24 - 00294752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-06-23 01:28 - 2016-03-29 20:23 - 00069744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2016-06-23 01:28 - 2016-03-29 20:21 - 00378208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2016-06-23 01:28 - 2016-03-29 20:16 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2016-06-23 01:28 - 2016-03-29 20:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.V2.dll
2016-06-23 01:28 - 2016-03-29 20:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\policymanagerprecheck.dll
2016-06-23 01:28 - 2016-03-29 20:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\dmenterprisediagnostics.dll
2016-06-23 01:28 - 2016-03-29 20:07 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2016-06-23 01:28 - 2016-03-29 20:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\oleacchooks.dll
2016-06-23 01:28 - 2016-03-29 20:00 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
2016-06-23 01:28 - 2016-03-29 20:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\fveskybackup.dll
2016-06-23 01:28 - 2016-03-29 19:59 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerShellext.exe
2016-06-23 01:28 - 2016-03-29 19:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
2016-06-23 01:28 - 2016-03-29 19:58 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-06-23 01:28 - 2016-03-29 19:57 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-06-23 01:28 - 2016-03-29 19:57 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-06-23 01:28 - 2016-03-29 19:55 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\serial.sys
2016-06-23 01:28 - 2016-03-29 19:55 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\tbauth.dll
2016-06-23 01:28 - 2016-03-29 19:54 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-06-23 01:28 - 2016-03-29 19:53 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2016-06-23 01:28 - 2016-03-29 19:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerCookies.exe
2016-06-23 01:28 - 2016-03-29 19:51 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2016-06-23 01:28 - 2016-03-29 19:51 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2016-06-23 01:28 - 2016-03-29 19:51 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\tzautoupdate.dll
2016-06-23 01:28 - 2016-03-29 19:50 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2016-06-23 01:28 - 2016-03-29 19:50 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2016-06-23 01:28 - 2016-03-29 19:50 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\OnDemandConnRouteHelper.dll
2016-06-23 01:28 - 2016-03-29 19:50 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll
2016-06-23 01:28 - 2016-03-29 19:49 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthLEEnum.sys
2016-06-23 01:28 - 2016-03-29 19:48 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2016-06-23 01:28 - 2016-03-29 19:46 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-06-23 01:28 - 2016-03-29 19:44 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\DAFWSD.dll
2016-06-23 01:28 - 2016-03-29 19:36 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2016-06-23 01:28 - 2016-03-29 19:36 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2016-06-23 01:28 - 2016-03-29 19:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-06-23 01:28 - 2016-03-29 19:35 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2016-06-23 01:28 - 2016-03-29 19:34 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-06-23 01:28 - 2016-03-29 19:34 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-06-23 01:28 - 2016-03-29 19:33 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2016-06-23 01:28 - 2016-03-29 19:30 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-06-23 01:28 - 2016-03-29 19:30 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-06-23 01:28 - 2016-03-29 19:27 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2016-06-23 01:28 - 2016-03-29 19:23 - 00694784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2016-06-23 01:28 - 2016-03-29 19:21 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-06-23 01:28 - 2016-03-29 19:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2016-06-23 01:28 - 2016-03-29 19:20 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.V2.dll
2016-06-23 01:28 - 2016-03-29 19:20 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsdchngr.dll
2016-06-23 01:28 - 2016-03-29 19:19 - 00556032 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2016-06-23 01:28 - 2016-03-29 19:19 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacchooks.dll
2016-06-23 01:28 - 2016-03-29 19:18 - 00676352 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2016-06-23 01:28 - 2016-03-29 19:17 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2016-06-23 01:28 - 2016-03-29 19:12 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininetlui.dll
2016-06-23 01:28 - 2016-03-29 19:12 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-06-23 01:28 - 2016-03-29 19:11 - 00881664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2016-06-23 01:28 - 2016-03-29 19:11 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-06-23 01:28 - 2016-03-29 19:11 - 00043520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2016-06-23 01:28 - 2016-03-29 19:09 - 01239552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2016-06-23 01:28 - 2016-03-29 19:09 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbauth.dll
2016-06-23 01:28 - 2016-03-29 19:08 - 00888320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2016-06-23 01:28 - 2016-03-29 19:08 - 00841216 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-06-23 01:28 - 2016-03-29 19:08 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-06-23 01:28 - 2016-03-29 19:07 - 01902592 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-06-23 01:28 - 2016-03-29 19:06 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerCookies.exe
2016-06-23 01:28 - 2016-03-29 19:05 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-06-23 01:28 - 2016-03-29 19:05 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll
2016-06-23 01:28 - 2016-03-29 19:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Devices.dll
2016-06-23 01:28 - 2016-03-29 19:03 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-06-23 01:28 - 2016-03-29 19:00 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2016-06-23 01:28 - 2016-03-29 19:00 - 00235008 _____ C:\Windows\system32\MTF.dll
2016-06-23 01:28 - 2016-03-29 19:00 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-06-23 01:28 - 2016-03-29 19:00 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-06-23 01:28 - 2016-03-29 18:59 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-06-23 01:28 - 2016-03-29 18:59 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2016-06-23 01:28 - 2016-03-29 18:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2016-06-23 01:28 - 2016-03-29 18:55 - 01052160 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2016-06-23 01:28 - 2016-03-29 18:53 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2016-06-23 01:28 - 2016-03-29 18:53 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovhost.dll
2016-06-23 01:28 - 2016-03-29 18:52 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2016-06-23 01:28 - 2016-03-29 18:49 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2016-06-23 01:28 - 2016-03-29 18:43 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AccountsRt.dll
2016-06-23 01:28 - 2016-03-29 18:42 - 01410560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2016-06-23 01:28 - 2016-03-29 18:42 - 00250880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-06-23 01:28 - 2016-03-29 18:41 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2016-06-23 01:28 - 2016-03-29 18:40 - 00787456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2016-06-23 01:28 - 2016-03-29 18:39 - 00564224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2016-06-23 01:28 - 2016-03-29 18:39 - 00496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2016-06-23 01:28 - 2016-03-29 18:36 - 03351040 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-06-23 01:28 - 2016-03-29 18:34 - 00682496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2016-06-23 01:28 - 2016-03-29 18:32 - 01588224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-06-23 01:28 - 2016-03-29 18:32 - 00854528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2016-06-23 01:28 - 2016-03-29 18:32 - 00638464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2016-06-23 01:28 - 2016-03-29 18:32 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll
2016-06-23 01:28 - 2016-03-29 18:31 - 01117184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2016-06-23 01:28 - 2016-03-29 18:30 - 01139712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2016-06-23 01:28 - 2016-03-29 18:29 - 00256000 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll
2016-06-23 01:28 - 2016-03-29 18:28 - 01944576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2016-06-23 01:28 - 2016-03-29 18:28 - 00764928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll
2016-06-23 01:28 - 2016-03-29 18:27 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll
2016-06-23 01:28 - 2016-03-29 18:27 - 00162816 _____ C:\Windows\SysWOW64\MTF.dll
2016-06-23 01:28 - 2016-03-29 18:27 - 00133632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2016-06-23 01:28 - 2016-03-29 18:27 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputLocaleManager.dll
2016-06-23 01:28 - 2016-03-29 18:23 - 00777728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2016-06-23 01:28 - 2016-03-29 18:17 - 00765952 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-06-23 01:28 - 2016-03-29 18:13 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2016-06-23 01:28 - 2016-03-29 18:10 - 03671040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-06-23 01:28 - 2016-03-29 18:05 - 01388032 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-06-23 01:28 - 2016-03-29 18:05 - 00361472 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-06-23 01:28 - 2016-03-29 18:04 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-06-23 01:28 - 2016-03-29 18:01 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-06-23 01:28 - 2016-03-29 17:45 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\ncbservice.dll
2016-06-23 01:28 - 2016-03-29 17:43 - 00521728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2016-06-23 01:28 - 2016-03-29 17:35 - 00821248 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2016-06-23 01:28 - 2016-03-29 17:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2016-06-23 01:28 - 2016-03-29 17:27 - 00794112 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-06-23 01:28 - 2016-03-29 17:26 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-06-23 01:28 - 2016-03-29 17:25 - 00712704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
2016-06-23 01:28 - 2016-03-29 17:25 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-06-23 01:28 - 2016-03-29 17:21 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-06-23 01:28 - 2016-02-24 20:54 - 00127840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-06-23 01:28 - 2016-02-24 20:39 - 00141560 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2016-06-23 01:28 - 2016-02-24 20:11 - 00258280 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2016-06-23 01:28 - 2016-02-24 20:09 - 00147808 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2016-06-23 01:28 - 2016-02-24 19:39 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTypeHelperUtil.dll
2016-06-23 01:28 - 2016-02-24 19:39 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\ExtrasXmlParser.dll
2016-06-23 01:28 - 2016-02-24 19:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2016-06-23 01:28 - 2016-02-24 19:37 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\UserDataLanguageUtil.dll
2016-06-23 01:28 - 2016-02-24 19:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenanceClient.dll
2016-06-23 01:28 - 2016-02-24 19:35 - 00220064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll
2016-06-23 01:28 - 2016-02-24 19:33 - 00141664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2016-06-23 01:28 - 2016-02-24 19:30 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll
2016-06-23 01:28 - 2016-02-24 19:28 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\POSyncServices.dll
2016-06-23 01:28 - 2016-02-24 19:23 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-06-23 01:28 - 2016-02-24 19:23 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UserDataPlatformHelperUtil.dll
2016-06-23 01:28 - 2016-02-24 19:22 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll
2016-06-23 01:28 - 2016-02-24 19:20 - 00195072 _____ (Microsoft Corporation) C:\Windows\system32\VCardParser.dll
2016-06-23 01:28 - 2016-02-24 19:19 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2016-06-23 01:28 - 2016-02-24 19:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-06-23 01:28 - 2016-02-24 19:14 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\ExSMime.dll
2016-06-23 01:28 - 2016-02-24 19:13 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentActivation.dll
2016-06-23 01:28 - 2016-02-24 19:12 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\cemapi.dll
2016-06-23 01:28 - 2016-02-24 19:12 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll
2016-06-23 01:28 - 2016-02-24 19:10 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2016-06-23 01:28 - 2016-02-24 19:09 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2016-06-23 01:28 - 2016-02-24 19:09 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll
2016-06-23 01:28 - 2016-02-24 19:07 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll
2016-06-23 01:28 - 2016-02-24 19:02 - 00161280 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll
2016-06-23 01:28 - 2016-02-24 19:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2016-06-23 01:28 - 2016-02-24 19:01 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\profext.dll
2016-06-23 01:28 - 2016-02-24 19:00 - 00214528 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2016-06-23 01:28 - 2016-02-24 18:59 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2016-06-23 01:28 - 2016-02-24 18:58 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\scapi.dll
2016-06-23 01:28 - 2016-02-24 18:55 - 00790528 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2016-06-23 01:28 - 2016-02-24 18:55 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll
2016-06-23 01:28 - 2016-02-24 18:55 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExtrasXmlParser.dll
2016-06-23 01:28 - 2016-02-24 18:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2016-06-23 01:28 - 2016-02-24 18:54 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
2016-06-23 01:28 - 2016-02-24 18:54 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2016-06-23 01:28 - 2016-02-24 18:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTypeHelperUtil.dll
2016-06-23 01:28 - 2016-02-24 18:53 - 00089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2016-06-23 01:28 - 2016-02-24 18:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataLanguageUtil.dll
2016-06-23 01:28 - 2016-02-24 18:52 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2016-06-23 01:28 - 2016-02-24 18:52 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PimIndexMaintenanceClient.dll
2016-06-23 01:28 - 2016-02-24 18:49 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2016-06-23 01:28 - 2016-02-24 18:46 - 00020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll
2016-06-23 01:28 - 2016-02-24 18:44 - 00915456 _____ (Microsoft Corporation) C:\Windows\system32\configurationclient.dll
2016-06-23 01:28 - 2016-02-24 18:44 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\POSyncServices.dll
2016-06-23 01:28 - 2016-02-24 18:40 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-06-23 01:28 - 2016-02-24 18:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataPlatformHelperUtil.dll
2016-06-23 01:28 - 2016-02-24 18:39 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll
2016-06-23 01:28 - 2016-02-24 18:38 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VCardParser.dll
2016-06-23 01:28 - 2016-02-24 18:36 - 01847808 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2016-06-23 01:28 - 2016-02-24 18:32 - 00223744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExSMime.dll
2016-06-23 01:28 - 2016-02-24 18:32 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentActivation.dll
2016-06-23 01:28 - 2016-02-24 18:31 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cemapi.dll
2016-06-23 01:28 - 2016-02-24 18:31 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll
2016-06-23 01:28 - 2016-02-24 18:28 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2016-06-23 01:28 - 2016-02-24 18:28 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll
2016-06-23 01:28 - 2016-02-24 18:25 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2016-06-23 01:28 - 2016-02-24 18:23 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll
2016-06-23 01:28 - 2016-02-24 18:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\profext.dll
2016-06-23 01:28 - 2016-02-24 18:21 - 00168448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2016-06-23 01:28 - 2016-02-24 18:18 - 00575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
2016-06-23 01:28 - 2016-02-24 18:18 - 00184832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll
2016-06-23 01:28 - 2016-02-24 18:17 - 00369664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2016-06-23 01:28 - 2016-02-24 18:16 - 00394752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2016-06-23 01:28 - 2016-02-24 18:13 - 00540160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll
2016-06-23 01:28 - 2016-02-24 18:09 - 00228352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2016-06-23 01:28 - 2016-02-24 17:43 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\fwbase.dll
2016-06-23 01:28 - 2016-02-24 17:22 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwbase.dll
2016-06-23 01:28 - 2016-02-23 23:25 - 00563552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2016-06-23 01:28 - 2016-02-23 23:15 - 00779384 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2016-06-23 01:28 - 2016-02-23 22:31 - 00476728 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2016-06-23 01:28 - 2016-02-23 22:31 - 00408120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-06-23 01:28 - 2016-02-23 22:17 - 00146272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-06-23 01:28 - 2016-02-23 21:40 - 00430944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-06-23 01:28 - 2016-02-23 21:38 - 00420928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2016-06-23 01:28 - 2016-02-23 21:20 - 00238592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2016-06-23 01:28 - 2016-02-23 21:12 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\provpackageapidll.dll
2016-06-23 01:28 - 2016-02-23 21:10 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
2016-06-23 01:28 - 2016-02-23 21:07 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-06-23 01:28 - 2016-02-23 21:07 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2016-06-23 01:28 - 2016-02-23 21:06 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\flvprophandler.dll
2016-06-23 01:28 - 2016-02-23 21:01 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys
2016-06-23 01:28 - 2016-02-23 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2016-06-23 01:28 - 2016-02-23 20:58 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\irmon.dll
2016-06-23 01:28 - 2016-02-23 20:55 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2016-06-23 01:28 - 2016-02-23 20:53 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\srpapi.dll
2016-06-23 01:28 - 2016-02-23 20:53 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll
2016-06-23 01:28 - 2016-02-23 20:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\TimeBrokerClient.dll
2016-06-23 01:28 - 2016-02-23 20:40 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SMSRouter.dll
2016-06-23 01:28 - 2016-02-23 20:39 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2016-06-23 01:28 - 2016-02-23 20:38 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\MSFlacDecoder.dll
2016-06-23 01:28 - 2016-02-23 20:37 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2016-06-23 01:28 - 2016-02-23 20:34 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\wifiprofilessettinghandler.dll
2016-06-23 01:28 - 2016-02-23 20:34 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2016-06-23 01:28 - 2016-02-23 20:28 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-06-23 01:28 - 2016-02-23 20:23 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-06-23 01:28 - 2016-02-23 20:19 - 00517632 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2016-06-23 01:28 - 2016-02-23 20:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2016-06-23 01:28 - 2016-02-23 19:57 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TimeBrokerClient.dll
2016-06-23 01:28 - 2016-02-23 19:52 - 00456704 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2016-06-23 01:28 - 2016-02-23 19:50 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSFlacDecoder.dll
2016-06-23 01:28 - 2016-02-23 19:49 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2016-06-23 01:28 - 2016-02-23 19:47 - 00157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WiFiDisplay.dll
2016-06-23 01:28 - 2016-02-23 19:35 - 00400896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2016-06-23 01:28 - 2016-02-09 15:18 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2016-06-23 01:28 - 2016-02-09 15:18 - 00237056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2016-06-23 01:28 - 2016-01-27 17:59 - 00304752 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2016-06-23 01:28 - 2016-01-27 17:55 - 00081112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpenWith.exe
2016-06-23 01:28 - 2016-01-27 17:44 - 00085320 _____ (Microsoft Corporation) C:\Windows\system32\OpenWith.exe
2016-06-23 01:28 - 2016-01-27 17:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ztrace_maps.dll
2016-06-23 01:28 - 2016-01-27 17:10 - 00099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2016-06-23 01:28 - 2016-01-27 17:08 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-06-23 01:28 - 2016-01-27 17:08 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\ztrace_maps.dll
2016-06-23 01:28 - 2016-01-27 17:07 - 00203264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iassam.dll
2016-06-23 01:28 - 2016-01-27 17:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2016-06-23 01:28 - 2016-01-27 16:59 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\iassam.dll
2016-06-23 01:28 - 2016-01-27 16:50 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-06-23 01:28 - 2016-01-27 16:44 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgbkend.dll
2016-06-23 01:28 - 2016-01-27 16:32 - 01087488 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-06-23 01:28 - 2016-01-27 16:31 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\cfgbkend.dll
2016-06-23 01:28 - 2016-01-16 18:37 - 00202472 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-06-23 01:28 - 2016-01-16 18:24 - 00538632 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
2016-06-23 01:28 - 2016-01-16 18:20 - 00431240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll
2016-06-23 01:28 - 2016-01-16 18:20 - 00366224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-06-23 01:28 - 2016-01-16 17:44 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\rasadhlp.dll
2016-06-23 01:28 - 2016-01-16 17:44 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\rastlsext.dll
2016-06-23 01:28 - 2016-01-16 17:43 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\winhttpcom.dll
2016-06-23 01:28 - 2016-01-16 17:42 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\sscoreext.dll
2016-06-23 01:28 - 2016-01-16 17:41 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2016-06-23 01:28 - 2016-01-16 17:40 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\rasauto.dll
2016-06-23 01:28 - 2016-01-16 17:40 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe
2016-06-23 01:28 - 2016-01-16 17:40 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\rasautou.exe
2016-06-23 01:28 - 2016-01-16 17:39 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\FilterDS.dll
2016-06-23 01:28 - 2016-01-16 17:38 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\SimCfg.dll
2016-06-23 01:28 - 2016-01-16 17:38 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\winbio.dll
2016-06-23 01:28 - 2016-01-16 17:36 - 00475648 _____ (Microsoft Corporation) C:\Windows\system32\DDDS.dll
2016-06-23 01:28 - 2016-01-16 17:36 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-06-23 01:28 - 2016-01-16 17:36 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\SimAuth.dll
2016-06-23 01:28 - 2016-01-16 17:36 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastlsext.dll
2016-06-23 01:28 - 2016-01-16 17:35 - 00383488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-06-23 01:28 - 2016-01-16 17:35 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasadhlp.dll
2016-06-23 01:28 - 2016-01-16 17:34 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-06-23 01:28 - 2016-01-16 17:34 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttpcom.dll
2016-06-23 01:28 - 2016-01-16 17:33 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2016-06-23 01:28 - 2016-01-16 17:33 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-06-23 01:28 - 2016-01-16 17:32 - 00621568 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2016-06-23 01:28 - 2016-01-16 17:32 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe
2016-06-23 01:28 - 2016-01-16 17:31 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasautou.exe
2016-06-23 01:28 - 2016-01-16 17:30 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SimCfg.dll
2016-06-23 01:28 - 2016-01-16 17:30 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winbio.dll
2016-06-23 01:28 - 2016-01-16 17:28 - 00884736 _____ (Microsoft Corporation) C:\Windows\system32\rasdlg.dll
2016-06-23 01:28 - 2016-01-16 17:28 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SimAuth.dll
2016-06-23 01:28 - 2016-01-16 17:27 - 00335872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-06-23 01:28 - 2016-01-16 17:25 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2016-06-23 01:28 - 2016-01-16 17:23 - 02050048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-06-23 01:28 - 2016-01-16 17:20 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdlg.dll
2016-06-23 01:28 - 2016-01-16 17:19 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2016-06-23 01:28 - 2016-01-16 17:11 - 00653312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2016-06-23 01:28 - 2016-01-05 14:50 - 00671472 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-06-23 01:28 - 2016-01-05 14:48 - 00499432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-06-23 01:28 - 2016-01-05 14:37 - 00245840 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-06-23 01:28 - 2016-01-05 14:37 - 00234504 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2016-06-23 01:28 - 2016-01-05 14:33 - 00208176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2016-06-23 01:28 - 2016-01-05 14:33 - 00116728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-06-23 01:28 - 2016-01-05 14:23 - 01804664 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-06-23 01:28 - 2016-01-05 14:23 - 00119320 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-06-23 01:28 - 2016-01-05 14:16 - 00100160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-06-23 01:28 - 2016-01-05 13:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\RMSRoamingSecurity.dll
2016-06-23 01:28 - 2016-01-05 13:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\usermgrcli.dll
2016-06-23 01:28 - 2016-01-05 13:53 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-06-23 01:28 - 2016-01-05 13:51 - 00472576 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2016-06-23 01:28 - 2016-01-05 13:51 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2016-06-23 01:28 - 2016-01-05 13:50 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2016-06-23 01:28 - 2016-01-05 13:49 - 01582080 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-06-23 01:28 - 2016-01-05 13:49 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-06-23 01:28 - 2016-01-05 13:49 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\ProximityCommon.dll
2016-06-23 01:28 - 2016-01-05 13:48 - 00387072 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-06-23 01:28 - 2016-01-05 13:48 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usermgrcli.dll
2016-06-23 01:28 - 2016-01-05 13:47 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-06-23 01:28 - 2016-01-05 13:45 - 00678912 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-06-23 01:28 - 2016-01-05 13:44 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2016-06-23 01:28 - 2016-01-05 13:42 - 00166912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
2016-06-23 01:28 - 2016-01-05 13:41 - 01070080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-06-23 01:28 - 2016-01-05 13:41 - 00558592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2016-06-23 01:28 - 2016-01-05 13:40 - 00890880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-06-23 01:28 - 2016-01-05 13:40 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ProximityCommon.dll
2016-06-23 01:28 - 2016-01-05 13:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-06-23 01:28 - 2016-01-05 13:36 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-06-23 01:28 - 2015-12-07 16:45 - 00264544 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2016-06-23 01:28 - 2015-12-07 16:15 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.XboxLive.ProxyStub.dll
2016-06-23 01:28 - 2015-12-07 16:09 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\StorageUsage.dll
2016-06-23 01:28 - 2015-12-07 16:07 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
2016-06-23 01:28 - 2015-12-07 16:06 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2016-06-23 01:28 - 2015-12-07 16:05 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\BackgroundTransferHost.exe
2016-06-23 01:28 - 2015-12-07 16:04 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2016-06-23 01:28 - 2015-12-07 16:01 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BackgroundTransferHost.exe
2016-06-23 01:28 - 2015-12-07 15:59 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2016-06-23 01:28 - 2015-12-07 15:43 - 00931328 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-06-23 01:28 - 2015-12-07 15:38 - 00871936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2016-06-23 01:28 - 2015-12-07 15:32 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll
2016-06-23 01:28 - 2015-11-24 22:01 - 02756096 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-06-23 01:28 - 2015-11-24 21:54 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\readingviewresources.dll
2016-06-23 01:28 - 2015-11-24 21:53 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-06-23 01:28 - 2015-11-24 21:45 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-06-23 01:28 - 2015-11-24 21:37 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-06-23 01:28 - 2015-11-24 21:19 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2016-06-23 01:28 - 2015-11-24 21:12 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-06-23 01:28 - 2015-11-24 20:54 - 02756096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-06-23 01:28 - 2015-11-24 20:14 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-06-23 01:28 - 2015-11-22 22:34 - 00080600 _____ (Microsoft Corporation) C:\Windows\system32\wwapi.dll
2016-06-23 01:28 - 2015-11-22 22:33 - 00095072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdstor.sys
2016-06-23 01:28 - 2015-11-22 22:33 - 00051680 _____ (Microsoft Corporation) C:\Windows\system32\SensorsUtilsV2.dll
2016-06-23 01:28 - 2015-11-22 22:25 - 00063528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wwapi.dll
2016-06-23 01:28 - 2015-11-22 22:00 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\MosResource.dll
2016-06-23 01:28 - 2015-11-22 21:57 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MapControls.dll
2016-06-23 01:28 - 2015-11-22 21:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCoreRes.dll
2016-06-23 01:28 - 2015-11-22 21:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosTrace.dll
2016-06-23 01:28 - 2015-11-22 21:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-MosHost.dll
2016-06-23 01:28 - 2015-11-22 21:56 - 01268736 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2016-06-23 01:28 - 2015-11-22 21:56 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\ihvrilproxy.dll
2016-06-23 01:28 - 2015-11-22 21:56 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rilproxy.dll
2016-06-23 01:28 - 2015-11-22 21:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManagerProxy.dll
2016-06-23 01:28 - 2015-11-22 21:55 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvcProxy.dll
2016-06-23 01:28 - 2015-11-22 21:54 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\capimg.sys
2016-06-23 01:28 - 2015-11-22 21:54 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-06-23 01:28 - 2015-11-22 21:54 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\wsplib.dll
2016-06-23 01:28 - 2015-11-22 21:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-06-23 01:28 - 2015-11-22 21:54 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
2016-06-23 01:28 - 2015-11-22 21:54 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\nativemap.dll
2016-06-23 01:28 - 2015-11-22 21:54 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\MapControlStringsRes.dll
2016-06-23 01:28 - 2015-11-22 21:52 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthTokenBrokerExt.dll
2016-06-23 01:28 - 2015-11-22 21:51 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\mapstoasttask.dll
2016-06-23 01:28 - 2015-11-22 21:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-06-23 01:28 - 2015-11-22 21:50 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\mssign32.dll
2016-06-23 01:28 - 2015-11-22 21:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-06-23 01:28 - 2015-11-22 21:49 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Wwanpref.dll
2016-06-23 01:28 - 2015-11-22 21:48 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosResource.dll
2016-06-23 01:28 - 2015-11-22 21:45 - 06572032 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2016-06-23 01:28 - 2015-11-22 21:45 - 00264192 _____ (Nokia) C:\Windows\system32\NmaDirect.dll
2016-06-23 01:28 - 2015-11-22 21:45 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft-Windows-MapControls.dll
2016-06-23 01:28 - 2015-11-22 21:45 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\wwancfg.dll
2016-06-23 01:28 - 2015-11-22 21:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCoreRes.dll
2016-06-23 01:28 - 2015-11-22 21:45 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft-Windows-MosTrace.dll
2016-06-23 01:28 - 2015-11-22 21:45 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft-Windows-MosHost.dll
2016-06-23 01:28 - 2015-11-22 21:44 - 01268736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-06-23 01:28 - 2015-11-22 21:43 - 00704000 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll
2016-06-23 01:28 - 2015-11-22 21:43 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XblAuthManagerProxy.dll
2016-06-23 01:28 - 2015-11-22 21:42 - 00024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WordBreakers.dll
2016-06-23 01:28 - 2015-11-22 21:42 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlStringsRes.dll
2016-06-23 01:28 - 2015-11-22 21:41 - 01814528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2016-06-23 01:28 - 2015-11-22 21:40 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2016-06-23 01:28 - 2015-11-22 21:40 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XblAuthTokenBrokerExt.dll
2016-06-23 01:28 - 2015-11-22 21:39 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2016-06-23 01:28 - 2015-11-22 21:38 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssign32.dll
2016-06-23 01:28 - 2015-11-22 21:34 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
2016-06-23 01:28 - 2015-11-22 21:33 - 00205824 _____ (Nokia) C:\Windows\SysWOW64\NmaDirect.dll
2016-06-23 01:28 - 2015-11-22 21:28 - 00100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinelsa.dll
2016-06-23 01:28 - 2015-11-22 21:24 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EditBufferTestHook.dll
2016-06-23 01:28 - 2015-11-21 17:44 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft-Windows-AppModelExecEvents.dll
2016-06-23 01:28 - 2015-11-13 18:55 - 00035680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wimmount.sys
2016-06-23 01:28 - 2015-11-13 18:51 - 00698208 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2016-06-23 01:28 - 2015-11-13 18:51 - 00523616 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2016-06-23 01:28 - 2015-11-13 18:43 - 00110032 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-06-23 01:28 - 2015-11-13 18:43 - 00035656 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-06-23 01:28 - 2015-11-13 18:42 - 00088392 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
2016-06-23 01:28 - 2015-11-13 18:33 - 00586080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2016-06-23 01:28 - 2015-11-13 18:21 - 00073360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
2016-06-23 01:28 - 2015-11-13 18:21 - 00032040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-06-23 01:28 - 2015-11-13 18:09 - 00675064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2016-06-23 01:28 - 2015-11-13 18:07 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-06-23 01:28 - 2015-11-13 18:06 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2016-06-23 01:28 - 2015-11-13 18:05 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2016-06-23 01:28 - 2015-11-13 18:05 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2016-06-23 01:28 - 2015-11-13 18:05 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.proxy.dll
2016-06-23 01:28 - 2015-11-13 18:05 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\tetheringconfigsp.dll
2016-06-23 01:28 - 2015-11-13 18:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\IcsEntitlementHost.exe
2016-06-23 01:28 - 2015-11-13 18:03 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\tetheringclient.dll
2016-06-23 01:28 - 2015-11-13 17:56 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2016-06-23 01:28 - 2015-11-13 17:40 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.proxy.dll
2016-06-23 01:28 - 2015-11-13 17:34 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppCapture.dll
2016-06-23 01:28 - 2015-11-13 17:30 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2016-06-23 01:28 - 2015-11-06 00:05 - 00118624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-06-23 01:28 - 2015-11-05 22:25 - 00578912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-06-23 01:28 - 2015-11-05 22:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-06-23 01:28 - 2015-11-05 22:08 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-06-23 01:28 - 2015-11-05 21:03 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-06-23 01:28 - 2015-11-05 21:02 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-06-23 01:26 - 2016-06-23 01:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2016-06-23 01:26 - 2016-06-23 01:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2016-06-23 01:26 - 2016-06-23 01:26 - 00000000 ____D C:\Program Files\Synaptics
2016-06-23 01:26 - 2016-05-27 15:42 - 00079984 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2016-06-23 01:20 - 2016-06-23 01:20 - 00000000 ____D C:\Program Files (x86)\HP
2016-06-11 05:11 - 2016-06-22 20:49 - 00000000 ____D C:\W_____ndows.old.er
2016-06-10 04:48 - 2016-06-10 04:48 - 00635120 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll
2016-06-10 04:48 - 2016-06-10 04:48 - 00390408 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll
2016-06-10 04:48 - 2016-06-10 04:48 - 00333080 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll
2016-06-10 04:48 - 2016-06-10 04:48 - 00088816 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll
2016-06-10 03:07 - 2016-06-10 03:07 - 00439536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp140.dll
2016-06-10 03:07 - 2016-06-10 03:07 - 00267008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vccorlib140.dll
2016-06-10 03:07 - 2016-06-10 03:07 - 00243480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\concrt140.dll
2016-06-10 03:07 - 2016-06-10 03:07 - 00085232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcruntime140.dll
2016-06-08 05:55 - 2016-06-08 05:55 - 00000000 _SHDL C:\Documents and Settings
2016-06-07 19:20 - 2016-06-07 19:20 - 00001123 _____ C:\5.txt
2016-06-07 15:54 - 2016-06-07 15:54 - 00000478 _____ C:\4.txt
2016-06-07 15:54 - 2016-06-07 15:54 - 00000478 _____ C:\3.txt
2016-06-07 15:54 - 2016-06-07 15:54 - 00000478 _____ C:\2.txt
2016-06-07 15:54 - 2016-06-07 15:54 - 00000478 _____ C:\1.txt
2016-06-07 11:15 - 2016-06-07 11:15 - 00000000 ____D C:\Intel

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-07-04 22:27 - 2015-10-30 19:21 - 00000000 ____D C:\Windows\INF
2016-07-04 22:22 - 2015-10-30 18:28 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-07-04 22:17 - 2009-08-13 11:14 - 00472064 _____ ( ) C:\Users\a\Documents\RootRepeal.exe
2016-07-04 21:13 - 2015-10-30 19:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-07-04 21:13 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\AppReadiness
2016-07-04 20:23 - 2015-10-30 19:11 - 00000000 ____D C:\Windows\CbsTemp
2016-07-04 20:14 - 2015-10-30 19:24 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-07-04 20:14 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\SysWOW64\setup
2016-07-04 20:14 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\system32\WinMetadata
2016-07-04 20:14 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2016-07-04 20:14 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\Provisioning
2016-07-04 20:14 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-07-04 20:14 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\L2Schemas
2016-07-04 20:14 - 2015-10-30 18:28 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-07-04 20:14 - 2015-10-30 18:28 - 00000000 ____D C:\Windows\system32\Sysprep
2016-07-04 20:14 - 2015-10-30 18:28 - 00000000 ____D C:\Windows\system32\Dism
2016-07-04 20:13 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\SysWOW64\MUI
2016-07-04 20:13 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\system32\MUI
2016-07-04 20:13 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\system32\catroot2.old
2016-07-04 20:13 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\registration
2016-07-04 20:12 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\appcompat
2016-07-04 20:12 - 2015-10-30 19:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-06-23 20:59 - 2015-10-30 19:24 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-06-23 20:12 - 2015-10-30 19:24 - 00000000 ___RD C:\Windows\PrintDialog
2016-06-23 20:12 - 2015-10-30 19:24 - 00000000 ___RD C:\Windows\MiracastView
2016-06-23 20:12 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2016-06-23 20:07 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\system32\spool
2016-06-23 20:06 - 2015-10-30 19:24 - 00000000 ____D C:\ProgramData\USOPrivate
2016-06-23 20:05 - 2015-10-30 18:28 - 00032768 ___SH C:\Windows\system32\config\ELAM
2016-06-23 20:02 - 2015-10-30 21:13 - 00000000 ____D C:\Windows\ServiceProfiles
2016-06-23 16:10 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\rescache
2016-06-23 09:11 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\system32\setup
2016-06-23 09:02 - 2015-10-30 21:07 - 00000000 ____D C:\Program Files\Windows Journal
2016-06-23 09:02 - 2015-10-30 19:24 - 00000000 __RSD C:\Windows\Media
2016-06-23 09:02 - 2015-10-30 19:24 - 00000000 ___SD C:\Windows\system32\F12
2016-06-23 09:02 - 2015-10-30 19:24 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2016-06-23 09:02 - 2015-10-30 19:24 - 00000000 ___RD C:\Windows\PurchaseDialog
2016-06-23 09:02 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-06-23 09:02 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\system32\oobe
2016-06-23 09:02 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\system32\appraiser
2016-06-23 09:02 - 2015-10-30 19:24 - 00000000 ____D C:\Windows\bcastdvr
2016-06-23 09:02 - 2015-10-30 19:24 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-06-23 09:02 - 2015-10-30 19:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-06-23 09:02 - 2015-10-30 19:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-06-23 09:02 - 2015-10-30 19:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-06-23 09:01 - 2015-10-30 19:24 - 00015703 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2016-06-23 08:46 - 2015-10-30 19:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-06-23 08:36 - 2015-10-30 19:24 - 00000000 ___HD C:\Windows\ELAMBKUP
2016-06-23 01:28 - 2015-10-30 19:24 - 00000000 ___RD C:\Windows\DevicesFlow
2016-06-15 06:33 - 2015-10-30 19:26 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-06-15 06:33 - 2015-10-30 19:26 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-07-04 09:35

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-07-2016
Ran by a (2016-07-04 23:15:55)
Running from C:\Users\a\Desktop
Windows 10 Home Version 1511 (X64) (2016-06-23 08:11:26)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

a (S-1-5-21-837244246-4178595089-1212456505-1001 - Administrator - Enabled) => C:\Users\a
Administrator (S-1-5-21-837244246-4178595089-1212456505-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-837244246-4178595089-1212456505-503 - Limited - Disabled)
Guest (S-1-5-21-837244246-4178595089-1212456505-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET NOD32 Antivirus 10.0.169.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 10.0.169.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{0F347A49-E36C-4639-8D2E-003AD408B8B2}) (Version: 1.5 - Eyeo GmbH)
ESET NOD32 Antivirus (HKLM\...\{A8D0BAAA-AF67-4142-B367-BF47E6A29560}) (Version: 10.0.169.0 - ESET, spol. s r.o.)
Ghostery (HKLM-x32\...\Ghostery) (Version:  - Ghostery Inc)
HP Control Zone (HKLM\...\SynTPDeinstKey) (Version: 19.2.4.0 - Synaptics Incorporated)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4248 - Intel Corporation)
Microsoft Office 365 Business - en-us (HKLM\...\O365BusinessRetail - en-us) (Version: 16.0.6965.2058 - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6925.1018 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6925.1018 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6925.1018 - Microsoft Corporation) Hidden
Revo Uninstaller Pro 3.1.6 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.6 - VS Revo Group, Ltd.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-837244246-4178595089-1212456505-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\a\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {603D88E9-9A2E-4CB5-B388-EF03F583C302} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-06-23] (Microsoft Corporation)
Task: {6D673923-B130-4A17-A1BB-F5ACCBD8535D} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-06-10] (Microsoft Corporation)
Task: {C4DA0602-61EF-4ACF-9287-C6981E981751} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-06-10] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-10-30 19:18 - 2015-10-30 19:18 - 00185856 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-06-23 01:29 - 2016-03-29 22:20 - 02656952 _____ () C:\Windows\system32\CoreUIComponents.dll
2015-07-25 10:12 - 2015-07-25 10:12 - 00404912 _____ () C:\Windows\system32\igfxTray.exe
2016-06-23 01:29 - 2016-03-29 22:20 - 02656952 _____ () C:\Windows\System32\CoreUIComponents.dll
2016-06-23 08:38 - 2016-06-23 08:38 - 08919752 _____ () C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\1033\GrooveIntlResource.dll
2016-06-23 01:28 - 2015-12-07 16:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-06-23 01:29 - 2016-04-23 16:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-06-23 01:29 - 2016-05-28 15:59 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-06-23 01:28 - 2016-05-28 15:53 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-06-23 01:29 - 2016-05-28 15:54 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-06-23 01:29 - 2016-05-28 15:56 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-07-04 21:57 - 2016-07-04 21:57 - 00852798 _____ () C:\Users\a\Downloads\SecurityCheck.exe
2016-06-23 08:38 - 2016-06-23 08:38 - 08919752 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\1033\GrooveIntlResource.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows:nlsPreferences [386]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\16713434.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\16713434.sys => ""="Driver"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-10-30 19:24 - 2015-10-30 19:21 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-837244246-4178595089-1212456505-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\a\Desktop\Untitled.png
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Restore Points =========================

23-06-2016 17:39:14 Installed Nitro Pro 10
04-07-2016 09:11:15 Windows Modules Installer
04-07-2016 20:11:21 Restore Operation

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (07/04/2016 10:23:19 PM) (Source: Windows Search Service) (EventID: 3030) (User: )
Description: The gatherer service cannot be initialized.

Details:
 The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder.  (HRESULT : 0x80070660) (0x80070660)

Error: (07/04/2016 10:21:24 PM) (Source: Windows Search Service) (EventID: 3030) (User: )
Description: The gatherer service cannot be initialized.

Details:
 The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder.  (HRESULT : 0x80070660) (0x80070660)

Error: (07/04/2016 10:04:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: SystemSettings.exe, version: 10.0.10586.11, time stamp: 0x56457cb1
Faulting module name: Windows.UI.Xaml.dll, version: 10.0.10586.306, time stamp: 0x571af9f6
Exception code: 0xc000027b
Fault offset: 0x00000000006fcd2b
Faulting process id: 0x12c8
Faulting application start time: 0xSystemSettings.exe0
Faulting application path: SystemSettings.exe1
Faulting module path: SystemSettings.exe2
Report Id: SystemSettings.exe3
Faulting package full name: SystemSettings.exe4
Faulting package-relative application ID: SystemSettings.exe5

Error: (07/04/2016 10:03:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: MicrosoftEdge.exe, version: 11.0.10586.420, time stamp: 0x57491bcb
Faulting module name: iertutil.dll, version: 11.0.10586.420, time stamp: 0x574916a8
Exception code: 0xc0000409
Fault offset: 0x000000000006d7a4
Faulting process id: 0xf00
Faulting application start time: 0xMicrosoftEdge.exe0
Faulting application path: MicrosoftEdge.exe1
Faulting module path: MicrosoftEdge.exe2
Report Id: MicrosoftEdge.exe3
Faulting package full name: MicrosoftEdge.exe4
Faulting package-relative application ID: MicrosoftEdge.exe5

Error: (07/04/2016 10:03:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: SystemSettings.exe, version: 10.0.10586.11, time stamp: 0x56457cb1
Faulting module name: Windows.UI.Xaml.dll, version: 10.0.10586.306, time stamp: 0x571af9f6
Exception code: 0xc000027b
Fault offset: 0x00000000006fcd2b
Faulting process id: 0x1444
Faulting application start time: 0xSystemSettings.exe0
Faulting application path: SystemSettings.exe1
Faulting module path: SystemSettings.exe2
Report Id: SystemSettings.exe3
Faulting package full name: SystemSettings.exe4
Faulting package-relative application ID: SystemSettings.exe5

Error: (07/04/2016 10:03:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: MicrosoftEdge.exe, version: 11.0.10586.420, time stamp: 0x57491bcb
Faulting module name: iertutil.dll, version: 11.0.10586.420, time stamp: 0x574916a8
Exception code: 0xc0000409
Fault offset: 0x000000000006d7a4
Faulting process id: 0x434
Faulting application start time: 0xMicrosoftEdge.exe0
Faulting application path: MicrosoftEdge.exe1
Faulting module path: MicrosoftEdge.exe2
Report Id: MicrosoftEdge.exe3
Faulting package full name: MicrosoftEdge.exe4
Faulting package-relative application ID: MicrosoftEdge.exe5

Error: (07/04/2016 10:03:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: MicrosoftEdge.exe, version: 11.0.10586.420, time stamp: 0x57491bcb
Faulting module name: iertutil.dll, version: 11.0.10586.420, time stamp: 0x574916a8
Exception code: 0xc0000409
Fault offset: 0x000000000006d7a4
Faulting process id: 0x11a4
Faulting application start time: 0xMicrosoftEdge.exe0
Faulting application path: MicrosoftEdge.exe1
Faulting module path: MicrosoftEdge.exe2
Report Id: MicrosoftEdge.exe3
Faulting package full name: MicrosoftEdge.exe4
Faulting package-relative application ID: MicrosoftEdge.exe5

Error: (07/04/2016 10:01:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program iexplore.exe version 11.0.10586.420 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 940

Start Time: 01d1d5d4b34ca52e

Termination Time: 35

Application Path: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Report Id: 3717df83-41ce-11e6-97ab-5c514f4a71e8

Faulting package full name:

Faulting package-relative application ID:

Error: (07/04/2016 08:59:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: AS)
Description: Activation of app Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (07/04/2016 08:59:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: AS)
Description: Activation of app Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.

System errors:
=============
Error: (07/04/2016 10:25:08 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {DDCFD26B-FEED-44CD-B71D-79487D2E5E5A}

Error: (07/04/2016 10:22:59 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 54) (User: NT AUTHORITY)
Description: Collaborative processor power controls on processor 3 in group 0 are disabled due to a firmware problem. Check with the computer manufacturer for updated firmware.

Error: (07/04/2016 10:22:59 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 54) (User: NT AUTHORITY)
Description: Collaborative processor power controls on processor 1 in group 0 are disabled due to a firmware problem. Check with the computer manufacturer for updated firmware.

Error: (07/04/2016 10:22:36 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

Error: (07/04/2016 10:21:08 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 54) (User: NT AUTHORITY)
Description: Collaborative processor power controls on processor 3 in group 0 are disabled due to a firmware problem. Check with the computer manufacturer for updated firmware.

Error: (07/04/2016 10:21:08 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 54) (User: NT AUTHORITY)
Description: Collaborative processor power controls on processor 1 in group 0 are disabled due to a firmware problem. Check with the computer manufacturer for updated firmware.

Error: (07/04/2016 10:20:52 PM) (Source: DCOM) (EventID: 10010) (User: AS)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (07/04/2016 10:20:52 PM) (Source: DCOM) (EventID: 10010) (User: AS)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (07/04/2016 10:20:52 PM) (Source: DCOM) (EventID: 10010) (User: AS)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (07/04/2016 10:20:50 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The User Data Access_3a0d0 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

CodeIntegrity:
===================================
  Date: 2016-07-04 22:23:09.753
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-07-04 22:23:09.746
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-07-04 22:23:09.740
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\ESET\ESET NOD32 Antivirus\Drivers\eelam\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-07-04 22:23:09.731
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\ESET\ESET NOD32 Antivirus\Drivers\eelam\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-07-04 22:21:16.621
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-07-04 22:21:16.614
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-07-04 22:21:16.608
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\ESET\ESET NOD32 Antivirus\Drivers\eelam\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-07-04 22:21:16.601
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\ESET\ESET NOD32 Antivirus\Drivers\eelam\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-07-04 20:36:08.192
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-04 20:16:36.328
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Intel® Core™ i7-4500U CPU @ 1.80GHz
Percentage of memory in use: 39%
Total physical RAM: 8124.27 MB
Available physical RAM: 4909.88 MB
Total Virtual: 9404.27 MB
Available Virtual: 6019.96 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:237.92 GB) (Free:176.26 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 1A4EE46E)

Partition: GPT.

==================== End of Addition.txt ============================

 


  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP

Get the free version of Speccy:
 
http://www.filehippo...download_speccy (Look in the upper right for the Download
Latest Version button  - Do NOT press the large Start Download button on the upper left!)  
Download, Save and Install it.  Tell it you do not need CCLEANER.    Run Speccy.  When it finishes (the little icon in the bottom left will stop moving), 
File, Save as Text File,  (to your desktop) note the name it gives. OK.  Open the file in notepad and delete the line that gives the serial number of your Operating System.  
(It will be near the top about 10 lines down.) Save the file.  Attach the file to your next post.  (More Reply Options, Choose File, Open, Attach This File)
 
 
 

Download aswMBR.exe  to your desktop.
Right click on aswMBR.exe and Run As ADmin
uncheck trace disk IO calls
Change the Quickscan to C:\
 (Allow the Avast engine download if asked) Click the "Scan" button to start scan
On completion of the scan (Note if the Fix button is enabled (not the FixMBR button) and tell me) click save log, save it to your desktop and post in your next reply
 
 

Get Process Explorer
 
Save it to your desktop then run it (Vista or Win7 - right click and Run As Administrator).  
 
View, Select Column, check Verified Signer, OK
Options, Verify Image Signatures
 
 
Click twice on the CPU column header  to sort things by CPU usage with the big hitters at the top.  
 
Wait a full minute then:
 
File, Save As, Save.  Note the file name.   Open the file  on your desktop and copy and paste the text to a reply.
 
 
 

  • 0






Similar Topics


Also tagged with one or more of these keywords: Upatre, Zeus, Kryptik, Red Pill Virtualisation, Spoofing, Sophisticated Attack

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP