Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

High Memory RAM usage


  • Please log in to reply

#1
ssimm1958

ssimm1958

    New Member

  • Member
  • Pip
  • 3 posts

Hi am new to this forum and hope this post is in correct place, but I run a little RAM Memory monitor and have been running around 40 to 50 percent memory usage have 24 gig of ram installed am in to flight simulation and need a good bit of ram to run the new 64 bit simulators, but booted up the other day and all of a sudden am running at 75 to 80 percent ram usage so suspect have picked up some kind of infection, am running vipre anti virus and have been well satisfied with it, but have ran several deep scans and it doesn't seem to find any problems.. Have noticed in task manager in processes tab that a exe file associated with my anti virus (SBAMSvc.exe)is running a big chunk of the ram usage 45 to 50 percent where was not really showing up before ,noticing this problem, as a ram major user so any help detecting the problem and correcting to bring my ram usage down will be greatly appreciated. am not to at depth in troubleshooting computer problems 

 

Steve S

ssimm1958

 

 

 

should I create a ol timer  scan of my system and post it here first?

 

ok did a ol timer scan of my system Posting below:

 

OTL logfile created on: 5/25/2017 10:53:19 AM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = G:\#-utilities\#-COMPUTER MAINT\old timer list  it
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.10586.0)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
23.91 Gb Total Physical Memory | 5.90 Gb Available Physical Memory | 24.66% Memory free
27.41 Gb Paging File | 7.19 Gb Available in Paging File | 26.22% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 250.16 Gb Total Space | 130.26 Gb Free Space | 52.07% Space Free | Partition Type: NTFS
Drive D: | 664.63 Gb Total Space | 424.39 Gb Free Space | 63.85% Space Free | Partition Type: NTFS
Drive E: | 3725.90 Gb Total Space | 1057.88 Gb Free Space | 28.39% Space Free | Partition Type: NTFS
Drive F: | 1397.26 Gb Total Space | 552.72 Gb Free Space | 39.56% Space Free | Partition Type: NTFS
Drive G: | 152.66 Gb Total Space | 50.89 Gb Free Space | 33.33% Space Free | Partition Type: NTFS
Drive I: | 7.10 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive J: | 3725.99 Gb Total Space | 546.77 Gb Free Space | 14.67% Space Free | Partition Type: NTFS
Drive K: | 5.57 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive L: | 7.62 Gb Total Space | 6.92 Gb Free Space | 90.77% Space Free | Partition Type: FAT32
 
Computer Name: STEVES-DT-PC-01 | User Name: steve | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days
 
========== Processes (SafeList) ==========
 
PRC - File not found -- 
PRC - [2017/05/24 18:50:59 | 000,602,112 | ---- | M] (OldTimer Tools) -- G:\#-utilities\#-COMPUTER MAINT\old timer list  it\OTL.exe
PRC - [2017/05/18 02:35:05 | 000,449,984 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
PRC - [2017/05/10 13:49:50 | 002,712,384 | ---- | M] (WiseCleaner.com) -- J:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe
PRC - [2017/05/03 15:21:22 | 000,450,168 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
PRC - [2017/05/03 15:21:19 | 015,553,656 | ---- | M] (Node.js) -- C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
PRC - [2017/04/27 18:50:42 | 000,288,848 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
PRC - [2017/03/24 17:15:56 | 003,319,800 | ---- | M] (ThreatTrack Security Inc.) -- C:\Program Files (x86)\VIPRE\SBAMTray.exe
PRC - [2017/03/24 17:15:10 | 006,940,640 | ---- | M] (ThreatTrack Security Inc.) -- C:\Program Files (x86)\VIPRE\SBAMSvc.exe
PRC - [2017/03/24 17:15:10 | 000,436,216 | ---- | M] (ThreatTrack Security Inc.) -- C:\Program Files (x86)\VIPRE\SBPIMSvc.exe
PRC - [2017/03/21 16:11:58 | 002,384,632 | ---- | M] (WiseCleaner.com) -- C:\Program Files (x86)\Wise\Wise Program Uninstaller\UnMonitor.exe
PRC - [2017/01/04 15:28:38 | 064,290,304 | ---- | M] (Hammer & Chisel, Inc.) -- C:\Users\steve\AppData\Local\Discord\app-0.0.297\Discord.exe
PRC - [2016/12/29 21:46:06 | 001,659,592 | ---- | M] (Foxit Software Inc.) -- D:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe
PRC - [2016/12/06 03:46:30 | 000,259,264 | ---- | M] () -- E:\Program Files (x86)\EaseUS\Todo Backup1\bin\TodoBackupService.exe
PRC - [2016/12/06 03:46:06 | 000,039,616 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) -- E:\Program Files (x86)\EaseUS\Todo Backup1\bin\Agent.exe
PRC - [2016/10/13 18:11:14 | 000,646,904 | ---- | M] (WiseCleaner.com) -- J:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe
PRC - [2016/09/20 01:21:44 | 001,243,328 | ---- | M] (CHENGDU Yiwo Tech Development Co., Ltd.) -- E:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\CleanUpUI.exe
PRC - [2016/08/20 07:22:27 | 000,143,144 | ---- | M] (Dropbox, Inc.) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PRC - [2015/07/23 23:22:13 | 001,871,504 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2017/05/25 10:07:47 | 000,148,992 | ---- | M] () -- \\?\C:\Users\steve\AppData\Local\Temp\F8E0.tmp.node
MOD - [2017/05/24 21:38:12 | 002,658,296 | ---- | M] () -- \\?\C:\Users\steve\AppData\Roaming\discord\0.0.297\modules\discord_rpc\discord_rpc.node
MOD - [2017/05/24 21:38:12 | 001,385,976 | ---- | M] () -- \\?\C:\Users\steve\AppData\Roaming\discord\0.0.297\modules\discord_overlay\discord_overlay.node
MOD - [2017/05/24 13:09:42 | 000,370,688 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Microsoft.E9ff182ca#\0cad7b622e71d1b0445b29944ac4ee13\Microsoft.Expression.Interactions.ni.dll
MOD - [2017/05/24 13:09:41 | 000,307,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Controls\4adb76701b54a08e397542f2a78516d3\Controls.ni.dll
MOD - [2017/05/24 13:09:41 | 000,121,856 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windc7c43db6#\c677acf6b69fa3951a5c2d661b0a740a\System.Windows.Interactivity.ni.dll
MOD - [2017/05/24 13:09:41 | 000,076,800 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Vipre.Infra3bcbfa6e#\a998c865908d0d245621d9cafdc5fd0e\Vipre.Infrastructure.UserInterface.ni.dll
MOD - [2017/05/24 13:09:39 | 000,067,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\ThemeManager\40456da034e341a29c851d4e70ee2a6c\ThemeManager.ni.dll
MOD - [2017/05/24 13:09:37 | 000,755,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\log4net\1173c5b15e5fea499587282c8a265b3f\log4net.ni.dll
MOD - [2017/05/03 15:21:22 | 001,040,504 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
MOD - [2017/05/03 14:28:29 | 002,448,504 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
MOD - [2017/05/03 14:28:29 | 000,587,200 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
MOD - [2017/05/03 14:28:29 | 000,511,424 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvBackendAPINode.node
MOD - [2017/05/03 14:28:29 | 000,480,192 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
MOD - [2017/05/03 14:28:29 | 000,463,992 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameStreamAPINode.node
MOD - [2017/05/03 14:28:29 | 000,391,616 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
MOD - [2017/05/03 14:28:29 | 000,386,496 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
MOD - [2017/05/03 14:28:29 | 000,385,472 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvUtil.node
MOD - [2017/05/03 14:28:29 | 000,364,480 | ---- | M] () -- \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
MOD - [2017/03/25 12:16:17 | 002,665,976 | ---- | M] () -- \\?\C:\Users\steve\AppData\Roaming\discord\0.0.297\modules\discord_contact_import\discord_contact_import.node
MOD - [2017/02/15 01:18:23 | 003,750,400 | ---- | M] () -- \\?\C:\Users\steve\AppData\Roaming\discord\0.0.297\modules\discord_voice\libdiscord.dll
MOD - [2017/02/15 01:18:23 | 001,127,424 | ---- | M] () -- \\?\C:\Users\steve\AppData\Roaming\discord\0.0.297\modules\discord_toaster\discord_toaster.node
MOD - [2017/02/15 01:18:23 | 001,082,880 | ---- | M] () -- \\?\C:\Users\steve\AppData\Roaming\discord\0.0.297\modules\discord_voice\discord_voice.node
MOD - [2017/02/15 01:18:23 | 000,914,432 | ---- | M] () -- \\?\C:\Users\steve\AppData\Roaming\discord\0.0.297\modules\discord_utils\discord_utils.node
MOD - [2017/01/04 15:28:40 | 002,278,912 | ---- | M] () -- C:\Users\steve\AppData\Local\Discord\app-0.0.297\libglesv2.dll
MOD - [2017/01/04 15:28:40 | 000,096,768 | ---- | M] () -- C:\Users\steve\AppData\Local\Discord\app-0.0.297\libegl.dll
MOD - [2017/01/04 15:28:38 | 001,958,912 | ---- | M] () -- C:\Users\steve\AppData\Local\Discord\app-0.0.297\ffmpeg.dll
MOD - [2016/11/22 09:08:51 | 000,184,320 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\2209ad4dbd30546de5e512fde664bc7e\UIAutomationTypes.ni.dll
MOD - [2016/11/22 07:39:48 | 007,456,768 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\4fbda26d781323081b45526da6e87b35\System.Xml.ni.dll
MOD - [2016/11/22 07:39:37 | 001,878,528 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xaml\ca5d89c8ed4d2a7e542244cd6757e3cd\System.Xaml.ni.dll
MOD - [2016/11/22 07:39:17 | 000,978,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\fe4b221b4109f0c78f57a792500699b5\System.Configuration.ni.dll
MOD - [2016/11/22 07:39:16 | 000,529,920 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Presentatioaec034ca#\fd24e3be9a0d8f00366aefb5ce5cd434\PresentationFramework.Aero2.ni.dll
MOD - [2016/11/22 07:39:13 | 019,468,288 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\56617af3d6fd992497999aec2be809a4\PresentationFramework.ni.dll
MOD - [2016/11/22 07:38:47 | 011,620,352 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationCore\d7a637fdf68801e37fc897b530f9a8a6\PresentationCore.ni.dll
MOD - [2016/11/22 07:38:34 | 004,063,232 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\WindowsBase\9a2107b30cbb02ca475f58ed046eff63\WindowsBase.ni.dll
MOD - [2016/11/22 07:38:24 | 007,463,936 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Core\eb4cca4f06a15158c3f7e2c56516729b\System.Core.ni.dll
MOD - [2016/11/22 07:38:12 | 010,265,600 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\1be7a15b1f33bf22e4f53aaf45518c77\System.ni.dll
MOD - [2016/11/22 07:38:05 | 019,595,776 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\7582400666d289c016013ad0f6e0e3e6\mscorlib.ni.dll
MOD - [2016/09/20 01:22:04 | 000,308,416 | ---- | M] () -- E:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\GarbageGather.dll
MOD - [2016/09/20 01:22:04 | 000,224,960 | ---- | M] () -- E:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\FragAnalysis.dll
MOD - [2016/09/20 01:22:00 | 000,118,464 | ---- | M] () -- E:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\FHProcess.dll
MOD - [2016/09/20 01:21:50 | 000,088,256 | ---- | M] () -- E:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\EnumVolumes.dll
MOD - [2016/09/20 01:21:42 | 000,174,784 | ---- | M] () -- E:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\BigFileGather.dll
MOD - [2016/06/24 02:00:06 | 000,014,336 | ---- | M] () -- E:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\fscLog.dll
MOD - [2016/03/25 02:00:04 | 000,024,064 | ---- | M] () -- E:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\imageformats\qico.dll
MOD - [2016/03/25 02:00:04 | 000,023,552 | ---- | M] () -- E:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\imageformats\qgif.dll
MOD - [2016/03/16 10:24:26 | 000,877,056 | ---- | M] () -- E:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\platforms\qwindows.dll
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2017/05/18 00:55:52 | 000,462,968 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -- (NVDisplay.ContainerLocalSystem)
SRV:64bit: - [2017/05/16 16:01:28 | 000,048,944 | ---- | M] (Dropbox, Inc.) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\DbxSvc.exe -- (DbxSvc)
SRV:64bit: - [2017/05/14 07:45:00 | 008,515,952 | ---- | M] (Reimage®) [Auto | Running] -- C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe -- (ReimageRealTimeProtector)
SRV:64bit: - [2017/05/03 15:21:24 | 000,495,224 | ---- | M] (NVIDIA Corporation) [On_Demand | Stopped] -- C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -- (NvContainerNetworkService)
SRV:64bit: - [2017/05/03 15:21:24 | 000,495,224 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -- (NvContainerLocalSystem)
SRV:64bit: - [2017/04/27 23:49:50 | 003,337,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:64bit: - [2017/04/27 23:27:03 | 000,754,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV:64bit: - [2017/04/27 23:08:11 | 003,449,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\WSService.dll -- (WSService)
SRV:64bit: - [2017/04/27 22:27:04 | 000,024,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:64bit: - [2017/04/27 22:24:28 | 000,625,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\ClipSVC.dll -- (ClipSVC)
SRV:64bit: - [2017/04/27 21:11:21 | 000,119,296 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2017/04/27 20:59:22 | 000,379,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\usocore.dll -- (UsoSvc)
SRV:64bit: - [2017/03/04 02:56:11 | 001,637,216 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\SysNative\diagtrack.dll -- (DiagTrack)
SRV:64bit: - [2017/03/04 00:49:31 | 000,079,872 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:64bit: - [2017/03/04 00:41:53 | 000,072,704 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\SysNative\moshost.dll -- (MapsBroker)
SRV:64bit: - [2017/03/04 00:23:35 | 000,752,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\PhoneService.dll -- (PhoneSvc)
SRV:64bit: - [2017/03/04 00:22:02 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\APHostService.dll -- (OneSyncSvc)
SRV:64bit: - [2017/03/04 00:19:50 | 000,287,744 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\SysNative\cdpsvc.dll -- (CDPSvc)
SRV:64bit: - [2017/03/04 00:19:19 | 000,339,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\SensorService.dll -- (SensorService)
SRV:64bit: - [2017/03/04 00:07:21 | 000,504,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:64bit: - [2017/03/03 23:53:13 | 001,073,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\RDXService.dll -- (RetailDemo)
SRV:64bit: - [2017/03/03 23:50:41 | 002,054,144 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:64bit: - [2017/03/03 23:41:58 | 001,490,432 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\UserDataService.dll -- (UserDataSvc)
SRV:64bit: - [2017/03/03 23:39:05 | 001,297,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\SensorDataService.exe -- (SensorDataService)
SRV:64bit: - [2017/03/03 23:24:19 | 001,097,728 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\SysNative\dosvc.dll -- (DoSvc)
SRV:64bit: - [2017/03/03 23:20:48 | 002,175,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:64bit: - [2016/12/13 19:03:44 | 000,207,656 | ---- | M] (Oculus VR, LLC) [On_Demand | Stopped] -- C:\Program Files\Oculus\Support\oculus-librarian\OVRLibraryService.exe -- (OVRLibraryService)
SRV:64bit: - [2016/12/13 19:01:42 | 000,470,480 | ---- | M] (Oculus VR) [On_Demand | Stopped] -- C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe -- (OVRService)
SRV:64bit: - [2016/10/25 03:37:15 | 000,364,464 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
SRV:64bit: - [2016/10/25 01:59:44 | 000,118,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\SysNative\fhsvc.dll -- (fhsvc)
SRV:64bit: - [2016/10/25 01:49:27 | 000,497,664 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\WalletService.dll -- (WalletService)
SRV:64bit: - [2016/10/25 01:43:55 | 000,606,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:64bit: - [2016/10/25 01:34:59 | 000,587,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:64bit: - [2016/10/25 01:25:35 | 001,872,896 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:64bit: - [2016/10/04 23:17:09 | 000,445,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\SysNative\das.dll -- (DeviceAssociationService)
SRV:64bit: - [2016/09/06 23:52:40 | 001,035,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
SRV:64bit: - [2016/09/06 23:49:43 | 000,649,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\ngcsvc.dll -- (NgcSvc)
SRV:64bit: - [2016/09/06 23:39:35 | 000,075,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\wiarpc.dll -- (WiaRpc)
SRV:64bit: - [2016/09/06 23:36:11 | 000,314,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
SRV:64bit: - [2016/09/06 23:35:44 | 000,591,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\SmsRouterSvc.dll -- (SmsRouter)
SRV:64bit: - [2016/09/06 23:34:47 | 000,278,016 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV:64bit: - [2016/09/06 23:33:23 | 000,948,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\XblAuthManager.dll -- (XblAuthManager)
SRV:64bit: - [2016/09/06 23:33:08 | 000,847,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\netlogon.dll -- (Netlogon)
SRV:64bit: - [2016/09/06 23:32:38 | 000,506,880 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\SysNative\tileobjserver.dll -- (tiledatamodelsvc)
SRV:64bit: - [2016/09/06 23:31:17 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\icsvc.dll -- (vmicvss)
SRV:64bit: - [2016/09/06 23:31:17 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\icsvc.dll -- (vmicvmsession)
SRV:64bit: - [2016/09/06 23:31:17 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\icsvc.dll -- (vmictimesync)
SRV:64bit: - [2016/09/06 23:31:17 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\icsvc.dll -- (vmicshutdown)
SRV:64bit: - [2016/09/06 23:31:17 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\icsvc.dll -- (vmicrdv)
SRV:64bit: - [2016/09/06 23:31:17 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:64bit: - [2016/09/06 23:31:17 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:64bit: - [2016/09/06 23:31:17 | 000,511,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:64bit: - [2016/09/06 23:30:16 | 000,912,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\SysNative\usermgr.dll -- (UserManager)
SRV:64bit: - [2016/09/06 23:16:38 | 002,746,368 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\SysNative\Windows.StateRepository.dll -- (StateRepository)
SRV:64bit: - [2016/08/14 05:18:04 | 001,383,680 | ---- | M] (Flexera Software LLC) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe -- (FlexNet Licensing Service 64)
SRV:64bit: - [2016/08/03 04:36:49 | 000,211,456 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
SRV:64bit: - [2016/06/30 22:52:47 | 000,087,040 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\SysNative\tzautoupdate.dll -- (tzautoupdate)
SRV:64bit: - [2016/05/27 23:22:06 | 000,163,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\tetheringservice.dll -- (icssvc)
SRV:64bit: - [2016/05/27 23:18:23 | 000,380,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:64bit: - [2016/05/05 22:49:14 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
SRV:64bit: - [2016/03/29 00:45:48 | 000,338,432 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\SysNative\ncbservice.dll -- (NcbService)
SRV:64bit: - [2016/02/24 02:19:10 | 000,145,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\dssvc.dll -- (DsSvc)
SRV:64bit: - [2016/02/24 02:07:53 | 000,252,928 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
SRV:64bit: - [2016/02/24 01:59:32 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:64bit: - [2016/02/24 01:40:53 | 001,224,704 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\Unistore.dll -- (UnistoreSvc)
SRV:64bit: - [2016/02/23 04:20:41 | 001,139,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\XblGameSave.dll -- (XblGameSave)
SRV:64bit: - [2016/02/23 03:28:32 | 000,275,456 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2016/02/23 02:58:02 | 000,163,840 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:64bit: - [2016/01/06 16:54:32 | 001,659,040 | ---- | M] (OSBASE) [Auto | Running] -- C:\WINDOWS\SysNative\ddmgr.exe -- (ddmgr)
SRV:64bit: - [2015/10/30 02:18:46 | 000,168,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:64bit: - [2015/10/30 02:18:18 | 000,729,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\SysNative\lsm.dll -- (LSM)
SRV:64bit: - [2015/10/30 02:18:01 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\wpnservice.dll -- (WpnService)
SRV:64bit: - [2015/10/30 02:18:01 | 000,034,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
SRV:64bit: - [2015/10/30 02:18:01 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\lfsvc.dll -- (lfsvc)
SRV:64bit: - [2015/10/30 02:18:01 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
SRV:64bit: - [2015/10/30 02:17:59 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\embeddedmodesvc.dll -- (embeddedmode)
SRV:64bit: - [2015/10/30 02:17:59 | 000,023,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\AJRouter.dll -- (AJRouter)
SRV:64bit: - [2015/10/30 02:17:53 | 000,097,792 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\SysNative\keyiso.dll -- (KeyIso)
SRV:64bit: - [2015/10/30 02:17:53 | 000,060,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\SysNative\efssvc.dll -- (EFS)
SRV:64bit: - [2015/10/30 02:17:53 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:64bit: - [2015/10/30 02:17:52 | 000,181,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:64bit: - [2015/10/30 02:17:51 | 000,031,744 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_b339d)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_b3288)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_91c66)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_8728d)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_80dff)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_7d26b)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_71382)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_663e4)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_64f4d97)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_64f2f)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_64e3a)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_648be)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_641b6)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_633a4)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_60898)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_5efaf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_5eeb5)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_5e536)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_5e117)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_5d72a)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_5a8d5)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_57bb0)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_53e5ee7)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_52bbb)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_52506)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_52407)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_50c81)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_4e7ee)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_4e355)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_4cacf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_4c967)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_4c25f)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_49b95)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_48152)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_456fe)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_3efbf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_3dcd73)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_33f9c)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_304625)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_1f3d202)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UserDataSvc_105496cb)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_b339d)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_b3288)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_91c66)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_8728d)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_80dff)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_7d26b)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_71382)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_663e4)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_64f4d97)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_64f2f)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_64e3a)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_648be)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_641b6)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_633a4)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_60898)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_5efaf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_5eeb5)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_5e536)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_5e117)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_5d72a)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_5a8d5)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_57bb0)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_53e5ee7)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_52bbb)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_52506)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_52407)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_50c81)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_4e7ee)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_4e355)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_4cacf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_4c967)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_4c25f)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_49b95)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_48152)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_456fe)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_3efbf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_3dcd73)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_33f9c)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_304625)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_1f3d202)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (UnistoreSvc_105496cb)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_b339d)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_b3288)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_91c66)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_8728d)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_80dff)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_7d26b)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_71382)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_663e4)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_64f4d97)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_64f2f)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_64e3a)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_648be)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_641b6)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_633a4)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_60898)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_5efaf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_5eeb5)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_5e536)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_5e117)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_5d72a)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_5a8d5)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_57bb0)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_53e5ee7)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_52bbb)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_52506)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_52407)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_50c81)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_4e7ee)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_4e355)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_4cacf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_4c967)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_4c25f)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_49b95)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_48152)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_456fe)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_3efbf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_3dcd73)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_33f9c)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_304625)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_1f3d202)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_105496cb)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_b339d)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_b3288)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_91c66)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_8728d)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_80dff)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_7d26b)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_787dc)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_71382)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_663e4)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_64f4d97)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_64f2f)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_64e3a)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_648be)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_641b6)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_633a4)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_60898)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_5efaf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_5eeb5)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_5e536)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_5e117)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_5d72a)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_5a8d5)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_57bb0)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_53e5ee7)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_52bbb)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_52506)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_52407)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_50c81)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_4e7ee)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_4e355)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_4cacf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_4c967)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_4c25f)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_4af70)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_49b95)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_48152)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_456fe)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_3efbf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_3dcd73)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_33f9c)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_304625)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_1f3d202)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (OneSyncSvc_105496cb)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_b339d)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_b3288)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_91c66)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_8728d)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_80dff)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_7d26b)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_71382)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_663e4)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_64f4d97)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_64f2f)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_64e3a)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_648be)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_641b6)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_633a4)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_60898)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_5efaf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_5eeb5)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_5e536)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_5e117)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_5d72a)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_5a8d5)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_57bb0)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_53e5ee7)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_52bbb)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_52506)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_52407)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_50c81)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_4e7ee)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_4e355)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_4cacf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_4c967)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_4c25f)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_49b95)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_48152)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_456fe)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_3efbf)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_3dcd73)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_33f9c)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_304625)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_1f3d202)
SRV:64bit: - [2015/10/30 02:17:49 | 000,043,944 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\svchost.exe -- (MessagingService_105496cb)
SRV:64bit: - [2015/10/30 02:17:48 | 000,205,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:64bit: - [2015/10/30 02:17:47 | 000,023,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\smphost.dll -- (smphost)
SRV:64bit: - [2015/10/30 02:17:46 | 000,290,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\TieringEngineService.exe -- (TieringEngineService)
SRV:64bit: - [2015/10/30 02:17:46 | 000,186,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\dcpsvc.dll -- (DcpSvc)
SRV:64bit: - [2015/10/30 02:17:46 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\svsvc.dll -- (svsvc)
SRV:64bit: - [2015/10/30 02:17:43 | 000,057,856 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\SysNative\dmwappushsvc.dll -- (dmwappushservice)
SRV:64bit: - [2015/10/30 02:17:41 | 000,052,736 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\SysNative\MessagingService.dll -- (MessagingService)
SRV:64bit: - [2015/10/30 02:17:39 | 000,547,840 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\SysNative\netprofmsvc.dll -- (netprofm)
SRV:64bit: - [2015/10/30 02:17:18 | 000,326,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\BthHFSrv.dll -- (BthHFSrv)
SRV - [2017/05/18 02:35:05 | 000,449,984 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe -- (NvTelemetryContainer)
SRV - [2017/05/15 14:33:27 | 000,173,512 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2017/04/27 23:49:50 | 003,337,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2017/04/27 18:29:04 | 000,461,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\syswow64\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV - [2017/04/25 09:12:12 | 000,083,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2017/04/07 22:59:28 | 001,237,992 | ---- | M] (Flexera Software LLC) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe -- (FlexNet Licensing Service)
SRV - [2017/03/30 23:43:49 | 000,409,128 | ---- | M] (EasyAntiCheat Ltd) [On_Demand | Stopped] -- C:\WINDOWS\syswow64\EasyAntiCheat.exe -- (EasyAntiCheat)
SRV - [2017/03/24 17:15:10 | 006,940,640 | ---- | M] (ThreatTrack Security Inc.) [Auto | Running] -- C:\Program Files (x86)\VIPRE\SBAMSvc.exe -- (SBAMSvc)
SRV - [2017/03/24 17:15:10 | 000,436,216 | ---- | M] (ThreatTrack Security Inc.) [Auto | Running] -- C:\Program Files (x86)\VIPRE\SBPIMSvc.exe -- (SBPIMSvc)
SRV - [2017/03/02 14:26:14 | 003,416,584 | ---- | M] (LogMeIn Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2017/02/27 12:01:12 | 000,419,248 | ---- | M] (LogMeIn, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2016/12/29 21:46:06 | 001,659,592 | ---- | M] (Foxit Software Inc.) [Auto | Running] -- D:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe -- (FoxitReaderService)
SRV - [2016/12/16 14:08:18 | 002,712,080 | ---- | M] (ThreatTrack Security Inc.) [On_Demand | Running] -- C:\Program Files (x86)\VIPRE\VipreEdgeProtection.exe -- (VipreEdgeProtection)
SRV - [2016/12/13 02:24:04 | 002,218,712 | ---- | M] (Adobe Systems, Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe -- (AGSService)
SRV - [2016/12/06 03:46:06 | 000,039,616 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Auto | Running] -- E:\Program Files (x86)\EaseUS\Todo Backup1\bin\Agent.exe -- (EaseUS Agent)
SRV - [2016/10/13 18:11:14 | 000,646,904 | ---- | M] (WiseCleaner.com) [Auto | Running] -- J:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe -- (WiseBootAssistant)
SRV - [2016/10/12 20:58:30 | 001,459,488 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2016/09/28 22:39:42 | 000,192,208 | ---- | M] (eVenture Limited) [On_Demand | Stopped] -- C:\Program Files (x86)\hide.me VPN\vpnsvc.exe -- (hmevpnsvc)
SRV - [2016/09/14 05:10:40 | 000,805,752 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2016/09/06 23:12:58 | 002,180,096 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\syswow64\Windows.StateRepository.dll -- (StateRepository)
SRV - [2016/08/20 07:22:27 | 000,143,144 | ---- | M] (Dropbox, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdatem)
SRV - [2016/08/20 07:22:27 | 000,143,144 | ---- | M] (Dropbox, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdate)
SRV - [2016/07/19 13:43:38 | 001,886,208 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\BitX\bitxsvc.exe -- (BitXService)
SRV - [2016/05/27 23:14:46 | 000,200,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\syswow64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV - [2016/03/23 15:11:52 | 000,032,256 | ---- | M] (Thrustmaster®) [Auto | Running] -- C:\Program Files (x86)\Thrustmaster\Thrustmaster FFB Driver\64bits\tmGAInstall.exe -- (tmGAInstall)
SRV - [2016/02/24 01:07:45 | 000,949,248 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\WINDOWS\syswow64\Unistore.dll -- (UnistoreSvc)
SRV - [2016/02/23 16:40:00 | 000,277,744 | ---- | M] (SpeedBit Ltd.) [Disabled | Stopped] -- D:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe -- (VideoAcceleratorService)
SRV - [2015/10/30 02:18:31 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\syswow64\lfsvc.dll -- (lfsvc)
SRV - [2015/10/30 02:18:23 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\syswow64\smphost.dll -- (smphost)
SRV - [2015/07/23 23:22:13 | 001,871,504 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
SRV - [2012/01/05 10:42:34 | 000,075,624 | ---- | M] (Alcohol Soft Development Team) [Auto | Stopped] -- D:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -- (AxAutoMntSrv)
SRV - [2010/02/10 15:25:56 | 002,310,456 | ---- | M] (Rude Gameware) [On_Demand | Stopped] -- D:\Program Files\GameGuard\GameGuard 2010\vsserv.exe -- (VSSERV)
SRV - [2009/12/23 16:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Disabled | Stopped] -- D:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2017/05/03 15:21:29 | 000,048,248 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:64bit: - [2017/05/03 15:21:03 | 000,030,328 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
DRV:64bit: - [2017/05/02 02:50:14 | 000,177,840 | ---- | M] (Romex Software) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\rxfcv.sys -- (FancyCcV)
DRV:64bit: - [2017/04/02 11:12:15 | 000,218,040 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2017/03/28 05:20:05 | 000,100,192 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\pdc.sys -- (pdc)
DRV:64bit: - [2017/03/28 05:12:29 | 000,061,792 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\SysNative\drivers\dam.sys -- (dam)
DRV:64bit: - [2017/03/28 02:49:07 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:64bit: - [2017/03/15 12:34:32 | 000,057,976 | ---- | M] (Shaul Eizikovich) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\vjoy.sys -- (vjoy)
DRV:64bit: - [2017/03/08 17:51:30 | 000,134,320 | ---- | M] (ThreatTrack Security Inc.) [File_System | Auto | Running] -- C:\WINDOWS\SysNative\drivers\sbapifs.sys -- (sbapifs)
DRV:64bit: - [2017/03/04 00:15:17 | 000,695,296 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
DRV:64bit: - [2017/02/17 17:18:44 | 000,375,368 | ---- | M] (ThreatTrack Security) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\sbwfw.sys -- (sbwfw)
DRV:64bit: - [2017/02/17 09:40:08 | 000,122,672 | ---- | M] (ThreatTrack Security) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\sbwtis.sys -- (sbwtis)
DRV:64bit: - [2017/02/17 09:39:56 | 000,073,208 | ---- | M] (ThreatTrack Security) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\sbhips.sys -- (sbhips)
DRV:64bit: - [2017/01/20 13:39:20 | 000,057,792 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\nvvhci.sys -- (nvvhci)
DRV:64bit: - [2016/12/21 14:52:50 | 000,040,240 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\revoflt.sys -- (Revoflt)
DRV:64bit: - [2016/12/16 14:08:22 | 000,054,288 | ---- | M] (ThreatTrack Security Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\SysNative\drivers\WebExaminer64.sys -- (WebExaminer)
DRV:64bit: - [2016/11/28 15:13:58 | 000,052,392 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\EUBKMON0.sys -- (EUBKMON0)
DRV:64bit: - [2016/11/28 15:13:58 | 000,052,392 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\EUBKMON.sys -- (EUBKMON)
DRV:64bit: - [2016/11/28 15:13:56 | 000,196,776 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\EUFDDISK0.sys -- (EUFDDISK0)
DRV:64bit: - [2016/11/28 15:13:56 | 000,065,192 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\EUBAKUP0.sys -- (EUBAKUP0)
DRV:64bit: - [2016/11/28 15:13:56 | 000,065,192 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\eubakup.sys -- (EUBAKUP)
DRV:64bit: - [2016/11/22 06:42:31 | 000,384,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\clfs.sys -- (CLFS)
DRV:64bit: - [2016/11/18 13:23:56 | 001,605,376 | ---- | M] (BitDefender) [File_System | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\avc3.sys -- (avc3)
DRV:64bit: - [2016/11/18 13:23:56 | 000,878,072 | ---- | M] (BitDefender) [File_System | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\avckf.sys -- (avckf)
DRV:64bit: - [2016/11/15 19:03:18 | 000,083,224 | R--- | M] (Raxco Software, Inc.) [File_System | Auto | Running] -- C:\WINDOWS\SysNative\drivers\PDFsFilter.sys -- (PDFsFilter)
DRV:64bit: - [2016/10/25 02:33:10 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
DRV:64bit: - [2016/10/25 02:22:13 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:64bit: - [2016/09/07 00:39:48 | 000,277,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2016/09/07 00:26:00 | 000,131,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
DRV:64bit: - [2016/09/06 23:09:45 | 000,218,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:64bit: - [2016/09/05 06:47:06 | 000,131,712 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
DRV:64bit: - [2016/08/31 15:46:20 | 000,045,680 | ---- | M] (LogMeIn Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\Hamdrv.sys -- (Hamachi)
DRV:64bit: - [2016/08/29 11:50:38 | 000,285,240 | ---- | M] (BitDefender) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\avchv.sys -- (avchv)
DRV:64bit: - [2016/08/26 21:00:06 | 000,069,176 | ---- | M] (Oculus VR, LLC) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\ocusbvid111.sys -- (OCUSBVID)
DRV:64bit: - [2016/08/03 16:18:36 | 000,058,952 | ---- | M] (ThreatTrack Security) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\gfiark.sys -- (gfiark)
DRV:64bit: - [2016/08/03 16:10:30 | 000,050,776 | ---- | M] (ThreatTrack Security) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\gfiutil.sys -- (gfiutil)
DRV:64bit: - [2016/07/22 05:51:40 | 000,164,992 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:64bit: - [2016/07/11 11:01:24 | 000,010,848 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\EuGdiDrv.sys -- (EuGdiDrv)
DRV:64bit: - [2016/07/09 00:21:02 | 000,191,040 | ---- | M] (Romex Software) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\fancyrd.sys -- (FancyRd)
DRV:64bit: - [2016/06/01 15:44:12 | 000,021,216 | ---- | M] (Splashtop Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\sthid.sys -- (sthid)
DRV:64bit: - [2016/05/28 00:22:08 | 000,211,296 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\tpm.sys -- (TPM)
DRV:64bit: - [2016/05/28 00:08:25 | 000,258,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\ufx01000.sys -- (Ufx01000)
DRV:64bit: - [2016/05/27 23:24:38 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:64bit: - [2016/04/22 23:56:52 | 000,534,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:64bit: - [2016/04/22 23:34:19 | 000,067,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2016/04/22 23:33:59 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
DRV:64bit: - [2016/04/22 23:29:32 | 000,087,552 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\WINDOWS\SysNative\drivers\filecrypt.sys -- (FileCrypt)
DRV:64bit: - [2016/03/29 03:21:40 | 000,378,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:64bit: - [2016/03/29 03:16:55 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\xinputhid.sys -- (xinputhid)
DRV:64bit: - [2016/02/23 04:20:35 | 000,238,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\xboxgip.sys -- (xboxgip)
DRV:64bit: - [2016/01/14 11:05:18 | 000,024,056 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\epmntdrv.sys -- (epmntdrv)
DRV:64bit: - [2016/01/06 16:54:40 | 000,254,968 | ---- | M] (OSBASE) [Kernel | Disabled | Running] -- C:\WINDOWS\SysNative\drivers\ddkmd.sys -- (ddkmd)
DRV:64bit: - [2016/01/06 16:54:40 | 000,016,888 | ---- | M] (OSBASE) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\ddkmdldr.sys -- (ddkmdldr)
DRV:64bit: - [2016/01/06 09:45:53 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\capimg.sys -- (CapImg)
DRV:64bit: - [2016/01/06 09:45:53 | 000,095,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:64bit: - [2015/12/18 09:02:00 | 000,460,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\nvstusb.sys -- (NvStUSB)
DRV:64bit: - [2015/12/10 07:10:58 | 000,192,552 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\EuFdDisk.sys -- (EUFDDISK)
DRV:64bit: - [2015/12/10 07:10:58 | 000,018,472 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\eudskacs.sys -- (EUDSKACS)
DRV:64bit: - [2015/12/09 16:54:22 | 000,032,168 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\rawdsk3.sys -- (RawDisk3)
DRV:64bit: - [2015/11/12 23:50:10 | 000,026,880 | ---- | M] (Western Digital Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)
DRV:64bit: - [2015/11/05 16:23:52 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2015/10/30 04:07:05 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2015/10/30 04:06:56 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2015/10/30 02:19:39 | 000,030,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:64bit: - [2015/10/30 02:18:42 | 000,052,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
DRV:64bit: - [2015/10/30 02:18:09 | 000,930,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1)
DRV:64bit: - [2015/10/30 02:18:03 | 000,200,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:64bit: - [2015/10/30 02:18:03 | 000,106,520 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
DRV:64bit: - [2015/10/30 02:18:03 | 000,078,848 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\WINDOWS\SysNative\drivers\storqosflt.sys -- (storqosflt)
DRV:64bit: - [2015/10/30 02:18:03 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\condrv.sys -- (condrv)
DRV:64bit: - [2015/10/30 02:18:03 | 000,031,584 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2015/10/30 02:18:03 | 000,026,624 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\ioqos.sys -- (IoQos)
DRV:64bit: - [2015/10/30 02:18:01 | 000,154,464 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:64bit: - [2015/10/30 02:17:57 | 000,047,616 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\SysNative\drivers\mmcss.sys -- (MMCSS)
DRV:64bit: - [2015/10/30 02:17:52 | 000,163,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:64bit: - [2015/10/30 02:17:52 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
DRV:64bit: - [2015/10/30 02:17:52 | 000,039,264 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
DRV:64bit: - [2015/10/30 02:17:51 | 000,155,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:64bit: - [2015/10/30 02:17:51 | 000,088,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:64bit: - [2015/10/30 02:17:51 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:64bit: - [2015/10/30 02:17:51 | 000,074,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:64bit: - [2015/10/30 02:17:51 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:64bit: - [2015/10/30 02:17:50 | 000,199,008 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
DRV:64bit: - [2015/10/30 02:17:46 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
DRV:64bit: - [2015/10/30 02:17:42 | 000,126,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:64bit: - [2015/10/30 02:17:42 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:64bit: - [2015/10/30 02:17:39 | 000,081,920 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:64bit: - [2015/10/30 02:17:37 | 000,293,216 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:64bit: - [2015/10/30 02:17:37 | 000,209,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
DRV:64bit: - [2015/10/30 02:17:37 | 000,127,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:64bit: - [2015/10/30 02:17:37 | 000,118,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:64bit: - [2015/10/30 02:17:37 | 000,061,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2015/10/30 02:17:37 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\Udecx.sys -- (UdeCx)
DRV:64bit: - [2015/10/30 02:17:37 | 000,044,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:64bit: - [2015/10/30 02:17:37 | 000,031,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\vhf.sys -- (vhf)
DRV:64bit: - [2015/10/30 02:17:26 | 000,017,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
DRV:64bit: - [2015/10/30 02:17:25 | 000,046,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:64bit: - [2015/10/30 02:17:25 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2015/10/30 02:17:25 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
DRV:64bit: - [2015/10/30 02:17:25 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
DRV:64bit: - [2015/10/30 02:17:25 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:64bit: - [2015/10/30 02:17:23 | 000,705,376 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
DRV:64bit: - [2015/10/30 02:17:23 | 000,532,832 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:64bit: - [2015/10/30 02:17:23 | 000,424,800 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\ibbus.sys -- (ibbus)
DRV:64bit: - [2015/10/30 02:17:23 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:64bit: - [2015/10/30 02:17:23 | 000,133,984 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\storahci.sys -- (storahci)
DRV:64bit: - [2015/10/30 02:17:23 | 000,104,800 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
DRV:64bit: - [2015/10/30 02:17:23 | 000,099,168 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
DRV:64bit: - [2015/10/30 02:17:23 | 000,094,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
DRV:64bit: - [2015/10/30 02:17:23 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:64bit: - [2015/10/30 02:17:23 | 000,079,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:64bit: - [2015/10/30 02:17:23 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:64bit: - [2015/10/30 02:17:23 | 000,076,128 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\ndfltr.sys -- (ndfltr)
DRV:64bit: - [2015/10/30 02:17:23 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:64bit: - [2015/10/30 02:17:23 | 000,059,232 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\winverbs.sys -- (WinVerbs)
DRV:64bit: - [2015/10/30 02:17:23 | 000,058,720 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\percsas3i.sys -- (percsas3i)
DRV:64bit: - [2015/10/30 02:17:23 | 000,058,208 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\percsas2i.sys -- (percsas2i)
DRV:64bit: - [2015/10/30 02:17:23 | 000,055,808 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:64bit: - [2015/10/30 02:17:23 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
DRV:64bit: - [2015/10/30 02:17:23 | 000,034,144 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\storufs.sys -- (storufs)
DRV:64bit: - [2015/10/30 02:17:23 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2015/10/30 02:17:23 | 000,026,976 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\winmad.sys -- (WinMad)
DRV:64bit: - [2015/10/30 02:17:22 | 003,436,896 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2015/10/30 02:17:22 | 001,135,456 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:64bit: - [2015/10/30 02:17:22 | 000,673,120 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:64bit: - [2015/10/30 02:17:22 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2015/10/30 02:17:22 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2015/10/30 02:17:22 | 000,107,360 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\3ware.sys -- (3ware)
DRV:64bit: - [2015/10/30 02:17:22 | 000,083,296 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2015/10/30 02:17:22 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2015/10/30 02:17:22 | 000,057,344 | ---- | M] (Microsoft Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\dc1-controller.sys -- (dc1-controller)
DRV:64bit: - [2015/10/30 02:17:22 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
DRV:64bit: - [2015/10/30 02:17:22 | 000,037,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
DRV:64bit: - [2015/10/30 02:17:22 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\uefi.sys -- (UEFI)
DRV:64bit: - [2015/10/30 02:17:22 | 000,026,976 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2015/10/30 02:17:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:64bit: - [2015/10/30 02:17:22 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:64bit: - [2015/10/30 02:17:22 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:64bit: - [2015/10/30 02:17:22 | 000,009,728 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:64bit: - [2015/10/30 02:17:22 | 000,009,728 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\bcmfn.sys -- (bcmfn)
DRV:64bit: - [2015/10/30 02:17:18 | 000,165,888 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C)
DRV:64bit: - [2015/10/30 02:17:18 | 000,117,088 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:64bit: - [2015/10/30 02:17:18 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:64bit: - [2015/10/30 02:17:18 | 000,081,408 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\iai2c.sys -- (iai2c)
DRV:64bit: - [2015/10/30 02:17:18 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\vpci.sys -- (vpci)
DRV:64bit: - [2015/10/30 02:17:18 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:64bit: - [2015/10/30 02:17:18 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:64bit: - [2015/10/30 02:17:18 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:64bit: - [2015/10/30 02:17:18 | 000,046,432 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:64bit: - [2015/10/30 02:17:18 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_912dfdedc3d2f520\CompositeBus.sys -- (CompositeBus)
DRV:64bit: - [2015/10/30 02:17:18 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:64bit: - [2015/10/30 02:17:18 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2015/10/30 02:17:18 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\fcvsc.sys -- (fcvsc)
DRV:64bit: - [2015/10/30 02:17:18 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:64bit: - [2015/10/30 02:17:18 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:64bit: - [2015/10/30 02:17:18 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:64bit: - [2015/09/18 12:20:16 | 000,051,488 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\SaiBus.sys -- (SaiNtBus)
DRV:64bit: - [2015/09/18 12:20:16 | 000,023,968 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\SaiMini.sys -- (SaiMini)
DRV:64bit: - [2015/09/18 12:20:14 | 000,180,928 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\_hid_0738_1714.sys -- (_hid_0738_1714)
DRV:64bit: - [2015/09/18 12:20:14 | 000,046,528 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\_usb_0738_1714.sys -- (_usb_0738_1714)
DRV:64bit: - [2015/02/25 14:15:40 | 000,129,312 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\TeeDriverx64.sys -- (MEIx64)
DRV:64bit: - [2013/08/15 10:29:57 | 000,083,224 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\AmUStor.sys -- (AmUStor)
DRV:64bit: - [2013/08/13 01:01:22 | 000,027,608 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\ICCWDT.sys -- (ICCWDT)
DRV:64bit: - [2013/08/01 05:40:04 | 000,644,968 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\iaStorA.sys -- (iaStorA)
DRV:64bit: - [2013/06/21 04:35:14 | 000,816,344 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\Rt630x64.sys -- (RTL8168)
DRV:64bit: - [2013/03/28 15:17:26 | 000,028,416 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\ASUSxpsp.sys -- (ASUSxpsp)
DRV:64bit: - [2013/03/28 15:17:24 | 000,151,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\ASUSumsc.sys -- (ASUSumsc)
DRV:64bit: - [2013/03/28 15:17:24 | 000,048,384 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\ASUSfilter.sys -- (ASUSfilter)
DRV:64bit: - [2013/03/28 15:17:24 | 000,027,392 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\ASUSstpt.sys -- (ASUSstpt)
DRV:64bit: - [2013/01/10 17:13:00 | 000,180,992 | ---- | M] (Saitek) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\SaiK1302.sys -- (SaiK1302)
DRV:64bit: - [2012/10/26 17:42:22 | 004,758,176 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\lvuvc64.sys -- (LVUVC64)
DRV:64bit: - [2012/10/26 17:42:22 | 000,351,520 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:64bit: - [2012/10/26 17:42:22 | 000,026,784 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\lvbflt64.sys -- (CompFilter64)
DRV:64bit: - [2012/10/02 17:26:46 | 000,066,360 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\LGSHidFilt.Sys -- (LGSHidFilt)
DRV:64bit: - [2012/10/02 17:26:46 | 000,043,832 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\LGSUsbFilt.sys -- (LGSUsbFilt)
DRV:64bit: - [2012/08/25 23:41:06 | 000,024,240 | ---- | M] (CH Products) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\chdrvr03.sys -- (chdrvr03)
DRV:64bit: - [2012/08/25 23:41:00 | 000,011,440 | ---- | M] (CH Products) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\chdrvr02.sys -- (chdrvr02)
DRV:64bit: - [2012/08/25 23:40:52 | 000,248,496 | ---- | M] (CH Products) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\chdrvr01.sys -- (chdrvr01)
DRV:64bit: - [2009/12/05 17:34:56 | 000,066,016 | ---- | M] (Eugene V. Muzychenko) [Kernel | On_Demand | Running] -- C:\WINDOWS\SysNative\drivers\vaclcskd.sys -- (EuMusDesignVirtualAudioCableWdm_lcs)
DRV:64bit: - [2009/11/23 20:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\LGVirHid.sys -- (LGVirHid)
DRV:64bit: - [2009/11/23 20:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2008/11/24 13:11:14 | 000,179,584 | ---- | M] (Saitek) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\SaiH0460.sys -- (SaiH0460)
DRV:64bit: - [2006/12/12 03:29:02 | 000,097,280 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\BrSerIf.sys -- (BrSerIf)
DRV - [2016/12/31 09:46:50 | 000,014,256 | ---- | M] (WiseCleaner.com) [File_System | Auto | Running] -- C:\WINDOWS\WiseFs64.sys -- (WiseFs)
DRV - [2016/12/31 09:14:23 | 000,014,800 | ---- | M] (wisecleaner.com) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\WiseHDInfo64.dll -- (WiseHDInfo)
DRV - [2016/11/28 02:08:43 | 000,012,400 | ---- | M] (Macrovision Europe Ltd) [Kernel | Auto | Stopped] -- C:\WINDOWS\syswow64\drivers\SECDRV.SYS -- (SecDrv)
DRV - [2016/07/11 11:01:24 | 000,010,208 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\syswow64\EuGdiDrv.sys -- (EuGdiDrv)
DRV - [2016/01/14 11:05:18 | 000,021,496 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\syswow64\epmntdrv.sys -- (epmntdrv)
DRV - [2015/10/30 02:17:18 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_912dfdedc3d2f520\CompositeBus.sys -- (CompositeBus)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
 
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
 
IE - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
IE - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 
IE - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 3E 1D 44 FA BD E5 D1 01  [binary data]
IE - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 2B 03 59 1A 76 08 D2 01  [binary data]
IE - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = 01 00 00 00 41 00 00 00 80 DE 99 91 2B 77 87 B5 C0 4F DB 23 BA CD 94 54 27 F5 53 21 98 7E 5F 9D BD 80 46 8B 4F B0 9F E7 26 46 82 19 C4 09 B2 23 6C 0D CA 2E 80 C2 88 09 B5 C0 19 FC 50 B2 7B 8C 5B 46 A1 50 D4 F3 5A 9B 20 02 00 00 00 10 00 00 00 39 59 25 32 62 7A 39 78 39 36 70 72 77 25 33 64  [binary data]
IE - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...=IESR02&pc=UE00
IE - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.countryCode: "US"
FF - prefs.js..browser.search.defaultenginename: "Yahoo!"
FF - prefs.js..browser.search.hiddenOneOffs: "Yahoo,Bing,Amazon.com,DuckDuckGo,Twitter,Wikipedia (en),Yahoo!"
FF - prefs.js..browser.search.region: "US"
FF - prefs.js..browser.startup.homepage: "https://GOOGLE.COM"
FF - prefs.js..extensions.enabledAddons: %7B515d1883-7376-4db3-b710-8d76a27231b1%7D:3.3.0.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:53.0.2
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.131.2: C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.131.2: C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf: C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp: C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf: C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: D:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: D:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp: D:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf: D:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.2: D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.4: D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@virtools.com/3DviaPlayer: C:\Program Files (x86)\Virtools\3D Life Player\npvirtools.dll (Dassault Systèmes)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{F17C1572-C9EC-4e5c-A542-D05CBB5C5A08}: J:\Program Files (x86)\DAP\DAPFireFox [2016/08/01 22:21:51 | 000,000,000 | ---D | M]
 
[2016/02/20 21:22:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\steve\AppData\Roaming\mozilla\Extensions
[2017/04/28 17:42:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\steve\AppData\Roaming\mozilla\Firefox\Profiles\l1a0zeje.default\extensions
[2017/03/05 16:32:56 | 000,000,000 | ---D | M] (Start Page) -- C:\Users\steve\AppData\Roaming\mozilla\Firefox\Profiles\l1a0zeje.default\extensions\{515d1883-7376-4db3-b710-8d76a27231b1}
[2017/03/05 16:32:56 | 000,000,000 | ---D | M] (Slick Savings) -- C:\Users\steve\AppData\Roaming\mozilla\Firefox\Profiles\l1a0zeje.default\extensions\{6f67e2de-f1ce-4051-82be-fcecb764cffe}
[2016/07/11 18:20:58 | 000,000,000 | ---D | M] (Click&amp;Clean) -- C:\Users\steve\AppData\Roaming\mozilla\Firefox\Profiles\l1a0zeje.default\extensions\[email protected]
[2016/08/24 11:00:19 | 000,088,997 | ---- | M] () (No name found) -- C:\Users\steve\AppData\Roaming\mozilla\firefox\profiles\l1a0zeje.default\extensions\[email protected]
[2017/04/26 10:53:02 | 000,121,494 | ---- | M] () (No name found) -- C:\Users\steve\AppData\Roaming\mozilla\firefox\profiles\l1a0zeje.default\extensions\[email protected]
[2017/03/02 22:16:51 | 000,036,534 | ---- | M] () (No name found) -- C:\Users\steve\AppData\Roaming\mozilla\firefox\profiles\l1a0zeje.default\extensions\[email protected]
[2017/05/15 14:36:06 | 000,044,954 | ---- | M] () (No name found) -- C:\Users\steve\AppData\Roaming\mozilla\firefox\profiles\l1a0zeje.default\features\{af47b191-0928-49d5-b4e0-11dfc0fdfab0}\[email protected]
[2017/05/15 14:33:28 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2017/05/23 19:26:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\updated\browser\extensions
 
========== Chrome  ==========
 
CHR - Extension: No name found = C:\Users\steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
CHR - Extension: No name found = C:\Users\steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\aefkmifgmaafnojlojpnekbpbmjiiogg\0.3.2_0\
CHR - Extension: No name found = C:\Users\steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkkbcggnhapdmkeljlodobbkopceiche\4.0.3.2_0\
CHR - Extension: No name found = C:\Users\steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
CHR - Extension: No name found = C:\Users\steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah\1.4.20_0\
CHR - Extension: No name found = C:\Users\steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\flkpkonhokophabdnmggfbdlbdknebel\0.1.3_0\
CHR - Extension: No name found = C:\Users\steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\4.1_0\
CHR - Extension: No name found = C:\Users\steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\
 
O1 HOSTS File: ([2017/01/21 08:08:20 | 000,453,848 | R--- | M]) - C:\WINDOWS\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 15582 more lines...
O2:64bit: - BHO: (ExplorerBHO Class) - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (VIPRE Search Guard Helper) - {963C8283-AE7F-4AA6-9B3B-847A8FC62C5E} - C:\Program Files (x86)\VIPRE\x64\VSGNx64.dll ()
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (ClassicIEBHO Class) - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
O2 - BHO: (ExplorerBHO Class) - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
O2 - BHO: (VIPRE Search Guard Helper) - {963C8283-AE7F-4AA6-9B3B-847A8FC62C5E} - C:\Program Files (x86)\VIPRE\VSGN.dll ()
O2 - BHO: (ClassicIEBHO Class) - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
O2 - BHO: (no name) - AutorunsDisabled - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (Classic Explorer Bar) - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
O3:64bit: - HKLM\..\Toolbar: (VIPRE Search Guard Toolbar) - {A924C17A-5E94-4E02-BED5-49720BA6F7FA} - C:\Program Files (x86)\VIPRE\x64\VSGNx64.dll ()
O3 - HKLM\..\Toolbar: (Classic Explorer Bar) - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
O3 - HKLM\..\Toolbar: (VIPRE Search Guard Toolbar) - {A924C17A-5E94-4E02-BED5-49720BA6F7FA} - C:\Program Files (x86)\VIPRE\VSGN.dll ()
O4:64bit: - HKLM..\Run: [Classic Start Menu] C:\Program Files\Classic Shell\ClassicStartMenu.exe (IvoSoft)
O4:64bit: - HKLM..\Run: [M.M.O.TE] C:\Program Files\Mad Catz\M.M.O.TE\MMO_TE_Profiler.exe (Mad Catz Inc)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [DiscordPTB] C:\ProgramData\SquirrelMachineInstalls\DiscordPTB.exe (Hammer & Chisel, Inc.)
O4 - HKLM..\Run: [Dropbox] C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.)
O4 - HKLM..\Run: [EaseUS Cleanup] E:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\CleanUpUI.exe (CHENGDU Yiwo Tech Development Co., Ltd.)
O4 - HKLM..\Run: [PerditiongmmouseRun] C:\Program Files (x86)\REDRAGONZONE PERDITION Gaming Mouse\pdmon.exe ()
O4 - HKLM..\Run: [SBAMTray] C:\Program Files (x86)\VIPRE\SBAMTray.exe (ThreatTrack Security Inc.)
O4 - HKU\S-1-5-19..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002..\Run: [appnhost] C:\Users\steve\AppData\Local\Mixesoft\AppNHost\appnhost.exe (Mixesoft Project)
O4 - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
O4 - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002..\Run: [Discord] C:\Users\steve\AppData\Local\Discord\app-0.0.297\Discord.exe (Hammer & Chisel, Inc.)
O4 - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002..\Run: [DiscordPTB] C:\Users\steve\AppData\Local\DiscordPTB\app-0.0.32\DiscordPTB.exe (Hammer & Chisel, Inc.)
O4 - Startup: C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7+ Taskbar Tweaker.lnk = C:\Users\steve\AppData\Roaming\7+ Taskbar Tweaker\7+ Taskbar Tweaker.exe (RaMMicHaeL)
O4 - Startup: C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2017/04/19 09:29:11 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IconRestorer.lnk = D:\Program Files (x86)\FSL\IconRestorer\IconRestorer.exe (FSL - Freesoftland)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleNetIDList = 1
O7 - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
O7 - HKU\S-1-5-21-1013499728-4195095473-4192772420-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O8:64bit: - Extra context menu item: &Clean Traces - C:\ProgramData\SpeedBit\DAP\Plugins\3806D774-DD78-41be-BC1E-52766C50A70F\1.0.0.8_0\dapcleanerie.htm File not found
O8:64bit: - Extra context menu item: &Download with &DAP - J:\Program Files (x86)\DAP\dapextie.htm ()
O8:64bit: - Extra context menu item: &Verify with DAP - J:\Program Files (x86)\DAP\dapverify.htm ()
O8:64bit: - Extra context menu item: Download &all with DAP - J:\Program Files (x86)\DAP\dapextie2.htm ()
O8 - Extra context menu item: &Clean Traces - C:\ProgramData\SpeedBit\DAP\Plugins\3806D774-DD78-41be-BC1E-52766C50A70F\1.0.0.8_0\dapcleanerie.htm File not found
O8 - Extra context menu item: &Download with &DAP - J:\Program Files (x86)\DAP\dapextie.htm ()
O8 - Extra context menu item: &Verify with DAP - J:\Program Files (x86)\DAP\dapverify.htm ()
O8 - Extra context menu item: Download &all with DAP - J:\Program Files (x86)\DAP\dapextie2.htm ()
O9:64bit: - Extra 'Tools' menuitem : Classic IE Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe (IvoSoft)
O9 - Extra 'Tools' menuitem : Classic IE Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe (IvoSoft)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog_Before_Reset\Catalog_Entries\000000000001 - D:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll (SPEEDbit)
O10 - Protocol_Catalog_Before_Reset\Catalog_Entries\000000000002 - D:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll (SPEEDbit)
O10 - Protocol_Catalog_Before_Reset\Catalog_Entries\000000000003 - D:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll (SPEEDbit)
O10 - Protocol_Catalog_Before_Reset\Catalog_Entries\000000000004 - D:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll (SPEEDbit)
O10 - Protocol_Catalog_Before_Reset\Catalog_Entries\000000000005 - D:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll (SPEEDbit)
O10 - Protocol_Catalog_Before_Reset\Catalog_Entries\000000000006 - D:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll (SPEEDbit)
O10 - Protocol_Catalog_Before_Reset\Catalog_Entries\000000000007 - D:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll (SPEEDbit)
O10 - Protocol_Catalog_Before_Reset\Catalog_Entries\000000000008 - D:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll (SPEEDbit)
O10 - Protocol_Catalog_Before_Reset\Catalog_Entries\000000000020 - D:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll (SPEEDbit)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ec7e0dc2-f226-4591-8edf-1232d8944e04}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\WINDOWS\SysNative\tbauth.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\vipresg {47BE2E5B-703B-444F-ABD3-05717D2191C6} - C:\Program Files (x86)\VIPRE\x64\VSGNx64.dll ()
O18:64bit: - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\WINDOWS\SysNative\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\WINDOWS\syswow64\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Handler\vipresg {47BE2E5B-703B-444F-ABD3-05717D2191C6} - C:\Program Files (x86)\VIPRE\VSGN.dll ()
O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\WINDOWS\syswow64\tbauth.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/05/14 10:42:06 | 000,000,062 | ---- | M] () - F:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010/12/07 13:03:49 | 000,000,067 | ---- | M] () - G:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2011/11/15 06:29:55 | 000,000,059 | R--- | M] () - I:\AUTORUN.INF -- [ CDFS ]
O32 - AutoRun File - [2007/06/28 08:21:08 | 000,000,277 | R--- | M] () - K:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{c4bbf48a-be35-11e3-8252-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{c4bbf48a-be35-11e3-8252-806e6f6e6963}\Shell\AutoRun\command - "" = I:\Installer_Windows.exe -- [2013/02/12 04:51:28 | 007,104,512 | R--- | M] ()
O33 - MountPoints2\{e69bc4b6-2ff4-11e4-825b-bcee7bdc712e}\Shell - "" = AutoRun
O33 - MountPoints2\{e69bc4b6-2ff4-11e4-825b-bcee7bdc712e}\Shell\AutoRun\command - "" = K:\LaunchU3.exe -- [2007/08/29 06:29:54 | 001,131,832 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
NetSvcs:64bit: DcpSvc - C:\WINDOWS\SysNative\dcpsvc.dll (Microsoft Corporation)
NetSvcs:64bit: NetSetupSvc - C:\WINDOWS\SysNative\NetSetupSvc.dll (Microsoft Corporation)
NetSvcs:64bit: NcaSvc - C:\WINDOWS\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:64bit: wlidsvc - C:\WINDOWS\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:64bit: dmwappushservice - C:\WINDOWS\SysNative\dmwappushsvc.dll (Microsoft Corporation)
NetSvcs:64bit: dosvc - C:\WINDOWS\SysNative\dosvc.dll (Microsoft Corporation)
NetSvcs:64bit: XboxNetApiSvc - C:\WINDOWS\SysNative\XboxNetApiSvc.dll (Microsoft Corporation)
NetSvcs:64bit: UserManager - C:\WINDOWS\SysNative\usermgr.dll (Microsoft Corporation)
NetSvcs:64bit: DsmSvc - C:\WINDOWS\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
NetSvcs:64bit: XblAuthManager - C:\WINDOWS\SysNative\XblAuthManager.dll (Microsoft Corporation)
NetSvcs:64bit: DmEnrollmentSvc - C:\WINDOWS\SysNative\Windows.Internal.Management.dll (Microsoft Corporation)
NetSvcs:64bit: XblGameSave - C:\WINDOWS\SysNative\XblGameSave.dll (Microsoft Corporation)
NetSvcs:64bit: RetailDemo - C:\WINDOWS\SysNative\RDXService.dll (Microsoft Corporation)
NetSvcs:64bit: lfsvc - C:\WINDOWS\SysNative\lfsvc.dll (Microsoft Corporation)
NetSvcs:64bit: UsoSvc - C:\WINDOWS\SysNative\usocore.dll (Microsoft Corporation)
 
 
SafeBootMin:64bit: Ahcache.sys - C:\WINDOWS\SysNative\drivers\ahcache.sys (Microsoft Corporation)
SafeBootMin:64bit: AppMgmt - Service
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: BasicDisplay.sys - C:\WINDOWS\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootMin:64bit: BasicRender.sys - C:\WINDOWS\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: BrokerInfrastructure - C:\WINDOWS\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootMin:64bit: CoreMessagingRegistrar - C:\WINDOWS\SysNative\CoreMessaging.dll (Microsoft Corporation)
SafeBootMin:64bit: EFS - C:\WINDOWS\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: iai2c.sys - C:\WINDOWS\SysNative\drivers\iai2c.sys (Intel® Corporation)
SafeBootMin:64bit: KeyIso - C:\WINDOWS\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootMin:64bit: LSM - C:\WINDOWS\SysNative\lsm.dll (Microsoft Corporation)
SafeBootMin:64bit: MBAMService - Service
SafeBootMin:64bit: Netlogon - C:\WINDOWS\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: SpbCx.sys - C:\WINDOWS\SysNative\drivers\SpbCx.sys (Microsoft Corporation)
SafeBootMin:64bit: StateRepository - C:\WINDOWS\SysNative\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: SystemEventsBroker - C:\WINDOWS\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SafeBootMin:64bit: TBS - Service
SafeBootMin:64bit: TileDataModelSvc - C:\WINDOWS\SysNative\tileobjserver.dll (Microsoft Corporation)
SafeBootMin:64bit: uefi.sys - C:\WINDOWS\SysNative\drivers\uefi.sys (Microsoft Corporation)
SafeBootMin:64bit: UserManager - C:\WINDOWS\SysNative\usermgr.dll (Microsoft Corporation)
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin:64bit: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin:64bit: {F2E7DD72-6468-4E36-B6F1-6488F42C1B52} - Firmware
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: CoreMessagingRegistrar - C:\WINDOWS\syswow64\CoreMessaging.dll (Microsoft Corporation)
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: MBAMService - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SBAMSvc - C:\Program Files (x86)\VIPRE\SBAMSvc.exe (ThreatTrack Security Inc.)
SafeBootMin: SBPIMSvc - C:\Program Files (x86)\VIPRE\SBPIMSvc.exe (ThreatTrack Security Inc.)
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: StateRepository - C:\WINDOWS\syswow64\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TBS - Service
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: {F2E7DD72-6468-4E36-B6F1-6488F42C1B52} - Firmware
 
SafeBootNet:64bit: Ahcache.sys - C:\WINDOWS\SysNative\drivers\ahcache.sys (Microsoft Corporation)
SafeBootNet:64bit: AppMgmt - Service
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: BasicDisplay.sys - C:\WINDOWS\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootNet:64bit: BasicRender.sys - C:\WINDOWS\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: BrokerInfrastructure - C:\WINDOWS\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootNet:64bit: CoreMessagingRegistrar - C:\WINDOWS\SysNative\CoreMessaging.dll (Microsoft Corporation)
SafeBootNet:64bit: EFS - C:\WINDOWS\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: KeyIso - C:\WINDOWS\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootNet:64bit: LSM - C:\WINDOWS\SysNative\lsm.dll (Microsoft Corporation)
SafeBootNet:64bit: MBAMService - Service
SafeBootNet:64bit: Messenger - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Netlogon - C:\WINDOWS\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootNet:64bit: netprofm - C:\WINDOWS\SysNative\netprofmsvc.dll (Microsoft Corporation)
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdpencdd.sys - Driver
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: SmartcardSimulator - Driver
SafeBootNet:64bit: SpbCx.sys - C:\WINDOWS\SysNative\drivers\SpbCx.sys (Microsoft Corporation)
SafeBootNet:64bit: StateRepository - C:\WINDOWS\SysNative\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: SystemEventsBroker - C:\WINDOWS\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SafeBootNet:64bit: TBS - Service
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: TileDataModelSvc - C:\WINDOWS\SysNative\tileobjserver.dll (Microsoft Corporation)
SafeBootNet:64bit: uefi.sys - C:\WINDOWS\SysNative\drivers\uefi.sys (Microsoft Corporation)
SafeBootNet:64bit: UserManager - C:\WINDOWS\SysNative\usermgr.dll (Microsoft Corporation)
SafeBootNet:64bit: VaultSvc - C:\WINDOWS\SysNative\vaultsvc.dll (Microsoft Corporation)
SafeBootNet:64bit: VirtualSmartcardReader - Driver
SafeBootNet:64bit: vmms - Service
SafeBootNet:64bit: Wcmsvc - C:\WINDOWS\SysNative\wcmsvc.dll (Microsoft Corporation)
SafeBootNet:64bit: WebExaminer - C:\WINDOWS\SysNative\drivers\WebExaminer64.sys (ThreatTrack Security Inc.)
SafeBootNet:64bit: WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet:64bit: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet:64bit: {F2E7DD72-6468-4E36-B6F1-6488F42C1B52} - Firmware
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: CoreMessagingRegistrar - C:\WINDOWS\syswow64\CoreMessaging.dll (Microsoft Corporation)
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: Hamachi2Svc - C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe (LogMeIn Inc.)
SafeBootNet: HelpSvc - Service
SafeBootNet: MBAMService - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdpencdd.sys - Driver
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SBAMSvc - C:\Program Files (x86)\VIPRE\SBAMSvc.exe (ThreatTrack Security Inc.)
SafeBootNet: SBPIMSvc - C:\Program Files (x86)\VIPRE\SBPIMSvc.exe (ThreatTrack Security Inc.)
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: SmartcardSimulator - Driver
SafeBootNet: StateRepository - C:\WINDOWS\syswow64\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TBS - Service
SafeBootNet: TDI - Driver Group
SafeBootNet: VipreEdgeProtection - C:\Program Files (x86)\VIPRE\VipreEdgeProtection.exe (ThreatTrack Security Inc.)
SafeBootNet: VirtualSmartcardReader - Driver
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: {F2E7DD72-6468-4E36-B6F1-6488F42C1B52} - Firmware
 
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - 
ActiveX:64bit: {3824B159-1AF3-04B8-A6A1-838988DF7A8D} - Microsoft Windows Media Player
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {63DF5C4B-E3BF-3346-A033-C57B22F44C9E} - .NET Framework
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - 
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
ActiveX:64bit: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: AutorunsDisabled - 
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2608C85D-7F34-4737-C81A-8F19100B0848} - DirectDrawEx
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {476F88BA-08DD-32D8-A8B0-E85EE28CB27F} - .NET Framework
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {7C08E4F1-A917-FDBF-D602-B691713AB66A} - Microsoft Windows Media Player
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - 
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {BA49C2D1-C324-1574-27A7-5DADA40F37BA} - DirectDrawEx
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
 
Drivers32:64bit: aux - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: aux1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: aux3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: aux4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi2 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi8 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midimapper - midimap.dll (Microsoft Corporation)
Drivers32:64bit: mixer - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer2 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer5 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer8 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: msacm.bdmpeg - bdmpega64.acm ()
Drivers32:64bit: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32:64bit: MSVideo - vfwwdm32.dll (Microsoft Corporation)
Drivers32:64bit: MSVideo8 - VfWWDM32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.i420 - lvcod64.dll (Logitech Inc.)
Drivers32:64bit: vidc.iyuv - iyuv_32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.mjpg - bdmjpeg64.dll ()
Drivers32:64bit: vidc.mpeg - bdmpegv64.dll ()
Drivers32:64bit: vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.uyvy - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: vidc.yuy2 - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: vidc.yvu9 - tsbyuv.dll (Microsoft Corporation)
Drivers32:64bit: vidc.yvyu - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: wave - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave2 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave5 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave8 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wavemapper - msacm32.drv (Microsoft Corporation)
Drivers32: aux - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: aux1 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: aux3 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: aux4 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi1 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi2 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi3 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi4 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi8 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midimapper - C:\WINDOWS\SysWow64\midimap.dll (Microsoft Corporation)
Drivers32: mixer - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer1 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer2 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer3 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer4 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer5 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer8 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: msacm.bdmpeg - C:\WINDOWS\SysWow64\bdmpega.acm ()
Drivers32: msacm.imaadpcm - C:\WINDOWS\SysWow64\imaadp32.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\syswow64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.msadpcm - C:\WINDOWS\SysWow64\msadp32.acm (Microsoft Corporation)
Drivers32: msacm.msg711 - C:\WINDOWS\SysWow64\msg711.acm (Microsoft Corporation)
Drivers32: msacm.msgsm610 - C:\WINDOWS\SysWow64\msgsm32.acm (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.i420 - C:\WINDOWS\SysWow64\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.iyuv - C:\WINDOWS\SysWow64\iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.mjpg - C:\WINDOWS\SysWow64\bdmjpeg.dll ()
Drivers32: vidc.mpeg - C:\WINDOWS\SysWow64\bdmpegv.dll ()
Drivers32: vidc.mrle - C:\WINDOWS\SysWow64\msrle32.dll (Microsoft Corporation)
Drivers32: vidc.msvc - C:\WINDOWS\SysWow64\msvidc32.dll (Microsoft Corporation)
Drivers32: vidc.uyvy - C:\WINDOWS\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yuy2 - C:\WINDOWS\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvu9 - C:\WINDOWS\SysWow64\tsbyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvyu - C:\WINDOWS\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: wave - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave1 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave2 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave3 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave4 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave5 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave8 - C:\WINDOWS\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wavemapper - C:\WINDOWS\SysWow64\msacm32.drv (Microsoft Corporation)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 90 Days ==========
 
[2017/05/24 22:42:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2017/05/24 22:42:22 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2017/05/24 21:10:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FS2Crew2014
[2017/05/24 13:13:50 | 000,058,952 | ---- | C] (ThreatTrack Security) -- C:\WINDOWS\SysNative\drivers\gfiark.sys
[2017/05/24 13:13:50 | 000,050,776 | ---- | C] (ThreatTrack Security) -- C:\WINDOWS\SysNative\drivers\gfiutil.sys
[2017/05/24 13:09:25 | 000,073,208 | ---- | C] (ThreatTrack Security) -- C:\WINDOWS\SysNative\drivers\sbhips.sys
[2017/05/24 13:09:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIPRE
[2017/05/24 13:09:23 | 000,047,632 | ---- | C] (ThreatTrack Security Inc.) -- C:\WINDOWS\SysNative\sbbd.exe
[2017/05/24 13:09:11 | 000,000,000 | ---D | C] -- C:\ProgramData\VIPRE
[2017/05/24 13:06:21 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\VIPRE
[2017/05/24 07:35:40 | 000,000,000 | ---D | C] -- C:\ReimageUndo
[2017/05/23 21:45:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo PCTrans
[2017/05/23 14:57:40 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\FSTramp for P3D v3
[2017/05/23 11:44:01 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2017/05/23 10:26:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Reimage Protector
[2017/05/23 10:26:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
[2017/05/23 10:26:19 | 000,000,000 | ---D | C] -- C:\Program Files\Reimage
[2017/05/23 10:26:09 | 000,000,000 | ---D | C] -- C:\rei
[2017/05/22 22:15:22 | 000,177,840 | ---- | C] (Romex Software) -- C:\WINDOWS\SysNative\drivers\rxfcv.sys
[2017/05/22 21:59:08 | 000,134,592 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvStreaming.exe
[2017/05/22 21:58:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VulkanRT
[2017/05/22 21:56:39 | 035,390,072 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglv64.dll
[2017/05/22 21:56:39 | 028,624,504 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglv32.dll
[2017/05/22 21:56:39 | 011,056,456 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvptxJitCompiler.dll
[2017/05/22 21:56:39 | 010,551,072 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll
[2017/05/22 21:56:39 | 009,014,976 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvptxJitCompiler.dll
[2017/05/22 21:56:39 | 008,808,488 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvopencl.dll
[2017/05/22 21:56:39 | 003,797,112 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll
[2017/05/22 21:56:39 | 003,256,440 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll
[2017/05/22 21:56:39 | 001,988,216 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6438233.dll
[2017/05/22 21:56:39 | 001,606,592 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6438233.dll
[2017/05/22 21:56:39 | 001,278,528 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFTH264.dll
[2017/05/22 21:56:39 | 001,275,944 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFThevc.dll
[2017/05/22 21:56:39 | 001,056,704 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvFBC64.dll
[2017/05/22 21:56:39 | 000,995,736 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFTH264.dll
[2017/05/22 21:56:39 | 000,993,912 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvFBC.dll
[2017/05/22 21:56:39 | 000,993,872 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFThevc.dll
[2017/05/22 21:56:39 | 000,964,032 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFR64.dll
[2017/05/22 21:56:39 | 000,914,880 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFR.dll
[2017/05/22 21:56:39 | 000,775,864 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncodeAPI64.dll
[2017/05/22 21:56:39 | 000,725,112 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvDecMFTMjpeg.dll
[2017/05/22 21:56:39 | 000,688,968 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvfatbinaryLoader.dll
[2017/05/22 21:56:39 | 000,618,928 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvmcumd.dll
[2017/05/22 21:56:39 | 000,612,272 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncodeAPI.dll
[2017/05/22 21:56:39 | 000,609,728 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFROpenGL.dll
[2017/05/22 21:56:39 | 000,583,800 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvDecMFTMjpeg.dll
[2017/05/22 21:56:39 | 000,577,728 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvfatbinaryLoader.dll
[2017/05/22 21:56:39 | 000,499,320 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFROpenGL.dll
[2017/05/22 21:56:39 | 000,493,096 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvumdshim.dll
[2017/05/22 21:56:39 | 000,195,968 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvinitx.dll
[2017/05/22 21:56:39 | 000,172,736 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglshim64.dll
[2017/05/22 21:56:39 | 000,168,824 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvinit.dll
[2017/05/22 21:56:39 | 000,144,104 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglshim32.dll
[2017/05/22 21:56:37 | 040,201,848 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcompiler.dll
[2017/05/22 21:56:37 | 035,282,040 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcompiler.dll
[2017/05/22 21:56:37 | 011,028,664 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll
[2017/05/22 21:56:37 | 009,248,144 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuda.dll
[2017/05/22 21:50:57 | 000,175,736 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvaudcap64v.dll
[2017/05/22 21:50:57 | 000,143,480 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvaudcap32v.dll
[2017/05/22 19:07:00 | 000,000,000 | ---D | C] -- C:\ProgramData\FSTramp for P3D v3
[2017/05/22 19:05:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FSTramp
[2017/05/22 19:04:46 | 000,000,000 | ---D | C] -- C:\ProgramData\FSTramp
[2017/05/22 14:40:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Memory Optimizer
[2017/05/22 14:07:45 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Wise Game Booster
[2017/05/22 14:07:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Game Booster
[2017/05/17 17:12:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
[2017/05/17 16:15:33 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\krita
[2017/05/17 16:14:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Krita
[2017/05/17 16:11:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Artweaver Free
[2017/05/17 16:11:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Artweaver Free
[2017/05/16 23:27:35 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\ClassicShell
[2017/05/16 23:26:05 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\ClassicShell
[2017/05/16 23:24:07 | 000,000,000 | ---D | C] -- C:\ProgramData\ClassicShell
[2017/05/16 23:18:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
[2017/05/16 23:18:25 | 000,000,000 | ---D | C] -- C:\Program Files\Classic Shell
[2017/05/16 17:50:05 | 000,000,000 | ---D | C] -- C:\Users\steve\Documents\paint.net User Files
[2017/05/16 16:50:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\A Sharper Scaling
[2017/05/16 16:01:28 | 000,048,944 | ---- | C] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\DbxSvc.exe
[2017/05/14 19:17:35 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TFDi Design
[2017/05/14 11:41:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JoinFS
[2017/05/13 11:21:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2017/05/13 00:08:00 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Pilot2ATC_200
[2017/05/12 07:32:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TFDi Design
[2017/05/12 02:05:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pilot2ATC_2016
[2017/05/10 17:39:41 | 000,000,000 | ---D | C] -- C:\Program Files\Waves
[2017/05/10 17:39:00 | 001,382,232 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\SysNative\tosade.dll
[2017/05/10 17:38:59 | 000,873,464 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\SysNative\tadefxapo264.dll
[2017/05/10 17:38:59 | 000,532,376 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\SysNative\SRSTSX64.dll
[2017/05/10 17:38:59 | 000,221,968 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\SysNative\SRSTSH64.dll
[2017/05/10 17:38:59 | 000,209,536 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\SysNative\SRSHP64.dll
[2017/05/10 17:38:59 | 000,166,200 | ---- | C] (SRS Labs, Inc.) -- C:\WINDOWS\SysNative\SRSWOW64.dll
[2017/05/10 17:38:59 | 000,158,696 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\SysNative\tadefxapo.dll
[2017/05/10 17:38:59 | 000,075,536 | ---- | C] (TOSHIBA CORPORATION.) -- C:\WINDOWS\SysNative\tepeqapo64.dll
[2017/05/10 17:38:58 | 000,965,024 | ---- | C] (Sony Corporation) -- C:\WINDOWS\SysNative\SFSS_APO.dll
[2017/05/10 17:38:58 | 000,231,912 | ---- | C] (Synopsys, Inc.) -- C:\WINDOWS\SysNative\SFNHK64.dll
[2017/05/10 17:38:57 | 000,090,912 | ---- | C] (Synopsys, Inc.) -- C:\WINDOWS\SysNative\SFCOM64.dll
[2017/05/10 17:38:57 | 000,088,320 | ---- | C] (Synopsys, Inc.) -- C:\WINDOWS\SysNative\SFAPO64.dll
[2017/05/10 17:38:57 | 000,083,624 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\WINDOWS\SysWow64\SFCOM.dll
[2017/05/10 17:38:56 | 003,203,584 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtPgEx64.dll
[2017/05/10 17:38:56 | 003,014,144 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RTSnMg64.cpl
[2017/05/10 17:38:56 | 000,343,704 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtlCPAPI64.dll
[2017/05/10 17:38:55 | 003,503,048 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtkApi64.dll
[2017/05/10 17:38:55 | 000,387,312 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RTEEP64A.dll
[2017/05/10 17:38:55 | 000,214,832 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RTEED64A.dll
[2017/05/10 17:38:55 | 000,192,976 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtkCfg64.dll
[2017/05/10 17:38:55 | 000,110,984 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RTEEL64A.dll
[2017/05/10 17:38:55 | 000,088,344 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RTEEG64A.dll
[2017/05/10 17:38:55 | 000,023,688 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtkCoLDR64.dll
[2017/05/10 17:38:54 | 003,203,424 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RltkAPO64.dll
[2017/05/10 17:38:54 | 001,353,824 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RTCOM64.dll
[2017/05/10 17:38:54 | 000,689,880 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RtDataProc64.dll
[2017/05/10 17:38:54 | 000,321,712 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RP3DHT64.dll
[2017/05/10 17:38:54 | 000,321,712 | ---- | C] (Dolby Laboratories, Inc.) -- C:\WINDOWS\SysNative\RP3DAA64.dll
[2017/05/10 17:38:52 | 072,520,712 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RCoRes64.dat
[2017/05/10 17:38:52 | 002,201,600 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SysNative\RCoInstII64.dll
[2017/05/10 17:38:51 | 007,172,912 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EEP64A.dll
[2017/05/10 17:38:51 | 000,447,720 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EED64A.dll
[2017/05/10 17:38:51 | 000,151,784 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EEL64A.dll
[2017/05/10 17:38:51 | 000,134,200 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EEA64A.dll
[2017/05/10 17:38:51 | 000,084,616 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\R4EEG64A.dll
[2017/05/10 17:38:47 | 000,677,672 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxVolumeSDAPO.dll
[2017/05/10 17:38:44 | 002,050,176 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioEQ64.dll
[2017/05/10 17:38:42 | 001,166,152 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioAPO4064.dll
[2017/05/10 17:38:42 | 000,678,176 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioAPO30.dll
[2017/05/10 17:38:42 | 000,330,560 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioAPO20.dll
[2017/05/10 17:38:40 | 000,618,184 | ---- | C] (Knowles Acoustics ) -- C:\WINDOWS\SysNative\KAAPORT64.dll
[2017/05/10 17:38:28 | 003,302,272 | ---- | C] (Fortemedia Corporation) -- C:\WINDOWS\SysNative\FMAPO64.dll
[2017/05/10 17:38:27 | 000,708,312 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSVoiceClarityDLL64.dll
[2017/05/10 17:38:27 | 000,428,224 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSU2PREC64.dll
[2017/05/10 17:38:26 | 001,780,616 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSS2SpeakerDLL64.dll
[2017/05/10 17:38:26 | 001,591,056 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSS2HeadphoneDLL64.dll
[2017/05/10 17:38:26 | 000,727,432 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSSymmetryDLL64.dll
[2017/05/10 17:38:26 | 000,514,520 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSU2PLFX64.dll
[2017/05/10 17:38:26 | 000,504,304 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSNeoPCDLL64.dll
[2017/05/10 17:38:26 | 000,500,552 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSU2PGFX64.dll
[2017/05/10 17:38:26 | 000,445,400 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSLimiterDLL64.dll
[2017/05/10 17:38:26 | 000,441,264 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSGainCompensatorDLL64.dll
[2017/05/10 17:38:26 | 000,253,896 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSGFXAPO64.dll
[2017/05/10 17:38:26 | 000,253,864 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSLFXAPO64.dll
[2017/05/10 17:38:26 | 000,252,872 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSGFXAPONS64.dll
[2017/05/10 17:38:25 | 001,508,928 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSBoostDLL64.dll
[2017/05/10 17:38:25 | 000,743,960 | ---- | C] (DTS) -- C:\WINDOWS\SysNative\DTSBassEnhancementDLL64.dll
[2017/05/10 17:38:24 | 007,096,184 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\DDPP64A.dll
[2017/05/10 17:38:24 | 000,327,448 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\DDPO64A.dll
[2017/05/10 17:38:23 | 001,965,808 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\DDPD64A.dll
[2017/05/10 17:38:23 | 000,272,712 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\DDPA64.dll
[2017/05/10 17:38:19 | 000,122,320 | ---- | C] (Real Sound Lab SIA) -- C:\WINDOWS\SysNative\CONEQMSAPOGUILibrary.dll
[2017/05/10 17:38:07 | 000,574,752 | ---- | C] (Andrea Electronics Corporation) -- C:\WINDOWS\SysNative\AERTAC64.dll
[2017/05/10 17:38:07 | 000,118,592 | ---- | C] (Andrea Electronics Corporation) -- C:\WINDOWS\SysNative\AERTAR64.dll
[2017/05/10 17:34:58 | 002,839,520 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RtlExUpd.dll
[2017/05/10 17:30:56 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2017/05/10 09:57:06 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\ImagePrinter Pro
[2017/05/10 09:57:02 | 000,024,576 | ---- | C] (Copyright © 2011  Code Industry LTD) -- C:\WINDOWS\SysNative\img_localmon.dll
[2017/05/10 09:57:02 | 000,015,872 | ---- | C] (Copyright © 2011  Code Industry LTD) -- C:\WINDOWS\SysNative\img_localui.dll
[2017/05/10 09:57:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImagePrinter Pro
[2017/05/10 09:56:57 | 000,000,000 | ---D | C] -- C:\Program Files\Code Industry
[2017/05/09 16:30:16 | 000,703,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWAHost.exe
[2017/05/09 16:30:16 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSSync.dll
[2017/05/09 16:30:15 | 005,240,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
[2017/05/09 16:30:15 | 001,813,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll
[2017/05/09 16:30:15 | 000,805,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSShared.dll
[2017/05/09 16:30:15 | 000,461,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
[2017/05/09 16:30:15 | 000,339,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\certcli.dll
[2017/05/09 16:30:14 | 004,404,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Search.dll
[2017/05/09 16:30:14 | 004,078,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dbgeng.dll
[2017/05/09 16:30:13 | 002,604,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CertEnroll.dll
[2017/05/09 16:30:13 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\oemlicense.dll
[2017/05/09 16:30:12 | 013,018,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
[2017/05/09 16:30:12 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AzureSettingSyncProvider.dll
[2017/05/09 16:30:12 | 000,465,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncHost.exe
[2017/05/09 16:30:12 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepapi.dll
[2017/05/09 16:30:11 | 006,296,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll
[2017/05/09 16:30:11 | 003,695,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_47.dll
[2017/05/09 16:30:11 | 001,556,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OpcServices.dll
[2017/05/09 16:30:11 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OneDriveSettingSyncProvider.dll
[2017/05/09 16:30:11 | 000,260,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepsync.dll
[2017/05/09 16:30:10 | 004,412,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExplorerFrame.dll
[2017/05/09 16:30:10 | 000,256,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\unimdm.tsp
[2017/05/09 16:30:10 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\odbcconf.dll
[2017/05/09 16:30:06 | 000,881,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2017/05/09 16:30:05 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GamePanel.exe
[2017/05/09 16:30:04 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
[2017/05/09 16:30:04 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\licensingdiag.exe
[2017/05/09 16:30:03 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\IdCtrls.dll
[2017/05/09 16:30:01 | 000,865,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AzureSettingSyncProvider.dll
[2017/05/09 16:29:57 | 000,808,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWAHost.exe
[2017/05/09 16:29:57 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
[2017/05/09 16:29:57 | 000,381,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
[2017/05/09 16:29:57 | 000,379,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
[2017/05/09 16:29:57 | 000,269,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
[2017/05/09 16:29:57 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
[2017/05/09 16:29:57 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
[2017/05/09 16:29:56 | 002,911,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CertEnroll.dll
[2017/05/09 16:29:52 | 000,821,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fvewiz.dll
[2017/05/09 16:29:23 | 000,572,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WpcWebFilter.dll
[2017/05/09 16:29:23 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wksprtPS.dll
[2017/05/09 16:29:22 | 004,171,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
[2017/05/09 16:29:22 | 000,824,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcWebFilter.dll
[2017/05/09 16:29:22 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
[2017/05/09 16:29:21 | 005,123,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dbgeng.dll
[2017/05/09 16:29:21 | 001,997,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll
[2017/05/09 16:29:20 | 007,977,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll
[2017/05/09 16:29:20 | 006,604,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
[2017/05/09 16:29:20 | 000,800,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll
[2017/05/09 16:29:18 | 001,060,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
[2017/05/09 16:29:18 | 000,330,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
[2017/05/09 16:29:18 | 000,238,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Streaming.ps.dll
[2017/05/09 16:29:17 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
[2017/05/09 16:29:17 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
[2017/05/09 16:29:16 | 018,673,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2017/05/09 16:29:15 | 002,050,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
[2017/05/09 16:29:15 | 000,853,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadtb.dll
[2017/05/09 16:29:15 | 000,784,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
[2017/05/09 16:29:14 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSSync.dll
[2017/05/09 16:29:14 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieetwcollector.exe
[2017/05/09 16:29:13 | 002,055,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OpcServices.dll
[2017/05/09 16:29:12 | 002,127,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
[2017/05/09 16:29:12 | 001,526,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
[2017/05/09 16:29:12 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iepeers.dll
[2017/05/09 16:29:11 | 005,670,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
[2017/05/09 16:29:11 | 004,889,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2017/05/09 16:29:11 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\odbcconf.dll
[2017/05/09 16:29:10 | 003,449,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSService.dll
[2017/05/09 16:29:10 | 000,961,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSShared.dll
[2017/05/09 16:29:10 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieproxy.dll
[2017/05/09 16:29:10 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WUDFPlatform.dll
[2017/05/09 16:29:09 | 016,985,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
[2017/05/09 16:29:09 | 001,098,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MrmCoreR.dll
[2017/05/09 16:29:09 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserbroker.dll
[2017/05/09 16:29:08 | 001,323,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ole32.dll
[2017/05/09 16:29:08 | 000,291,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtrans.dll
[2017/05/09 16:29:08 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iepeers.dll
[2017/05/09 16:29:08 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
[2017/05/09 16:29:07 | 007,853,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
[2017/05/09 16:29:07 | 001,752,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
[2017/05/09 16:29:06 | 022,375,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
[2017/05/09 16:29:06 | 000,689,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieproxy.dll
[2017/05/09 16:29:05 | 007,465,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2017/05/09 16:29:05 | 006,312,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
[2017/05/09 16:29:05 | 000,602,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
[2017/05/09 16:29:05 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\unimdm.tsp
[2017/05/09 16:29:04 | 002,608,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll
[2017/05/09 16:29:04 | 001,848,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\crypt32.dll
[2017/05/09 16:29:04 | 001,388,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
[2017/05/09 16:28:58 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dpapisrv.dll
[2017/05/09 16:28:58 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tdc.ocx
[2017/05/09 16:28:58 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tdc.ocx
[2017/05/09 16:28:58 | 000,026,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browser_broker.exe
[2017/05/09 16:28:57 | 001,128,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipUp.exe
[2017/05/09 16:28:57 | 000,625,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipSVC.dll
[2017/05/09 16:28:57 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\certcli.dll
[2017/05/09 16:28:57 | 000,287,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepapi.dll
[2017/05/09 16:28:57 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oemlicense.dll
[2017/05/09 16:28:56 | 003,993,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
[2017/05/09 16:28:56 | 001,386,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
[2017/05/09 16:28:56 | 000,692,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppwinob.dll
[2017/05/09 16:28:56 | 000,566,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncHost.exe
[2017/05/09 16:28:56 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winsrv.dll
[2017/05/09 16:28:56 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IdCtrls.dll
[2017/05/09 16:28:55 | 001,540,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppobjs.dll
[2017/05/09 16:28:55 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cryptui.dll
[2017/05/09 16:28:55 | 000,381,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepsync.dll
[2017/05/09 16:28:55 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fdProxy.dll
[2017/05/09 16:28:54 | 004,456,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_47.dll
[2017/05/09 16:28:54 | 003,586,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
[2017/05/09 16:28:54 | 001,594,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32.dll
[2017/05/09 16:28:54 | 000,515,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneDriveSettingSyncProvider.dll
[2017/05/09 16:28:53 | 002,610,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkMobileSettings.dll
[2017/05/09 16:28:52 | 003,585,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsThresholdAdminFlowUI.dll
[2017/05/09 16:28:52 | 002,125,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Bluetooth.dll
[2017/05/09 16:28:52 | 000,715,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe
[2017/05/09 16:28:51 | 004,826,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ExplorerFrame.dll
[2017/05/09 16:28:50 | 001,317,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi
[2017/05/09 16:28:50 | 001,087,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll
[2017/05/09 16:28:50 | 001,030,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi
[2017/05/09 16:28:50 | 000,754,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
[2017/05/09 16:28:50 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbonRes.dll
[2017/05/09 16:28:50 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
[2017/05/09 16:28:49 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\licensingdiag.exe
[2017/05/07 13:22:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Synchro-Soft B-25 Mitchell Soundset
[2017/05/06 23:52:53 | 000,000,000 | ---D | C] -- C:\ProgramData\yyr6n0
[2017/05/06 19:11:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EFASS - Electronic Flight Assistant
[2017/05/06 09:05:40 | 000,000,000 | ---D | C] -- C:\ProgramData\eHenbHajd0yB
[2017/05/05 18:36:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Logs
[2017/05/05 18:35:29 | 000,000,000 | ---D | C] -- C:\Users\steve\Documents\DbgLogs
[2017/05/04 20:43:10 | 001,988,032 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6438205.dll
[2017/05/04 20:43:10 | 001,589,696 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6438205.dll
[2017/05/04 18:53:41 | 000,000,000 | ---D | C] -- C:\Users\steve\Documents\Vivint CS chat
[2017/05/04 14:51:20 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Wise Uninstaller
[2017/05/04 14:51:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Program Uninstaller
[2017/05/04 14:51:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Wise
[2017/05/03 14:10:45 | 000,000,000 | ---D | C] -- C:\Users\steve\Documents\FLIGHT PLAN PDF
[2017/05/03 08:43:11 | 000,084,960 | -H-- | C] (Sysinternals - www.sysinternals.com) -- C:\WINDOWS\SysNative\drivers\PROCMON23.SYS
[2017/05/02 23:51:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wilco Publishing
[2017/05/02 18:56:14 | 000,000,000 | ---D | C] -- C:\Users\steve\Documents\XP FLIGHT PLANNER
[2017/05/02 17:23:56 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\ScruffyDuck_Software
[2017/05/02 16:31:01 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\ScruffyDuck
[2017/05/01 07:48:37 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\VS Revo Group
[2017/04/29 07:38:11 | 000,040,240 | ---- | C] (VS Revo Group) -- C:\WINDOWS\SysNative\drivers\revoflt.sys
[2017/04/28 23:23:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aerosoft - USCitiesX - Cleveland - PREPAR3D V3.x
[2017/04/28 19:10:18 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Google
[2017/04/28 17:35:35 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2017/04/28 15:44:29 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\FSX Planner
[2017/04/28 15:36:15 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\zBlueSoftware
[2017/04/28 15:36:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FSX Planner
[2017/04/28 13:33:13 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\Kjs.AppLife.Update
[2017/04/28 07:18:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2017/04/26 21:42:41 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hidparse.sys
[2017/04/26 20:29:48 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller
[2017/04/26 20:29:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
[2017/04/26 20:29:18 | 000,000,000 | ---D | C] -- C:\Program Files\RogueKiller
[2017/04/26 12:08:35 | 000,000,000 | ---D | C] -- C:\Users\steve\Documents\Froom
[2017/04/26 12:07:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EFASS
[2017/04/26 03:35:01 | 000,000,000 | ---D | C] -- C:\Users\steve\Documents\New folder
[2017/04/25 19:22:34 | 001,988,216 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6438189.dll
[2017/04/25 19:22:34 | 001,589,880 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6438189.dll
[2017/04/25 15:35:52 | 000,000,000 | ---D | C] -- C:\Users\steve\Documents\Gaming Mouse Perdition
[2017/04/25 15:35:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REDRAGONZONE PERDITION Gaming Mouse
[2017/04/25 15:35:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\REDRAGONZONE PERDITION Gaming Mouse
[2017/04/25 04:06:36 | 000,000,000 | ---D | C] -- C:\Users\steve\Desktop\Manual-Yak-40
[2017/04/24 18:40:36 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\discordptb
[2017/04/24 18:40:30 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\DiscordPTB
[2017/04/24 18:40:25 | 000,000,000 | ---D | C] -- C:\ProgramData\SquirrelMachineInstalls
[2017/04/24 17:08:42 | 001,988,032 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6438178.dll
[2017/04/24 17:08:42 | 001,591,352 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6438178.dll
[2017/04/24 15:37:42 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\Discord
[2017/04/24 01:29:32 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\Aerocalculus
[2017/04/24 01:29:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aerocalculus
[2017/04/22 22:25:54 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SunSkyJet Sceneries
[2017/04/22 22:25:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SunSkyJet Sceneries
[2017/04/21 17:09:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aerosoft - Airbus A320-A321 - PREPAR3D V3.x
[2017/04/21 17:01:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aerosoft - Airbus A318-A319 - PREPAR3D V3.x
[2017/04/21 11:44:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Conexant
[2017/04/21 11:01:29 | 000,000,000 | -HSD | C] -- C:\WINDOWS\SysWow64\AI_RecycleBin
[2017/04/21 11:01:21 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Should I Remove It
[2017/04/21 09:55:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2017/04/19 16:19:14 | 000,000,000 | ---D | C] -- C:\ProgramData\LIKfnX
[2017/04/19 09:29:01 | 000,000,000 | -H-D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled
[2017/04/17 10:30:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CR-Software
[2017/04/17 10:30:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CR-Software
[2017/04/14 07:40:48 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\PMDG Operations Center
[2017/04/13 21:22:27 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\ScruffyDuck
[2017/04/13 21:22:26 | 000,000,000 | ---D | C] -- C:\ProgramData\TracerX
[2017/04/13 20:00:08 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\.marble
[2017/04/13 20:00:07 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\ABarthel
[2017/04/12 13:06:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
[2017/04/12 12:49:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2017/04/12 12:49:20 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2017/04/12 12:49:19 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2017/04/12 12:47:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2017/04/12 10:24:59 | 006,958,304 | ---- | C] (Microsoft Corp.) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
[2017/04/12 10:24:58 | 000,546,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
[2017/04/12 10:24:58 | 000,316,248 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll
[2017/04/12 10:24:58 | 000,037,376 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll
[2017/04/12 10:24:56 | 001,542,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\quartz.dll
[2017/04/12 10:24:45 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataTimeUtil.dll
[2017/04/12 10:24:44 | 000,168,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscapi.dll
[2017/04/12 10:24:44 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmjpegdec.dll
[2017/04/12 10:24:44 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BasicRender.sys
[2017/04/12 10:24:43 | 000,262,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LsaIso.exe
[2017/04/12 10:24:39 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataTimeUtil.dll
[2017/04/12 10:24:11 | 008,710,320 | ---- | C] (Microsoft Corp.) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
[2017/04/12 10:24:09 | 000,100,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pdc.sys
[2017/04/12 10:24:07 | 000,388,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpps.dll
[2017/04/12 10:24:02 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmjpegdec.dll
[2017/04/12 10:23:51 | 001,777,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WindowsCodecs.dll
[2017/04/12 10:23:45 | 000,061,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dam.sys
[2017/04/12 10:23:44 | 000,393,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2017/04/12 10:23:44 | 000,379,232 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll
[2017/04/12 10:23:43 | 000,636,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
[2017/04/12 10:23:43 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vss_ps.dll
[2017/04/12 10:23:42 | 001,674,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\quartz.dll
[2017/04/12 10:23:41 | 000,202,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscapi.dll
[2017/04/12 10:23:35 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmcertinst.exe
[2017/04/12 10:23:35 | 000,045,568 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll
[2017/04/12 01:37:25 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aeroplane Heaven
[2017/04/10 11:36:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NMG Africa Terrain Mesh V1.4 (P3D3)
[2017/04/07 22:59:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared
[2017/04/07 00:02:13 | 000,046,008 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvhdap64.dll
[2017/04/07 00:02:10 | 001,988,032 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6438165.dll
[2017/04/07 00:02:10 | 001,591,352 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6438165.dll
[2017/04/03 16:57:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\vJoy
[2017/04/03 16:57:52 | 000,057,976 | ---- | C] (Shaul Eizikovich) -- C:\WINDOWS\SysNative\drivers\vjoy.sys
[2017/04/03 16:57:52 | 000,010,936 | ---- | C] (Windows ® Win 7 DDK provider) -- C:\WINDOWS\SysNative\drivers\hidkmdf.sys
[2017/04/03 16:57:52 | 000,000,000 | ---D | C] -- C:\Program Files\vJoy
[2017/03/31 21:20:39 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KMGM Montgomery Regional Airport FSX-P3D
[2017/03/31 21:19:00 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KBHM Birmingham Alabama P3D3
[2017/03/31 01:45:00 | 000,000,000 | ---D | C] -- C:\Users\steve\Desktop\Tom Clancy's Ghost Recon® Wildlands
[2017/03/31 01:17:57 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\EasyAntiCheat
[2017/03/31 01:17:26 | 000,409,128 | ---- | C] (EasyAntiCheat Ltd) -- C:\WINDOWS\SysWow64\EasyAntiCheat.exe
[2017/03/30 23:26:40 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\Ubisoft Game Launcher
[2017/03/30 23:26:40 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
[2017/03/26 21:11:00 | 000,000,000 | ---D | C] -- C:\Users\steve\Documents\wmd_symbol_cache
[2017/03/26 21:11:00 | 000,000,000 | ---D | C] -- C:\Users\steve\Documents\Project CARS
[2017/03/26 18:42:15 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\TextMage
[2017/03/25 17:39:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XpressSim V2
[2017/03/22 21:03:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WeFly GPS AutoPilot Professional 2.1
[2017/03/22 05:07:00 | 000,045,672 | ---- | C] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-stable.sys
[2017/03/22 05:07:00 | 000,045,672 | ---- | C] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-dev.sys
[2017/03/22 05:07:00 | 000,045,672 | ---- | C] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-canary.sys
[2017/03/22 01:58:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aircraft Factory
[2017/03/20 23:34:55 | 020,825,080 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvwgf2um.dll
[2017/03/20 23:34:54 | 001,983,424 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6437892.dll
[2017/03/20 23:34:54 | 001,589,696 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6437892.dll
[2017/03/18 20:59:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SibWings
[2017/03/18 00:20:52 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nemeth Designs
[2017/03/14 12:55:30 | 001,349,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winmde.dll
[2017/03/14 12:55:30 | 000,980,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll
[2017/03/14 12:55:30 | 000,895,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
[2017/03/14 12:55:30 | 000,854,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Bluetooth.dll
[2017/03/14 12:55:30 | 000,701,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetcore.dll
[2017/03/14 12:55:30 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mbsmsapi.dll
[2017/03/14 12:55:30 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MosHostClient.dll
[2017/03/14 12:55:29 | 001,118,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll
[2017/03/14 12:55:29 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\JpMapControl.dll
[2017/03/14 12:55:29 | 000,713,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
[2017/03/14 12:55:29 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserLanguagesCpl.dll
[2017/03/14 12:55:29 | 000,349,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapConfiguration.dll
[2017/03/14 12:55:29 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MosStorage.dll
[2017/03/14 12:55:28 | 002,186,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3d11.dll
[2017/03/14 12:55:28 | 002,180,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
[2017/03/14 12:55:28 | 001,860,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll
[2017/03/14 12:55:28 | 001,185,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LocationFramework.dll
[2017/03/14 12:55:28 | 001,117,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.dll
[2017/03/14 12:55:28 | 000,987,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
[2017/03/14 12:55:28 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapsBtSvc.dll
[2017/03/14 12:55:27 | 005,326,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
[2017/03/14 12:55:27 | 005,205,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BingMaps.dll
[2017/03/14 12:55:27 | 001,944,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputService.dll
[2017/03/14 12:55:27 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usercpl.dll
[2017/03/14 12:55:27 | 000,784,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NMAA.dll
[2017/03/14 12:55:27 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MsSpellCheckingFacility.dll
[2017/03/14 12:55:27 | 000,711,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapControlCore.dll
[2017/03/14 12:55:26 | 002,519,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\themecpl.dll
[2017/03/14 12:55:26 | 002,062,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
[2017/03/14 12:55:26 | 000,925,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll
[2017/03/14 12:55:26 | 000,372,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppBroker.dll
[2017/03/14 12:55:26 | 000,368,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Enumeration.dll
[2017/03/14 12:55:25 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSync.dll
[2017/03/14 12:55:24 | 002,798,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
[2017/03/14 12:55:24 | 001,626,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll
[2017/03/14 12:55:23 | 002,578,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gameux.dll
[2017/03/14 12:55:23 | 002,155,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll
[2017/03/14 12:55:23 | 001,582,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll
[2017/03/14 12:55:23 | 000,581,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.dll
[2017/03/14 12:55:23 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Geolocation.dll
[2017/03/14 12:55:22 | 002,000,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll
[2017/03/14 12:55:22 | 000,836,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
[2017/03/14 12:55:22 | 000,754,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncCore.dll
[2017/03/14 12:55:22 | 000,639,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBroker.dll
[2017/03/14 12:55:21 | 000,569,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SHCore.dll
[2017/03/14 12:55:21 | 000,306,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanapi.dll
[2017/03/14 12:55:20 | 009,921,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll
[2017/03/14 12:55:20 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cryptui.dll
[2017/03/14 12:55:20 | 000,502,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DevicePairing.dll
[2017/03/14 12:55:20 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe
[2017/03/14 12:55:19 | 004,075,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe
[2017/03/14 12:55:19 | 001,708,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActiveSyncProvider.dll
[2017/03/14 12:55:19 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlansec.dll
[2017/03/14 12:55:17 | 000,705,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2017/03/14 12:55:11 | 001,497,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WMPDMC.exe
[2017/03/14 12:55:10 | 002,448,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll
[2017/03/14 12:55:10 | 000,871,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSMPEG2ENC.DLL
[2017/03/14 12:55:06 | 000,882,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2adec.dll
[2017/03/14 12:55:05 | 000,473,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DolbyDecMFT.dll
[2017/03/14 12:55:05 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
[2017/03/14 12:55:04 | 001,467,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GdiPlus.dll
[2017/03/14 12:55:03 | 000,922,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ucrtbase.dll
[2017/03/14 12:55:03 | 000,467,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSAudDecMFT.dll
[2017/03/14 12:55:03 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\setupugc.exe
[2017/03/14 12:55:02 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rshx32.dll
[2017/03/14 12:55:01 | 000,724,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanpref.dll
[2017/03/14 12:55:01 | 000,329,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Proximity.dll
[2017/03/14 12:55:01 | 000,302,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mcbuilder.exe
[2017/03/14 12:55:01 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apds.dll
[2017/03/14 12:55:01 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReInfo.dll
[2017/03/14 12:55:01 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CallButtons.dll
[2017/03/14 12:55:01 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\feclient.dll
[2017/03/14 12:55:01 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sscore.dll
[2017/03/14 12:55:01 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\stdole2.tlb
[2017/03/14 12:54:57 | 001,487,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SpeechPal.dll
[2017/03/14 12:54:55 | 001,554,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpmde.dll
[2017/03/14 12:54:55 | 001,552,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmde.dll
[2017/03/14 12:54:55 | 000,556,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll
[2017/03/14 12:54:54 | 001,490,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataService.dll
[2017/03/14 12:54:54 | 001,040,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
[2017/03/14 12:54:54 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups.dll
[2017/03/14 12:54:52 | 000,989,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi
[2017/03/14 12:54:49 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ngccredprov.dll
[2017/03/14 12:54:49 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NgcCtnr.dll
[2017/03/14 12:54:49 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorService.dll
[2017/03/14 12:54:48 | 000,994,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ucrtbase.dll
[2017/03/14 12:54:42 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpclip.exe
[2017/03/14 12:54:24 | 001,152,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll
[2017/03/14 12:54:24 | 001,017,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
[2017/03/14 12:54:24 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efswrt.dll
[2017/03/14 12:54:24 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MosHostClient.dll
[2017/03/14 12:54:24 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mapsupdatetask.dll
[2017/03/14 12:54:23 | 001,092,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll
[2017/03/14 12:54:23 | 000,819,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
[2017/03/14 12:54:23 | 000,674,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mbsmsapi.dll
[2017/03/14 12:54:23 | 000,586,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll
[2017/03/14 12:54:23 | 000,498,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFCaptureEngine.dll
[2017/03/14 12:54:23 | 000,460,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapConfiguration.dll
[2017/03/14 12:54:23 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsCSP.dll
[2017/03/14 12:54:23 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MosStorage.dll
[2017/03/14 12:54:23 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\moshost.dll
[2017/03/14 12:54:22 | 012,590,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2017/03/14 12:54:22 | 000,931,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSMPEG2ENC.DLL
[2017/03/14 12:54:22 | 000,858,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetcore.dll
[2017/03/14 12:54:22 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToDevice.dll
[2017/03/14 12:54:22 | 000,286,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsApi.dll
[2017/03/14 12:54:21 | 001,297,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
[2017/03/14 12:54:21 | 000,988,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NMAA.dll
[2017/03/14 12:54:21 | 000,939,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapControlCore.dll
[2017/03/14 12:54:21 | 000,852,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsStore.dll
[2017/03/14 12:54:21 | 000,510,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WlanMediaManager.dll
[2017/03/14 12:54:21 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netplwiz.dll
[2017/03/14 12:54:20 | 002,582,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
[2017/03/14 12:54:20 | 002,544,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
[2017/03/14 12:54:20 | 001,299,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetsrc.dll
[2017/03/14 12:54:20 | 001,056,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\JpMapControl.dll
[2017/03/14 12:54:20 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\moshostcore.dll
[2017/03/14 12:54:20 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LegacyNetUXHost.exe
[2017/03/14 12:54:20 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsBtSvc.dll
[2017/03/14 12:54:19 | 014,258,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
[2017/03/14 12:54:19 | 003,428,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
[2017/03/14 12:54:19 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsApi.dll
[2017/03/14 12:54:18 | 001,385,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usercpl.dll
[2017/03/14 12:54:18 | 000,882,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntshrui.dll
[2017/03/14 12:54:17 | 000,842,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32spl.dll
[2017/03/14 12:54:17 | 000,697,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToManager.dll
[2017/03/14 12:54:17 | 000,695,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys
[2017/03/14 12:54:17 | 000,567,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MBMediaManager.dll
[2017/03/14 12:54:17 | 000,463,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlansec.dll
[2017/03/14 12:54:16 | 007,200,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BingMaps.dll
[2017/03/14 12:54:16 | 002,624,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputService.dll
[2017/03/14 12:54:15 | 000,817,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Storage.Search.dll
[2017/03/14 12:54:12 | 000,287,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provhandlers.dll
[2017/03/14 12:54:11 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provengine.dll
[2017/03/14 12:54:11 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provisioningcsp.dll
[2017/03/14 12:54:06 | 000,783,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanpref.dll
[2017/03/14 12:54:06 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icm32.dll
[2017/03/14 12:54:05 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\P2P.dll
[2017/03/14 12:54:05 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\P2P.dll
[2017/03/14 12:54:03 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\stdole2.tlb
[2017/03/14 12:54:02 | 001,534,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationFramework.dll
[2017/03/14 12:54:02 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.OneCore.dll
[2017/03/14 12:54:01 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.Desktop.dll
[2017/03/14 12:54:01 | 000,287,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdpsvc.dll
[2017/03/14 12:54:01 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdpreference.exe
[2017/03/14 12:54:01 | 000,038,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceCensus.exe
[2017/03/14 12:54:00 | 000,941,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MiracastReceiver.dll
[2017/03/14 12:54:00 | 000,708,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Web.Core.dll
[2017/03/14 12:54:00 | 000,450,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll
[2017/03/14 12:54:00 | 000,315,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dcntel.dll
[2017/03/14 12:53:57 | 002,843,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll
[2017/03/14 12:53:57 | 001,097,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dosvc.dll
[2017/03/14 12:53:56 | 001,637,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
[2017/03/14 12:53:56 | 001,239,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Bluetooth.dll
[2017/03/14 12:53:55 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingMonitor.dll
[2017/03/14 12:53:54 | 000,529,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LogonController.dll
[2017/03/14 12:53:54 | 000,472,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Geolocation.dll
[2017/03/14 12:53:53 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhoneService.dll
[2017/03/14 12:53:52 | 002,444,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.appcore.dll
[2017/03/14 12:53:52 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\thumbcache.dll
[2017/03/14 12:53:51 | 001,946,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll
[2017/03/14 12:53:51 | 001,847,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMPDMC.exe
[2017/03/14 12:53:50 | 000,613,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSync.dll
[2017/03/14 12:53:50 | 000,549,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFolder.dll
[2017/03/14 12:53:49 | 000,821,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBroker.dll
[2017/03/14 12:53:49 | 000,821,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MrmIndexer.dll
[2017/03/14 12:53:49 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\samlib.dll
[2017/03/14 12:53:49 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationFrameworkInternalPS.dll
[2017/03/14 12:53:46 | 001,319,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifinetworkmanager.dll
[2017/03/14 12:53:46 | 000,733,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasapi32.dll
[2017/03/14 12:53:45 | 002,436,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll
[2017/03/14 12:53:45 | 001,648,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comsvcs.dll
[2017/03/14 12:53:45 | 000,995,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\HelpPane.exe
[2017/03/14 12:53:44 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\samsrv.dll
[2017/03/14 12:53:44 | 000,687,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dnsapi.dll
[2017/03/14 12:53:43 | 002,054,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll
[2017/03/14 12:53:39 | 002,831,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll
[2017/03/14 12:53:38 | 000,549,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSAudDecMFT.dll
[2017/03/14 12:53:35 | 001,062,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2adec.dll
[2017/03/14 12:53:35 | 000,610,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll
[2017/03/14 12:53:35 | 000,521,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyDecMFT.dll
[2017/03/14 12:53:34 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\energy.dll
[2017/03/14 12:53:34 | 000,267,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apds.dll
[2017/03/14 12:53:34 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Tabbtn.dll
[2017/03/14 12:53:34 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\setupugc.exe
[2017/03/14 12:53:34 | 000,118,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icfupgd.dll
[2017/03/14 12:53:34 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TabbtnEx.dll
[2017/03/14 12:53:34 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sscore.dll
[2017/03/14 12:53:33 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinFax.dll
[2017/03/14 12:53:30 | 000,915,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\configurationclient.dll
[2017/03/14 12:53:30 | 000,685,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\scapi.dll
[2017/03/14 12:53:30 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinFax.dll
[2017/03/14 12:53:29 | 002,773,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d11.dll
[2017/03/14 12:53:29 | 000,431,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvr.exe
[2017/03/14 12:53:29 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppCapture.dll
[2017/03/14 12:53:28 | 001,297,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorDataService.exe
[2017/03/14 12:53:28 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll
[2017/03/14 12:53:28 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.UserAccountsHandlers.dll
[2017/03/14 12:53:27 | 001,575,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.dll
[2017/03/14 12:53:27 | 001,073,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXService.dll
[2017/03/14 12:53:27 | 000,742,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll
[2017/03/14 12:53:27 | 000,370,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack_win.dll
[2017/03/14 12:53:27 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXTaskFactory.dll
[2017/03/14 12:53:26 | 000,990,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModel.dll
[2017/03/14 12:53:26 | 000,730,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Shell.Broker.dll
[2017/03/14 12:53:25 | 000,651,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserLanguagesCpl.dll
[2017/03/14 12:53:24 | 006,976,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll
[2017/03/14 12:53:24 | 001,390,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Shell.dll
[2017/03/14 12:53:24 | 001,052,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MsSpellCheckingFacility.dll
[2017/03/14 12:53:24 | 000,636,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hgcpl.dll
[2017/03/14 12:53:24 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppReadiness.dll
[2017/03/14 12:53:24 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmenrollengine.dll
[2017/03/14 12:53:23 | 002,563,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\themecpl.dll
[2017/03/14 12:53:23 | 002,175,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
[2017/03/14 12:53:23 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appwiz.cpl
[2017/03/14 12:53:23 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MessagingDataModel2.dll
[2017/03/14 12:53:23 | 000,585,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe
[2017/03/14 12:53:23 | 000,480,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppBroker.dll
[2017/03/14 12:53:23 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\APHostService.dll
[2017/03/14 12:53:21 | 004,516,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2017/03/14 12:53:21 | 002,731,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gameux.dll
[2017/03/14 12:53:21 | 001,159,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApplicationFrame.dll
[2017/03/14 12:53:21 | 000,725,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SHCore.dll
[2017/03/14 12:53:21 | 000,564,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DevicePairing.dll
[2017/03/14 12:53:20 | 002,352,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll
[2017/03/14 12:53:20 | 002,067,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.dll
[2017/03/14 12:53:20 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActiveSyncProvider.dll
[2017/03/14 12:53:20 | 001,797,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll
[2017/03/14 12:53:20 | 000,701,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.dll
[2017/03/14 12:53:19 | 011,545,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
[2017/03/14 12:53:19 | 000,984,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncCore.dll
[2017/03/14 12:53:19 | 000,870,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll
[2017/03/14 12:53:18 | 001,062,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comdlg32.dll
[2017/03/14 12:53:18 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edputil.dll
[2017/03/14 12:53:17 | 001,617,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appraiser.dll
[2017/03/14 12:53:17 | 001,294,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aeinv.dll
[2017/03/14 12:53:17 | 000,655,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\generaltel.dll
[2017/03/14 12:53:17 | 000,565,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\devinv.dll
[2017/03/14 12:53:17 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mcbuilder.exe
[2017/03/14 12:53:17 | 000,343,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\invagent.dll
[2017/03/14 12:53:17 | 000,341,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll
[2017/03/14 12:53:17 | 000,242,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aepic.dll
[2017/03/14 12:53:17 | 000,142,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
[2017/03/14 12:53:17 | 000,086,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompatTelRunner.exe
[2017/03/14 12:53:15 | 001,755,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dui70.dll
[2017/03/14 12:53:15 | 000,875,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe
[2017/03/14 12:53:10 | 001,717,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GdiPlus.dll
[2017/03/14 12:53:10 | 001,038,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll
[2017/03/14 12:53:10 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinSCard.dll
[2017/03/14 12:53:10 | 000,230,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHost.dll
[2017/03/14 12:53:09 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Proximity.dll
[2017/03/14 12:53:09 | 000,342,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\configmanager2.dll
[2017/03/14 12:53:09 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NcdAutoSetup.dll
[2017/03/14 12:53:06 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rshx32.dll
[2017/03/14 12:53:06 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\feclient.dll
[2017/03/14 10:38:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\3U2 Johnson Creek Airport
[2017/03/14 10:38:07 | 000,000,000 | ---D | C] -- C:\ProgramData\3U2 Johnson Creek Airport
[2017/03/14 10:22:12 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PW Sceneries Volume 5
[2017/03/14 10:22:12 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\PW Sceneries Volume 5 - The Leeward Islands
[2017/03/14 10:19:43 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PW Sceneries Volume 4
[2017/03/14 10:19:42 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\PW Sceneries Volume 4 - Guadeloupe and Dominica
[2017/03/14 10:18:48 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PW Sceneries Volume 3
[2017/03/14 10:18:48 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\PW Sceneries Volume 3 - Saint Lucia and Martinique
[2017/03/14 10:17:16 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PW Sceneries Volume 2
[2017/03/14 10:17:16 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\PW Sceneries Volume 2 - The Grenadines, Saint Vincent and Barbados
[2017/03/14 10:16:28 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PW Sceneries Volume 1 - Grenada
[2017/03/14 10:16:27 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\PW Sceneries Volume 1 - Grenada
[2017/03/13 16:49:28 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Airport Stock Graphics
[2017/03/13 10:12:38 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Almaty Airport v1.0 FSX and FSXSE
[2017/03/13 09:43:18 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flightsim Estonia
[2017/03/12 01:10:13 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\JoinFS
[2017/03/09 18:13:12 | 013,692,616 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvd3dum.dll
[2017/03/09 18:13:12 | 001,985,080 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6437878.dll
[2017/03/09 18:13:12 | 001,589,696 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6437878.dll
[2017/03/08 17:51:30 | 000,134,320 | ---- | C] (ThreatTrack Security Inc.) -- C:\WINDOWS\SysNative\drivers\sbapifs.sys
[2017/03/07 18:14:08 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\BlackBox Simulation
[2017/03/07 09:15:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlackBox Simulation
[2017/03/07 09:14:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Scottish Aviation Bulldog
[2017/03/07 08:10:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2017/03/07 08:10:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
[2017/03/07 00:38:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\METAR PRO
[2017/03/04 02:00:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lockheed Martin
[2017/03/03 13:51:07 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FSiPanel
[2017/03/03 13:43:02 | 000,000,000 | ---D | C] -- C:\FSiPanel.com
[2017/03/02 11:31:26 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\ESDG
[2017/03/02 10:33:49 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Navdata
[2017/03/02 00:24:13 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\ESDG
[2017/03/01 23:33:44 | 000,000,000 | ---D | C] -- C:\Eaglesoft Development Group
[2017/03/01 17:03:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wellington from First Class Simulations
[2017/03/01 03:41:22 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Flight1 Aviation Technologies
[2017/03/01 03:41:03 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flight1 Aviation Technologies
[2017/03/01 03:41:01 | 000,000,000 | ---D | C] -- C:\WINDOWS\F1T - GTN Series
[2017/03/01 00:10:16 | 000,000,000 | ---D | C] -- C:\Users\steve\.ssh
[2017/03/01 00:05:03 | 000,000,000 | ---D | C] -- C:\Users\steve\Documents\GitHub
[2017/03/01 00:05:00 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Local\GitHub
[2017/03/01 00:04:59 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\GitHub
[2017/03/01 00:04:39 | 000,000,000 | ---D | C] -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
[2017/02/28 16:24:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\ShellNew
[2017/02/28 16:24:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey
[2017/02/28 16:24:36 | 000,000,000 | ---D | C] -- C:\Program Files\AutoHotkey
[2017/02/27 20:29:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Flight One Software
[2017/02/27 20:29:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\Flight One Software - Cessna 162 Sky Catcher
[2017/02/24 17:13:23 | 000,000,000 | ---D | C] -- C:\Users\steve\Documents\jardesign emails
[2017/02/24 13:44:44 | 000,047,632 | ---- | C] (ThreatTrack Security Inc.) -- C:\WINDOWS\SysWow64\sbbd.exe
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
 
========== Files - Modified Within 90 Days ==========
 
[2017/05/25 10:02:10 | 000,003,336 | ---- | M] () -- C:\WINDOWS\SysWow64\VipreEdgeProtectionOff.ini
[2017/05/25 10:02:10 | 000,003,336 | ---- | M] () -- C:\WINDOWS\SysNative\VipreEdgeProtectionOff.ini
[2017/05/25 10:00:21 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2017/05/25 09:58:16 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2017/05/25 09:58:11 | 1679,032,318 | -HS- | M] () -- C:\hiberfil.sys
[2017/05/25 09:58:10 | 000,000,000 | ---- | M] () -- C:\WINDOWS\SysNative\reimage.rep
[2017/05/25 09:55:25 | 000,000,167 | ---- | M] () -- C:\WINDOWS\Reimage.ini
[2017/05/25 09:37:08 | 000,012,710 | ---- | M] () -- C:\WINDOWS\SysNative\Native.exe
[2017/05/24 23:23:05 | 004,917,616 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2017/05/24 22:42:30 | 000,000,910 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2017/05/24 21:10:29 | 000,001,543 | ---- | M] () -- C:\Users\Public\Desktop\FS2Crew PMDG 777 Config Manager P3D V3.lnk
[2017/05/24 21:10:29 | 000,001,461 | ---- | M] () -- C:\Users\Public\Desktop\FS2Crew 777 Manual.lnk
[2017/05/24 21:10:29 | 000,001,450 | ---- | M] () -- C:\Users\Public\Desktop\777 FO Voice Pack.lnk
[2017/05/24 21:08:22 | 000,001,643 | ---- | M] () -- C:\Users\Public\Desktop\P3D V3 NGX Reboot Config Manager.lnk
[2017/05/24 21:08:22 | 000,001,481 | ---- | M] () -- C:\Users\Public\Desktop\NGX Global FO.lnk
[2017/05/24 21:00:45 | 000,001,179 | ---- | M] () -- C:\Users\Public\Desktop\FS2Crew Deal.lnk
[2017/05/24 21:00:45 | 000,001,174 | ---- | M] () -- C:\Users\Public\Desktop\RAAS Pro Manual.lnk
[2017/05/24 18:52:14 | 000,007,605 | ---- | M] () -- C:\Users\steve\AppData\Local\resmon.resmoncfg
[2017/05/24 17:56:05 | 000,002,075 | ---- | M] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7+ Taskbar Tweaker.lnk
[2017/05/24 13:09:25 | 000,001,909 | ---- | M] () -- C:\Users\Public\Desktop\VIPRE.lnk
[2017/05/23 21:45:40 | 000,001,024 | ---- | M] () -- C:\Users\Public\Desktop\EaseUS Todo PCTrans.lnk
[2017/05/23 10:43:57 | 000,002,216 | ---- | M] () -- C:\Users\Public\Desktop\PC Scan & Repair by Reimage.lnk
[2017/05/23 08:09:27 | 000,028,272 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\TrueSight.sys
[2017/05/23 08:08:54 | 000,000,946 | ---- | M] () -- C:\Users\Public\Desktop\RogueKiller.lnk
[2017/05/22 22:15:22 | 000,000,786 | ---- | M] () -- C:\Users\steve\Application Data\Microsoft\Internet Explorer\Quick Launch\PrimoCache.lnk
[2017/05/22 22:15:22 | 000,000,786 | ---- | M] () -- C:\Users\Public\Desktop\PrimoCache.lnk
[2017/05/22 21:51:30 | 000,001,536 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2017/05/22 19:05:58 | 000,000,835 | ---- | M] () -- C:\Users\Public\Desktop\FSTramp data base - FSX-SE.lnk
[2017/05/22 19:05:58 | 000,000,831 | ---- | M] () -- C:\Users\Public\Desktop\FSTramp data base - P3Dv3.lnk
[2017/05/22 19:05:58 | 000,000,831 | ---- | M] () -- C:\Users\Public\Desktop\FSTramp data base - P3Dv2.lnk
[2017/05/22 19:05:58 | 000,000,829 | ---- | M] () -- C:\Users\Public\Desktop\FSTramp data base - FSX.lnk
[2017/05/22 14:40:43 | 000,001,371 | ---- | M] () -- C:\Users\Public\Desktop\Wise Memory Optimizer.lnk
[2017/05/22 14:07:45 | 000,001,328 | ---- | M] () -- C:\Users\Public\Desktop\Wise Game Booster.lnk
[2017/05/21 21:55:22 | 000,001,531 | ---- | M] () -- C:\Users\steve\Desktop\Creating Flight Plan and User Waypoint Files for the Flight1 GTN.lnk
[2017/05/21 21:55:22 | 000,001,380 | ---- | M] () -- C:\Users\steve\Desktop\Creating Checklists for the Flight1 GTN.lnk
[2017/05/21 21:55:22 | 000,001,315 | ---- | M] () -- C:\Users\steve\Desktop\GTN_Setup_and_Users_Guide.lnk
[2017/05/21 21:55:22 | 000,001,267 | ---- | M] () -- C:\Users\steve\Desktop\f1update_tool_readme.lnk
[2017/05/21 21:55:22 | 000,001,231 | ---- | M] () -- C:\Users\steve\Desktop\F1TGTNConfigP3D .lnk
[2017/05/21 21:55:22 | 000,001,219 | ---- | M] () -- C:\Users\steve\Desktop\F1UpdateTool.lnk
[2017/05/21 21:53:06 | 000,002,048 | ---- | M] () -- C:\WINDOWS\gtn750p3d.lic
[2017/05/20 13:06:37 | 000,006,125 | ---- | M] () -- C:\Users\steve\AppData\Local\recently-used.xbel
[2017/05/20 12:51:01 | 000,000,993 | ---- | M] () -- C:\Users\Public\Desktop\OBS Studio.lnk
[2017/05/18 11:13:00 | 000,002,062 | ---- | M] () -- C:\Users\Public\Desktop\System Mechanic.lnk
[2017/05/18 07:20:23 | 000,000,938 | ---- | M] () -- C:\WINDOWS\tasks\DropboxUpdateTaskMachineUA.job
[2017/05/18 07:20:23 | 000,000,934 | ---- | M] () -- C:\WINDOWS\tasks\DropboxUpdateTaskMachineCore.job
[2017/05/18 02:35:05 | 040,201,848 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcompiler.dll
[2017/05/18 02:35:05 | 035,390,072 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglv64.dll
[2017/05/18 02:35:05 | 035,282,040 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcompiler.dll
[2017/05/18 02:35:05 | 028,624,504 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglv32.dll
[2017/05/18 02:35:05 | 024,706,608 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvwgf2umx.dll
[2017/05/18 02:35:05 | 020,825,080 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvwgf2um.dll
[2017/05/18 02:35:05 | 016,901,584 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvd3dumx.dll
[2017/05/18 02:35:05 | 013,692,616 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvd3dum.dll
[2017/05/18 02:35:05 | 011,056,456 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvptxJitCompiler.dll
[2017/05/18 02:35:05 | 011,028,664 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll
[2017/05/18 02:35:05 | 010,551,072 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll
[2017/05/18 02:35:05 | 009,248,144 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuda.dll
[2017/05/18 02:35:05 | 009,014,976 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvptxJitCompiler.dll
[2017/05/18 02:35:05 | 008,808,488 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvopencl.dll
[2017/05/18 02:35:05 | 004,114,248 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvapi64.dll
[2017/05/18 02:35:05 | 003,797,112 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll
[2017/05/18 02:35:05 | 003,624,784 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvapi.dll
[2017/05/18 02:35:05 | 003,256,440 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll
[2017/05/18 02:35:05 | 001,988,216 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6438233.dll
[2017/05/18 02:35:05 | 001,606,592 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6438233.dll
[2017/05/18 02:35:05 | 001,278,528 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFTH264.dll
[2017/05/18 02:35:05 | 001,275,944 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFThevc.dll
[2017/05/18 02:35:05 | 001,056,704 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvFBC64.dll
[2017/05/18 02:35:05 | 000,995,736 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFTH264.dll
[2017/05/18 02:35:05 | 000,993,912 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvFBC.dll
[2017/05/18 02:35:05 | 000,993,872 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFThevc.dll
[2017/05/18 02:35:05 | 000,964,032 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFR64.dll
[2017/05/18 02:35:05 | 000,914,880 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFR.dll
[2017/05/18 02:35:05 | 000,775,864 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncodeAPI64.dll
[2017/05/18 02:35:05 | 000,725,112 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvDecMFTMjpeg.dll
[2017/05/18 02:35:05 | 000,688,968 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvfatbinaryLoader.dll
[2017/05/18 02:35:05 | 000,618,928 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvmcumd.dll
[2017/05/18 02:35:05 | 000,612,272 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncodeAPI.dll
[2017/05/18 02:35:05 | 000,609,728 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFROpenGL.dll
[2017/05/18 02:35:05 | 000,607,640 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvumdshimx.dll
[2017/05/18 02:35:05 | 000,583,800 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvDecMFTMjpeg.dll
[2017/05/18 02:35:05 | 000,577,728 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvfatbinaryLoader.dll
[2017/05/18 02:35:05 | 000,499,320 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFROpenGL.dll
[2017/05/18 02:35:05 | 000,493,096 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvumdshim.dll
[2017/05/18 02:35:05 | 000,195,968 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvinitx.dll
[2017/05/18 02:35:05 | 000,172,736 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglshim64.dll
[2017/05/18 02:35:05 | 000,168,824 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvinit.dll
[2017/05/18 02:35:05 | 000,144,104 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglshim32.dll
[2017/05/18 02:35:05 | 000,045,061 | ---- | M] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2017/05/18 02:35:05 | 000,001,951 | ---- | M] () -- C:\WINDOWS\NvTelemetryContainerRecovery.bat
[2017/05/18 00:55:25 | 000,001,951 | ---- | M] () -- C:\WINDOWS\NvContainerRecovery.bat
[2017/05/18 00:48:51 | 006,437,824 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcpl.dll
[2017/05/18 00:48:51 | 002,479,736 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvc64.dll
[2017/05/18 00:48:49 | 001,762,936 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvcr.dll
[2017/05/18 00:48:49 | 000,548,984 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nv3dappshext.dll
[2017/05/18 00:48:49 | 000,392,312 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvmctray.dll
[2017/05/18 00:48:49 | 000,081,856 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nv3dappshextr.dll
[2017/05/18 00:48:49 | 000,069,752 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvshext.dll
[2017/05/18 00:21:14 | 000,134,592 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvStreaming.exe
[2017/05/17 16:19:48 | 000,015,446 | ---- | M] () -- C:\Users\steve\AppData\Local\kritarc
[2017/05/17 16:19:48 | 000,000,039 | ---- | M] () -- C:\Users\steve\AppData\Local\kritadisplayrc
[2017/05/17 16:15:11 | 000,000,950 | ---- | M] () -- C:\Users\Public\Desktop\Krita.lnk
[2017/05/17 16:11:23 | 000,000,861 | ---- | M] () -- C:\Users\steve\Application Data\Microsoft\Internet Explorer\Quick Launch\Artweaver Free 6.lnk
[2017/05/17 16:11:23 | 000,000,861 | ---- | M] () -- C:\Users\Public\Desktop\Artweaver Free 6.lnk
[2017/05/17 11:07:39 | 000,880,696 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2017/05/17 11:07:39 | 000,744,234 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2017/05/17 11:07:39 | 000,139,300 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2017/05/16 23:35:14 | 000,000,839 | ---- | M] () -- C:\Users\Public\Desktop\Winaero Tweaker.lnk
[2017/05/16 16:01:28 | 000,048,944 | ---- | M] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\DbxSvc.exe
[2017/05/16 13:09:42 | 007,993,157 | ---- | M] () -- C:\WINDOWS\SysNative\nvcoproc.bin
[2017/05/16 09:35:05 | 000,000,898 | ---- | M] () -- C:\Users\Public\Desktop\paint.net.lnk
[2017/05/16 07:36:15 | 000,000,844 | ---- | M] () -- C:\Users\steve\Application Data\Microsoft\Internet Explorer\Quick Launch\GIMP 2.lnk
[2017/05/16 07:36:15 | 000,000,844 | ---- | M] () -- C:\Users\Public\Desktop\GIMP 2.lnk
[2017/05/16 06:57:17 | 000,002,307 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2017/05/16 06:28:29 | 000,000,815 | ---- | M] () -- C:\Users\steve\Desktop\DsfMftViewer.lnk
[2017/05/15 13:32:12 | 000,001,221 | ---- | M] () -- C:\Users\steve\Desktop\Configurador SCX.lnk
[2017/05/15 07:29:07 | 049,827,832 | ---- | M] () -- C:\PTCX.exe
[2017/05/14 23:55:49 | 000,001,004 | ---- | M] () -- C:\Users\steve\Desktop\smartCARS - flyTSL (en-US).lnk
[2017/05/14 11:41:46 | 000,000,876 | ---- | M] () -- C:\Users\Public\Desktop\JoinFS.lnk
[2017/05/13 12:06:44 | 000,000,968 | ---- | M] () -- C:\Users\Public\Desktop\Navigraph FMS Data Manager.lnk
[2017/05/13 11:21:46 | 000,002,171 | ---- | M] () -- C:\Users\Public\Desktop\Acrobat Reader DC.lnk
[2017/05/13 10:41:24 | 000,000,683 | ---- | M] () -- C:\Users\Public\Desktop\Pilot2ATC_200.lnk
[2017/05/12 07:32:06 | 000,002,280 | ---- | M] () -- C:\Users\Public\Desktop\TFDi Design Addon Manager.lnk
[2017/05/10 21:30:38 | 000,001,008 | ---- | M] () -- C:\Users\Public\Desktop\Physics P3D Configurator.lnk
[2017/05/10 21:30:38 | 000,000,971 | ---- | M] () -- C:\Users\Public\Desktop\Sim Physics P3D.lnk
[2017/05/10 17:39:50 | 000,001,328 | ---- | M] () -- C:\Users\Public\Desktop\AudioWizard.lnk
[2017/05/10 17:39:25 | 000,006,786 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\rtwavesEFX.dat
[2017/05/10 17:39:25 | 000,002,626 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\rtwavesMFX.dat
[2017/05/10 17:39:21 | 000,188,565 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\RTWAVES40.dat
[2017/05/10 17:13:15 | 000,000,217 | ---- | M] () -- C:\Users\steve\Desktop\Realtek HD Audio Manager - Shortcut.lnk
[2017/05/10 09:57:00 | 000,001,121 | ---- | M] () -- C:\Users\Public\Desktop\ImagePrinter Pro.lnk
[2017/05/09 14:33:15 | 000,001,043 | ---- | M] () -- C:\Users\Public\Desktop\3D Real Cockpit Effect.lnk
[2017/05/08 21:17:42 | 000,000,652 | ---- | M] () -- C:\Users\Public\Desktop\Plan-G v3.1.4.lnk
[2017/05/08 20:36:18 | 000,001,191 | ---- | M] () -- C:\Users\Public\Desktop\Shade_gui.lnk
[2017/05/08 20:36:18 | 000,001,186 | ---- | M] () -- C:\Users\Public\Desktop\Shade_nl.lnk
[2017/05/08 20:36:18 | 000,001,033 | ---- | M] () -- C:\Users\Public\Desktop\Shade.lnk
[2017/05/07 23:57:46 | 000,000,112 | ---- | M] () -- C:\Users\steve\AppData\Local\X-Plane_drm_11.prf
[2017/05/06 23:52:36 | 000,000,983 | ---- | M] () -- C:\Users\Public\Desktop\P3D Booster Live.lnk
[2017/05/06 19:13:06 | 000,001,255 | ---- | M] () -- C:\Users\Public\Desktop\EFASS - Electronic Flight Assistant-v1-new servers.lnk
[2017/05/06 09:05:29 | 000,001,003 | ---- | M] () -- C:\Users\Public\Desktop\Ultimate Crew 2014.lnk
[2017/05/05 16:46:56 | 000,419,840 | ---- | M] (Creative Labs) -- C:\WINDOWS\SysNative\wrap_oal.dll
[2017/05/05 16:46:56 | 000,413,696 | ---- | M] (Creative Labs) -- C:\WINDOWS\SysWow64\wrap_oal.dll
[2017/05/05 16:46:56 | 000,111,616 | ---- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\SysNative\OpenAL32.dll
[2017/05/05 16:46:56 | 000,102,400 | ---- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\SysWow64\OpenAL32.dll
[2017/05/05 05:58:16 | 000,000,037 | ---- | M] () -- C:\Users\steve\AppData\Local\X-Plane Installer.prf
[2017/05/05 01:59:29 | 000,001,063 | ---- | M] () -- C:\Users\Public\Desktop\Dolby Cockpit Sounds FSX.lnk
[2017/05/04 14:51:19 | 000,001,412 | ---- | M] () -- C:\Users\Public\Desktop\Wise Program Uninstaller.lnk
[2017/05/03 15:21:33 | 001,893,496 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvspcap64.dll
[2017/05/03 15:21:33 | 001,477,240 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvspcap.dll
[2017/05/03 15:21:32 | 001,755,256 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvspbridge64.dll
[2017/05/03 15:21:32 | 001,317,496 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvspbridge.dll
[2017/05/03 15:21:32 | 000,121,464 | ---- | M] () -- C:\WINDOWS\SysNative\NvRtmpStreamer64.dll
[2017/05/03 15:21:29 | 000,175,736 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvaudcap64v.dll
[2017/05/03 15:21:29 | 000,048,248 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\drivers\nvvad64v.sys
[2017/05/03 15:21:28 | 000,143,480 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvaudcap32v.dll
[2017/05/03 10:48:02 | 000,001,504 | ---- | M] () -- C:\Users\steve\Desktop\Airbus Evolution Extra Notes.lnk
[2017/05/03 08:43:11 | 000,084,960 | -H-- | M] (Sysinternals - www.sysinternals.com) -- C:\WINDOWS\SysNative\drivers\PROCMON23.SYS
[2017/05/02 18:53:30 | 000,065,612 | ---- | M] () -- C:\Users\steve\Documents\XPFlightPlanner - KHSVKATL.pdf
[2017/05/02 18:14:33 | 000,000,846 | ---- | M] () -- C:\Users\steve\Desktop\XPFlightPlanner.lnk
[2017/05/02 02:50:14 | 000,177,840 | ---- | M] (Romex Software) -- C:\WINDOWS\SysNative\drivers\rxfcv.sys
[2017/05/01 17:38:30 | 001,988,032 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6438205.dll
[2017/05/01 17:38:30 | 001,589,696 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6438205.dll
[2017/05/01 15:51:51 | 000,001,602 | ---- | M] () -- C:\Users\steve\Desktop\Cessna 162 Pilots Guide.lnk
[2017/05/01 15:50:34 | 171,794,927 | ---- | M] () -- C:\F1Skycatcher.exe
[2017/05/01 01:40:50 | 000,002,464 | ---- | M] () -- C:\Users\steve\Desktop\BlackBox PreFlight Manager.lnk
[2017/05/01 01:40:50 | 000,001,121 | ---- | M] () -- C:\Users\steve\Desktop\Airbus Widebody Quick Start Guide.lnk
[2017/04/29 07:38:12 | 000,001,003 | ---- | M] () -- C:\Users\steve\Application Data\Microsoft\Internet Explorer\Quick Launch\Revo Uninstaller Pro.lnk
[2017/04/29 07:38:12 | 000,001,003 | ---- | M] () -- C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
[2017/04/28 19:51:52 | 000,835,576 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
[2017/04/28 19:51:52 | 000,177,656 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
[2017/04/28 19:03:26 | 000,002,407 | ---- | M] () -- C:\Users\steve\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2017/04/28 15:36:15 | 000,001,008 | ---- | M] () -- C:\Users\Public\Desktop\FSX_Planner.exe.lnk
[2017/04/27 23:32:03 | 001,030,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi
[2017/04/27 23:30:22 | 001,997,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll
[2017/04/27 23:30:18 | 001,098,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MrmCoreR.dll
[2017/04/27 23:30:15 | 007,465,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2017/04/27 23:30:15 | 001,317,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi
[2017/04/27 23:30:09 | 000,800,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll
[2017/04/27 23:30:08 | 002,656,960 | ---- | M] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
[2017/04/27 23:27:03 | 000,754,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
[2017/04/27 23:23:35 | 002,718,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PrintConfig.dll
[2017/04/27 23:08:11 | 003,449,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSService.dll
[2017/04/27 22:59:35 | 001,862,000 | ---- | M] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2017/04/27 22:38:26 | 001,060,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
[2017/04/27 22:32:38 | 001,323,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ole32.dll
[2017/04/27 22:32:34 | 002,608,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll
[2017/04/27 22:31:56 | 000,808,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWAHost.exe
[2017/04/27 22:31:43 | 000,026,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browser_broker.exe
[2017/04/27 22:28:43 | 000,566,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncHost.exe
[2017/04/27 22:27:53 | 006,604,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
[2017/04/27 22:26:45 | 000,692,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppwinob.dll
[2017/04/27 22:26:41 | 001,540,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppobjs.dll
[2017/04/27 22:24:28 | 000,625,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipSVC.dll
[2017/04/27 22:24:22 | 001,128,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipUp.exe
[2017/04/27 22:20:40 | 001,848,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\crypt32.dll
[2017/04/27 22:04:53 | 000,881,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2017/04/27 21:57:39 | 001,813,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll
[2017/04/27 21:56:55 | 000,703,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWAHost.exe
[2017/04/27 21:53:37 | 000,465,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncHost.exe
[2017/04/27 21:52:51 | 005,240,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
[2017/04/27 21:52:05 | 001,594,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32.dll
[2017/04/27 21:31:05 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
[2017/04/27 21:24:00 | 000,824,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcWebFilter.dll
[2017/04/27 21:23:31 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fdProxy.dll
[2017/04/27 21:22:39 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\odbcconf.dll
[2017/04/27 21:16:46 | 000,190,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
[2017/04/27 21:15:21 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tdc.ocx
[2017/04/27 21:13:40 | 000,584,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
[2017/04/27 21:11:21 | 000,119,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieetwcollector.exe
[2017/04/27 21:06:57 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
[2017/04/27 21:05:27 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserbroker.dll
[2017/04/27 21:03:12 | 000,297,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\unimdm.tsp
[2017/04/27 21:02:24 | 000,285,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oemlicense.dll
[2017/04/27 21:01:41 | 000,238,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Streaming.ps.dll
[2017/04/27 20:59:22 | 000,379,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
[2017/04/27 20:58:57 | 000,412,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
[2017/04/27 20:55:58 | 000,291,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtrans.dll
[2017/04/27 20:55:51 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IdCtrls.dll
[2017/04/27 20:55:27 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iepeers.dll
[2017/04/27 20:54:15 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dpapisrv.dll
[2017/04/27 20:53:45 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
[2017/04/27 20:53:19 | 000,198,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winsrv.dll
[2017/04/27 20:52:40 | 000,221,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
[2017/04/27 20:51:46 | 000,200,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WUDFPlatform.dll
[2017/04/27 20:51:08 | 000,381,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepsync.dll
[2017/04/27 20:50:19 | 000,689,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieproxy.dll
[2017/04/27 20:49:19 | 000,287,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apprepapi.dll
[2017/04/27 20:45:12 | 000,715,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe
[2017/04/27 20:40:47 | 000,572,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WpcWebFilter.dll
[2017/04/27 20:39:41 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\odbcconf.dll
[2017/04/27 20:38:48 | 000,602,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cryptui.dll
[2017/04/27 20:38:26 | 000,330,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
[2017/04/27 20:33:36 | 000,183,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSSync.dll
[2017/04/27 20:32:32 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tdc.ocx
[2017/04/27 20:32:14 | 002,125,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Bluetooth.dll
[2017/04/27 20:31:15 | 000,515,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneDriveSettingSyncProvider.dll
[2017/04/27 20:31:11 | 000,784,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
[2017/04/27 20:31:03 | 000,584,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbonRes.dll
[2017/04/27 20:30:42 | 000,602,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
[2017/04/27 20:29:19 | 002,127,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
[2017/04/27 20:28:34 | 001,386,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
[2017/04/27 20:26:11 | 000,853,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadtb.dll
[2017/04/27 20:24:26 | 001,752,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
[2017/04/27 20:23:36 | 000,381,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
[2017/04/27 20:23:13 | 000,961,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSShared.dll
[2017/04/27 20:21:47 | 000,256,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\unimdm.tsp
[2017/04/27 20:21:02 | 000,205,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\oemlicense.dll
[2017/04/27 20:20:32 | 004,456,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_47.dll
[2017/04/27 20:19:53 | 000,865,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AzureSettingSyncProvider.dll
[2017/04/27 20:19:14 | 000,236,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\licensingdiag.exe
[2017/04/27 20:19:11 | 000,269,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
[2017/04/27 20:15:30 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\IdCtrls.dll
[2017/04/27 20:15:13 | 000,128,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iepeers.dll
[2017/04/27 20:13:49 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
[2017/04/27 20:11:44 | 000,260,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepsync.dll
[2017/04/27 20:11:00 | 000,307,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieproxy.dll
[2017/04/27 20:10:14 | 000,190,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apprepapi.dll
[2017/04/27 20:07:10 | 000,541,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GamePanel.exe
[2017/04/27 20:03:36 | 002,610,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkMobileSettings.dll
[2017/04/27 20:03:15 | 003,586,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
[2017/04/27 20:01:29 | 000,250,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
[2017/04/27 20:00:47 | 005,123,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dbgeng.dll
[2017/04/27 19:57:48 | 000,153,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSSync.dll
[2017/04/27 19:55:58 | 000,400,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OneDriveSettingSyncProvider.dll
[2017/04/27 19:54:38 | 002,050,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
[2017/04/27 19:50:01 | 001,526,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
[2017/04/27 19:49:50 | 000,805,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSShared.dll
[2017/04/27 19:47:44 | 004,826,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ExplorerFrame.dll
[2017/04/27 19:47:18 | 003,695,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_47.dll
[2017/04/27 19:47:02 | 000,667,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AzureSettingSyncProvider.dll
[2017/04/27 19:46:55 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\licensingdiag.exe
[2017/04/27 19:44:15 | 007,977,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll
[2017/04/27 19:43:29 | 002,055,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OpcServices.dll
[2017/04/27 19:36:58 | 016,985,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
[2017/04/27 19:35:44 | 003,585,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsThresholdAdminFlowUI.dll
[2017/04/27 19:32:44 | 004,078,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dbgeng.dll
[2017/04/27 19:27:53 | 001,388,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
[2017/04/27 19:22:12 | 004,412,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExplorerFrame.dll
[2017/04/27 19:21:06 | 013,018,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
[2017/04/27 19:20:01 | 001,556,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OpcServices.dll
[2017/04/27 19:19:25 | 006,296,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll
[2017/04/27 19:16:50 | 022,375,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
[2017/04/27 19:12:24 | 004,889,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2017/04/27 19:11:39 | 006,312,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
[2017/04/27 19:08:24 | 003,993,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
[2017/04/27 19:06:12 | 004,404,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Search.dll
[2017/04/27 19:04:26 | 000,459,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\certcli.dll
[2017/04/27 19:04:15 | 002,911,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CertEnroll.dll
[2017/04/27 19:03:51 | 018,673,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2017/04/27 18:58:16 | 000,821,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fvewiz.dll
[2017/04/27 18:57:43 | 002,604,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CertEnroll.dll
[2017/04/27 18:57:18 | 004,171,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
[2017/04/27 18:55:26 | 000,339,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\certcli.dll
[2017/04/27 18:53:31 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wksprtPS.dll
[2017/04/27 18:50:34 | 007,853,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
[2017/04/27 18:47:19 | 005,670,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
[2017/04/27 18:45:31 | 001,087,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll
[2017/04/27 18:29:04 | 000,461,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
[2017/04/27 11:53:46 | 000,001,353 | ---- | M] () -- C:\Users\Public\Desktop\PA28 Arrow Model Switcher.lnk
[2017/04/26 16:30:21 | 000,000,082 | ---- | M] () -- C:\Users\steve\AppData\Local\X-Plane_xdd_11.prf
[2017/04/26 15:20:07 | 000,001,227 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2017/04/26 12:07:27 | 000,001,127 | ---- | M] () -- C:\Users\Public\Desktop\EFASS.lnk
[2017/04/25 15:35:47 | 000,001,427 | ---- | M] () -- C:\Users\Public\Desktop\Load PERDITION Gaming Mouse.lnk
[2017/04/25 13:04:06 | 000,002,335 | ---- | M] () -- C:\Users\steve\Desktop\Discord PTB.lnk
[2017/04/24 15:37:59 | 000,002,290 | ---- | M] () -- C:\Users\steve\Desktop\Discord.lnk
[2017/04/24 15:37:59 | 000,001,817 | ---- | M] () -- C:\Users\steve\Desktop\Discord.exe - Shortcut.lnk
[2017/04/24 01:29:01 | 000,000,959 | ---- | M] () -- C:\Users\Public\Desktop\VasoGraph.lnk
[2017/04/21 16:52:24 | 000,001,884 | ---- | M] () -- C:\Users\Public\Desktop\Prepar3D v3.lnk
[2017/04/21 11:13:06 | 000,001,047 | ---- | M] () -- C:\Users\steve\Desktop\SpeedBit Video Accelerator.lnk
[2017/04/21 11:02:11 | 000,001,044 | ---- | M] () -- C:\Users\steve\Desktop\Should I Remove It.lnk
[2017/04/21 09:55:26 | 000,110,144 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\WindowsAccessBridge-64.dll
[2017/04/20 08:55:59 | 000,001,145 | ---- | M] () -- C:\Users\Public\Desktop\hide.me VPN.lnk
[2017/04/19 20:59:14 | 001,988,216 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6438189.dll
[2017/04/19 20:59:14 | 001,589,880 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6438189.dll
[2017/04/19 16:18:56 | 000,001,031 | ---- | M] () -- C:\Users\Public\Desktop\P3D Fiber Accelerator.lnk
[2017/04/18 00:08:53 | 000,000,909 | ---- | M] () -- C:\Users\Public\Desktop\SIMstarter NG.lnk
[2017/04/15 21:59:47 | 000,001,625 | ---- | M] () -- C:\Users\Public\Desktop\REX 4 - Texture Direct with Soft Clouds.lnk
[2017/04/15 21:59:01 | 000,000,725 | ---- | M] () -- C:\Users\Public\Desktop\User Manual - REX 4 Texture Direct with Soft Clouds.lnk
[2017/04/15 04:12:01 | 000,000,968 | ---- | M] () -- C:\Users\steve\Desktop\Navigraph FMS Data Manager.lnk
[2017/04/15 04:11:45 | 000,001,830 | ---- | M] () -- C:\Users\steve\Desktop\Navigraph Charts 5.lnk
[2017/04/13 21:21:44 | 000,001,029 | ---- | M] () -- C:\Users\steve\Desktop\ADE 170.lnk
[2017/04/12 16:38:29 | 001,988,032 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6438178.dll
[2017/04/12 16:33:47 | 001,591,352 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6438178.dll
[2017/04/12 12:49:51 | 000,001,869 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2017/04/12 10:12:22 | 000,001,042 | ---- | M] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
[2017/04/12 01:37:25 | 000,001,582 | ---- | M] () -- C:\Users\steve\Desktop\AH Miles Hawk Speed Six for P3D manual.lnk
[2017/04/10 11:36:16 | 000,001,029 | ---- | M] () -- C:\Users\Public\Desktop\NMG Africa Terrain Mesh V1.4 Docs (P3D3).lnk
[2017/04/03 14:06:22 | 000,014,490 | ---- | M] () -- C:\WINDOWS\SysWow64\cache
[2017/04/02 11:12:15 | 001,600,560 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvhdagenco6420103.dll
[2017/04/02 11:12:15 | 000,218,040 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\drivers\nvhda64v.sys
[2017/04/02 11:12:15 | 000,046,008 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvhdap64.dll
[2017/03/31 22:27:00 | 001,988,032 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6438165.dll
[2017/03/31 22:27:00 | 001,591,352 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6438165.dll
[2017/03/31 22:27:00 | 000,000,669 | ---- | M] () -- C:\WINDOWS\SysNative\nv-vk64.json
[2017/03/31 22:27:00 | 000,000,669 | ---- | M] () -- C:\WINDOWS\SysWow64\nv-vk32.json
[2017/03/31 01:51:11 | 000,548,392 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\EasyAntiCheat.sys
[2017/03/30 23:43:49 | 000,409,128 | ---- | M] (EasyAntiCheat Ltd) -- C:\WINDOWS\SysWow64\EasyAntiCheat.exe
[2017/03/30 23:35:02 | 000,000,234 | ---- | M] () -- C:\Users\steve\Desktop\Tom Clancy's Ghost Recon® Wildlands.url
[2017/03/30 23:26:40 | 000,000,984 | ---- | M] () -- C:\Users\steve\Desktop\Uplay.lnk
[2017/03/30 16:59:11 | 000,000,221 | ---- | M] () -- C:\Users\steve\Desktop\Project CARS.url
[2017/03/30 14:38:40 | 000,001,887 | ---- | M] () -- C:\Users\Public\Desktop\LayOut 2016.lnk
[2017/03/28 05:20:05 | 000,100,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pdc.sys
[2017/03/28 05:19:51 | 000,202,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscapi.dll
[2017/03/28 05:12:29 | 000,061,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dam.sys
[2017/03/28 04:18:59 | 008,710,320 | ---- | M] (Microsoft Corp.) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
[2017/03/28 03:59:14 | 000,262,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LsaIso.exe
[2017/03/28 03:52:58 | 000,168,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscapi.dll
[2017/03/28 03:30:19 | 000,379,232 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll
[2017/03/28 03:29:53 | 000,393,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2017/03/28 03:29:34 | 000,636,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
[2017/03/28 03:28:16 | 001,777,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WindowsCodecs.dll
[2017/03/28 03:12:30 | 000,388,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpps.dll
[2017/03/28 02:53:03 | 006,958,304 | ---- | M] (Microsoft Corp.) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
[2017/03/28 02:51:58 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataTimeUtil.dll
[2017/03/28 02:51:03 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vss_ps.dll
[2017/03/28 02:49:07 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BasicRender.sys
[2017/03/28 02:48:43 | 000,045,568 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll
[2017/03/28 02:42:20 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmjpegdec.dll
[2017/03/28 02:37:32 | 000,161,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmcertinst.exe
[2017/03/28 02:08:47 | 000,316,248 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll
[2017/03/28 02:08:00 | 000,546,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
[2017/03/28 01:26:06 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataTimeUtil.dll
[2017/03/28 01:23:38 | 000,037,376 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll
[2017/03/28 01:19:58 | 001,674,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\quartz.dll
[2017/03/28 01:17:56 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmjpegdec.dll
[2017/03/28 00:18:18 | 001,542,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\quartz.dll
[2017/03/25 17:39:44 | 000,000,895 | ---- | M] () -- C:\Users\Public\Desktop\XpressSim V2 Interface.lnk
[2017/03/22 05:07:00 | 000,045,672 | ---- | M] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-stable.sys
[2017/03/22 05:07:00 | 000,045,672 | ---- | M] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-dev.sys
[2017/03/22 05:07:00 | 000,045,672 | ---- | M] (Dropbox, Inc.) -- C:\WINDOWS\SysNative\drivers\dbx-canary.sys
[2017/03/20 20:36:26 | 000,448,285 | ---- | M] () -- C:\WINDOWS\SysNative\ApnDatabase.xml
[2017/03/18 00:23:39 | 000,001,435 | ---- | M] () -- C:\Users\Public\Desktop\Boeing CH-47 Chinook Manual.lnk
[2017/03/16 20:01:06 | 001,983,424 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6437892.dll
[2017/03/16 20:01:06 | 001,589,696 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6437892.dll
[2017/03/15 12:34:44 | 000,010,936 | ---- | M] (Windows ® Win 7 DDK provider) -- C:\WINDOWS\SysNative\drivers\hidkmdf.sys
[2017/03/15 12:34:32 | 000,057,976 | ---- | M] (Shaul Eizikovich) -- C:\WINDOWS\SysNative\drivers\vjoy.sys
[2017/03/13 16:49:29 | 000,160,334 | ---- | M] () -- C:\WINDOWS\Airport Stock Graphics Uninstaller.exe
[2017/03/13 10:12:39 | 000,221,353 | ---- | M] () -- C:\WINDOWS\Almaty Airport v1.0 FSX and FSXSE Uninstaller.exe
[2017/03/12 04:04:03 | 000,001,069 | ---- | M] () -- C:\Users\Public\Desktop\DH104 FDE Switcher.lnk
[2017/03/10 16:17:28 | 000,525,600 | ---- | M] () -- C:\WINDOWS\SysWow64\vulkan-1-1-0-42-1.dll
[2017/03/10 16:17:28 | 000,525,600 | ---- | M] () -- C:\WINDOWS\SysWow64\vulkan-1.dll
[2017/03/10 16:17:20 | 000,233,760 | ---- | M] () -- C:\WINDOWS\SysWow64\vulkaninfo-1-1-0-42-1.exe
[2017/03/10 16:17:20 | 000,233,760 | ---- | M] () -- C:\WINDOWS\SysWow64\vulkaninfo.exe
[2017/03/10 16:17:14 | 000,536,864 | ---- | M] () -- C:\WINDOWS\SysNative\vulkan-1-1-0-42-1.dll
[2017/03/10 16:17:14 | 000,536,864 | ---- | M] () -- C:\WINDOWS\SysNative\vulkan-1.dll
[2017/03/10 16:17:10 | 000,254,240 | ---- | M] () -- C:\WINDOWS\SysNative\vulkaninfo-1-1-0-42-1.exe
[2017/03/10 16:17:10 | 000,254,240 | ---- | M] () -- C:\WINDOWS\SysNative\vulkaninfo.exe
[2017/03/08 17:51:30 | 000,134,320 | ---- | M] (ThreatTrack Security Inc.) -- C:\WINDOWS\SysNative\drivers\sbapifs.sys
[2017/03/07 09:15:37 | 000,002,464 | ---- | M] () -- C:\Users\Public\Desktop\BlackBox PreFlight Manager.lnk
[2017/03/07 00:38:13 | 000,001,072 | ---- | M] () -- C:\Users\Public\Desktop\METAR PRO.lnk
[2017/03/05 16:32:32 | 000,001,914 | ---- | M] () -- C:\Users\steve\Application Data\Microsoft\Internet Explorer\Quick Launch\Vuze.lnk
[2017/03/05 16:32:32 | 000,001,914 | ---- | M] () -- C:\Users\Public\Desktop\Vuze.lnk
[2017/03/04 03:15:06 | 000,875,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe
[2017/03/04 03:09:55 | 000,610,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll
[2017/03/04 03:04:11 | 000,687,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dnsapi.dll
[2017/03/04 03:01:21 | 000,994,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ucrtbase.dll
[2017/03/04 02:56:11 | 001,637,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
[2017/03/04 02:55:53 | 001,038,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll
[2017/03/04 02:54:30 | 000,989,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi
[2017/03/04 02:48:42 | 001,297,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
[2017/03/04 02:27:16 | 000,922,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ucrtbase.dll
[2017/03/04 02:20:42 | 000,118,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icfupgd.dll
[2017/03/04 02:19:22 | 000,586,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll
[2017/03/04 02:19:16 | 000,498,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFCaptureEngine.dll
[2017/03/04 02:19:01 | 001,299,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetsrc.dll
[2017/03/04 02:18:59 | 002,544,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
[2017/03/04 02:18:52 | 000,858,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetcore.dll
[2017/03/04 02:18:49 | 001,152,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll
[2017/03/04 02:18:46 | 001,017,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
[2017/03/04 02:18:28 | 001,092,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll
[2017/03/04 02:18:26 | 001,552,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmde.dll
[2017/03/04 02:18:24 | 000,819,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
[2017/03/04 02:18:21 | 001,554,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpmde.dll
[2017/03/04 02:12:50 | 000,987,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
[2017/03/04 02:09:11 | 000,730,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Shell.Broker.dll
[2017/03/04 02:09:11 | 000,230,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHost.dll
[2017/03/04 02:08:02 | 004,516,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2017/03/04 02:08:01 | 000,725,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SHCore.dll
[2017/03/04 02:07:58 | 001,040,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
[2017/03/04 02:06:02 | 000,742,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll
[2017/03/04 02:03:48 | 000,341,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll
[2017/03/04 01:43:04 | 000,306,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanapi.dll
[2017/03/04 01:41:21 | 002,180,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
[2017/03/04 01:41:10 | 000,701,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetcore.dll
[2017/03/04 01:41:08 | 001,118,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll
[2017/03/04 01:41:07 | 000,980,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll
[2017/03/04 01:41:06 | 000,895,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
[2017/03/04 01:40:54 | 001,349,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winmde.dll
[2017/03/04 01:40:47 | 000,925,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll
[2017/03/04 01:40:44 | 000,713,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
[2017/03/04 01:32:59 | 002,773,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d11.dll
[2017/03/04 01:29:36 | 000,569,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SHCore.dll
[2017/03/04 01:29:26 | 004,075,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe
[2017/03/04 01:29:26 | 000,836,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
[2017/03/04 01:17:28 | 001,617,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appraiser.dll
[2017/03/04 01:17:28 | 000,655,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\generaltel.dll
[2017/03/04 01:17:28 | 000,343,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\invagent.dll
[2017/03/04 01:17:28 | 000,242,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aepic.dll
[2017/03/04 01:17:28 | 000,142,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
[2017/03/04 01:17:28 | 000,086,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompatTelRunner.exe
[2017/03/04 01:17:28 | 000,038,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceCensus.exe
[2017/03/04 01:17:25 | 001,294,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aeinv.dll
[2017/03/04 01:17:25 | 000,565,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\devinv.dll
[2017/03/04 01:17:25 | 000,315,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dcntel.dll
[2017/03/04 01:16:26 | 002,831,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll
[2017/03/04 01:16:06 | 001,062,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2adec.dll
[2017/03/04 01:15:19 | 000,521,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyDecMFT.dll
[2017/03/04 01:15:17 | 000,549,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSAudDecMFT.dll
[2017/03/04 01:09:15 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsCSP.dll
[2017/03/04 01:03:40 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MosHostClient.dll
[2017/03/04 00:59:33 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\stdole2.tlb
[2017/03/04 00:59:07 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups.dll
[2017/03/04 00:58:47 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationFrameworkInternalPS.dll
[2017/03/04 00:58:27 | 002,186,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3d11.dll
[2017/03/04 00:57:54 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
[2017/03/04 00:57:27 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdpreference.exe
[2017/03/04 00:52:22 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mapsupdatetask.dll
[2017/03/04 00:49:39 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\samlib.dll
[2017/03/04 00:49:31 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NcdAutoSetup.dll
[2017/03/04 00:49:03 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MosStorage.dll
[2017/03/04 00:47:03 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsBtSvc.dll
[2017/03/04 00:44:39 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provisioningcsp.dll
[2017/03/04 00:42:12 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sscore.dll
[2017/03/04 00:41:53 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\moshost.dll
[2017/03/04 00:41:52 | 002,448,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll
[2017/03/04 00:41:37 | 000,882,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2adec.dll
[2017/03/04 00:40:51 | 000,473,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DolbyDecMFT.dll
[2017/03/04 00:40:48 | 000,467,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSAudDecMFT.dll
[2017/03/04 00:40:12 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppCapture.dll
[2017/03/04 00:39:39 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TabbtnEx.dll
[2017/03/04 00:38:43 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\feclient.dll
[2017/03/04 00:37:18 | 000,351,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NgcCtnr.dll
[2017/03/04 00:36:37 | 000,356,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mcbuilder.exe
[2017/03/04 00:34:12 | 000,270,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\moshostcore.dll
[2017/03/04 00:33:06 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LegacyNetUXHost.exe
[2017/03/04 00:31:33 | 000,185,856 | ---- | M] () -- C:\WINDOWS\SysNative\ism32k.dll
[2017/03/04 00:29:32 | 000,248,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icm32.dll
[2017/03/04 00:29:15 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\P2P.dll
[2017/03/04 00:29:02 | 000,236,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinSCard.dll
[2017/03/04 00:28:28 | 000,267,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\apds.dll
[2017/03/04 00:26:13 | 000,642,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll
[2017/03/04 00:26:04 | 000,128,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\setupugc.exe
[2017/03/04 00:25:42 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinFax.dll
[2017/03/04 00:25:37 | 000,287,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provhandlers.dll
[2017/03/04 00:25:34 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provengine.dll
[2017/03/04 00:25:21 | 000,567,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MBMediaManager.dll
[2017/03/04 00:24:31 | 000,431,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvr.exe
[2017/03/04 00:23:56 | 000,463,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlansec.dll
[2017/03/04 00:23:35 | 000,752,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhoneService.dll
[2017/03/04 00:22:42 | 000,450,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll
[2017/03/04 00:22:02 | 000,342,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\APHostService.dll
[2017/03/04 00:21:30 | 000,370,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack_win.dll
[2017/03/04 00:21:17 | 000,685,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\scapi.dll
[2017/03/04 00:20:18 | 000,460,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapConfiguration.dll
[2017/03/04 00:19:57 | 000,458,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToDevice.dll
[2017/03/04 00:19:50 | 000,287,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdpsvc.dll
[2017/03/04 00:19:44 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MosHostClient.dll
[2017/03/04 00:19:32 | 000,510,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WlanMediaManager.dll
[2017/03/04 00:19:19 | 000,339,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorService.dll
[2017/03/04 00:17:34 | 000,270,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netplwiz.dll
[2017/03/04 00:16:55 | 000,619,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efswrt.dll
[2017/03/04 00:16:41 | 000,305,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edputil.dll
[2017/03/04 00:16:29 | 000,318,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.OneCore.dll
[2017/03/04 00:15:48 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\stdole2.tlb
[2017/03/04 00:15:34 | 000,630,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MessagingDataModel2.dll
[2017/03/04 00:15:17 | 000,695,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys
[2017/03/04 00:14:52 | 000,315,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXTaskFactory.dll
[2017/03/04 00:11:30 | 000,359,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsApi.dll
[2017/03/04 00:11:24 | 000,492,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.UserAccountsHandlers.dll
[2017/03/04 00:11:14 | 000,556,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll
[2017/03/04 00:10:01 | 000,509,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\energy.dll
[2017/03/04 00:09:07 | 000,708,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Web.Core.dll
[2017/03/04 00:08:53 | 000,674,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mbsmsapi.dll
[2017/03/04 00:08:50 | 000,941,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MiracastReceiver.dll
[2017/03/04 00:08:38 | 001,056,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\JpMapControl.dll
[2017/03/04 00:08:27 | 000,472,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Geolocation.dll
[2017/03/04 00:08:22 | 000,821,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MrmIndexer.dll
[2017/03/04 00:08:17 | 000,564,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DevicePairing.dll
[2017/03/04 00:08:11 | 000,852,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsStore.dll
[2017/03/04 00:07:31 | 000,480,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppBroker.dll
[2017/03/04 00:07:21 | 000,504,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppReadiness.dll
[2017/03/04 00:07:06 | 000,915,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\configurationclient.dll
[2017/03/04 00:06:54 | 000,075,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CallButtons.dll
[2017/03/04 00:06:36 | 000,168,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReInfo.dll
[2017/03/04 00:06:00 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MosStorage.dll
[2017/03/04 00:05:59 | 000,538,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.Desktop.dll
[2017/03/04 00:04:38 | 000,584,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ngccredprov.dll
[2017/03/04 00:04:21 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapsBtSvc.dll
[2017/03/04 00:04:00 | 000,697,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToManager.dll
[2017/03/04 00:03:33 | 000,297,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\thumbcache.dll
[2017/03/04 00:03:05 | 000,814,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appwiz.cpl
[2017/03/04 00:03:01 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NMAA.dll
[2017/03/04 00:02:45 | 000,817,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Storage.Search.dll
[2017/03/04 00:02:29 | 000,585,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe
[2017/03/04 00:02:16 | 001,159,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApplicationFrame.dll
[2017/03/04 00:02:14 | 000,990,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModel.dll
[2017/03/04 00:02:11 | 000,870,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll
[2017/03/04 00:02:09 | 000,939,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapControlCore.dll
[2017/03/04 00:00:39 | 001,239,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Bluetooth.dll
[2017/03/04 00:00:09 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sscore.dll
[2017/03/04 00:00:06 | 000,529,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LogonController.dll
[2017/03/04 00:00:03 | 000,842,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32spl.dll
[2017/03/03 23:59:29 | 001,847,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMPDMC.exe
[2017/03/03 23:58:59 | 000,243,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingMonitor.dll
[2017/03/03 23:58:56 | 001,717,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GdiPlus.dll
[2017/03/03 23:58:39 | 001,575,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.dll
[2017/03/03 23:57:17 | 002,731,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gameux.dll
[2017/03/03 23:57:10 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\feclient.dll
[2017/03/03 23:56:45 | 001,648,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comsvcs.dll
[2017/03/03 23:55:28 | 000,302,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mcbuilder.exe
[2017/03/03 23:55:27 | 001,319,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifinetworkmanager.dll
[2017/03/03 23:54:10 | 000,549,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFolder.dll
[2017/03/03 23:53:46 | 002,624,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputService.dll
[2017/03/03 23:53:13 | 001,073,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXService.dll
[2017/03/03 23:50:41 | 002,054,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll
[2017/03/03 23:49:24 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\P2P.dll
[2017/03/03 23:48:43 | 000,215,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\apds.dll
[2017/03/03 23:48:06 | 000,821,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBroker.dll
[2017/03/03 23:47:37 | 001,052,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MsSpellCheckingFacility.dll
[2017/03/03 23:47:12 | 001,062,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comdlg32.dll
[2017/03/03 23:46:54 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\setupugc.exe
[2017/03/03 23:46:36 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinFax.dll
[2017/03/03 23:45:40 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe
[2017/03/03 23:45:12 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlansec.dll
[2017/03/03 23:42:29 | 000,349,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapConfiguration.dll
[2017/03/03 23:42:09 | 002,436,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll
[2017/03/03 23:41:58 | 001,490,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataService.dll
[2017/03/03 23:41:24 | 000,701,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.dll
[2017/03/03 23:39:05 | 001,297,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorDataService.exe
[2017/03/03 23:37:21 | 000,553,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cryptui.dll
[2017/03/03 23:35:28 | 000,286,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsApi.dll
[2017/03/03 23:33:54 | 000,368,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Enumeration.dll
[2017/03/03 23:33:28 | 000,489,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mbsmsapi.dll
[2017/03/03 23:33:22 | 001,534,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationFramework.dll
[2017/03/03 23:33:13 | 000,800,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\JpMapControl.dll
[2017/03/03 23:33:07 | 000,337,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Geolocation.dll
[2017/03/03 23:32:52 | 000,502,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DevicePairing.dll
[2017/03/03 23:31:59 | 000,372,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppBroker.dll
[2017/03/03 23:31:21 | 000,613,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSync.dll
[2017/03/03 23:31:01 | 001,755,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dui70.dll
[2017/03/03 23:30:08 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Proximity.dll
[2017/03/03 23:29:04 | 000,784,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NMAA.dll
[2017/03/03 23:28:42 | 000,711,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapControlCore.dll
[2017/03/03 23:27:40 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rshx32.dll
[2017/03/03 23:27:21 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmenrollengine.dll
[2017/03/03 23:27:20 | 000,854,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Bluetooth.dll
[2017/03/03 23:27:20 | 000,342,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\configmanager2.dll
[2017/03/03 23:26:34 | 001,497,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WMPDMC.exe
[2017/03/03 23:26:11 | 001,467,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GdiPlus.dll
[2017/03/03 23:25:59 | 000,783,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanpref.dll
[2017/03/03 23:25:56 | 001,117,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.dll
[2017/03/03 23:25:13 | 000,705,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2017/03/03 23:24:57 | 002,578,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gameux.dll
[2017/03/03 23:24:44 | 002,067,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.dll
[2017/03/03 23:24:31 | 001,946,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll
[2017/03/03 23:24:19 | 001,097,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dosvc.dll
[2017/03/03 23:24:03 | 000,931,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSMPEG2ENC.DLL
[2017/03/03 23:23:08 | 001,944,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputService.dll
[2017/03/03 23:22:56 | 000,995,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\HelpPane.exe
[2017/03/03 23:20:48 | 002,175,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
[2017/03/03 23:19:21 | 001,997,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActiveSyncProvider.dll
[2017/03/03 23:19:01 | 000,639,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBroker.dll
[2017/03/03 23:18:40 | 000,778,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MsSpellCheckingFacility.dll
[2017/03/03 23:14:19 | 000,581,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.dll
[2017/03/03 23:13:44 | 002,843,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll
[2017/03/03 23:11:13 | 002,444,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.appcore.dll
[2017/03/03 23:08:36 | 000,984,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncCore.dll
[2017/03/03 23:08:07 | 001,185,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LocationFramework.dll
[2017/03/03 23:07:03 | 000,503,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSync.dll
[2017/03/03 23:05:19 | 000,329,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Proximity.dll
[2017/03/03 23:04:05 | 000,733,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasapi32.dll
[2017/03/03 23:03:55 | 001,390,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Shell.dll
[2017/03/03 23:03:42 | 000,168,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Tabbtn.dll
[2017/03/03 23:03:01 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rshx32.dll
[2017/03/03 23:01:49 | 000,724,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanpref.dll
[2017/03/03 23:00:06 | 007,200,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BingMaps.dll
[2017/03/03 22:59:38 | 001,626,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll
[2017/03/03 22:59:32 | 000,882,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntshrui.dll
[2017/03/03 22:58:41 | 000,871,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSMPEG2ENC.DLL
[2017/03/03 22:57:45 | 001,708,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActiveSyncProvider.dll
[2017/03/03 22:56:51 | 002,563,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\themecpl.dll
[2017/03/03 22:55:28 | 000,856,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\samsrv.dll
[2017/03/03 22:55:14 | 001,860,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll
[2017/03/03 22:52:57 | 002,000,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll
[2017/03/03 22:52:48 | 001,797,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll
[2017/03/03 22:52:00 | 000,754,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncCore.dll
[2017/03/03 22:51:52 | 009,921,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll
[2017/03/03 22:44:48 | 005,205,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BingMaps.dll
[2017/03/03 22:42:30 | 000,651,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserLanguagesCpl.dll
[2017/03/03 22:41:08 | 011,545,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
[2017/03/03 22:38:15 | 002,519,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\themecpl.dll
[2017/03/03 22:36:50 | 001,385,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usercpl.dll
[2017/03/03 22:36:14 | 003,428,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
[2017/03/03 22:36:09 | 001,582,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll
[2017/03/03 22:35:55 | 002,352,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll
[2017/03/03 22:35:23 | 002,798,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
[2017/03/03 22:35:13 | 005,326,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
[2017/03/03 22:34:45 | 002,582,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
[2017/03/03 22:34:13 | 000,636,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hgcpl.dll
[2017/03/03 22:31:41 | 006,976,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll
[2017/03/03 22:31:24 | 002,155,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll
[2017/03/03 22:31:11 | 002,062,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
[2017/03/03 22:30:41 | 001,249,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usercpl.dll
[2017/03/03 22:29:03 | 000,573,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserLanguagesCpl.dll
[2017/03/03 22:28:39 | 014,258,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
[2017/03/03 22:26:43 | 012,590,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2017/03/03 22:20:10 | 000,381,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpclip.exe
[2017/03/03 22:19:27 | 001,487,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SpeechPal.dll
[2017/03/03 13:51:08 | 000,003,079 | ---- | M] () -- C:\Users\steve\Desktop\FSiPanel User Manual.pdf.lnk
[2017/03/03 13:51:07 | 000,003,079 | ---- | M] () -- C:\Users\steve\Desktop\FSIPanel.lnk
[2017/03/03 13:43:02 | 000,002,048 | ---- | M] () -- C:\WINDOWS\FSiPanelv1.lic
[2017/03/01 20:34:48 | 000,001,470 | ---- | M] () -- C:\Users\steve\Desktop\ujr.exe - Shortcut.lnk
[2017/03/01 01:17:49 | 000,000,183 | ---- | M] () -- C:\Users\steve\.gitconfig
[2017/03/01 00:05:02 | 000,002,304 | ---- | M] () -- C:\Users\steve\Desktop\Git Shell.lnk
[2017/03/01 00:04:39 | 000,000,308 | ---- | M] () -- C:\Users\steve\Desktop\GitHub.appref-ms
[2017/02/28 16:43:09 | 000,001,085 | ---- | M] () -- C:\Users\steve\Desktop\Orbx 65S Control Panel (P3D).lnk
[2017/02/27 20:29:24 | 000,001,882 | ---- | M] () -- C:\Users\steve\Desktop\Cessna_162_Skycatcher_Pilots_Guide.lnk
[2017/02/27 20:29:24 | 000,001,774 | ---- | M] () -- C:\Users\steve\Desktop\162 Revision_History.lnk
[2017/02/27 08:10:48 | 000,001,235 | ---- | M] () -- C:\Users\steve\Desktop\KCMW Control Panel.lnk
[2017/02/27 08:10:48 | 000,001,221 | ---- | M] () -- C:\Users\steve\Desktop\KCMW User Guide.lnk
[2017/02/24 13:44:44 | 000,047,632 | ---- | M] (ThreatTrack Security Inc.) -- C:\WINDOWS\SysWow64\sbbd.exe
[2017/02/24 13:44:44 | 000,047,632 | ---- | M] (ThreatTrack Security Inc.) -- C:\WINDOWS\SysNative\sbbd.exe
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2017/05/24 22:42:30 | 000,000,910 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2017/05/24 21:10:29 | 000,001,543 | ---- | C] () -- C:\Users\Public\Desktop\FS2Crew PMDG 777 Config Manager P3D V3.lnk
[2017/05/24 21:10:29 | 000,001,461 | ---- | C] () -- C:\Users\Public\Desktop\FS2Crew 777 Manual.lnk
[2017/05/24 21:10:29 | 000,001,450 | ---- | C] () -- C:\Users\Public\Desktop\777 FO Voice Pack.lnk
[2017/05/24 21:08:22 | 000,001,643 | ---- | C] () -- C:\Users\Public\Desktop\P3D V3 NGX Reboot Config Manager.lnk
[2017/05/24 21:08:22 | 000,001,481 | ---- | C] () -- C:\Users\Public\Desktop\NGX Global FO.lnk
[2017/05/24 21:00:45 | 000,001,179 | ---- | C] () -- C:\Users\Public\Desktop\FS2Crew Deal.lnk
[2017/05/24 21:00:45 | 000,001,174 | ---- | C] () -- C:\Users\Public\Desktop\RAAS Pro Manual.lnk
[2017/05/24 20:37:47 | 004,917,616 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2017/05/24 17:56:05 | 000,002,075 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7+ Taskbar Tweaker.lnk
[2017/05/24 13:09:25 | 000,001,909 | ---- | C] () -- C:\Users\Public\Desktop\VIPRE.lnk
[2017/05/24 07:55:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SysNative\reimage.rep
[2017/05/24 07:35:41 | 000,012,710 | ---- | C] () -- C:\WINDOWS\SysNative\Native.exe
[2017/05/23 21:45:40 | 000,001,024 | ---- | C] () -- C:\Users\Public\Desktop\EaseUS Todo PCTrans.lnk
[2017/05/23 10:26:24 | 000,002,216 | ---- | C] () -- C:\Users\Public\Desktop\PC Scan & Repair by Reimage.lnk
[2017/05/23 10:25:39 | 000,000,167 | ---- | C] () -- C:\WINDOWS\Reimage.ini
[2017/05/22 21:59:00 | 000,536,864 | ---- | C] () -- C:\WINDOWS\SysNative\vulkan-1.dll
[2017/05/22 21:59:00 | 000,525,600 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkan-1.dll
[2017/05/22 21:59:00 | 000,254,240 | ---- | C] () -- C:\WINDOWS\SysNative\vulkaninfo.exe
[2017/05/22 21:59:00 | 000,233,760 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkaninfo.exe
[2017/05/22 19:05:58 | 000,000,835 | ---- | C] () -- C:\Users\Public\Desktop\FSTramp data base - FSX-SE.lnk
[2017/05/22 19:05:58 | 000,000,831 | ---- | C] () -- C:\Users\Public\Desktop\FSTramp data base - P3Dv3.lnk
[2017/05/22 19:05:58 | 000,000,831 | ---- | C] () -- C:\Users\Public\Desktop\FSTramp data base - P3Dv2.lnk
[2017/05/22 19:05:58 | 000,000,829 | ---- | C] () -- C:\Users\Public\Desktop\FSTramp data base - FSX.lnk
[2017/05/22 14:40:43 | 000,001,371 | ---- | C] () -- C:\Users\Public\Desktop\Wise Memory Optimizer.lnk
[2017/05/22 14:07:45 | 000,001,328 | ---- | C] () -- C:\Users\Public\Desktop\Wise Game Booster.lnk
[2017/05/21 21:53:06 | 000,002,048 | ---- | C] () -- C:\WINDOWS\gtn750p3d.lic
[2017/05/20 13:06:37 | 000,006,125 | ---- | C] () -- C:\Users\steve\AppData\Local\recently-used.xbel
[2017/05/19 17:16:08 | 000,000,295 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\All Control Panel Items.lnk
[2017/05/17 18:59:28 | 000,001,754 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\littlenavmap.lnk
[2017/05/17 16:19:48 | 000,000,039 | ---- | C] () -- C:\Users\steve\AppData\Local\kritadisplayrc
[2017/05/17 16:15:36 | 000,015,446 | ---- | C] () -- C:\Users\steve\AppData\Local\kritarc
[2017/05/17 16:14:48 | 000,000,950 | ---- | C] () -- C:\Users\Public\Desktop\Krita.lnk
[2017/05/17 16:11:23 | 000,000,861 | ---- | C] () -- C:\Users\steve\Application Data\Microsoft\Internet Explorer\Quick Launch\Artweaver Free 6.lnk
[2017/05/17 16:11:23 | 000,000,861 | ---- | C] () -- C:\Users\Public\Desktop\Artweaver Free 6.lnk
[2017/05/16 16:31:29 | 000,000,814 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ZPaint 1.4.lnk
[2017/05/16 09:33:45 | 000,000,898 | ---- | C] () -- C:\Users\Public\Desktop\paint.net.lnk
[2017/05/16 09:33:45 | 000,000,898 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
[2017/05/16 07:36:15 | 000,000,844 | ---- | C] () -- C:\Users\Public\Desktop\GIMP 2.lnk
[2017/05/15 13:32:08 | 000,001,431 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Configurador SCX.lnk
[2017/05/15 13:29:34 | 000,001,221 | ---- | C] () -- C:\Users\steve\Desktop\Configurador SCX.lnk
[2017/05/15 07:29:06 | 049,827,832 | ---- | C] () -- C:\PTCX.exe
[2017/05/14 19:17:35 | 000,001,004 | ---- | C] () -- C:\Users\steve\Desktop\smartCARS - flyTSL (en-US).lnk
[2017/05/13 12:06:44 | 000,000,968 | ---- | C] () -- C:\Users\Public\Desktop\Navigraph FMS Data Manager.lnk
[2017/05/13 11:21:46 | 000,002,457 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
[2017/05/13 11:21:46 | 000,002,171 | ---- | C] () -- C:\Users\Public\Desktop\Acrobat Reader DC.lnk
[2017/05/12 07:32:06 | 000,002,379 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TFDi Design Addon Manager Update Tool.lnk
[2017/05/12 07:32:06 | 000,002,292 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TFDi Design Addon Manager.lnk
[2017/05/12 07:32:06 | 000,002,280 | ---- | C] () -- C:\Users\Public\Desktop\TFDi Design Addon Manager.lnk
[2017/05/12 02:05:55 | 000,000,683 | ---- | C] () -- C:\Users\Public\Desktop\Pilot2ATC_200.lnk
[2017/05/10 21:30:38 | 000,001,008 | ---- | C] () -- C:\Users\Public\Desktop\Physics P3D Configurator.lnk
[2017/05/10 21:30:38 | 000,000,971 | ---- | C] () -- C:\Users\Public\Desktop\Sim Physics P3D.lnk
[2017/05/10 17:39:50 | 000,001,340 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudioWizard.lnk
[2017/05/10 17:39:50 | 000,001,328 | ---- | C] () -- C:\Users\Public\Desktop\AudioWizard.lnk
[2017/05/10 17:38:54 | 009,124,224 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\RTAIODAT.DAT
[2017/05/10 17:13:15 | 000,000,217 | ---- | C] () -- C:\Users\steve\Desktop\Realtek HD Audio Manager - Shortcut.lnk
[2017/05/10 09:57:00 | 000,001,121 | ---- | C] () -- C:\Users\Public\Desktop\ImagePrinter Pro.lnk
[2017/05/09 16:30:14 | 001,862,000 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2017/05/09 16:29:04 | 002,656,960 | ---- | C] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
[2017/05/09 14:33:15 | 000,001,043 | ---- | C] () -- C:\Users\Public\Desktop\3D Real Cockpit Effect.lnk
[2017/05/08 10:12:22 | 000,001,191 | ---- | C] () -- C:\Users\Public\Desktop\Shade_gui.lnk
[2017/05/08 10:12:22 | 000,001,186 | ---- | C] () -- C:\Users\Public\Desktop\Shade_nl.lnk
[2017/05/08 10:12:22 | 000,001,033 | ---- | C] () -- C:\Users\Public\Desktop\Shade.lnk
[2017/05/06 23:50:55 | 000,000,983 | ---- | C] () -- C:\Users\Public\Desktop\P3D Booster Live.lnk
[2017/05/06 19:11:29 | 000,001,255 | ---- | C] () -- C:\Users\Public\Desktop\EFASS - Electronic Flight Assistant-v1-new servers.lnk
[2017/05/06 09:05:07 | 000,001,003 | ---- | C] () -- C:\Users\Public\Desktop\Ultimate Crew 2014.lnk
[2017/05/05 01:59:29 | 000,001,063 | ---- | C] () -- C:\Users\Public\Desktop\Dolby Cockpit Sounds FSX.lnk
[2017/05/04 14:51:19 | 000,001,412 | ---- | C] () -- C:\Users\Public\Desktop\Wise Program Uninstaller.lnk
[2017/05/02 23:51:16 | 000,001,504 | ---- | C] () -- C:\Users\steve\Desktop\Airbus Evolution Extra Notes.lnk
[2017/05/02 18:53:25 | 000,065,612 | ---- | C] () -- C:\Users\steve\Documents\XPFlightPlanner - KHSVKATL.pdf
[2017/05/01 15:51:51 | 000,001,602 | ---- | C] () -- C:\Users\steve\Desktop\Cessna 162 Pilots Guide.lnk
[2017/05/01 15:50:31 | 171,794,927 | ---- | C] () -- C:\F1Skycatcher.exe
[2017/04/28 23:26:41 | 000,000,923 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\aeroSOFTLauncher.lnk
[2017/04/28 19:03:26 | 000,002,407 | ---- | C] () -- C:\Users\steve\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2017/04/28 19:03:26 | 000,002,319 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
[2017/04/28 19:03:26 | 000,002,307 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2017/04/28 15:36:15 | 000,001,008 | ---- | C] () -- C:\Users\Public\Desktop\FSX_Planner.exe.lnk
[2017/04/26 20:30:28 | 000,028,272 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\TrueSight.sys
[2017/04/26 20:29:22 | 000,000,946 | ---- | C] () -- C:\Users\Public\Desktop\RogueKiller.lnk
[2017/04/26 16:43:28 | 000,001,434 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\A.P.P..lnk
[2017/04/26 12:07:27 | 000,001,139 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EFASS.lnk
[2017/04/26 12:07:27 | 000,001,127 | ---- | C] () -- C:\Users\Public\Desktop\EFASS.lnk
[2017/04/25 15:35:47 | 000,001,427 | ---- | C] () -- C:\Users\Public\Desktop\Load PERDITION Gaming Mouse.lnk
[2017/04/24 18:40:37 | 000,002,335 | ---- | C] () -- C:\Users\steve\Desktop\Discord PTB.lnk
[2017/04/24 01:29:01 | 000,000,959 | ---- | C] () -- C:\Users\Public\Desktop\VasoGraph.lnk
[2017/04/21 16:52:24 | 000,001,884 | ---- | C] () -- C:\Users\Public\Desktop\Prepar3D v3.lnk
[2017/04/21 13:01:09 | 000,007,605 | ---- | C] () -- C:\Users\steve\AppData\Local\resmon.resmoncfg
[2017/04/21 11:01:21 | 000,001,044 | ---- | C] () -- C:\Users\steve\Desktop\Should I Remove It.lnk
[2017/04/19 16:18:10 | 000,001,031 | ---- | C] () -- C:\Users\Public\Desktop\P3D Fiber Accelerator.lnk
[2017/04/19 13:29:42 | 000,001,020 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PFPX.lnk
[2017/04/19 09:27:43 | 000,001,039 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autoruns64.lnk
[2017/04/19 00:10:58 | 000,001,281 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\nvidiaProfileInspector.lnk
[2017/04/19 00:10:48 | 000,001,248 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\nvidiaInspector.lnk
[2017/04/18 00:34:34 | 000,001,121 | ---- | C] () -- C:\Users\steve\Desktop\Airbus Widebody Quick Start Guide.lnk
[2017/04/18 00:04:59 | 000,002,464 | ---- | C] () -- C:\Users\steve\Desktop\BlackBox PreFlight Manager.lnk
[2017/04/15 21:59:43 | 000,001,775 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\REX 4 - Texture Direct with Soft Clouds.lnk
[2017/04/15 21:59:01 | 000,001,625 | ---- | C] () -- C:\Users\Public\Desktop\REX 4 - Texture Direct with Soft Clouds.lnk
[2017/04/15 21:59:01 | 000,000,725 | ---- | C] () -- C:\Users\Public\Desktop\User Manual - REX 4 Texture Direct with Soft Clouds.lnk
[2017/04/13 21:42:26 | 000,001,219 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Airport Design Editor.lnk
[2017/04/13 21:21:44 | 000,001,029 | ---- | C] () -- C:\Users\steve\Desktop\ADE 170.lnk
[2017/04/12 12:49:51 | 000,001,869 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2017/04/12 10:23:52 | 000,448,285 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml
[2017/04/12 01:37:25 | 000,001,582 | ---- | C] () -- C:\Users\steve\Desktop\AH Miles Hawk Speed Six for P3D manual.lnk
[2017/04/10 11:36:16 | 000,001,029 | ---- | C] () -- C:\Users\Public\Desktop\NMG Africa Terrain Mesh V1.4 Docs (P3D3).lnk
[2017/04/07 22:57:51 | 000,552,960 | ---- | C] () -- C:\WINDOWS\SysWow64\RAASAUDIO32.dll
[2017/04/07 00:06:04 | 000,001,951 | ---- | C] () -- C:\WINDOWS\NvTelemetryContainerRecovery.bat
[2017/04/07 00:02:07 | 000,000,669 | ---- | C] () -- C:\WINDOWS\SysNative\nv-vk64.json
[2017/04/07 00:02:07 | 000,000,669 | ---- | C] () -- C:\WINDOWS\SysWow64\nv-vk32.json
[2017/04/03 14:06:15 | 000,014,490 | ---- | C] () -- C:\WINDOWS\SysWow64\cache
[2017/04/01 02:25:02 | 000,001,353 | ---- | C] () -- C:\Users\Public\Desktop\PA28 Arrow Model Switcher.lnk
[2017/03/31 01:18:00 | 000,548,392 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\EasyAntiCheat.sys
[2017/03/30 23:35:02 | 000,000,234 | ---- | C] () -- C:\Users\steve\Desktop\Tom Clancy's Ghost Recon® Wildlands.url
[2017/03/30 23:35:02 | 000,000,234 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tom Clancy's Ghost Recon® Wildlands.url
[2017/03/30 23:26:40 | 000,000,984 | ---- | C] () -- C:\Users\steve\Desktop\Uplay.lnk
[2017/03/26 18:39:11 | 000,000,221 | ---- | C] () -- C:\Users\steve\Desktop\Project CARS.url
[2017/03/25 17:39:44 | 000,000,895 | ---- | C] () -- C:\Users\Public\Desktop\XpressSim V2 Interface.lnk
[2017/03/18 00:23:39 | 000,001,435 | ---- | C] () -- C:\Users\Public\Desktop\Boeing CH-47 Chinook Manual.lnk
[2017/03/14 12:54:05 | 000,185,856 | ---- | C] () -- C:\WINDOWS\SysNative\ism32k.dll
[2017/03/13 16:49:28 | 000,160,334 | ---- | C] () -- C:\WINDOWS\Airport Stock Graphics Uninstaller.exe
[2017/03/13 10:12:38 | 000,221,353 | ---- | C] () -- C:\WINDOWS\Almaty Airport v1.0 FSX and FSXSE Uninstaller.exe
[2017/03/12 04:04:03 | 000,001,069 | ---- | C] () -- C:\Users\Public\Desktop\DH104 FDE Switcher.lnk
[2017/03/12 01:08:12 | 000,000,876 | ---- | C] () -- C:\Users\Public\Desktop\JoinFS.lnk
[2017/03/10 16:17:28 | 000,525,600 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkan-1-1-0-42-1.dll
[2017/03/10 16:17:20 | 000,233,760 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkaninfo-1-1-0-42-1.exe
[2017/03/10 16:17:14 | 000,536,864 | ---- | C] () -- C:\WINDOWS\SysNative\vulkan-1-1-0-42-1.dll
[2017/03/10 16:17:10 | 000,254,240 | ---- | C] () -- C:\WINDOWS\SysNative\vulkaninfo-1-1-0-42-1.exe
[2017/03/07 13:50:13 | 000,001,553 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LatinVFR_Manual_TJSJ.lnk
[2017/03/07 13:50:13 | 000,001,220 | ---- | C] () -- C:\Users\steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TJSJ uninstaller.lnk
[2017/03/07 09:15:37 | 000,002,464 | ---- | C] () -- C:\Users\Public\Desktop\BlackBox PreFlight Manager.lnk
[2017/03/07 00:38:13 | 000,001,072 | ---- | C] () -- C:\Users\Public\Desktop\METAR PRO.lnk
[2017/03/03 13:51:08 | 000,003,079 | ---- | C] () -- C:\Users\steve\Desktop\FSiPanel User Manual.pdf.lnk
[2017/03/03 13:51:07 | 000,003,079 | ---- | C] () -- C:\Users\steve\Desktop\FSIPanel.lnk
[2017/03/03 13:43:02 | 000,002,048 | ---- | C] () -- C:\WINDOWS\FSiPanelv1.lic
[2017/03/01 03:41:04 | 000,001,531 | ---- | C] () -- C:\Users\steve\Desktop\Creating Flight Plan and User Waypoint Files for the Flight1 GTN.lnk
[2017/03/01 03:41:04 | 000,001,380 | ---- | C] () -- C:\Users\steve\Desktop\Creating Checklists for the Flight1 GTN.lnk
[2017/03/01 03:41:04 | 000,001,315 | ---- | C] () -- C:\Users\steve\Desktop\GTN_Setup_and_Users_Guide.lnk
[2017/03/01 03:41:04 | 000,001,267 | ---- | C] () -- C:\Users\steve\Desktop\f1update_tool_readme.lnk
[2017/03/01 03:41:04 | 000,001,219 | ---- | C] () -- C:\Users\steve\Desktop\F1UpdateTool.lnk
[2017/03/01 03:41:03 | 000,001,231 | ---- | C] () -- C:\Users\steve\Desktop\F1TGTNConfigP3D .lnk
[2017/03/01 01:17:48 | 000,000,183 | ---- | C] () -- C:\Users\steve\.gitconfig
[2017/03/01 00:05:02 | 000,002,304 | ---- | C] () -- C:\Users\steve\Desktop\Git Shell.lnk
[2017/03/01 00:04:39 | 000,000,308 | ---- | C] () -- C:\Users\steve\Desktop\GitHub.appref-ms
[2017/02/28 16:43:09 | 000,001,085 | ---- | C] () -- C:\Users\steve\Desktop\Orbx 65S Control Panel (P3D).lnk
[2017/02/27 20:29:24 | 000,001,882 | ---- | C] () -- C:\Users\steve\Desktop\Cessna_162_Skycatcher_Pilots_Guide.lnk
[2017/02/27 20:29:24 | 000,001,774 | ---- | C] () -- C:\Users\steve\Desktop\162 Revision_History.lnk
[2017/02/27 08:10:48 | 000,001,235 | ---- | C] () -- C:\Users\steve\Desktop\KCMW Control Panel.lnk
[2017/02/27 08:10:48 | 000,001,221 | ---- | C] () -- C:\Users\steve\Desktop\KCMW User Guide.lnk
[2017/02/24 07:45:01 | 000,112,975 | ---- | C] () -- C:\ProgramData\Uninstal.exe
[2017/02/16 00:13:40 | 000,000,000 | ---- | C] () -- C:\Users\steve\AppData\Roaming\ADF8F0174DAB4265999B9336FFF72A2D.dat
[2017/02/14 22:28:03 | 000,000,085 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2017/02/12 17:13:17 | 007,430,144 | ---- | C] () -- C:\ProgramData\Installer_SODE_v1.4.2.msi
[2017/02/10 22:50:42 | 000,153,088 | ---- | C] () -- C:\WINDOWS\UNWISE.EXE
[2017/02/06 13:54:59 | 000,000,179 | ---- | C] () -- C:\Users\steve\FSDreamTeam_GSX.reg
[2017/01/24 18:27:37 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2017/01/16 08:19:59 | 000,000,295 | ---- | C] () -- C:\Users\steve\.openev
[2016/12/28 20:10:24 | 000,000,199 | ---- | C] () -- C:\Users\steve\QualityWings_Ultimate 757 Collection.reg
[2016/12/28 19:30:27 | 000,000,159 | ---- | C] () -- C:\Users\steve\Cloud9_Orlando International.reg
[2016/12/05 18:19:18 | 000,000,112 | ---- | C] () -- C:\Users\steve\AppData\Local\X-Plane_drm_11.prf
[2016/11/27 06:15:40 | 002,936,512 | ---- | C] () -- C:\WINDOWS\SysWow64\BootMan.exe
[2016/11/27 06:15:40 | 000,088,160 | ---- | C] () -- C:\WINDOWS\SysWow64\setupempdrv03.exe
[2016/11/27 06:15:40 | 000,021,496 | ---- | C] () -- C:\WINDOWS\SysWow64\epmntdrv.sys
[2016/11/27 06:15:40 | 000,021,088 | ---- | C] () -- C:\WINDOWS\SysWow64\EuEpmGdi.dll
[2016/11/27 06:15:40 | 000,010,208 | ---- | C] () -- C:\WINDOWS\SysWow64\EuGdiDrv.sys
[2016/11/26 10:05:37 | 000,000,082 | ---- | C] () -- C:\Users\steve\AppData\Local\X-Plane_xdd_11.prf
[2016/11/16 19:07:10 | 000,000,036 | ---- | C] () -- C:\WINDOWS\progress.ini
[2016/11/05 18:12:25 | 000,000,089 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
[2016/11/02 16:00:23 | 000,000,119 | -HS- | C] () -- C:\WINDOWS\cnerolf.bin
[2016/10/19 10:03:11 | 000,012,582 | ---- | C] () -- C:\ProgramData\rdftdwqz.fks
[2016/10/19 10:03:10 | 000,000,016 | ---- | C] () -- C:\ProgramData\mntemp
[2016/10/04 15:47:23 | 000,168,093 | ---- | C] () -- C:\Users\steve\AppData\Roaming\XAddonManager.plist
[2016/08/20 14:47:06 | 000,000,576 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2016/07/31 11:20:59 | 000,003,336 | ---- | C] () -- C:\WINDOWS\SysWow64\VipreEdgeProtectionOff.ini
[2016/07/25 17:20:45 | 000,074,703 | ---- | C] () -- C:\WINDOWS\SysWow64\mfc45.dat
[2016/04/12 12:26:24 | 000,162,816 | ---- | C] () -- C:\WINDOWS\SysWow64\MTF.dll
[2016/04/04 07:33:39 | 000,000,048 | -HS- | C] () -- C:\WINDOWS\rmtf32-k289371-all.dat
[2016/03/29 12:19:54 | 000,552,960 | ---- | C] () -- C:\WINDOWS\SysWow64\FS2AUDIO.dll
[2016/03/18 10:48:31 | 000,000,033 | ---- | C] () -- C:\Users\steve\AppData\Roaming\AdobeWLCMCache.dat
[2016/02/27 00:45:38 | 000,000,037 | ---- | C] () -- C:\Users\steve\AppData\Local\X-Plane Installer.prf
[2016/02/26 19:25:37 | 000,204,800 | ---- | C] () -- C:\WINDOWS\SysWow64\ExMgr.exe
[2016/02/26 19:25:37 | 000,090,112 | ---- | C] () -- C:\WINDOWS\SysWow64\ExSrv2.dll
[2016/02/26 19:25:37 | 000,090,112 | ---- | C] () -- C:\WINDOWS\SysWow64\ExSrv.dll
[2016/02/20 12:57:45 | 000,002,422 | ---- | C] () -- C:\Users\steve\AppData\Roaming\WED.prefs
[2016/02/17 00:28:45 | 000,000,073 | ---- | C] () -- C:\Users\steve\AppData\Local\X-Plane_drm.prf
[2016/02/16 23:43:37 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2016/02/16 23:43:37 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2016/02/16 21:55:39 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2016/02/16 21:53:21 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2016/01/16 10:26:41 | 000,340,480 | ---- | C] () -- C:\WINDOWS\SysWow64\esftchk2.dll
[2016/01/16 10:26:41 | 000,276,992 | ---- | C] () -- C:\WINDOWS\SysWow64\esftchk5.dll
[2015/10/30 02:18:39 | 000,164,224 | ---- | C] () -- C:\WINDOWS\SysWow64\weretw.dll
[2015/10/30 02:18:36 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2015/10/30 02:18:36 | 000,047,104 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2015/10/30 02:18:34 | 000,019,968 | ---- | C] () -- C:\WINDOWS\SysWow64\GamePanelExternalHook.dll
[2015/10/30 02:18:31 | 000,252,928 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.Perception.Stub.dll
[2015/10/30 02:18:31 | 000,029,184 | ---- | C] () -- C:\WINDOWS\SysWow64\dtdump.exe
[2015/10/30 02:18:29 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2015/10/30 02:18:29 | 000,293,376 | ---- | C] () -- C:\WINDOWS\SysWow64\HrtfApo.dll
[2015/10/30 02:18:26 | 000,022,528 | ---- | C] () -- C:\WINDOWS\SysWow64\efsext.dll
[2015/10/30 02:18:25 | 000,002,269 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
[2015/10/30 02:18:23 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
[2015/10/30 02:17:40 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2015/05/22 11:08:10 | 342,506,386 | ---- | C] () -- C:\Users\steve\rexess_withod.zip
 
========== ZeroAccess Check ==========
 
[2016/02/23 16:24:40 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\WINDOWS\SysNative\windows.storage.dll -- [2017/04/27 22:27:53 | 006,604,992 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\windows.storage.dll -- [2017/04/27 21:52:51 | 005,240,448 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\WINDOWS\SysNative\wbem\fastprox.dll -- [2015/10/30 02:17:43 | 000,987,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2015/10/30 02:18:21 | 000,765,440 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\WINDOWS\SysNative\wbem\wbemess.dll -- [2016/09/06 23:35:09 | 000,518,656 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2016/11/11 16:45:25 | 000,000,000 | ---D | M] -- C:\Users\Administrator.steves22\AppData\Roaming\ioloGovernor
[2016/11/11 16:45:03 | 000,000,000 | ---D | M] -- C:\Users\Administrator.steves22\AppData\Roaming\Oculus
[2016/11/11 16:47:23 | 000,000,000 | ---D | M] -- C:\Users\Administrator.steves22\AppData\Roaming\VIPRE
[2016/04/15 10:46:52 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\7+ Taskbar Tweaker
[2017/05/22 11:50:34 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\ABarthel
[2016/04/04 19:52:00 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\AbleWord
[2016/08/05 08:08:41 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Ashampoo
[2017/02/15 20:53:53 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Awesomium
[2017/05/24 23:17:42 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Azureus
[2016/10/03 19:14:06 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\BANDISOFT
[2016/02/24 00:13:16 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Batch Text Replacer
[2016/03/01 19:02:02 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\BitDefender
[2016/12/16 23:46:01 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\BitLord
[2017/03/07 18:14:08 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\BlackBox Simulation
[2016/02/21 15:07:14 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Blender Foundation
[2017/01/11 10:52:39 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\CaptainSim
[2017/05/16 23:27:35 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\ClassicShell
[2016/03/20 17:32:56 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\cryptlib
[2016/08/05 16:34:08 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\CubicExplorer
[2016/10/20 21:54:45 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\DAPV9
[2017/02/25 10:02:36 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\discord
[2017/05/08 00:52:01 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\discordptb
[2016/08/20 07:23:28 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Dropbox
[2016/08/19 07:17:50 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\DsfMft Viewer
[2017/03/31 01:17:57 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\EasyAntiCheat
[2016/11/27 10:24:16 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\epm
[2017/03/02 11:31:26 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\ESDG
[2016/12/24 22:58:21 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\EurekaLog
[2016/11/03 21:38:28 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\EZCA
[2016/11/12 12:17:00 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Flight One Software
[2017/03/01 03:41:22 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Flight1 Aviation Technologies
[2016/02/27 19:33:59 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Foxit AgentInformation
[2016/08/21 08:08:22 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Foxit Software
[2016/11/15 14:33:08 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\FreeDownloadManager.ORG
[2016/04/12 17:32:43 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\FreeLanguageTranslator
[2017/02/03 09:32:11 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\FS2Crew2010
[2016/08/05 09:57:46 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\FSL
[2017/05/23 14:57:40 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\FSTramp for P3D v3
[2016/12/29 05:49:18 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\FSX Modules
[2017/04/28 15:44:29 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\FSX Planner
[2016/02/16 23:21:31 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\GameGuard
[2017/03/01 02:13:07 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\GitHub
[2016/08/05 13:19:54 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\GRASS6
[2016/04/04 11:10:47 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\GRLevel3_2
[2017/01/29 19:40:21 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Hide.me
[2016/11/28 13:25:04 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Hifi
[2016/04/04 19:49:39 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\inkscape
[2016/07/25 17:20:45 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\iolo
[2016/07/25 17:20:44 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\ioloGovernor
[2016/08/05 18:02:26 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\IrfanView
[2016/11/11 17:33:45 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\JAM Software
[2016/09/04 21:24:36 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\JOSM
[2017/02/15 21:05:25 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Khrona LLC
[2017/04/21 11:53:34 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\kingsoft
[2017/05/17 16:15:35 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\krita
[2017/05/15 17:04:53 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Lockheed Martin
[2016/02/20 11:31:50 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\marginal.org
[2017/02/15 20:53:52 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\MarkdownPad 2
[2017/02/15 20:52:05 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\MarkdownPad 2 2.5.0.27920
[2016/03/14 13:58:11 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\MAXON
[2017/03/04 03:07:46 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Navdata
[2016/03/05 12:01:48 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Notepad++
[2017/02/10 11:42:43 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\OBS
[2017/05/22 11:50:01 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\obs-studio
[2016/04/03 01:01:27 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Obsidium
[2017/01/16 08:20:00 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Oculus
[2016/10/17 18:16:48 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\OculusClient
[2016/02/23 14:03:34 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\OpenOffice
[2016/11/14 21:28:16 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Orbx Systems
[2017/05/13 00:08:00 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\P2A_200
[2016/02/27 09:44:07 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\PDAppFlex
[2016/03/31 09:04:41 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Pilot2ATC
[2017/05/13 00:08:00 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Pilot2ATC_200
[2017/02/10 18:40:22 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\PMDG
[2017/04/14 07:40:48 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\PMDG Operations Center
[2017/03/14 10:16:28 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\PW Sceneries Volume 1 - Grenada
[2017/03/14 10:17:16 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\PW Sceneries Volume 2 - The Grenadines, Saint Vincent and Barbados
[2017/03/14 10:18:48 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\PW Sceneries Volume 3 - Saint Lucia and Martinique
[2017/03/14 10:19:43 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\PW Sceneries Volume 4 - Guadeloupe and Dominica
[2017/03/14 10:22:12 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\PW Sceneries Volume 5 - The Leeward Islands
[2016/12/20 08:14:04 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\qBittorrent
[2017/05/24 21:00:38 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\RAASPRO
[2017/04/25 06:23:04 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Rikoooo
[2016/12/29 04:19:55 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\SceneryDesign.org
[2017/04/13 21:22:27 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\ScruffyDuck
[2016/02/25 16:22:21 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\SketchUp
[2016/08/20 14:18:59 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Splashtop Wired XDisplay Agent
[2017/02/16 00:13:40 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Technology Lighthouse
[2017/03/26 18:42:15 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\TextMage
[2017/05/12 07:31:07 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\TFDi Design
[2016/02/20 21:15:54 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\tinySpell
[2016/02/25 16:35:17 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Trimble Connect for SketchUp
[2017/02/09 16:28:36 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Turbo
[2017/02/16 13:15:22 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\uTorrent
[2017/05/24 13:14:24 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\VIPRE
[2017/05/09 10:11:03 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Virtuali
[2017/05/01 07:48:37 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\VS Revo Group
[2016/09/04 20:55:17 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\wed_file_cache
[2017/05/25 10:00:34 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Wise Care 365
[2017/04/16 23:47:17 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Wise Disk Cleaner
[2016/12/31 10:01:53 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Wise Duplicate Finder
[2016/12/31 09:51:07 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Wise Folder Hider Pro
[2017/05/22 14:43:59 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Wise Game Booster
[2017/01/01 18:13:25 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Wise Hotkey
[2017/05/04 15:00:32 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\Wise Uninstaller
[2017/02/12 06:27:44 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\WiseTray
[2017/05/17 11:58:16 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\WiseUpdate
[2016/09/28 12:32:29 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\wps
[2017/02/15 20:53:54 | 000,000,000 | -HSD | M] -- C:\Users\steve\AppData\Roaming\wyUpdate AU
[2017/02/05 19:07:12 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\XnView
[2017/04/28 15:36:15 | 000,000,000 | ---D | M] -- C:\Users\steve\AppData\Roaming\zBlueSoftware
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
< %SYSTEMDRIVE%\*.* >
[2016/10/07 12:11:02 | 000,000,626 | ---- | M] () -- C:\1470adb9-69c8-4f0b-8d04-0eeb735c9797.index
[2016/11/23 21:35:30 | 001,181,277 | ---- | M] () -- C:\2edd1319-de94-491d-91c5-80b4afd2db6a.index
[2016/11/23 21:35:00 | 000,001,424 | ---- | M] () -- C:\5bf1fb0a-29b2-40d3-8f56-c1cd0e7bbd45.index
[2016/11/23 21:45:30 | 001,735,534 | ---- | M] () -- C:\72a93277-30bc-4a93-ac01-7f87f393db6b.index
[2016/10/18 10:41:43 | 000,006,560 | ---- | M] () -- C:\bdlog.txt
[2013/08/22 00:31:45 | 000,427,680 | RHS- | M] () -- C:\bootmgr
[2015/10/30 02:18:34 | 000,000,001 | -HS- | M] () -- C:\BOOTNXT
[2015/11/04 12:09:30 | 000,000,084 | ---- | M] () -- C:\D3D9Proxy.log
[2016/11/23 21:43:30 | 000,001,603 | ---- | M] () -- C:\dee6f182-3969-48b2-9386-f7b6c5516d9f.index
[2016/11/25 09:29:30 | 000,308,224 | -HS- | M] () -- C:\EUMONBMP.SYS
[2017/05/01 15:50:34 | 171,794,927 | ---- | M] () -- C:\F1Skycatcher.exe
[2015/04/12 11:29:28 | 000,000,000 | ---- | M] () -- C:\FileIn.Cns
[2015/04/12 11:29:28 | 000,000,000 | ---- | M] () -- C:\FileOut.Cns
[2015/03/31 13:16:55 | 000,003,752 | ---- | M] () -- C:\GEARDIFx_install.log
[2015/07/10 13:57:39 | 000,003,680 | ---- | M] () -- C:\GEARDIFx_uninstall.log
[2017/05/25 09:58:11 | 1679,032,318 | -HS- | M] () -- C:\hiberfil.sys
[2017/05/23 11:29:52 | 000,200,071 | ---- | M] () -- C:\log.txt
[2016/10/12 11:27:59 | 003,295,528 | ---- | M] (Oculus VR, LLC) -- C:\OculusSetup.exe
[2017/05/25 09:58:13 | 3758,096,384 | -HS- | M] () -- C:\pagefile.sys
[2016/01/25 11:49:55 | 000,000,000 | ---- | M] () -- C:\pcversion.txt
[2017/05/15 07:29:06 | 000,002,438 | ---- | M] () -- C:\PTC 3.0 Readme.txt
[2017/05/15 07:29:07 | 049,827,832 | ---- | M] () -- C:\PTCX.exe
[2015/10/17 20:40:56 | 000,000,000 | ---- | M] () -- C:\Recovery.txt
[2015/03/27 14:34:02 | 000,000,055 | ---- | M] () -- C:\sn.ist
[2016/08/20 14:37:23 | 000,000,282 | ---- | M] () -- C:\SSUUpdater.log
[2017/05/25 09:58:16 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2015/06/03 12:04:00 | 000,255,322 | ---- | M] () -- C:\TDSSKiller.3.0.0.44_03.06.2015_11.58.07_log.txt
[2015/03/31 13:32:24 | 000,000,072 | ---- | M] () -- C:\trace.txt
[2015/11/17 22:27:26 | 000,000,162 | ---- | M] () -- C:\X-Plane Installer.prf
[2016/11/25 09:55:09 | 000,004,096 | -HS- | M] () -- C:\{382DD829-35D6-4ADC-9630-8EFB561411F8}.CBM
[2 C:\*.tmp files -> C:\*.tmp -> ]
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >
[2017/03/04 01:29:57 | 021,123,320 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\shell32.dll
 
< %systemroot%\Tasks\*.job /lockedfiles >
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav  >
 
< %systemroot%\system32\drivers\*.sys /90 >
 
< %appdata%\*.* >
[2017/02/16 00:13:40 | 000,000,000 | ---- | M] () -- C:\Users\steve\AppData\Roaming\ADF8F0174DAB4265999B9336FFF72A2D.dat
[2016/03/18 10:48:31 | 000,000,033 | ---- | M] () -- C:\Users\steve\AppData\Roaming\AdobeWLCMCache.dat
[2016/10/05 04:45:06 | 000,002,422 | ---- | M] () -- C:\Users\steve\AppData\Roaming\WED.prefs
[2016/10/04 15:49:05 | 000,168,093 | ---- | M] () -- C:\Users\steve\AppData\Roaming\XAddonManager.plist
 
< %PROGRAMFILES%\*.  >
[2017/02/06 12:19:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\12bPilot
[2016/11/30 18:55:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\A2A Simulations 3D Lights Redux
[2017/05/13 11:21:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2017/04/12 12:47:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update
[2016/10/03 19:06:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\BandiMPEG1
[2016/10/19 08:56:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\BitX
[2016/11/08 00:58:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\BlackBox Simulation
[2016/08/18 15:16:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
[2017/02/14 03:07:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Carenado Installer
[2017/04/21 21:44:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2017/04/17 10:30:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CR-Software
[2017/05/17 17:12:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dropbox
[2017/04/26 12:07:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EFASS
[2016/02/27 19:42:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Foxit Software
[2017/01/21 11:00:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\FSPS
[2017/04/28 19:03:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2016/09/30 22:26:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\hide.me VPN
[2017/05/24 21:42:03 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2017/05/10 08:38:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2016/11/27 10:56:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iolo
[2017/04/25 01:53:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Lockheed Martin
[2017/03/07 08:10:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\LogMeIn Hamachi
[2017/02/03 10:29:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft
[2016/02/17 02:40:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft ASP.NET
[2017/04/25 06:23:30 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Games
[2016/12/22 08:48:42 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
[2017/04/12 12:31:30 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight
[2016/03/31 09:03:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server
[2016/02/16 23:43:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2017/05/23 19:26:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
[2017/05/15 17:07:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2016/02/16 23:47:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2017/01/16 16:39:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSXML 4.0
[2017/02/15 21:19:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Nero
[2017/05/22 21:51:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NVIDIA Corporation
[2017/01/28 15:14:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OBS
[2016/10/17 17:49:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Oculus
[2017/01/25 09:43:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OldProp Solutions Inc
[2016/12/10 20:08:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OpenAL
[2016/10/14 08:18:30 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OpenOffice 4
[2017/05/24 00:39:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PMDG Operations Center
[2016/10/19 09:49:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reality XP
[2016/02/16 21:55:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek
[2017/04/25 15:35:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\REDRAGONZONE PERDITION Gaming Mouse
[2016/02/16 23:47:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2016/12/29 04:19:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SceneryDesign.org
[2017/03/07 09:14:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Scottish Aviation Bulldog
[2016/08/30 07:00:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Splashtop
[2017/01/21 07:37:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Spybot - Search & Destroy 2
[2017/05/18 11:12:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\System Mechanic
[2017/05/10 17:40:02 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Temp
[2017/05/12 07:32:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TFDi Design
[2016/12/30 20:46:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Thrustmaster
[2017/04/27 11:41:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TuneVNAV Pro3
[2017/05/24 13:13:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VIPRE
[2016/12/13 16:07:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Virtools
[2016/12/29 04:19:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Viva FS Module
[2017/05/22 21:58:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VulkanRT
[2017/05/10 08:38:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2016/11/15 12:12:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2016/10/12 11:00:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2016/03/09 12:34:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Multimedia Platform
[2016/02/16 23:43:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2017/05/10 08:38:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2016/03/09 12:34:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2016/02/16 23:43:20 | 000,000,000 | -HSD | M] -- C:\Program Files (x86)\Windows Sidebar
[2016/02/16 23:43:20 | 000,000,000 | --SD | M] -- C:\Program Files (x86)\WindowsPowerShell
[2016/12/28 22:48:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Wings of POWER II
[2017/05/22 14:40:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Wise
[2016/08/04 00:34:58 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Zero G Registry
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 284 bytes -> C:\ProgramData\TEMP:56E2E879
@Alternate Data Stream - 154 bytes -> C:\ProgramData\TEMP:E18B7D31
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:00934A10
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:5C321E34
 
< End of report >
 
 
Hope I've posted the right data to help solve my problem
 
Steve
ssimm1958

Edited by ssimm1958, 25 May 2017 - 01:48 PM.

  • 0

Advertisements


#2
lvlpost

lvlpost

    New Member

  • Member
  • Pip
  • 6 posts

You can try tricks and tips below

  • Make sure that you have updated all drivers for your computer hardware especially the graphics card driver.
  • Perform a Windows 10 Repair: you should be able to use push-button reset to refresh or reset Windows.
  • Add more RAM: This is a useful method for your computer system. When your computer runs short of RAM, it’s forced to swap the overflow data on and off of the hard drive, which can cause System and Compressed memory high memory usage.
  • Uninstall unnecessary applications: You can also try to uninstall unnecessary applications to fix the System and Compressed memory high CPU usage on Windows 10. To do that, you go to Control Panel > Uninstall a program to uninstall any programs that you don’t want use.
  • Close all idle applications and browser web pages.

See more: http://howtoinstallw...-on-windows-10/


Edited by lvlpost, 26 May 2017 - 04:22 AM.

  • 0

#3
ssimm1958

ssimm1958

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts

Hi, tnx for reply, have latest graphics driver installed,and latest drivers for rest of computer. this issue just appeared, my ram usage had been running at 53 to 55 percent. booted up computer  a few days ago and suddenly ram usage jumped to 80 percent.  seems the process that's jumped up ram usage is a malware process in my anti virus software, was using only 10 to 15 percent ram before now is consuming 50 to 60 percent, so am led to believe I have picked up some kind of infection from the web. am running same amount of processes as was when computer was running at 50 to 55 percent ram usage. I need help Identifying whats responsible and getting rid of it.  


  • 0

#4
ssimm1958

ssimm1958

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts

have tried shutting down anti virus to see if percentage of ram usage goes down, but a different process that was running previously at only 4 to 5 percent jumps to 40 or 50 percent and usage stays at 80 to 85 percent, does not matter how many processes I shut down usage stays very high..


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP