Spyware / Malware / Virus Removal

TradeAdExhance diverting virus

332 min read

Looking for the outcome? Ask AI

aucnn Topic Starter

Post #1August 6, 2016, 6:57 AM UTC

Hello All,

I got this malware about two weeks ago,

I guess you have already heard about this virus or malware.

I foolishly installed one .exe file, and that is it it is there.

I have tried many things that google searches had.

I reseted my browsers, uninstalled them with youruninsatller software, reinstalled them, cleaned historyi cookies etc. but still there.

I have tried norton power eraser, adw cleaner, malwarebytes but no result.

I have norton imternet security installed, it couldnt stop it.

I have changed my dns addresses, I even using VPN sometimes, still same.

I took my system to a date before i installed this exe, but still same :)

now i am crazy about it, very annoying :)

If you can help I will appreciate,

I am using win 10 with the latest updates, Norton Internet security, Intel i7 toshiba laptop,

by the way my cell phone is samsung s6 edge, and it is clean.. so the problem is not with the Modem.

I will post the FRST.TXT AND ADDITION.TXT and aswMBR log file as reply to this post.

thank you in advance for your helps,

aucnn

Post #2August 6, 2016, 7:01 AM UTC last edited August 6, 2016, 7:28 AM UTC

ADDITION.TXT

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-08-2016

Ran by [removed] (2016-08-06 09:32:07)

Running from C:\Users\[removed]\Desktop

Windows 10 Home Single Language Version 1607 (X64) (2016-08-04 07:45:23)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-3330027656-3945394898-1623029764-500 - Administrator - Disabled)

Guest (S-1-5-21-3330027656-3945394898-1623029764-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-3330027656-3945394898-1623029764-1003 - Limited - Enabled)

UMIT CANAN (S-1-5-21-3330027656-3945394898-1623029764-1001 - Administrator - Enabled) => C:\Users\UMIT CANAN

VarsayılanHesap (S-1-5-21-3330027656-3945394898-1623029764-503 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Norton Security (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Norton Security (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}

FW: Norton Security (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Turkish (HKLM-x32\…\{AC76BA86-7AD7-1055-7B44-AC0F074E4100}) (Version: 15.016.20045 - Adobe Systems Incorporated)

Adobe Flash Player 22 NPAPI (HKLM-x32\…\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)

Adobe Photoshop CC 2015 (HKLM-x32\…\{2D99B50E-431D-4AA8-85C1-172A6F8BCF01}) (Version: 16.0 - Adobe Systems Incorporated)

Adobe Update Management Tool (HKLM-x32\…\{534A7A1A-7102-4AF6-23EA-7CD279C7B625}_is1) (Version: 8.0 - PainteR)

AMD Catalyst Install Manager (HKLM\…\{F9626784-9EDD-32B3-3888-5A840B88DF23}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden

BitTorrent (HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\BitTorrent) (Version: 7.9.7.42331 - BitTorrent Inc.)

CargoWiz (HKLM-x32\…\{D15FCF03-F34B-4960-89C8-27E31CF1A057}) (Version: 10.01.02 - SoftTruck)

Coolmuster Android Assistant (HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\Coolmuster Android Assistant) (Version: 1.9.177 - Coolmuster)

Counter-Strike: Global Offensive (HKLM-x32\…\Steam App 730) (Version: - Valve)

Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden

CyberLink MediaStory (HKLM-x32\…\InstallShield_{55762F9A-FCE3-45d5-817B-051218658423}) (Version: 1.0.1321 - CyberLink Corp.)

DTS Sound (HKLM-x32\…\{793B70D2-41E9-46AB-9DDC-B34C99D07DB5}) (Version: 1.02.4100 - DTS, Inc.)

Email Sender Deluxe (HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\Email Sender Deluxe) (Version: 02.00.00.00 - Kristanix Software)

Enchanted Cavern 2 (x32 Version: 2.2.0.110 - WildTangent) Hidden

Evernote (HKLM-x32\…\Evernote) (Version: 1.0.0 - Evernote Launcher by Toshiba Europe GmbH)

FileZilla Client 3.15.0.2 (HKLM-x32\…\FileZilla Client) (Version: 3.15.0.2 - Tim Kosse)

Flip PDF Professional (HKLM-x32\…\Flip PDF Professional_is1) (Version: - FlipBuilder Solution)

Flipbook Maker Pro 4.3.3 (HKLM\…\Kvisoft Flipbook Maker Pro_is1) (Version: 4.3.3 - kvisoft.com)

Foxit PhantomPDF Business (HKLM-x32\…\{C923C463-4A5B-4B27-A400-F4B22A7D7E71}) (Version: 7.1.3.320 - Foxit Software Inc.)

Garena - FIFA ONLINE 3(English) (HKLM-x32\…\FO3) (Version: - Garena Online Pte Ltd.)

GOM Player (HKLM-x32\…\GOM Player) (Version: 2.3.3.5254 - Gretech Corporation)

Google Chrome (HKLM-x32\…\Google Chrome) (Version: 52.0.2743.82 - Google Inc.)

Google Drive (HKLM-x32\…\{709316AD-161C-4D5C-9AE7-0B3A822DA271}) (Version: 1.30.2170.0459 - Google, Inc.)

Google Earth Pro (HKLM-x32\…\{35DAA04C-1720-4BE3-A920-A03731EC6A1D}) (Version: 7.1.5.1557 - Google)

Google Update Helper (x32 Version: 1.3.21.115 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden

Infinite HD™ App (HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\Octoshape Streaming Services) (Version: - Octoshape ApS)

Intel(R) Management Engine Components (HKLM-x32\…\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\…\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4331 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\…\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)

Intel(R) Wireless Bluetooth(R) (HKLM-x32\…\{2BAB5154-C9EB-4292-BE26-FE841B4B8126}) (Version: 17.1.1512.0771 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\…\{85b9d34f-7397-4e39-8600-07942ef6ca04}) (Version: 17.0.5 - Intel Corporation)

Internet Download Manager (HKLM-x32\…\Internet Download Manager) (Version: - Tonec Inc.)

IPVanish (x32 Version: 2.1.1.0 - IPVanish.com) Hidden

IPVanish VPN (HKLM-x32\…\{0beae513-a1ad-467f-96aa-327e04d04d91}) (Version: 2.1.1.0 - IPVanish.com)

IPVanish VPN (HKLM-x32\…\{9b58fca3-3c0a-45ee-96a6-d60ecb68e75e}) (Version: 2.1.2.0 - IPVanish.com)

Java 8 Update 91 (HKLM-x32\…\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)

KMSpico (HKLM\…\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )

Logitech Gaming Software 8.83 (HKLM\…\Logitech Gaming Software) (Version: 8.83.85 - Logitech Inc.)

Logitech SetPoint 6.67 (HKLM\…\sp6) (Version: 6.67.83 - Logitech)

Macromedia Flash Player 8 (HKLM-x32\…\{5E8A1B08-0FBD-4543-9646-F2C2D0D05750}) (Version: 8.0.24.0 - Macromedia)

Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden

Mahjongg Artifacts (x32 Version: 2.2.0.110 - WildTangent) Hidden

Microsoft Office Professional Plus 2016 - tr-tr (HKLM\…\ProPlusRetail - tr-tr) (Version: 16.0.7070.2033 - Microsoft Corporation)

Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\…\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\…\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\…\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\…\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\…\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\…\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\…\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\…\{d07b0db5-8dad-40e1-be90-88026298a46b}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\…\{2749c485-3a8b-4533-92ff-7cf6e8221cff}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\…\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\…\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\…\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\…\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\…\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\…\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

My Kingdom for the Princess 3 (x32 Version: 2.2.0.110 - WildTangent) Hidden

NATIONAL GEOGRAPHIC FOTOGRAF OKULU CD1 (HKLM-x32\…\{C22FDDF8-742E-4D1B-AD41-D4B5BDFB110F}) (Version: 1.00.0000 - NATIONAL GEOGRAPHIC TURKIYE)

NATIONAL GEOGRAPHIC FOTOGRAF OKULU CD2 (HKLM-x32\…\{82613C16-FA72-4740-B5B8-A9FFB988B730}) (Version: 1.00.0000 - NATIONAL GEOGRAPHIC TURKIYE)

NATIONAL GEOGRAPHIC FOTOGRAF OKULU CD3 (HKLM-x32\…\{4402CFBA-7175-4937-81DE-68D422987DA3}) (Version: 1.00.03 - NATIONAL GEOGRAPHIC TURKIYE)

NATIONAL GEOGRAPHIC FOTOGRAF OKULU CD4 (HKLM-x32\…\{83320355-5CDA-4EEC-8339-7886CDEA1E7A}) (Version: 1.08.0000 - NATIONAL GEOGRAPHIC TURKIYE)

NeoDownloader 2.9.5 (HKLM-x32\…\{E76CDDCE-EFC0-4FE5-9972-9489CE49AA55}_is1) (Version: 2.9.5 - Neowise Software)

Nik Collection (HKLM-x32\…\Nik Collection) (Version: 1.2.11 - Google)

Norton Security (HKLM-x32\…\NSBU) (Version: 22.7.0.76 - Symantec Corporation)

Notepad++ (HKLM-x32\…\Notepad++) (Version: 6.8.7 - Notepad++ Team)

Nox APP Player (HKLM-x32\…\Nox) (Version: 3.7.1.0 - Duodian Technology Co. Ltd.)

OEM Application Profile (HKLM-x32\…\{61A09A66-D7E6-22EF-AF75-16D83ADE30E3}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)

Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.7030.1021 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (Version: 16.0.7030.1021 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7030.1021 - Microsoft Corporation) Hidden

Opera Stable 39.0.2256.48 (HKLM-x32\…\Opera 39.0.2256.48) (Version: 39.0.2256.48 - Opera Software)

Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden

Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden

Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden

PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden

Rank Tracker (HKLM-x32\…\seopowersuite) (Version: 8.0.5 - Link-Assistant)

Realtek Card Reader (HKLM-x32\…\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.21249 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\…\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.23.1126.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7173 - Realtek Semiconductor Corp.)

SAMSUNG USB Driver for Mobile Phones (HKLM\…\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.33.0 - SAMSUNG Electronics Co., Ltd.)

Sandboxie 5.06 (64-bit) (HKLM\…\Sandboxie) (Version: 5.06 - Sandboxie Holdings, LLC)

Scanitto Pro (HKLM-x32\…\{FC9FED7B-11C5-4BAA-AAF0-395AD111EE92}_is1) (Version: 3.10 - Masters ITC Software)

Shockwave (HKLM-x32\…\Shockwave) (Version: - )

Smart Switch (HKLM-x32\…\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.16023.12 - Samsung Electronics Co., Ltd.)

Smart Switch (x32 Version: 4.1.16023.12 - Samsung Electronics Co., Ltd.) Hidden

Steam (HKLM-x32\…\Steam) (Version: 2.10.91.91 - Valve Corporation)

Symbaloo (HKLM-x32\…\Symbaloo) (Version: 1.0.0 - Symbaloo Launcher by Toshiba Europe GmbH)

Synaptics Pointing Device Driver (HKLM\…\SynTPDeinstKey) (Version: 19.0.16.6 - Synaptics Incorporated)

TeamViewer 11 (HKLM-x32\…\TeamViewer) (Version: 11.0.53254 - TeamViewer)

Tivibu TV Player (HKLM-x32\…\{80A58174-F36F-48C7-BB81-487AF887ECCC}) (Version: 5.4.2 - TT NET)

Torrent Privacy (HKLM-x32\…\Torrent Privacy) (Version: 4.0.17 - TorrentPrivacy)

Torrent Privacy (Version: 4.0.17 - TorrentPrivacy) Hidden

TOSHIBA Battery Check Utility (HKLM-x32\…\{5468E297-7EF8-4CB3-A091-F8714147793F}) (Version: 1.00.01.01 - Toshiba Corporation)

TOSHIBA Blu-ray Disc Player (HKLM\…\{FF07604E-C860-40E9-A230-E37FA41F103A}) (Version: 2.3.3.4 - Toshiba Corporation)

TOSHIBA Display Utility (HKLM\…\{0B39C39A-3ECE-4582-9C91-842D22819A24}) (Version: 2.0.1.0 - Toshiba Corporation)

TOSHIBA eco Utility (HKLM\…\{72EFCFA8-3923-451D-AF52-7CE9D87BC2A1}) (Version: 3.0.0.6406 - Toshiba Corporation)

TOSHIBA Function Key (HKLM\…\{1844CFE2-EBA3-490A-8A5E-9BFC646342FD}) (Version: 1.1.5.6402 - Toshiba Corporation)

TOSHIBA HDD Protection (HKLM\…\{94A90C69-71C1-470A-88F5-AA47ECC96B40}) (Version: 2.6.02.6403 - Toshiba Corporation)

TOSHIBA Manuals (HKLM-x32\…\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.19 - TOSHIBA)

TOSHIBA Password Utility (HKLM-x32\…\InstallShield_{78931270-BC9E-441A-A52B-73ECD4ACFAB5}) (Version: 4.06.000 - Toshiba Corporation)

TOSHIBA PC Health Monitor (HKLM\…\{B507386D-1F61-4E55-B05B-F56ACB0086B3}) (Version: 4.02.00.6400 - Toshiba Corporation)

TOSHIBA Recovery Media Creator (HKLM-x32\…\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 3.1.03.55065007 - Toshiba Corporation)

TOSHIBA Service Station (HKLM\…\{659DE8AA-E778-4FD8-9463-4A48334B8CF0}) (Version: 2.6.16.0 - Toshiba Corporation)

TOSHIBA Start Screen Option (HKLM\…\{06B71035-F19F-4F76-9875-FFCCD4FC3F83}) (Version: 1.00.01.6402 - Toshiba Corporation)

TOSHIBA System Driver (HKLM-x32\…\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.00.0033 - Toshiba Corporation)

TOSHIBA System Settings (HKLM-x32\…\{4D57ED72-6B01-40BD-9CA9-012B8FC09CEB}) (Version: 2.0.1.32003 - Toshiba Corporation)

Toshiba TEMPRO (HKLM-x32\…\{E4C7D9D7-19D4-4623-AF0C-EA313C466411}) (Version: 5.0.0 - Toshiba Europe GmbH)

TurboFTP (remove only) (HKLM\…\TurboFTP) (Version: - )

Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden

Viber (HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\{acc83058-83b0-41e2-b372-266672a1af16}) (Version: 6.0.1.5 - Viber Media Inc.)

Viber (x32 Version: 6.0.1.5 - Viber Media Inc.) Hidden

Virtual Villagers 5 - New Believers (x32 Version: 3.0.2.32 - WildTangent) Hidden

Visual Studio 2012 x64 Redistributables (HKLM\…\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\…\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VLC media player (HKLM-x32\…\VLC media player) (Version: 2.2.1 - VideoLAN)

WildTangent Games (HKLM-x32\…\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)

WildTangent Games App (Toshiba Games) (x32 Version: 4.0.10.25 - WildTangent) Hidden

Winamp (HKLM-x32\…\Winamp) (Version: 5.666 - Nullsoft, Inc)

Windows Driver Package - BigNox Corporation (VBoxUSB) USB (09/16/2015 4.3.12) (HKLM\…\76B144D15273552931249392EDB13C0BBD52C84E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)

Windows Driver Package - BigNox Corporation VBoxUSBMon System (09/16/2015 4.3.12) (HKLM\…\39F54A37125643D2E1E90FA7D81F36ACC9441510) (Version: 09/16/2015 4.3.12 - BigNox Corporation)

Windows Driver Package - BigNox Corporation XQHDrv System (09/16/2015 4.3.12) (HKLM\…\0147813640F7AF69F569581EE672B6BE1E71798E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)

WinRAR 4.11 (64-bit) (HKLM\…\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)

Youda Jewel Shop (x32 Version: 3.0.2.32 - WildTangent) Hidden

Your Uninstaller! 7 (HKLM-x32\…\YU2010_is1) (Version: 7.4.2012.5 - URSoft, Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3330027656-3945394898-1623029764-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\UMIT CANAN\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\FileCoAuth.exe (Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {03896D04-23AB-4F74-A27D-B1B71EE41E2C} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask => C:\Windows\system32\MDMAgent.exe [2016-07-16] (Microsoft Corporation)

Task: {046BB4D1-6176-4A20-AE12-4465FC978F58} - \Adobe Flash Player Updater -> No File <==== ATTENTION

Task: {0D3C822F-D58B-4C8A-A0C4-86AD985E124D} - \McAfee Remediation (Prepare) -> No File <==== ATTENTION

Task: {0ED97A3D-D6CD-46CC-BA4E-5763D5B66249} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION

Task: {16DEA092-FB0C-40D0-AE20-0536BECC21D9} - System32\Tasks\Microsoft\Windows\EDP\EDP App Launch Task

Task: {184784E2-6ACB-4154-BD0F-A955BE13F177} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePolicyChange

Task: {186010EB-E4A6-456C-B8A8-C5C3C996D7C9} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> No File <==== ATTENTION

Task: {1A4230A2-E136-4936-9B22-DDF624BB8332} - \Microsoft\Windows\IME\SQM data sender -> No File <==== ATTENTION

Task: {1B65DD58-D16B-45E8-BEB4-94D7E4D64DF7} - System32\Tasks\Microsoft\Windows\EDP\EDP Auth Task

Task: {29C486C2-5EBF-4A33-B4BE-17C6E77D5389} - System32\Tasks\Norton Security with Backup\Norton Error Analyzer => C:\Program Files (x86)\Norton Security with Backup\Engine\22.7.0.76\SymErr.exe [2016-05-23] (Symantec Corporation)

Task: {29EC4B0C-D89A-47B1-ADEF-01F9F9B87777} - \[removed] -> No File <==== ATTENTION

Task: {2A857020-AA33-497D-A2C0-75DBE8EC25D2} - \RTKCPL -> No File <==== ATTENTION

Task: {34499A29-2313-4699-AAF4-A0B4CB15B81D} - \Resolution+ Setting Task -> No File <==== ATTENTION

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - \Microsoft\Windows\Workplace Join\Automatic-Workplace-Join -> No File <==== ATTENTION

Task: {3AF5706B-8F77-49B9-9474-E26715527814} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> No File <==== ATTENTION

Task: {41C02912-3E96-42D0-A15C-7E4A7E9AE793} - \Synaptics TouchPad Enhancements -> No File <==== ATTENTION

Task: {4F9DA716-4FEB-41B0-8ED9-1657F97E8556} - \dts_apo_service_task -> No File <==== ATTENTION

Task: {51F5EF5C-2A71-4B58-BDEA-B42D56ABA379} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION

Task: {5400ECE1-8F61-4225-83FA-80A8866C36BC} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> No File <==== ATTENTION

Task: {5A3FB241-0B11-4EA5-BC66-0D9F1B406040} - \Microsoft\Windows\Customer Experience Improvement Program\BthSQM -> No File <==== ATTENTION

Task: {5BE91AA6-4313-4E4B-9C09-33DBE53D8152} - System32\Tasks\Microsoft\XblGameSave\XblGameSaveTask => C:\Windows\System32\XblGameSaveTask.exe [2016-07-16] (Microsoft Corporation)

Task: {5FFD8DF5-FB6C-4DAB-98BE-2C8A13B69CB5} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION

Task: {610626D0-4F2A-4786-BE3D-7FF6405486EB} - \Adobe Acrobat Update Task -> No File <==== ATTENTION

Task: {6232090F-3BD0-4E1F-960B-78CBA797F685} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\HandleWnsCommand

Task: {650B59EE-3B16-40EC-9EF3-6A878271D6C3} - \Microsoft\Windows\WindowsUpdate\AUScheduledInstall -> No File <==== ATTENTION

Task: {655D0834-B01D-471B-AD33-36BB499FB471} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION

Task: {6B1AE720-1359-4B9E-9C0F-60167361EF01} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefreshTask

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - \Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task -> No File <==== ATTENTION

Task: {6E8AE752-C5D2-4B34-B351-338B4370A342} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\HandleCommand

Task: {7AC5E1E2-2FD3-40CD-8842-88CE53A3609C} - System32\Tasks\Microsoft\Windows\DiskFootprint\StorageSense

Task: {7B0A26EB-B5D6-4363-B474-1979237265FA} - \Yandex.Browser güncellemesi -> No File <==== ATTENTION

Task: {846BAA5B-6913-4FE9-8BA0-A786F1750CBD} - \WPD\SqmUpload_S-1-5-21-3330027656-3945394898-1623029764-1001 -> No File <==== ATTENTION

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - \Microsoft\Windows\SkyDrive\Routine Maintenance Task -> No File <==== ATTENTION

Task: {87BBEEEE-18C2-47D4-9187-61D891ACFE6A} - \Microsoft\Office\Office ClickToRun Service Monitor -> No File <==== ATTENTION

Task: {906F5939-11AD-4140-BF8C-3A6DE360E8B2} - \Norton WSC Integration -> No File <==== ATTENTION

Task: {9541CFCA-D743-4759-A8B3-4CC4BAC11594} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION

Task: {9851188E-AC07-4F36-BA28-6D00BB2C9C46} - System32\Tasks\Microsoft\Windows\Device Information\Device => C:\Windows\system32\devicecensus.exe [2016-07-16] (Microsoft Corporation)

Task: {9EAB824A-F6AE-45D7-874D-DCF8B1595A6F} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION

Task: {A9DA8E72-582A-4052-86DC-7BC6199B3CA1} - \Microsoft\Windows\RemovalTools\MRT_HB -> No File <==== ATTENTION

Task: {AAB702BE-797F-4D97-8AD9-4B8F1F6333D9} - \GoogleUpdateTaskMachineCore -> No File <==== ATTENTION

Task: {AF119C49-5780-4AAC-A0B7-06C00B3A79FC} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> No File <==== ATTENTION

Task: {B5008062-E9BE-4EE1-A7F1-0DE0866281A0} - System32\Tasks\Norton Security with Backup\Norton Error Processor => C:\Program Files (x86)\Norton Security with Backup\Engine\22.7.0.76\SymErr.exe [2016-05-23] (Symantec Corporation)

Task: {B554CD87-7925-400B-A0ED-34A2A3810661} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION

Task: {B6EE76B2-4F82-4E15-9345-C867A29CBAD0} - System32\Tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask => C:\Windows\system32\speech_onecore\common\SpeechModelDownload.exe [2016-07-16] (Microsoft Corporation)

Task: {B7F08AFC-6F4D-4783-B954-391DAAD6C39F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION

Task: {BCE8E494-316C-47C0-B0C8-11D444ED6B9A} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION

Task: {C2586B0A-AEDF-4E7A-884E-E9B6B9F9171C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION

Task: {C30402C7-4F31-4FE0-8242-B39A52F71ED0} - \Microsoft\Office\Office Automatic Updates -> No File <==== ATTENTION

Task: {C4AE3C3E-C327-4689-B6FD-C11FB31AE88B} - \Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler -> No File <==== ATTENTION

Task: {C5FF3A2C-4DA8-4841-A7DF-E8604B8BF0EC} - \Microsoft\Windows\WindowsUpdate\AUFirmwareInstall -> No File <==== ATTENTION

Task: {C92C2AD4-CE30-4EA2-A0B4-516E5130E5E7} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION

Task: {CC636E49-0109-402B-A40B-A37C29069A95} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\LocateCommandUserSession

Task: {CD19BC8A-E9FE-49ED-92A5-0E1194F69F00} - System32\Tasks\Microsoft\XblGameSave\XblGameSaveTaskLogon => C:\Windows\System32\XblGameSaveTask.exe [2016-07-16] (Microsoft Corporation)

Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> No File <==== ATTENTION

Task: {D2CF45E2-3685-474D-B9DF-4930EB0808D5} - \Optimize Start Menu Cache Files-S-1-5-21-3330027656-3945394898-1623029764-500 -> No File <==== ATTENTION

Task: {D394BE25-2E16-45D4-AAB2-3E8861A09351} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitorToastTask

Task: {D3C4106A-D511-42C6-9716-465644534C87} - System32\Tasks\microsoft\windows\applicationdata\appuriverifierinstall => C:\Windows\system32\AppHostRegistrationVerifier.exe [2016-07-16] (Microsoft Corporation)

Task: {D941F53F-7907-4FBE-B1E7-69EBD5B3A5D8} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceLocationRightsChange

Task: {DE8E7B79-461B-4A64-AE7A-2747C5C6F1FE} - \Обновление Браузера Яндекс -> No File <==== ATTENTION

Task: {E59E606F-D37D-4980-A312-5120798A204E} - System32\Tasks\Opera scheduled Autoupdate 1470120055 => C:\Program Files (x86)\Opera\launcher.exe [2016-08-03] (Opera Software)

Task: {E8BC6687-05B4-4C19-BAB7-DB883DA78951} - System32\Tasks\Norton Security with Backup\Norton Autofix => C:\Program Files (x86)\Norton Security with Backup\Engine\22.7.0.76\SymErr.exe [2016-05-23] (Symantec Corporation)

Task: {EA9BAA00-6604-4A27-8A73-AFA65F0EE1B3} - System32\Tasks\Microsoft\Windows\SharedPC\Account Cleanup => Rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance

Task: {EC4FC158-786C-475A-8E62-CFE571118B24} - \TOSHIBA\Service Station -> No File <==== ATTENTION

Task: {ECC2C054-EB1D-4828-B331-94FDD7E7D465} - \Toshiba\CommonNotifier -> No File <==== ATTENTION

Task: {ECEDC57D-8965-4EB1-BD6F-84791D928E23} - System32\Tasks\microsoft\windows\applicationdata\appuriverifierdaily => C:\Windows\system32\AppHostRegistrationVerifier.exe [2016-07-16] (Microsoft Corporation)

Task: {F04CAD1E-BC2B-4EF5-8E56-94EA91621EC8} - \Microsoft\Windows\Shell\FamilySafetyUpload -> No File <==== ATTENTION

Task: {F3ECE55D-CC7E-4E7C-96AB-28C9B66DC27B} - \Optimize Start Menu Cache Files-S-1-5-21-3330027656-3945394898-1623029764-1001 -> No File <==== ATTENTION

Task: {F6D63EAE-9FE0-4203-B327-DE576EDBBFAF} - \Microsoft\Windows\WindowsUpdate\AUSessionConnect -> No File <==== ATTENTION

Task: {F948BB2A-035C-4D23-A759-76997DB23E25} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION

Task: {FAA2DAE0-C312-49D6-B146-BF9FCC5E8222} - System32\Tasks\Garena+ Plugin Host Service => C:\Program Files (x86)\Garena Plus\ggdllhost.exe [2015-11-11] ()

Task: {FC6CDB33-B3AA-4ACD-9D3B-CD5CAE786692} - \Microsoft\Windows\WindowsUpdate\Scheduled Start With Network -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\Yandex.Browser güncellemesi .job => C:\Users\UMIT CANAN\AppData\Local\Yandex\YandexBrowser\Application\browser.exe–background-updateUMITCANAN\UMIT CANANYandex.Bro

Task: C:\WINDOWS\Tasks\Обновление Браузера Яндекс .job => C:\Users\UMIT CANAN\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-07-16 14:42 - 2016-07-16 14:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2013-03-27 23:53 - 2013-03-27 23:53 - 00163168 _____ () C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe

2016-02-11 09:15 - 2013-09-06 18:25 - 00122888 _____ () C:\WINDOWS\System32\KVPrinterMon.dll

2014-02-28 00:31 - 2014-02-28 00:31 - 00013312 _____ () C:\Windows\SysWOW64\SMITSC.exe

2015-11-11 10:59 - 2015-11-11 10:59 - 00168384 _____ () C:\Program Files (x86)\Garena Plus\ggdllhost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll

2016-08-04 10:51 - 2016-08-04 10:51 - 00959168 _____ () C:\Users\UMIT CANAN\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\amd64\ClientTelemetry.dll

2016-01-07 18:44 - 2016-01-07 18:44 - 00402344 _____ () C:\WINDOWS\system32\igfxTray.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 09761280 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 02438144 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2012-07-19 05:38 - 2012-07-19 05:38 - 00020904 _____ () C:\Program Files\TOSHIBA\Hotkey\SmoothView.dll

2013-08-02 01:24 - 2013-08-02 01:24 - 00438112 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\TcrdKBB.exe

2015-03-07 03:07 - 2015-03-07 03:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll

2016-04-29 01:49 - 2016-04-29 01:49 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll

2015-03-07 03:07 - 2015-03-07 03:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll

2016-04-29 01:49 - 2016-04-29 01:49 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

2015-05-27 13:46 - 2015-05-27 13:46 - 00019960 _____ () C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe

2015-11-11 10:59 - 2015-11-11 10:59 - 02519488 _____ () C:\Program Files (x86)\Garena Plus\ggspawn.dll

2016-08-02 09:40 - 2016-06-30 15:31 - 67945512 _____ () C:\Program Files (x86)\Opera\38.0.2220.41\opera.dll

2016-08-04 10:51 - 2016-08-04 10:51 - 00679624 _____ () C:\Users\UMIT CANAN\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\ClientTelemetry.dll

2016-05-07 08:29 - 2016-08-02 08:17 - 03544768 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\gfx.dll

2016-04-13 16:52 - 2016-04-13 16:52 - 00095312 _____ () C:\Users\UMIT CANAN\AppData\Local\Viber\qfacebook.dll

2016-04-13 16:52 - 2016-04-13 16:52 - 00042064 _____ () C:\Users\UMIT CANAN\AppData\Local\Viber\qrencode.dll

2016-04-13 16:53 - 2016-04-13 16:53 - 00398928 _____ () C:\Users\UMIT CANAN\AppData\Local\Viber\imageformats\qsvg.dll

2016-04-13 16:54 - 2016-04-13 16:54 - 00695888 _____ () C:\Users\UMIT CANAN\AppData\Local\Viber\QtQuick\Controls\qtquickcontrolsplugin.dll

2016-08-02 09:40 - 2016-06-30 15:31 - 02203176 _____ () C:\Program Files (x86)\Opera\38.0.2220.41\libglesv2.dll

2016-08-02 09:40 - 2016-06-30 15:31 - 00087080 _____ () C:\Program Files (x86)\Opera\38.0.2220.41\libegl.dll

2015-01-14 04:58 - 2013-12-10 02:26 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows:nlsPreferences [0]

AlternateDataStreams: C:\ProgramData\Temp:1CE11B51 [178]

AlternateDataStreams: C:\ProgramData\Temp:EC76150E [133]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-07-30 11:52 - 2016-08-01 16:35 - 00001167 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 videodownloadconverter.com

127.0.0.1 tradeadexchange.com

127.0.0.1 http://www.tradeadexchange.com

127.0.0.1 104.197.47.161

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\UMIT CANAN\Pictures\işlenmiş\AUC_4421 copy.jpg

DNS Servers: [removed] - [removed]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\…\StartupApproved\Run: => "AdobeAAMUpdater-1.0"

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\StartupApproved\Run: => "Octoshape Streaming Services"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [WirelessDisplay-Infra-In-TCP] => (Allow) %systemroot%\system32\CastSrv.exe

FirewallRules: [{C0CCEBA6-E3AF-4138-BE3F-6515089224E6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [UDP Query User{883999DD-0572-4AA8-BDDD-5913BE42CE5A}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe

FirewallRules: [TCP Query User{3FF9EC26-4582-4E53-BC50-B77416D69B25}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe

FirewallRules: [{A32A3B97-22D9-4B90-B055-03D82871B8A4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe

FirewallRules: [{551ED271-4196-49EB-B96F-0C7760AC6322}] => (Allow) C:\Program Files (x86)\MyGoya\KMPFaster\KMPFaster.exe

FirewallRules: [{E73BA101-E0D5-49AB-90A0-3AC39E1222A6}] => (Allow) C:\Program Files (x86)\MyGoya\KMPFaster\KMPFaster.exe

FirewallRules: [{D5636AAF-9BA6-41CD-B5BB-D117465FD62E}] => (Allow) C:\Users\UMIT CANAN\Downloads\Programs\fo3Installer.exe

FirewallRules: [{0D2B3EE6-4C2A-4006-957E-2BEAF319DCC2}] => (Allow) C:\Users\UMIT CANAN\Downloads\Programs\fo3Installer.exe

FirewallRules: [{19FE0378-A4C9-42D9-91C8-9F04DDBCB8F3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{2EBA3DFC-2D39-451C-9BBB-DACED42E8E0C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{AA085E10-FF6D-46C8-A0E2-6F2592E055C7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{7C515DFA-1834-4DA2-A911-4491390FACFF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{E82EF0F3-0C9C-45D5-A0E4-106217AB9D95}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe

FirewallRules: [{B98CDE93-8804-4A0A-A87D-F36DE6DB3EC1}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe

FirewallRules: [TCP Query User{A3A99A00-DA3E-46D2-83D2-3B8F5366B7F8}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [{C4184F06-737E-4943-AEC4-1DE05DC66B1E}] => (Allow) C:\Program Files (x86)\Scanitto Pro\scanittopro.exe

FirewallRules: [{6F018678-54FC-400C-8CFF-8BEEA824A7CD}] => (Allow) C:\Program Files (x86)\Scanitto Pro\scanittopro.exe

FirewallRules: [{C66A6E68-AFEC-47CA-96C1-CD48AFE5661C}] => (Allow) C:\Program Files\Torrent Privacy\updater.exe

FirewallRules: [{BDCCF177-7FD7-4644-ADA3-F42990A1DE2A}] => (Allow) C:\Program Files\Torrent Privacy\tpdownloader.exe

FirewallRules: [{83444AB1-7CCD-406B-AD9F-9244F727AA82}] => (Allow) C:\Program Files\Torrent Privacy\BittorrentAnonymizer.exe

FirewallRules: [{BA8E3271-9E2C-43BB-84C0-F14584EAB934}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{EB84D9A0-D8A6-4714-A7FE-94274CD1A40C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{4EDB4BAB-EC7C-4677-BE85-12FC10CAB87A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{1D70612D-E124-4B37-A8ED-56142E12D5E3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{AD3DC637-E9C4-4847-A59C-17A0FFB13B2D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{629152D7-120F-4499-90F6-E1A544F19BB1}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [UDP Query User{19F796FA-09FE-4352-B02A-69B93911C41E}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [TCP Query User{EF895467-E4B6-484B-9903-3BAA9AD2A29E}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [UDP Query User{C5EE8E29-37DF-46AE-B67D-1261ED5F539F}C:\users\umit canan\appdata\roaming\bittorrent\bittorrent.exe] => (Allow) C:\users\umit canan\appdata\roaming\bittorrent\bittorrent.exe

FirewallRules: [TCP Query User{8467FFDC-3D88-4B03-B36F-31EEC55F501C}C:\users\umit canan\appdata\roaming\bittorrent\bittorrent.exe] => (Allow) C:\users\umit canan\appdata\roaming\bittorrent\bittorrent.exe

FirewallRules: [{6B032CC7-57E5-40C6-AE82-25D3E9E52C05}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe

FirewallRules: [{7A5E5B74-6E32-4547-B67B-B80C94D07296}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe

FirewallRules: [{EF597099-6080-40EF-ACCC-B40A6DEDA9F0}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe

FirewallRules: [{1B3337D4-0049-4320-A157-583FCAF5BCB2}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe

FirewallRules: [{B9358F24-8EF5-4EEB-B4FE-690BA6516690}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{CC75EC57-DDA9-4C16-845B-8FFBD7E0DFE9}] => (Allow) C:\Users\UMIT CANAN\AppData\Roaming\Nox\bin\Nox.exe

FirewallRules: [{D0A0B469-4FDC-4F38-A15B-03E469C371CB}] => (Allow) C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (08/06/2016 09:23:35 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: UMITCANAN)

Description: Microsoft.People_8wekyb3d8bbwe!x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x uygulamasının etkinleştirilmesi şu hatayla başarısız oldu: -2147009284 Ek bilgi için Microsoft-Windows-TWinUI/Operational günlüğüne bakın.

Error: (08/06/2016 09:23:23 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: UMITCANAN)

Error: (08/06/2016 09:19:49 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Hatalı uygulama adı: igfxHK.exe, sürüm: 6.15.10.4331, zaman damgası: 0x564cc83e

Hatalı modül adı: igfxHK.exe, sürüm: 6.15.10.4331, zaman damgası: 0x564cc83e

Özel durum kodu: 0xc0000409

Hata uzaklığı 0x0000000000015953

Hatalı işlem kimliği: 0xfd8

Uygulama başlangıç zamanı: 0xigfxHK.exe0

Hatalı uygulama yolu: igfxHK.exe1

Hatalı modül yolu: igfxHK.exe2

Rapor kimliği: igfxHK.exe3

Hatalı paket tam adı: igfxHK.exe4

Hatalı paketle ilgili uygulama kimliği: igfxHK.exe5

Error: (08/06/2016 09:18:32 AM) (Source: ATIeRecord) (EventID: 16396) (User: )

Description: ATI EEU PnP start/stop failed

Error: (08/06/2016 07:59:26 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Hatalı uygulama adı: RdrCEF.exe, sürüm: 15.16.20045.57024, zaman damgası: 0x574881fb

Hatalı modül adı: libcef.dll, sürüm: 3.2454.2123.0, zaman damgası: 0x570480ae

Özel durum kodu: 0x80000003

Hata uzaklığı 0x00c7a947

Hatalı işlem kimliği: 0x3488

Uygulama başlangıç zamanı: 0xRdrCEF.exe0

Hatalı uygulama yolu: RdrCEF.exe1

Hatalı modül yolu: RdrCEF.exe2

Rapor kimliği: RdrCEF.exe3

Hatalı paket tam adı: RdrCEF.exe4

Hatalı paketle ilgili uygulama kimliği: RdrCEF.exe5

Error: (08/06/2016 07:59:22 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Hatalı uygulama adı: RdrCEF.exe, sürüm: 15.16.20045.57024, zaman damgası: 0x574881fb

Hatalı modül adı: libcef.dll, sürüm: 3.2454.2123.0, zaman damgası: 0x570480ae

Özel durum kodu: 0x80000003

Hata uzaklığı 0x00c7a947

Hatalı işlem kimliği: 0x353c

Uygulama başlangıç zamanı: 0xRdrCEF.exe0

Hatalı uygulama yolu: RdrCEF.exe1

Hatalı modül yolu: RdrCEF.exe2

Rapor kimliği: RdrCEF.exe3

Hatalı paket tam adı: RdrCEF.exe4

Hatalı paketle ilgili uygulama kimliği: RdrCEF.exe5

Error: (08/06/2016 07:59:18 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Hatalı uygulama adı: RdrCEF.exe, sürüm: 15.16.20045.57024, zaman damgası: 0x574881fb

Hatalı modül adı: libcef.dll, sürüm: 3.2454.2123.0, zaman damgası: 0x570480ae

Özel durum kodu: 0x80000003

Hata uzaklığı 0x00c7a947

Hatalı işlem kimliği: 0x200c

Uygulama başlangıç zamanı: 0xRdrCEF.exe0

Hatalı uygulama yolu: RdrCEF.exe1

Hatalı modül yolu: RdrCEF.exe2

Rapor kimliği: RdrCEF.exe3

Hatalı paket tam adı: RdrCEF.exe4

Hatalı paketle ilgili uygulama kimliği: RdrCEF.exe5

Error: (08/06/2016 07:59:14 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Hatalı uygulama adı: RdrCEF.exe, sürüm: 15.16.20045.57024, zaman damgası: 0x574881fb

Hatalı modül adı: libcef.dll, sürüm: 3.2454.2123.0, zaman damgası: 0x570480ae

Özel durum kodu: 0x80000003

Hata uzaklığı 0x00c7a947

Hatalı işlem kimliği: 0x34b0

Uygulama başlangıç zamanı: 0xRdrCEF.exe0

Hatalı uygulama yolu: RdrCEF.exe1

Hatalı modül yolu: RdrCEF.exe2

Rapor kimliği: RdrCEF.exe3

Hatalı paket tam adı: RdrCEF.exe4

Hatalı paketle ilgili uygulama kimliği: RdrCEF.exe5

Error: (08/06/2016 07:59:09 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Hatalı uygulama adı: RdrCEF.exe, sürüm: 15.16.20045.57024, zaman damgası: 0x574881fb

Hatalı modül adı: libcef.dll, sürüm: 3.2454.2123.0, zaman damgası: 0x570480ae

Özel durum kodu: 0x80000003

Hata uzaklığı 0x00c7a947

Hatalı işlem kimliği: 0x3ed8

Uygulama başlangıç zamanı: 0xRdrCEF.exe0

Hatalı uygulama yolu: RdrCEF.exe1

Hatalı modül yolu: RdrCEF.exe2

Rapor kimliği: RdrCEF.exe3

Hatalı paket tam adı: RdrCEF.exe4

Hatalı paketle ilgili uygulama kimliği: RdrCEF.exe5

Error: (08/06/2016 07:59:05 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Hatalı uygulama adı: RdrCEF.exe, sürüm: 15.16.20045.57024, zaman damgası: 0x574881fb

Hatalı modül adı: libcef.dll, sürüm: 3.2454.2123.0, zaman damgası: 0x570480ae

Özel durum kodu: 0x80000003

Hata uzaklığı 0x00c7a947

Hatalı işlem kimliği: 0x35e4

Uygulama başlangıç zamanı: 0xRdrCEF.exe0

Hatalı uygulama yolu: RdrCEF.exe1

Hatalı modül yolu: RdrCEF.exe2

Rapor kimliği: RdrCEF.exe3

Hatalı paket tam adı: RdrCEF.exe4

Hatalı paketle ilgili uygulama kimliği: RdrCEF.exe5

System errors:

=============

Error: (08/06/2016 09:25:04 AM) (Source: DCOM) (EventID: 10016) (User: UMITCANAN)

Description: makine varsayılanıYerelEtkinleştirme{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}UMITCANANUMIT CANANS-1-5-21-3330027656-3945394898-1623029764-1001LocalHost (LRPC Kullanan)Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (08/06/2016 09:19:30 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: uygulamaya özgüYerelEtkinleştirme{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}NT AUTHORITYLocal ServiceS-1-5-19LocalHost (LRPC Kullanan)YokYok

Error: (08/06/2016 09:19:30 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: uygulamaya özgüYerelEtkinleştirme{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}NT AUTHORITYLocal ServiceS-1-5-19LocalHost (LRPC Kullanan)YokYok

Error: (08/06/2016 09:19:27 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: uygulamaya özgüYerelEtkinleştirme{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}{F72671A9-012C-4725-9D2F-2A4D32D65169}NT AUTHORITYSYSTEMS-1-5-18LocalHost (LRPC Kullanan)YokYok

Error: (08/06/2016 09:19:17 AM) (Source: BugCheck) (EventID: 1001) (User: )

Description: 0x00000050 (0xfffff6fb7dbede78, 0x0000000000000000, 0xfffff80f0b7778be, 0x0000000000000002)C:\WINDOWS\MEMORY.DMPeece15e7-cdc6-4b36-9bcb-8ea4a8690775

Error: (08/06/2016 09:18:32 AM) (Source: SbieDrv) (EventID: 1103) (User: )

Description: SBIE1103 Sandboxie sürücüsü (SbieDrv) sürüm 5.06 başlatılamadı

Error: (08/06/2016 09:18:32 AM) (Source: SbieDrv) (EventID: 1113) (User: )

Description: SBIE1113 Nt sistem hizmeti bulunamadı, sebep AcceptConnectPort

Error: (08/06/2016 09:18:32 AM) (Source: SbieDrv) (EventID: 1113) (User: )

Description: SBIE1113 Nt sistem hizmeti bulunamadı, sebep MASTER TABLE

Error: (08/06/2016 09:18:37 AM) (Source: SbieSvc) (EventID: 9234) (User: )

Description: SBIE9234 Service startup error level 9153 status=C0000001 error=-1073741823

Error: (08/06/2016 09:18:31 AM) (Source: EventLog) (EventID: 6008) (User: )

Description: 09:06:26, ‎6.‎08.‎2016 tarihinde gerçekleşen önceki sistem kapanışı beklenmiyordu.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-4720HQ CPU @ 2.60GHz

Percentage of memory in use: 26%

Total physical RAM: 16294.85 MB

Available physical RAM: 11988.43 MB

Total Virtual: 18726.85 MB

Available Virtual: 14101.91 MB

==================== Drives ================================

Drive c: (TI31299000D) (Fixed) (Total:917.59 GB) (Free:553.62 GB) NTFS

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt ============================

aucnn

Post #3August 6, 2016, 7:03 AM UTC

FRST.TXT (it is too long to post at once, so I will post it in replies)

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 03-08-2016

Ran by [removed] (administrator) on UMITCANAN (06-08-2016 09:28:36)

Running from C:\Users\[removed]\Desktop

[removed]

Platform: Windows 10 Home Single Language Version 1607 (X64) Language: Türkçe (Türkiye)

Internet Explorer Version 11 (Default browser: Opera)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

() C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Intel Corporation) C:\Windows\System32\ibtsiva.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe

(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Security with Backup\Engine\22.7.0.76\NSBU.exe

() C:\Windows\SysWOW64\SMITSC.exe

(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe

(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Security with Backup\Engine\22.7.0.76\NSBU.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

() C:\Program Files (x86)\Garena Plus\ggdllhost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

() C:\Windows\System32\igfxTray.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe

() C:\Program Files\TOSHIBA\Hotkey\Hotkey\TCrdKBB.exe

(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TssSrv.exe

(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe

(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe

(BitTorrent Inc.) C:\Users\UMIT CANAN\AppData\Roaming\BitTorrent\BitTorrent.exe

(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe

(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.41\opera.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

(Viber Media S.Ã r.l.) C:\Users\UMIT CANAN\AppData\Local\Viber\Viber.exe

(BitTorrent Inc.) C:\Users\UMIT CANAN\AppData\Roaming\BitTorrent\updates\7.9.7_42331\utorrentie.exe

(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.41\opera_crashreporter.exe

(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.41\opera.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.41\opera.exe

(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe

(Opera Software) C:\Program Files (x86)\Opera\38.0.2220.41\opera.exe

() C:\Program Files (x86)\Garena Plus\ggdllhost.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe

() C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe

(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe

(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe

(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch

HKLM\…\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [402344 2016-01-07] ()

HKLM\…\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [180016 2015-06-08] (TOSHIBA Corporation)

HKLM\…\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [354144 2013-08-13] (TOSHIBA Corporation)

HKLM\…\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-10-09] (TOSHIBA Corporation)

HKLM\…\Run: [TSSSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296008 2013-10-22] (TOSHIBA Corporation)

HKLM\…\Run: [ThpSrv] => C:\Windows\system32\thpsrv /logon

HKLM\…\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3113592 2015-08-26] (Logitech, Inc.)

HKLM\…\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15818872 2016-04-29] (Logitech Inc.)

HKLM\…\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3946184 2015-10-29] (Synaptics Incorporated)

HKLM-x32\…\Run: [TSVU] => c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516976 2015-06-09] (TOSHIBA)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\Run: [BitTorrent] => C:\Users\UMIT CANAN\AppData\Roaming\BitTorrent\BitTorrent.exe [1972232 2016-05-20] (BitTorrent Inc.)

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3931728 2015-12-11] (Tonec Inc.)

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\Run: [] => 0

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\Run: [Viber] => C:\Users\UMIT CANAN\AppData\Local\Viber\Viber.exe [69268048 2016-04-13] (Viber Media S.Ã r.l.)

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\Run: [Octoshape Streaming Services] => C:\Users\UMIT CANAN\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [500016 2014-08-01] (Octoshape ApS)

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\Run: [Nox] => C:\Users\UMIT CANAN\AppData\Roaming\Nox\bin\Nox.exe [5222216 2016-08-05] (Duodian Technology Co. Ltd.)

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\RunOnce: [Uninstall C:\Users\UMIT CANAN\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\UMIT CANAN\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"

ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)

ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-05-17] (Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-05-17] (Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-05-17] (Google)

ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.7.0.76\buShell.dll [2016-06-09] (Symantec Corporation)

ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.7.0.76\buShell.dll [2016-06-09] (Symantec Corporation)

ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.7.0.76\buShell.dll [2016-06-09] (Symantec Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] [removed] [removed]

Tcpip\..\Interfaces\{5157a0b1-420e-490b-87d8-3cd0ff29c029}: [DhcpNameServer] 198.18.0.1 198.18.0.2

Tcpip\..\Interfaces\{9e216a60-72c3-4df0-a077-aea108448fc0}: [DhcpNameServer] 192.168.136.1

Tcpip\..\Interfaces\{9e3ab487-d8e4-48d8-9c62-3d20c17c9d03}: [DhcpNameServer] [removed] [removed]

Internet Explorer:

==================

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=625119&clcid=0x41F

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com/?pc=TEJB

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://toshiba.eu/symbaloo_c

HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://toshiba.eu/symbaloo_c

SearchScopes: HKU\S-1-5-21-3330027656-3945394898-1623029764-1001 -> DefaultScope {6F31C505-536A-44AE-97E1-9ED9166F1D77} URL =

SearchScopes: HKU\S-1-5-21-3330027656-3945394898-1623029764-1001 -> {6F31C505-536A-44AE-97E1-9ED9166F1D77} URL =

BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-08-02] (Microsoft Corporation)

BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security with Backup\Engine64\22.7.0.76\coIEPlg.dll [2016-05-31] (Symantec Corporation)

BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-08-02] (Microsoft Corporation)

BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-08-02] (Microsoft Corporation)

BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security with Backup\Engine\22.7.0.76\coIEPlg.dll [2016-05-31] (Symantec Corporation)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-04-30] (Oracle Corporation)

BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)

BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-08-02] (Microsoft Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-04-30] (Oracle Corporation)

Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine64\22.7.0.76\coIEPlg.dll [2016-05-31] (Symantec Corporation)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine\22.7.0.76\coIEPlg.dll [2016-05-31] (Symantec Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-02] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-02] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-02] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-02] (Microsoft Corporation)

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-18] ()

FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [No File]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-29] (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-18] ()

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-02-11] (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-02-11] (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-02-11] (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-02-11] (Foxit Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-04-30] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-04-30] (Oracle Corporation)

FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [No File]

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-08-02] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-08-02] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-3330027656-3945394898-1623029764-1001: @octoshape.com/Octoshape Streaming Services,version=1.0 -> C:\Users\UMIT CANAN\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1503240-0-npoctoshape.dll [2015-03-24] (Octoshape ApS)

FF HKLM\…\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.7.0.76\coFFAddon

FF Extension: Norton Identity Safe - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.7.0.76\coFFAddon [2016-07-29]

FF HKLM-x32\…\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt

FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-12-03] [not signed]

FF HKLM-x32\…\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.7.0.76\coFFAddon

FF HKLM-x32\…\Thunderbird\Extensions: [[removed]] - C:\Program Files\McAfee\MSK => not found

FF HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi

FF Extension: IDM integration - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2015-11-09]

FF HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\SeaMonkey\Extensions: [[removed]] - C:\Users\UMIT CANAN\AppData\Roaming\IDM\idmmzcc5

FF Extension: IDM CC - C:\Users\UMIT CANAN\AppData\Roaming\IDM\idmmzcc5 [2016-08-06] [not signed]

FF HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\SeaMonkey\Extensions: [[removed]] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi

Chrome:

=======

CHR Profile: C:\Users\UMIT CANAN\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Norton Security Toolbar) - C:\Users\UMIT CANAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2016-07-30]

CHR Extension: (AdBlock) - C:\Users\UMIT CANAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-08-01]

CHR Extension: (Norton Identity Safe) - C:\Users\UMIT CANAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2016-07-30]

CHR Extension: (IDM Integration Module) - C:\Users\UMIT CANAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2016-07-31]

CHR Extension: (Chrome Web Mağazası Ödemeleri) - C:\Users\UMIT CANAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-07-30]

CHR Extension: (Chrome Media Router) - C:\Users\UMIT CANAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-02]

CHR HKLM\…\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security with Backup\Engine\22.7.0.76\Exts\Chrome.crx [2016-07-29]

CHR HKLM\…\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM\…\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-12-11]

CHR HKLM-x32\…\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security with Backup\Engine\22.7.0.76\Exts\Chrome.crx [2016-07-29]

CHR HKLM-x32\…\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\…\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-12-11]

Opera:

=======

OPR Extension: (ZenMate VPN - Güvenli İnternet & Unblock ) - C:\Users\UMIT CANAN\AppData\Roaming\Opera Software\Opera Stable\Extensions\cnhbkkedmelfmalgjpkngiaoifpdfcnl [2016-08-02]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 CDPUserSvc; C:\Windows\System32\CDPUserSvc.dll [337408 2016-07-16] (Microsoft Corporation)

R2 CDPUserSvc_61f2f; C:\WINDOWS\system32\svchost.exe [44496 2016-07-16] (Microsoft Corporation)

R2 CDPUserSvc_61f2f; C:\WINDOWS\SysWOW64\svchost.exe [38792 2016-07-16] (Microsoft Corporation)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2950856 2016-07-25] (Microsoft Corporation)

R3 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [19960 2015-05-27] ()

S3 FrameServer; C:\Windows\system32\FrameServer.dll [803840 2016-07-16] (Microsoft Corporation)

R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-02-26] (WildTangent)

R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe [163168 2013-03-27] ()

S3 HvHost; C:\Windows\System32\hvhostsvc.dll [67584 2016-07-16] (Microsoft Corporation)

R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373160 2016-01-07] (Intel Corporation)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-28] (Intel(R) Corporation) [File not signed]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-28] (Intel(R) Corporation)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-10] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)

R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-04-29] (Logitech Inc.)

R2 nlsX86cc; C:\WINDOWS\SysWOW64\nlssrv32.exe [66560 2012-09-05] (Nalpeiron Ltd.) [File not signed]

R2 NSBU; C:\Program Files (x86)\Norton Security with Backup\Engine\22.7.0.76\NSBU.exe [289080 2016-06-17] (Symantec Corporation)

S3 ose; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [200240 2016-07-23] (Microsoft Corporation) [File not signed]

S3 RmSvc; C:\Windows\System32\RMapi.dll [141312 2016-07-16] (Microsoft Corporation)

S2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [177800 2015-10-22] (Sandboxie Holdings, LLC)

S4 shpamsvc; C:\Windows\system32\Windows.SharedPC.AccountManager.dll [161792 2016-07-16] (Microsoft Corporation)

R2 SMITS; C:\Windows\SysWOW64\SMITSC.exe [13312 2014-02-28] () [File not signed]

R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-10-29] (Synaptics Incorporated)

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6889232 2015-12-14] (TeamViewer GmbH)

R3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [120392 2015-11-17] (Toshiba Europe GmbH)

R3 TimeBrokerSvc; C:\Windows\System32\TimeBrokerServer.dll [177664 2016-07-16] (Microsoft Corporation)

S3 vmicrdv; C:\Windows\System32\icsvcext.dll [349696 2016-07-16] (Microsoft Corporation)

S3 vmicvss; C:\Windows\System32\icsvcext.dll [349696 2016-07-16] (Microsoft Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

S3 wisvc; C:\Windows\system32\flightsettings.dll [614912 2016-07-16] (Microsoft Corporation)

S3 WpnUserService; C:\Windows\System32\WpnUserService.dll [74240 2016-07-16] (Microsoft Corporation)

S3 WpnUserService_61f2f; C:\WINDOWS\system32\svchost.exe [44496 2016-07-16] (Microsoft Corporation)

S3 WpnUserService_61f2f; C:\WINDOWS\SysWOW64\svchost.exe [38792 2016-07-16] (Microsoft Corporation)

R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AcpiDev; C:\Windows\System32\drivers\AcpiDev.sys [18432 2016-07-16] (Microsoft Corporation)

S3 applockerfltr; C:\Windows\System32\drivers\applockerfltr.sys [15360 2016-07-16] (Microsoft Corporation)

S0 b06bdrv; C:\Windows\System32\drivers\bxvbda.sys [533856 2016-07-16] (QLogic Corporation)

R1 BHDrvx64; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.7.0.76\Definitions\BASHDefs\20160802.002\BHDrvx64.sys [1832176 2016-06-02] (Symantec Corporation)

R1 ccSet_NSBU; C:\Windows\system32\drivers\NSBUx64\1607000.04C\ccSetx64.sys [174328 2016-06-02] (Symantec Corporation)

S3 cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [346976 2016-07-16] (Chelsio Communications)

S3 cht4vbd; C:\Windows\System32\drivers\cht4vx64.sys [2104160 2016-07-16] (Chelsio Communications)

R2 clreg; C:\Windows\System32\drivers\registry.sys [70144 2016-07-16] (Microsoft Corporation)

S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [497392 2016-04-27] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [156912 2016-04-27] (Symantec Corporation)

R3 gkernel; C:\Users\UMIT CANAN\AppData\Local\Temp\gkernel.sys [24344 2016-08-06] ()

S3 hvservice; C:\Windows\System32\drivers\hvservice.sys [73568 2016-07-16] (Microsoft Corporation)

S3 iagpio; C:\Windows\System32\drivers\iagpio.sys [33280 2016-07-16] (Intel(R) Corporation)

S3 iaLPSS2i_GPIO2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [64512 2016-07-16] (Intel Corporation)

R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [349960 2016-07-12] (Intel Corporation)

R1 IDSVia64; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.7.0.76\Definitions\IPSDefs\20160805.001\IDSvia64.sys [876760 2016-07-28] (Symantec Corporation)

S3 IndirectKmd; C:\Windows\System32\drivers\IndirectKmd.sys [35840 2016-07-16] (Microsoft Corporation)

R0 iorate; C:\Windows\System32\drivers\iorate.sys [45920 2016-07-16] (Microsoft Corporation)

R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)

R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [85160 2016-04-19] (Logitech Inc.)

S3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)

S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()

R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [4112656 2015-10-16] (Intel Corporation)

R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\PasswordUtility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)

S0 percsas2i; C:\Windows\System32\drivers\percsas2i.sys [58720 2016-07-16] (Avago Technologies)

R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [751632 2015-05-14] (Realsil Semiconductor Corporation)

S3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [192648 2015-10-22] (Sandboxie Holdings, LLC)

S0 scmbus; C:\Windows\System32\drivers\scmbus.sys [88416 2016-07-16] (Microsoft Corporation)

S3 scmdisk0101; C:\Windows\System32\drivers\scmdisk0101.sys [123904 2016-07-16] (Microsoft Corporation)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-10-29] (Synaptics Incorporated)

R3 SRTSP; C:\Windows\system32\drivers\NSBUx64\1607000.04C\SRTSP64.SYS [773368 2016-07-20] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NSBUx64\1607000.04C\SRTSPX64.SYS [48888 2016-06-02] (Symantec Corporation)

S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)

R0 SymEFASI; C:\Windows\System32\drivers\NSBUx64\1607000.04C\SYMEFASI64.SYS [1627352 2016-06-02] (Symantec Corporation)

S0 SymELAM; C:\Windows\System32\drivers\NSBUx64\1607000.04C\SymELAM.sys [24192 2016-06-02] (Symantec Corporation)

R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [101112 2016-07-29] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NSBUx64\1607000.04C\Ironx64.SYS [291056 2016-06-02] (Symantec Corporation)

R1 SymNetS; C:\Windows\system32\drivers\NSBUx64\1607000.04C\SYMNETS.SYS [567536 2016-06-02] (Symantec Corporation)

R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [54424 2015-07-29] (Toshiba Corporation)

S3 UcmTcpciCx0101; C:\Windows\System32\Drivers\UcmTcpciCx.sys [108544 2016-07-16] (Microsoft Corporation)

S1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [117768 2016-01-19] (Oracle Corporation)

R1 VBoxUSBMon; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)

S3 vmgid; C:\Windows\System32\drivers\vmgid.sys [10240 2016-07-16] (Microsoft Corporation)

R0 volume; C:\Windows\System32\drivers\volume.sys [16224 2016-07-16] (Microsoft Corporation)

R2 wcifs; C:\Windows\system32\drivers\wcifs.sys [119648 2016-07-16] (Microsoft Corporation)

R2 wcnfs; C:\Windows\system32\drivers\wcnfs.sys [66560 2016-07-16] (Microsoft Corporation)

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

R1 XQHDrv; C:\Windows\system32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

NETSVC: shpamsvc -> C:\Windows\system32\Windows.SharedPC.AccountManager.dll (Microsoft Corporation)

NETSVC: wisvc -> C:\Windows\system32\flightsettings.dll (Microsoft Corporation)

NETSVC: WpnService -> C:\Windows\system32\WpnService.dll (Microsoft Corporation)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-08-06 09:28 - 2016-08-06 09:29 - 00032859 _____ C:\Users\UMIT CANAN\Desktop\FRST.txt

2016-08-06 09:28 - 2016-08-06 09:28 - 00000948 _____ C:\Users\UMIT CANAN\Desktop\Yeni Metin Belgesi.txt

2016-08-06 09:25 - 2016-08-06 09:25 - 00003956 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1470120055

2016-08-06 09:18 - 2016-08-06 09:19 - 00364252 _____ C:\WINDOWS\Minidump\080616-29734-01.dmp

2016-08-06 09:18 - 2016-08-06 09:18 - 00000000 ____D C:\WINDOWS\Minidump

2016-08-06 09:12 - 2016-08-06 09:12 - 02393600 _____ (Farbar) C:\Users\UMIT CANAN\Desktop\FRST64.exe

2016-08-06 09:11 - 2016-08-06 09:11 - 05198336 _____ (AVAST Software) C:\Users\UMIT CANAN\Desktop\aswMBR.exe

2016-08-05 21:38 - 2016-08-06 09:20 - 00000000 ____D C:\Users\UMIT CANAN\AppData\LocalLow\BitTorrent

2016-08-05 16:59 - 2016-08-06 07:54 - 00000000 ____D C:\WINDOWS\LastGood

2016-08-05 09:10 - 2016-08-05 09:12 - 62823571 _____ C:\Users\UMIT CANAN\Downloads\Pokémon GO_v0.31.0_apkpure.com.apk

2016-08-05 08:59 - 2016-08-05 15:01 - 00000000 ____D C:\Users\UMIT CANAN\.BigNox

2016-08-05 08:59 - 2016-08-05 08:59 - 00001057 _____ C:\Users\UMIT CANAN\Desktop\Multi-Drive.lnk

2016-08-05 08:59 - 2016-08-05 08:59 - 00000976 _____ C:\Users\UMIT CANAN\Desktop\Nox.lnk

2016-08-05 08:59 - 2016-08-05 08:59 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\Microsoft\Windows\Start Menu\Nox

2016-08-05 08:59 - 2015-09-16 06:29 - 00253384 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\XQHDrv.sys

2016-08-05 08:58 - 2016-08-05 08:59 - 00000000 ____D C:\Program Files\Bignox

2016-08-05 08:48 - 2016-08-05 08:48 - 00000631 _____ C:\Users\UMIT

2016-08-04 12:17 - 2016-08-04 12:29 - 62829937 _____ C:\Users\UMIT CANAN\Downloads\com.nianticlabs.pokemongo_0.31.0-2016072902_minAPI19(armeabi-v7a)(nodpi)_apkmirror.com.apk

2016-08-04 12:05 - 2016-08-04 12:05 - 00000000 ____D C:\WINDOWS\LastGood.Tmp

2016-08-04 11:28 - 2016-08-06 09:27 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton Security with Backup

2016-08-04 11:22 - 2016-08-06 09:22 - 00003608 _____ C:\WINDOWS\System32\Tasks\Garena+ Plugin Host Service

2016-08-04 11:21 - 2016-08-04 11:21 - 00000000 ____D C:\ProgramData\USOShared

2016-08-04 11:16 - 2016-08-06 07:57 - 00004196 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D2AEFBC8-CF5F-464E-B79F-46976457CCD8}

2016-08-04 11:05 - 2016-08-04 10:45 - 00000000 ___DC C:\WINDOWS\Panther

2016-08-04 11:01 - 2016-08-04 11:01 - 02190688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2016-08-04 11:01 - 2016-08-04 11:01 - 01708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 01418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 01265424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 01260384 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 00843104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 00770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2016-08-04 11:01 - 2016-08-04 11:01 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2016-08-04 11:01 - 2016-08-04 11:01 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll

2016-08-04 11:01 - 2016-08-04 11:01 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys

2016-08-04 11:01 - 2016-08-04 11:01 - 00000000 ____D C:\Windows.old

2016-08-04 11:00 - 2016-08-04 10:07 - 00000000 ____D C:\WINDOWS\ServiceProfiles

2016-08-04 11:00 - 2016-07-15 20:29 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll

2016-08-04 11:00 - 2016-07-15 20:29 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll

2016-08-04 11:00 - 2016-07-15 20:14 - 06354944 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll

2016-08-04 11:00 - 2016-07-15 19:45 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll

2016-08-04 11:00 - 2016-07-15 19:29 - 05489664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll

2016-08-04 10:59 - 2016-08-04 10:59 - 00008192 _____ C:\WINDOWS\system32\config\userdiff

2016-08-04 10:57 - 2016-08-04 10:57 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer

2016-08-04 10:57 - 2016-08-04 10:57 - 00000000 ____D C:\Program Files\Reference Assemblies

2016-08-04 10:57 - 2016-08-04 10:57 - 00000000 ____D C:\Program Files\MSBuild

2016-08-04 10:57 - 2016-08-04 10:57 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies

2016-08-04 10:57 - 2016-08-04 10:57 - 00000000 ____D C:\Program Files (x86)\MSBuild

2016-08-04 10:56 - 2016-05-25 15:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2016-08-04 10:56 - 2016-05-25 15:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2016-08-04 10:56 - 2016-05-25 15:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2016-08-04 10:56 - 2016-05-25 12:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2016-08-04 10:56 - 2016-05-25 12:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2016-08-04 10:56 - 2016-05-25 12:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2016-08-04 10:50 - 2016-08-04 10:50 - 00000000 ____D C:\ProgramData\Microsoft OneDrive

2016-08-04 10:48 - 2016-08-04 10:48 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\Publishers

2016-08-04 10:46 - 2016-08-04 11:22 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\ConnectedDevicesPlatform

2016-08-04 10:46 - 2016-08-04 10:46 - 00000020 ___SH C:\Users\UMIT CANAN\ntuser.ini

2016-08-04 10:44 - 2016-08-04 10:44 - 00000000 _SHDL C:\Users\Default\Documents\Videolarım

2016-08-04 10:44 - 2016-08-04 10:44 - 00000000 _SHDL C:\Users\Default\Documents\Resimlerim

2016-08-04 10:44 - 2016-08-04 10:44 - 00000000 _SHDL C:\Users\Default\Documents\Müziğim

2016-08-04 10:44 - 2016-08-04 10:44 - 00000000 _SHDL C:\Users\Default\Belgelerim

2016-08-04 10:44 - 2016-08-04 10:44 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programlar

2016-08-04 10:44 - 2016-08-04 10:44 - 00000000 _SHDL C:\Users\Default User\Documents\Videolarım

2016-08-04 10:44 - 2016-08-04 10:44 - 00000000 _SHDL C:\Users\Default User\Documents\Resimlerim

2016-08-04 10:44 - 2016-08-04 10:44 - 00000000 _SHDL C:\Users\Default User\Documents\Müziğim

2016-08-04 10:44 - 2016-08-04 10:44 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programlar

2016-08-04 10:41 - 2016-08-04 10:44 - 00007623 _____ C:\WINDOWS\diagwrn.xml

2016-08-04 10:41 - 2016-08-04 10:44 - 00007623 _____ C:\WINDOWS\diagerr.xml

2016-08-04 10:30 - 2016-08-06 09:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-08-04 10:23 - 2016-08-04 10:23 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2016-08-04 10:23 - 2016-08-04 10:23 - 00000000 ____D C:\Users\Default\AppData\Local\Google

2016-08-04 10:23 - 2016-08-04 10:23 - 00000000 ____D C:\Users\Default User\AppData\Local\Google

2016-08-04 10:23 - 2016-08-04 10:23 - 00000000 ____D C:\Program Files\AMD

2016-08-04 10:19 - 2016-08-04 10:26 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate

2016-08-04 10:16 - 2016-08-05 21:37 - 00000000 ____D C:\Users\UMIT CANAN

2016-08-04 10:16 - 2016-08-04 10:16 - 00000000 _SHDL C:\Users\UMIT CANAN\Documents\Videolarım

2016-08-04 10:16 - 2016-08-04 10:16 - 00000000 _SHDL C:\Users\UMIT CANAN\Documents\Resimlerim

2016-08-04 10:16 - 2016-08-04 10:16 - 00000000 _SHDL C:\Users\UMIT CANAN\Documents\Müziğim

2016-08-04 10:16 - 2016-08-04 10:16 - 00000000 _SHDL C:\Users\UMIT CANAN\Belgelerim

2016-08-04 10:16 - 2016-08-04 10:16 - 00000000 _SHDL C:\Users\UMIT CANAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programlar

2016-08-04 10:11 - 2016-08-05 16:59 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys

2016-08-04 10:11 - 2016-08-04 10:11 - 00000000 ____H C:\ProgramData\DP45977C.lfl

2016-08-04 10:10 - 2016-08-06 09:19 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

2016-08-04 10:10 - 2016-08-04 10:19 - 00000000 ____D C:\Program Files\Intel

2016-08-04 10:10 - 2016-08-04 10:10 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat

2016-08-04 10:10 - 2016-08-04 10:10 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf

2016-08-04 10:10 - 2016-08-04 10:10 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM

2016-08-04 10:10 - 2016-08-04 10:10 - 00000000 ____D C:\Program Files\Realtek

2016-08-04 10:10 - 2016-07-16 14:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2016-08-04 10:09 - 2016-08-04 10:09 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf

2016-08-04 10:09 - 2016-08-04 10:09 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies

2016-08-04 10:08 - 2016-08-04 10:08 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf

2016-08-04 10:08 - 2016-08-04 10:08 - 00000000 ____D C:\WINDOWS\SysWOW64\sda

2016-08-04 10:08 - 2016-08-04 10:08 - 00000000 ____D C:\Program Files\Synaptics

2016-08-04 10:07 - 2016-08-06 09:18 - 00000000 ____D C:\WINDOWS\system32\SleepStudy

2016-08-04 10:07 - 2016-08-04 11:19 - 04954792 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2016-08-03 15:39 - 2016-08-03 15:39 - 00486657 _____ C:\Users\UMIT CANAN\Documents\MSCURQ376478.pdf

2016-08-03 13:32 - 2016-08-03 13:32 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\Caminova

2016-08-02 16:53 - 2016-08-02 16:53 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\CEF

2016-08-02 09:41 - 2016-08-02 09:41 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\Opera Software

2016-08-02 09:41 - 2016-08-02 09:41 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\Opera Software

2016-08-02 09:40 - 2016-08-06 09:25 - 00001131 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk

2016-08-02 09:40 - 2016-08-06 09:25 - 00000000 ____D C:\Program Files (x86)\Opera

2016-08-02 09:40 - 2016-08-02 09:40 - 00001219 _____ C:\Users\Public\Desktop\Opera.lnk

2016-08-02 09:37 - 2016-08-02 09:38 - 00963080 _____ (Opera Software) C:\Users\UMIT CANAN\Downloads\OperaSetup.exe

2016-08-02 09:15 - 2016-08-02 09:15 - 00000000 ____D C:\ProgramData\vrq_logs

2016-08-02 09:05 - 2016-08-02 09:15 - 00000000 ____D C:\ProgramData\Norton VRQ

2016-08-02 09:05 - 2016-08-02 09:15 - 00000000 ____D C:\Program Files (x86)\VRQ

2016-08-02 08:47 - 2016-08-02 21:48 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\LogMeIn Rescue Applet

2016-08-02 08:47 - 2016-08-02 08:47 - 01596968 _____ (LogMeIn, Inc.) C:\Users\UMIT CANAN\Downloads\Support-LogMeInRescue.exe

2016-08-01 12:34 - 2016-08-01 12:34 - 06638280 _____ (Tim Kosse) C:\Users\UMIT CANAN\Downloads\FileZilla_3.20.0_win64-setup.exe

2016-08-01 12:18 - 2016-08-06 09:28 - 00000000 ____D C:\FRST

2016-08-01 10:11 - 2016-08-01 10:11 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\ActiveSync

2016-08-01 09:54 - 2016-08-01 09:54 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\IsolatedStorage

2016-07-30 13:22 - 2016-07-30 13:22 - 00002355 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-07-30 13:21 - 2016-07-30 13:21 - 00987728 _____ (Google Inc.) C:\Users\UMIT CANAN\Downloads\ChromeSetup (1).exe

2016-07-30 12:41 - 2016-07-30 12:41 - 00028352 _____ C:\ProgramData\1469871692.bdinstall.bin

2016-07-30 11:48 - 2016-07-30 11:48 - 08136664 _____ (Piriform Ltd) C:\Users\UMIT CANAN\Downloads\ccsetup520(1).exe

2016-07-30 11:46 - 2016-07-30 11:46 - 08136664 _____ (Piriform Ltd) C:\Users\UMIT CANAN\Downloads\ccsetup520.exe

2016-07-30 08:40 - 2016-07-30 09:32 - 00867826 _____ C:\Users\UMIT CANAN\Downloads\Temsilci Üyelik Müracaat Formu.pdf

2016-07-30 08:40 - 2016-07-30 08:40 - 00350638 _____ C:\Users\UMIT CANAN\Downloads\Temsilci Üyelik Dilekçe.pdf

2016-07-29 11:02 - 2016-07-31 19:19 - 00000000 ____D C:\Users\UMIT CANAN\Desktop\poke

2016-07-29 09:47 - 2016-07-29 09:47 - 00101112 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS

2016-07-29 09:47 - 2016-07-29 09:47 - 00008270 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT

2016-07-29 09:47 - 2016-07-29 09:47 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared

2016-07-29 09:43 - 2016-08-04 10:26 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security with Backup

2016-07-29 09:43 - 2016-07-29 09:43 - 00000000 ____D C:\WINDOWS\system32\Drivers\NSBUx64

2016-07-29 09:43 - 2016-07-29 09:43 - 00000000 ____D C:\Program Files (x86)\NortonInstaller

2016-07-29 09:43 - 2016-07-29 09:43 - 00000000 ____D C:\Program Files (x86)\Norton Security with Backup

2016-07-29 09:33 - 2016-07-29 09:35 - 01090008 _____ (Symantec Corporation) C:\Users\UMIT CANAN\Downloads\NortonNSBUDownloader(1).exe

2016-07-29 09:21 - 2016-07-29 09:21 - 00242994 _____ C:\ProgramData\1469772861.bdinstall.bin

2016-07-29 08:58 - 2016-07-29 08:58 - 00000385 _____ C:\Users\UMIT CANAN\AppData\Roaminguser_gensett.xml

2016-07-28 16:45 - 2016-07-28 16:45 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Temp

2016-07-28 16:43 - 2016-07-29 09:17 - 00002159 _____ C:\bdlog.txt

2016-07-28 16:27 - 2016-07-28 16:27 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml

2016-07-28 16:26 - 2016-07-28 16:26 - 00000000 ____D C:\ProgramData\BDLogging

2016-07-28 16:26 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll

2016-07-28 16:07 - 2016-07-28 16:07 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\QuickScan

2016-07-28 15:49 - 2016-07-28 15:49 - 10747392 _____ C:\Users\UMIT CANAN\Downloads\bitdefender_antivirus.exe

2016-07-28 15:46 - 2016-07-28 15:46 - 03965422 _____ C:\Users\UMIT CANAN\Downloads\PokemonGo-Bot-master.zip

2016-07-28 15:30 - 2016-07-28 15:30 - 03523760 _____ (Enigma Software Group USA, LLC.) C:\Users\UMIT CANAN\Downloads\SpyHunter-Installer-k.com

2016-07-28 15:28 - 2016-07-28 15:29 - 03313055 _____ C:\Users\UMIT CANAN\Downloads\PokeGoBot.zip

2016-07-28 14:31 - 2016-07-28 14:31 - 00681013 _____ C:\Users\UMIT CANAN\Downloads\PokemonBot.rar

2016-07-28 12:56 - 2016-07-28 12:56 - 00287088 _____ C:\Users\UMIT CANAN\Downloads\2016_bireysel.xlsx

2016-07-28 12:56 - 2016-07-28 12:56 - 00041742 _____ C:\Users\UMIT CANAN\Downloads\01.2016_milli.xlsx

2016-07-27 14:18 - 2016-07-27 14:18 - 00756224 _____ C:\Users\UMIT CANAN\Desktop\December.xls

2016-07-27 14:18 - 2016-07-27 14:18 - 00737792 _____ C:\Users\UMIT CANAN\Desktop\Q1.xls

2016-07-25 18:37 - 2016-07-25 18:37 - 01090008 _____ (Symantec Corporation) C:\Users\UMIT CANAN\Downloads\NortonNSBUDownloader.exe

2016-07-25 17:53 - 2016-07-25 17:53 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\Pan_Soft

2016-07-25 17:23 - 2016-07-25 17:23 - 00038472 _____ C:\Users\UMIT CANAN\Downloads\Pokemon-Go-Rocket-API-master (1).zip

2016-07-25 17:22 - 2016-07-25 17:22 - 00038472 _____ C:\Users\UMIT CANAN\Downloads\Pokemon-Go-Rocket-API-master.zip

2016-07-25 17:14 - 2016-07-25 17:19 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\GMap.NET

2016-07-25 17:11 - 2016-07-25 17:14 - 00000000 ____D C:\Users\UMIT CANAN\Downloads\GoBot

2016-07-25 17:11 - 2016-07-25 17:11 - 03714791 _____ C:\Users\UMIT CANAN\Downloads\GoBot.zip

2016-07-25 11:41 - 2016-07-25 11:41 - 01610560 _____ (Malwarebytes) C:\Users\UMIT CANAN\Downloads\JRT.exe

2016-07-25 08:46 - 2016-07-25 08:46 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe

2016-07-25 08:31 - 2016-07-27 20:25 - 00000000 ____D C:\Program Files\HitmanPro

2016-07-25 08:29 - 2016-07-25 08:30 - 11438608 _____ (SurfRight B.V.) C:\Users\UMIT CANAN\Downloads\hitmanpro_x64.exe

2016-07-25 08:29 - 2016-07-25 08:29 - 11438608 _____ (SurfRight B.V.) C:\Users\UMIT CANAN\Downloads\hitmanpro_x64 (1).exe

2016-07-21 21:24 - 2016-07-21 21:24 - 00053888 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\Drivers\TVALZ_O.SYS

2016-07-21 11:17 - 2016-07-21 11:17 - 00000000 ____D C:\Users\UMIT CANAN\Nox_share

2016-07-21 11:16 - 2016-08-05 15:01 - 00000000 ____D C:\Users\UMIT CANAN\vmlogs

2016-07-21 11:13 - 2016-08-05 08:59 - 00000000 ____D C:\Program Files\DIFX

2016-07-21 11:13 - 2016-07-21 11:17 - 60878833 _____ C:\Users\UMIT CANAN\Downloads\Pokémon GO.apk

2016-07-21 11:13 - 2015-09-16 09:07 - 00127432 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys

2016-07-21 11:12 - 2016-08-05 15:11 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\Nox

2016-07-21 11:12 - 2016-08-05 08:58 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\Nox

2016-07-21 11:06 - 2016-07-21 11:12 - 361482512 _____ (Duodian Technology Co. Ltd.) C:\Users\UMIT CANAN\Downloads\nox_setup_v3.7.0.0_full_En_0720_pokemon.exe

2016-07-20 13:55 - 2016-07-20 13:56 - 28165552 _____ C:\Users\UMIT CANAN\Downloads\w15 e09.zip

2016-07-20 10:24 - 2016-07-20 10:24 - 00305823 _____ C:\Users\UMIT CANAN\Downloads\c.v.pdf

2016-07-19 08:33 - 2016-07-19 14:54 - 00000000 ____D C:\Users\UMIT CANAN\Downloads\Hizli Okuma ve Yazma Teknikleri

2016-07-18 18:45 - 2016-07-18 18:47 - 49625952 _____ C:\Users\UMIT CANAN\Downloads\torbrowser-install-6.0.2_en-US.exe

2016-07-18 13:12 - 2016-07-01 06:57 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe

2016-07-18 13:10 - 2016-07-01 06:40 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll

2016-07-18 09:17 - 2016-07-18 09:23 - 276892264 _____ (BlueStack Systems Inc.) C:\Users\UMIT CANAN\Downloads\bluestacks-app-player-2-3-32-6227.exe

2016-07-18 08:36 - 2016-07-18 08:37 - 09406776 _____ (Symantec Corporation) C:\Users\UMIT CANAN\Downloads\NRnR.exe

2016-07-17 01:48 - 2016-08-04 09:33 - 00000000 ___HD C:\$WINDOWS.~BT

2016-07-17 01:16 - 2016-07-17 01:16 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\quickassist.exe

2016-07-17 01:16 - 2016-07-16 14:43 - 00033498 _____ C:\WINDOWS\CoreSingleLanguage.xml

2016-07-17 01:12 - 2016-08-06 09:24 - 00468882 _____ C:\WINDOWS\system32\perfh01F.dat

2016-07-17 01:12 - 2016-08-06 09:24 - 00091932 _____ C:\WINDOWS\system32\perfc01F.dat

2016-07-17 01:12 - 2016-08-04 11:00 - 00000000 ____D C:\WINDOWS\OCR

2016-07-17 01:12 - 2016-08-04 10:26 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep

2016-07-17 01:12 - 2016-08-04 10:26 - 00000000 ____D C:\WINDOWS\system32\tr

2016-07-17 01:12 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm

2016-07-17 01:12 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN

2016-07-17 01:12 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\SysWOW64\tr

2016-07-17 01:12 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr

2016-07-17 01:12 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts

2016-07-17 01:12 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\SysWOW64\0409

2016-07-17 01:12 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\system32\winrm

2016-07-17 01:12 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\system32\WCN

2016-07-17 01:12 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\system32\slmgr

2016-07-17 01:12 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts

2016-07-17 01:12 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\system32\0409

2016-07-17 01:12 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\SKB

2016-07-17 01:12 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\DigitalLocker

2016-07-17 01:12 - 2016-07-17 01:11 - 00290116 _____ C:\WINDOWS\system32\perfi01F.dat

2016-07-17 01:12 - 2016-07-17 01:11 - 00039088 _____ C:\WINDOWS\system32\perfd01F.dat

2016-07-16 15:40 - 2016-07-16 15:40 - 00000000 _SHDL C:\Users\Default User

2016-07-16 15:40 - 2016-07-16 15:40 - 00000000 _SHDL C:\Users\All Users

2016-07-16 14:49 - 2016-07-16 14:49 - 00000000 ____D C:\WINDOWS\Setup

2016-07-16 14:49 - 2016-07-16 14:44 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2016-07-16 14:49 - 2016-07-16 14:44 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2016-07-16 14:47 - 2016-08-06 09:27 - 00000000 ___HD C:\Program Files\WindowsApps

2016-07-16 14:47 - 2016-08-06 09:27 - 00000000 ____D C:\WINDOWS\AppReadiness

2016-07-16 14:47 - 2016-08-05 08:58 - 00000000 ____D C:\WINDOWS\Registration

2016-07-16 14:47 - 2016-08-05 08:25 - 00000000 ____D C:\WINDOWS\appcompat

2016-07-16 14:47 - 2016-08-04 14:44 - 00000000 ____D C:\WINDOWS\system32\NDF

2016-07-16 14:47 - 2016-08-04 11:22 - 00000000 ____D C:\ProgramData\USOPrivate

2016-07-16 14:47 - 2016-08-04 11:05 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template

2016-07-16 14:47 - 2016-08-04 10:57 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI

2016-07-16 14:47 - 2016-08-04 10:57 - 00000000 ____D C:\WINDOWS\system32\MUI

2016-07-16 14:47 - 2016-08-04 10:44 - 00000000 ____D C:\WINDOWS\rescache

2016-07-16 14:47 - 2016-08-04 10:44 - 00000000 ____D C:\Program Files\Windows NT

2016-07-16 14:47 - 2016-08-04 10:41 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase

2016-07-16 14:47 - 2016-08-04 10:32 - 00000000 __RHD C:\Users\Public\Libraries

2016-07-16 14:47 - 2016-08-04 10:29 - 00000000 ____D C:\WINDOWS\system32\FxsTmp

2016-07-16 14:47 - 2016-08-04 10:26 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2016-07-16 14:47 - 2016-08-04 10:21 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed

2016-07-16 14:47 - 2016-08-04 10:21 - 00000000 ____D C:\WINDOWS\system32\spool

2016-07-16 14:47 - 2016-08-04 10:21 - 00000000 ____D C:\WINDOWS\system32\oobe

2016-07-16 14:47 - 2016-08-04 10:21 - 00000000 ____D C:\WINDOWS\system32\Macromed

2016-07-16 14:47 - 2016-08-04 10:21 - 00000000 ____D C:\WINDOWS\system32\InputMethod

2016-07-16 14:47 - 2016-08-04 10:20 - 00000000 ____D C:\WINDOWS\LiveKernelReports

2016-07-16 14:47 - 2016-08-04 10:20 - 00000000 ____D C:\WINDOWS\InputMethod

2016-07-16 14:47 - 2016-08-04 10:20 - 00000000 ____D C:\WINDOWS\Help

2016-07-16 14:47 - 2016-08-04 10:19 - 00000000 ____D C:\Program Files\Common Files\microsoft shared

2016-07-16 14:47 - 2016-08-04 10:12 - 00000000 ___RD C:\WINDOWS\PrintDialog

2016-07-16 14:47 - 2016-08-04 10:12 - 00000000 ___RD C:\WINDOWS\MiracastView

2016-07-16 14:47 - 2016-08-04 10:12 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2016-07-16 14:47 - 2016-07-17 01:16 - 00000000 ____D C:\WINDOWS\SystemApps

2016-07-16 14:47 - 2016-07-17 01:15 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ___SD C:\WINDOWS\system32\F12

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ___SD C:\WINDOWS\system32\dsc

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\SysWOW64\setup

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\SysWOW64\Com

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\system32\setup

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\system32\migwiz

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\system32\Com

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\IME

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\Program Files\Windows Defender

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\Program Files\Common Files\System

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2016-07-16 14:47 - 2016-07-17 01:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 __SHD C:\Program Files\Windows Sidebar

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 __RSD C:\WINDOWS\Media

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ___SD C:\WINDOWS\system32\Nui

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ___SD C:\WINDOWS\system32\Configuration

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ___RD C:\WINDOWS\Offline Web Pages

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ___HD C:\WINDOWS\ELAMBKUP

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\Web

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\Vss

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\tracing

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\TAPI

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\ras

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SystemResources

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\WinMetadata

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\winevt

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\ras

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\ProximityToast

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\PointOfService

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\MsDtc

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\Ipmi

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\inetsrv

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\IME

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\icsxml

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\ias

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\DDFs

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\config\Journal

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\Bthprops

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\appraiser

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\AppLocker

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\System

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\ShellExperiences

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\security

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\schemas

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SchCache

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\Resources

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\Provisioning

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\PLA

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\Performance

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\ModemLogs

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\L2Schemas

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\InfusedApps

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\Globalization

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\GameBarPresenceWriter

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\Cursors

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\Branding

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\bcastdvr

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\addins

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\ProgramData\Comms

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\Program Files\Windows Portable Devices

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\Program Files\Windows Multimedia Platform

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\Program Files\Common Files\Services

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\Program Files (x86)\Windows NT

2016-07-16 14:47 - 2016-07-16 14:47 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform

2016-07-16 14:47 - 2016-07-16 14:45 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll

2016-07-16 14:47 - 2016-07-16 14:45 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat

2016-07-16 14:47 - 2016-07-16 14:45 - 00215943 _____ C:\WINDOWS\system32\dssec.dat

2016-07-16 14:47 - 2016-07-16 14:45 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll

2016-07-16 14:47 - 2016-07-16 14:45 - 00015462 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml

2016-07-16 14:47 - 2016-07-16 14:45 - 00004096 _____ C:\WINDOWS\system32\config\VSMIDK

2016-07-16 14:47 - 2016-07-16 14:45 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam

2016-07-16 14:47 - 2016-07-16 14:45 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json

2016-07-16 14:47 - 2016-07-16 14:45 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT

2016-07-16 14:47 - 2016-07-16 14:45 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT

2016-07-16 14:45 - 2016-08-06 09:20 - 00000000 ____D C:\WINDOWS\INF

aucnn

Post #4August 6, 2016, 7:05 AM UTC

FRST.TXT (second part)

2016-07-16 14:44 - 2016-07-17 01:15 - 02549760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkAnalysisLegacyCom.dll

2016-07-16 14:44 - 2016-07-17 01:15 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\umrdp.dll

2016-07-16 14:44 - 2016-07-17 01:15 - 00268552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpendp.dll

2016-07-16 14:44 - 2016-07-17 01:15 - 00177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys

2016-07-16 14:44 - 2016-07-17 01:15 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfdts.dll

2016-07-16 14:44 - 2016-07-17 01:15 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rfxvmt.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 32693432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsRaw.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 31664048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsRaw.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 19422208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 19417088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 13431808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 12342272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 11854848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL

2016-07-16 14:44 - 2016-07-16 14:44 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL

2016-07-16 14:44 - 2016-07-16 14:44 - 06044672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 04827280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2016-07-16 14:44 - 2016-07-16 14:44 - 02231288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL

2016-07-16 14:44 - 2016-07-16 14:44 - 02065408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 02002944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpdshext.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 01362512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 01197712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 01195008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMNetMgr.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 01025680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00987848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFS.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSRESM.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSRESM.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00858624 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSST.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00707216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFSR.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00656896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00645472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys

2016-07-16 14:44 - 2016-07-16 14:44 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSSVC.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceApi.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr

2016-07-16 14:44 - 2016-07-16 14:44 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00522752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceApi.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00510464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr

2016-07-16 14:44 - 2016-07-16 14:44 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpunits.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00484552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00473600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceStatus.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceStatus.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswmdm.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMPOSE.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00413696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSTIFF.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00385536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provsvc.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDSp.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00360960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2PGraph.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswmdm.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec

2016-07-16 14:44 - 2016-07-16 14:44 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srchadmin.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WPDSp.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcl.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00292872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00279960 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00273232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMASF.DLL

2016-07-16 14:44 - 2016-07-16 14:44 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cewmdm.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\elshyph.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXST30.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\audiodev.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cewmdm.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOVER.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\unregmp2.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpeval.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drt.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\elshyph.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unregmp2.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceTypes.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSUTILITY.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\p2pnetsh.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrdc.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidx.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceWiaCompat.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceTypes.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00153912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpps.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceWiaCompat.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wclPowrProf.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\repair-bde.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceClassExtension.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wclUnicode.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\racpldlg.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceClassExtension.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raserver.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msra.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSXP32.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\whealogr.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerWizardElev.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Cache.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdmps.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOM.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00089560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys

2016-07-16 14:44 - 2016-07-16 14:44 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logagent.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\srhelper.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOM.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSROUTE.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\BlbEvents.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml

2016-07-16 14:44 - 2016-07-16 14:44 - 00076060 _____ C:\WINDOWS\system32\xpsrchvw.xml

2016-07-16 14:44 - 2016-07-16 14:44 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pnrpnsp.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceConnectApi.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00067216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\blb_ps.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDShServiceObj.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wclEtw.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceConnectApi.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drtprov.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WPDShServiceObj.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmler.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ms3dthumbnailprovider.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\bderepair.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSMON.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.tlb

2016-07-16 14:44 - 2016-07-16 14:44 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drttransport.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.tlb

2016-07-16 14:44 - 2016-07-16 14:44 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdchange.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ms3dthumbnailprovider.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsepno.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdmlog.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSEXT32.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdmps.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMPOSERES.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdmlog.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDShextAutoplay.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinFax.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00030560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WpdUpFltr.sys

2016-07-16 14:44 - 2016-07-16 14:44 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofTasks.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00029408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CameraSettingsUIHost.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00029376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinFax.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WPDShextAutoplay.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\srwmi.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecerts.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscTimer.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dscproxy.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\srdelayed.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSUNATD.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\amcompat.tlb

2016-07-16 14:44 - 2016-07-16 14:44 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\amcompat.tlb

2016-07-16 14:44 - 2016-07-16 14:44 - 00018600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr100_clr0400.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srdelayed.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wclSqm.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Management.Infrastructure.Native.Unmanaged.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe

2016-07-16 14:44 - 2016-07-16 14:44 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LAPRXY.DLL

2016-07-16 14:44 - 2016-07-16 14:44 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wclWdi.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSEVENT.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb

2016-07-16 14:44 - 2016-07-16 14:44 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb

2016-07-16 14:44 - 2016-07-16 14:44 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx

2016-07-16 14:44 - 2016-07-16 14:44 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx

2016-07-16 14:44 - 2016-07-16 14:44 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrEvents.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmerror.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asferror.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmerror.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\blbres.dll

2016-07-16 14:44 - 2016-07-16 14:44 - 00001649 _____ C:\WINDOWS\SysWOW64\WindowsCodecsRaw.txt

2016-07-16 14:44 - 2016-07-16 14:44 - 00001649 _____ C:\WINDOWS\system32\WindowsCodecsRaw.txt

2016-07-16 14:43 - 2016-07-17 01:15 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 03584000 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkAnalysisLegacyCom.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 01311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsCpl.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 01311744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsCpl.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00795136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mblctr.exe

2016-07-16 14:43 - 2016-07-17 01:15 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00571904 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SnippingTool.exe

2016-07-16 14:43 - 2016-07-17 01:15 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe

2016-07-16 14:43 - 2016-07-17 01:15 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00298536 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpendp.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\hwrreg.exe

2016-07-16 14:43 - 2016-07-17 01:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sensrsvc.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinput.exe

2016-07-16 14:43 - 2016-07-17 01:15 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsClassExtension.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DFDWiz.exe

2016-07-16 14:43 - 2016-07-17 01:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RotMgr.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hwrcomp.exe

2016-07-16 14:43 - 2016-07-17 01:15 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetppui.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00029536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys

2016-07-16 14:43 - 2016-07-17 01:15 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorPerformanceEvents.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorCustomAdbAlgorithm.dll

2016-07-16 14:43 - 2016-07-17 01:15 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnpinst.exe

2016-07-16 14:43 - 2016-07-17 01:12 - 14329344 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm001f.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 26217472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imageres.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 23681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 22571520 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 12760576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 09569280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmres.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 08886976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSetup.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 08124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 07623168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 07217664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 05726864 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 05682688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 05110272 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 05088768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWSnapin.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 04748288 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 04312248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 04238336 _____ (Microsoft) C:\WINDOWS\SysWOW64\GameUXLegacyGDFs.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 04238336 _____ (Microsoft) C:\WINDOWS\system32\GameUXLegacyGDFs.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 04184576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 04060672 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 03478528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 03309056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncCenter.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 03194368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 02813440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2016-07-16 14:43 - 2016-07-16 14:43 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 02458112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 02398616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 02251440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 02217472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 02148864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 02049480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 01910496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplaySwitch.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 01836032 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01694200 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01660928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0000.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01562112 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01560064 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfshim.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01557296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01555456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01516032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0000.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01493504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01453568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01424488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01420944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01413632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01371280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01315840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\connect.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01293312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 01292800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMNetMgr.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01231360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcnwiz.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01224192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfshim.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 01210368 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 01189376 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01184768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\networkexplorer.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01175552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01155584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shellstyle.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01135104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01133568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01082880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01078272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01068544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\onexui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00993632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00968704 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00961680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00913920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallControlPanel.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00881152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi3.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00839680 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ir41_32original.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfuimanager.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Bubbles.scr

2016-07-16 14:43 - 2016-07-16 14:43 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Bubbles.scr

2016-07-16 14:43 - 2016-07-16 14:43 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartCardSimulator.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00792576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sbe.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00786944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\opengl32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ipsecsnp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00757248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 00753152 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdcpl.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00749408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00746496 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ir50_32original.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00741376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlceqp40.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00733696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedwipes.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00733696 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedwipes.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00732160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanpref.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00702976 _____ (Microsoft Corporation) C:\WINDOWS\system32\elslad.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00694784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagesp1.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00694112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DismApi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00690016 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00672768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsuiext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmIndexer.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00658944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dccw.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaservc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dccw.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\main.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\OobeFldr.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OobeFldr.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00622592 _____ (Microsoft Corporation) C:\WINDOWS\system32\colorui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00604160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\colorui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00597344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dramp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\elslad.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisdecd.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00580608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provcore.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00577888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IasMigPlugin.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00577024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00571904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsvcs.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00566600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00544256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPTpm12.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\riched20.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00507904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisdecd.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdial32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00482304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00477696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnfldr.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WLanConn.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiashext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadefui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\provsvc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiashext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shwebsvc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ipsmsnap.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00435712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glmf32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlcese40.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dim700.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2psvc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00424960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec

2016-07-16 14:43 - 2016-07-16 14:43 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2PGraph.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadefui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\irprops.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdohlp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00413696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv

2016-07-16 14:43 - 2016-07-16 14:43 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsquery.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys

2016-07-16 14:43 - 2016-07-16 14:43 - 00401920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dim.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00398848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00398336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdelta.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00395776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceCenter.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwizards.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscoree.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EncDec.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshipsec.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFSv1.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00379904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00378368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\termmgr.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpx.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassdo.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\system32\WmpDui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\srchadmin.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authfwcfg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00354816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10_1core.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00353240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\verifier.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00345088 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscoree.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00338432 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir41_qcxoriginal.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10core.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneOm.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00316640 _____ C:\WINDOWS\WMSysPr9.prx

2016-07-16 14:43 - 2016-07-16 14:43 - 00315576 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMASF.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cttune.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00313568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eudcedit.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00306800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00304640 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasppp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysdm.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 00303104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiag.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00301568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmontr.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWGP.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00300032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\configmanager2.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RADCUI.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetcfg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dxpserver.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3ui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasppp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\scansetting.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WmpDui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00290144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys

2016-07-16 14:43 - 2016-07-16 14:43 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00284056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys

2016-07-16 14:43 - 2016-07-16 14:43 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\drt.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiagn.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenter.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschapext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationHost.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00257248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsta.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdprint.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp

2016-07-16 14:43 - 2016-07-16 14:43 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSNP.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scansetting.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscandui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB7.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00248472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00244736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationHost.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3gpui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mintdh.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qwave.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgprint.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssText3d.scr

2016-07-16 14:43 - 2016-07-16 14:43 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wavemsp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00228192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dism.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstask.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\cleanmgr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSNP.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00215896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVol.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwtpdui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00211938 _____ C:\WINDOWS\SysWOW64\lcphrase.tbl

2016-07-16 14:43 - 2016-07-16 14:43 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\onex.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cleanmgr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ssText3d.scr

2016-07-16 14:43 - 2016-07-16 14:43 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmime.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairingFolder.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00202080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutil.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2pnetsh.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidx.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00200192 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir50_qcoriginal.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbeio.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00197632 _____ (Intel(R) Corporation) C:\WINDOWS\SysWOW64\ir32_32original.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00197632 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iac25_32.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dskquoui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icsigd.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00194560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsRasterService.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00194560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB7.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrad.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrdc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\charmap.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.PicturePassword.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlandlg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msls31.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00185400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmllite.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\moricons.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\moricons.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00183808 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir50_qcxoriginal.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlceoledb40.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\charmap.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput8.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coredpus.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\modemui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcaSvc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MTF.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtm.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\immersivetpmvscmgrsvr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\desk.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdminst.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\syncui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContent.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sbeio.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fms.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10_1.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmgp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\L2SecHC.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvscmgrsvr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmttpmvscmgrsvr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadss.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00152576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoplay.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Mystify.scr

2016-07-16 14:43 - 2016-07-16 14:43 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Ribbons.scr

2016-07-16 14:43 - 2016-07-16 14:43 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00149344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ulib.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00146944 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ivfsrc.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE

2016-07-16 14:43 - 2016-07-16 14:43 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\verifiergui.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uudf.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glu32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qasf.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mystify.scr

2016-07-16 14:43 - 2016-07-16 14:43 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrecst.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpsapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\softkbd.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Ribbons.scr

2016-07-16 14:43 - 2016-07-16 14:43 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ufat.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prncache.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceMetadataRetrievalClient.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prntvpt.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\raserver.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dsui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadss.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassvcs.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnscmmc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrahc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fsutil.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManagerAPI.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaatext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx

2016-07-16 14:43 - 2016-07-16 14:43 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwtpw32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gcdef.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00123232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys

2016-07-16 14:43 - 2016-07-16 14:43 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapsimextdesktop.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmstyle.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlcecompact40.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00120320 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir41_qcoriginal.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\isoburn.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmusic.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmsynth.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rshx32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00115091 _____ C:\WINDOWS\SysWOW64\WF.msc

2016-07-16 14:43 - 2016-07-16 14:43 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.RetailInfo.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\control.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvscmgr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontview.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprmsg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00113152 _____ (Microsoft) C:\WINDOWS\system32\SMBHelperClass.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.ps.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWWizFwk.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersGPExt.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapiui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\isoburn.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\telephon.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dskquota.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Fondue.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsadu.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\synceng.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngcredui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseLiveTileTask.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\kstvtune.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys

2016-07-16 14:43 - 2016-07-16 14:43 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx

2016-07-16 14:43 - 2016-07-16 14:43 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Mpeg2Data.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\loadperf.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uexfat.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwreg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisrndr.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\logagent.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiascanprofiles.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\eShims.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlgpclnt.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcmapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00099176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\omadmapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logman.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mobsync.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usbceip.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoipRT.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fphc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdaplgin.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edpauditapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmscript.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00095560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kstvtune.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaacmgr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00093702 _____ C:\WINDOWS\SysWOW64\SubRange.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00093702 _____ C:\WINDOWS\system32\SubRange.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkspbrokerAx.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mobsync.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSTPager.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\joy.cpl

2016-07-16 14:43 - 2016-07-16 14:43 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceProperties.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\recovery.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\cca.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiascanprofiles.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountControlSettings.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usbui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fingerprintcredential.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthExt.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00088928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlsbres.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountControlSettings.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remotesp.tsp

2016-07-16 14:43 - 2016-07-16 14:43 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisrndr.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\colorcpl.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00086528 _____ (Radius Inc.) C:\WINDOWS\SysWOW64\iccvid.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\colorcpl.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00086016 _____ (Microsoft) C:\WINDOWS\SysWOW64\SMBHelperClass.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairingWizard.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpnsp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaacmgr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GameBarPresenceWriter.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx

2016-07-16 14:43 - 2016-07-16 14:43 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserAccountControlSettings.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\synceng.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\msauserext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesRemote.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesProtection.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesPerformance.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesHardware.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesDataExecutionPrevention.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesComputerName.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemPropertiesAdvanced.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mpeg2Data.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmstp.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiarpc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSSessionUX.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00081560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscories.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tasklist.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmifw.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Pnrphc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanext.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSTPager.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00078992 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bootcfg.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systeminfo.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bdaplgin.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ELSCore.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DpiScaling.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartScreenSettings.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSDvbNP.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cca.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingHost.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iashlpr.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskkill.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcompos.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserAccountControlSettings.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpbcreds.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enterpriseresourcemanager.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00073880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscories.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx

2016-07-16 14:43 - 2016-07-16 14:43 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsockhc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartScreenSettings.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDvbNP.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eqossnap.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Groupinghc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipsec.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00069232 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialUIBroker.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scavengeui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WfHC.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RunLegacyCPLElevated.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasacct.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\drtprov.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00067112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00066560 _____ (Twain Working Group) C:\WINDOWS\twain_32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sberes.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcirt.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\sberes.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\btpanui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationHostProxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\hcproviders.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspatchc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksxbar.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ELSCore.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdmat.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WorkFoldersRes.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rundll32.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdiag.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersRes.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConnectedAccountState.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\playlistfolder.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt40.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00060458 _____ C:\WINDOWS\SysWOW64\ideograf.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00060458 _____ C:\WINDOWS\system32\ideograf.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unenrollhook.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3cfg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpmonui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dxof.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhonePlatformAbstraction.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasdatastore.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialUIBroker.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\browcli.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoveDeviceContextHandler.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msauserext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksxbar.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xwizard.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winver.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasads.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2nacp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00055808 _____ (Microsoft) C:\WINDOWS\SysWOW64\cero.rs

2016-07-16 14:43 - 2016-07-16 14:43 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NapiNSP.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00055296 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\g711codc.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\expand.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bidispl.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00054784 _____ (Microsoft) C:\WINDOWS\SysWOW64\fpb.rs

2016-07-16 14:43 - 2016-07-16 14:43 - 00054624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fmifs.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\drttransport.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00053216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wtsapi32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsnmp32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msident.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00052224 _____ (Microsoft) C:\WINDOWS\SysWOW64\esrb.rs

2016-07-16 14:43 - 2016-07-16 14:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hcproviders.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConnectedAccountState.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintPlatformConfig.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationHostProxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3dlg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertPKICmdlet.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdchange.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ftp.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\feclient.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmler.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzutil.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dssec.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3gpclnt.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deskadp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NAPCRYPT.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwcfg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdl32.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00047000 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00046080 _____ (Microsoft) C:\WINDOWS\SysWOW64\oflc-nz.rs

2016-07-16 14:43 - 2016-07-16 14:43 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TapiMigPlugin.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msports.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComputerDefaults.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmutil.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbisurf.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDriverRetrievalClient.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netfxperf.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deskmon.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddrawex.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\networkitemfactory.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lodctr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00044056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys

2016-07-16 14:43 - 2016-07-16 14:43 - 00044032 _____ (Microsoft) C:\WINDOWS\SysWOW64\csrr.rs

2016-07-16 14:43 - 2016-07-16 14:43 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\virtdisk.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RegCtrl.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FontGlyphAnimator.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browcli.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\luainstall.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmloader.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\typeperf.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regini.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnification.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00041472 _____ (Microsoft) C:\WINDOWS\SysWOW64\cob-au.rs

2016-07-16 14:43 - 2016-07-16 14:43 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbisurf.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfctrs.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iaspolcy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EtwRundown.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\netfxperf.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentHost.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00041328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iri.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.XboxLive.ProxyStub.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\grpconv.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edpnotify.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\relog.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp

2016-07-16 14:43 - 2016-07-16 14:43 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\amsi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00039248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\utildll.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vpnikeapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SecEdit.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pid.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiawow64.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxpps.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uicom.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cttunesvr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmmon32.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Printers.Extensions.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimtf.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbioext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unlodctr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TaskSchdPS.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfos.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspatcha.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\docprop.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfc.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pifmgr.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfdisk.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\htui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToStatusProvider.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmband.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmlua.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\tvratings.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00035168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfmifs.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00034128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcreate.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsutil.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MirrorDrvCompat.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprnext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInput1_4.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hidphone.tsp

2016-07-16 14:43 - 2016-07-16 14:43 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialer.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dataclen.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasphone.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtsh.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmcfg32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbrpm.sys

2016-07-16 14:43 - 2016-07-16 14:43 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00031744 _____ (Microsoft) C:\WINDOWS\SysWOW64\usk.rs

2016-07-16 14:43 - 2016-07-16 14:43 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpmib.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00031528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CameraSettingsUIHost.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tvratings.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsauth.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00030912 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToStatusProvider.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\elsTrans.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrnsave.scr

2016-07-16 14:43 - 2016-07-16 14:43 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aeevts.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ThumbnailExtractionHost.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WofUtil.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpauto.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DsmUserTask.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00027360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\version.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsCtfMonitor.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\icmui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00026464 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimgvw.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsdchngr.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscisvif.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcaApi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootim.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\httpapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapprovp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CheckNetIsolation.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\at.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prevhost.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\elsTrans.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmprocessxmlfiltered.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00024114 _____ C:\WINDOWS\SysWOW64\lcptr.tbl

2016-07-16 14:43 - 2016-07-16 14:43 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shgina.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dswave.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairingProxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmpbk32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00024006 _____ C:\WINDOWS\SysWOW64\gb2312.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00024006 _____ C:\WINDOWS\system32\gb2312.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secur32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ias.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.SystemManufacturers.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00022984 _____ C:\WINDOWS\SysWOW64\bopomofo.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00022984 _____ C:\WINDOWS\system32\bopomofo.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmoleaututils.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidtel.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\WallpaperHost.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00022016 _____ (Microsoft) C:\WINDOWS\SysWOW64\grb.rs

2016-07-16 14:43 - 2016-07-16 14:43 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshcon.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscisvif.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netbtugc.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskperf.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shunimpl.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfhost.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ktmw32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icmui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00020992 _____ (Microsoft) C:\WINDOWS\SysWOW64\pegi-pt.rs

2016-07-16 14:43 - 2016-07-16 14:43 - 00020992 _____ (Microsoft) C:\WINDOWS\SysWOW64\pegi.rs

2016-07-16 14:43 - 2016-07-16 14:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcfgutils.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMmRes.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regsvr32.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netevent.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\VscMgrPS.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00019968 _____ C:\WINDOWS\SysWOW64\GamePanelExternalHook.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxshared.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\serwvdrv.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasctrs.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NcaApi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscorier.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteWipeCSP.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscorier.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mgmtapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chkntfs.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00019296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntosext.sys

2016-07-16 14:43 - 2016-07-16 14:43 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiatrace.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00018600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100_clr0400.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdial.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmproxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmlprovi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wksprtPS.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vdmdbg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uniplat.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanui2.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WINSRPC.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\umdmxfrm.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shpafact.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdkey.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshelper.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icsunattend.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dispex.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmstplua.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00016740 _____ C:\WINDOWS\SysWOW64\ShiftJIS.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00016740 _____ C:\WINDOWS\system32\ShiftJIS.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsock32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Startupscan.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\irclass.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscproxystub.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\clrhost.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00015872 _____ (Microsoft) C:\WINDOWS\SysWOW64\djctq.rs

2016-07-16 14:43 - 2016-07-16 14:43 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\serialui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00015360 _____ (Microsoft) C:\WINDOWS\SysWOW64\pcbp.rs

2016-07-16 14:43 - 2016-07-16 14:43 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiatrace.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netbios.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshrm.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcmsetup.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\muifontsetup.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prflbmsg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmsprep.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetmon.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKOR.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clrhost.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecondaryTileExperienceCallback.ProxyStub.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\recover.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VscMgrPS.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmpushproxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\LAPRXY.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00013091 _____ C:\WINDOWS\system32\DevModeRunAsUserConfig.msc

2016-07-16 14:43 - 2016-07-16 14:43 - 00012876 _____ C:\WINDOWS\SysWOW64\korean.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00012876 _____ C:\WINDOWS\system32\korean.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TapiUnattend.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\recover.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\panmap.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprext.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshirda.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\txfw32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MinstoreEvents.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmiso8601utils.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcmonitor.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceUxRes.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscproxystub.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\verclsid.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IconCodecService.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcommandlineutils.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browseui.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dllhst3g.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfmifsproxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiaExtensionHost64.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\getuname.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoveDeviceElevated.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GameBarPresenceWriter.proxy.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CHxReadingStringIME.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00010429 _____ C:\WINDOWS\system32\ScavengeSpace.xml

2016-07-16 14:43 - 2016-07-16 14:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\write.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TapiSysprep.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCShellCommonProxyStub.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacchooks.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ctfmon.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebCache.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapiperf.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systray.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nddeapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msidle.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdnecat.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInput9_1_0.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shfolder.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir50_qcx.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir50_qc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir50_32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir41_qcx.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir41_qc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir41_32.ax

2016-07-16 14:43 - 2016-07-16 14:43 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtprio.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\typelib.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storage.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole2nls.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole2disp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole2.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compobj.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcNs4.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfime.ime

2016-07-16 14:43 - 2016-07-16 14:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir32_32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\getuname.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dabapi.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008484 _____ C:\WINDOWS\SysWOW64\kanji_2.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00008484 _____ C:\WINDOWS\system32\kanji_2.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\riched32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUKX.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdnec95.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe

2016-07-16 14:43 - 2016-07-16 14:43 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTIPRC.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDNEPR.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdlk41a.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDIBO.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdibm02.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole32.tlb

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDURDU.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUR.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUGHR.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTURME.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSORA.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDOSM.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDOLDIT.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDOLCH.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMONMO.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMON.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMAORI.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKYR.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKURD.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJAV.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDDZO.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDA1.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd103.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb

2016-07-16 14:43 - 2016-07-16 14:43 - 00006948 _____ C:\WINDOWS\SysWOW64\kanji_1.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00006948 _____ C:\WINDOWS\system32\kanji_1.uce

2016-07-16 14:43 - 2016-07-16 14:43 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDIT.DLL

2016-07-16 14:43 - 2016-07-16 14:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msidntld.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00004608 _____ (Microsoft) C:\WINDOWS\SysWOW64\WEB.rs

2016-07-16 14:43 - 2016-07-16 14:43 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\security.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaccrc.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2help.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00004014 _____ C:\WINDOWS\SysWOW64\xwizard.dtd

2016-07-16 14:43 - 2016-07-16 14:43 - 00003666 _____ C:\WINDOWS\SysWOW64\sysprtj.sep

2016-07-16 14:43 - 2016-07-16 14:43 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00003317 _____ C:\WINDOWS\SysWOW64\sysprint.sep

2016-07-16 14:43 - 2016-07-16 14:43 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanutil.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msafd.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lz32.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iologmsg.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32res.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\asferror.dll

2016-07-16 14:43 - 2016-07-16 14:43 - 00002349 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk

2016-07-16 14:43 - 2016-07-16 14:43 - 00002199 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintDialog.lnk

2016-07-16 14:43 - 2016-07-16 14:43 - 00001820 _____ C:\WINDOWS\SysWOW64\rasctrnm.h

2016-07-16 14:43 - 2016-07-16 14:43 - 00001673 _____ C:\WINDOWS\SysWOW64\tcpbidi.xml

2016-07-16 14:43 - 2016-07-16 14:43 - 00000150 _____ C:\WINDOWS\SysWOW64\pcl.sep

2016-07-16 14:43 - 2016-07-16 14:43 - 00000051 _____ C:\WINDOWS\SysWOW64\pscript.sep

2016-07-16 14:42 - 2016-07-16 14:42 - 26217472 _____ (Microsoft Corporation) C:\WINDOWS\system32\imageres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 22219328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 20965248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 17184256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 15053824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDORes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 15048704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DDORes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 13864960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 09569280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 09125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 08155056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 07814496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 07792640 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 07655424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 07468032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 07222240 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 06654104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 06574592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 06284800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 05865312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizimg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 05865312 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizimg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 05723344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 05622600 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 05511168 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 05384192 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 05375488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 05088768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthFWSnapin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 04612096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 04557824 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 04387168 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 04268368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 04262912 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 04227116 _____ C:\WINDOWS\system32\DefaultHrtfs.bin

2016-07-16 14:42 - 2016-07-16 14:42 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 04131976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03893888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03825152 _____ (Microsoft Corporation) C:\WINDOWS\system32\accessibilitycpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03795456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\accessibilitycpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03769856 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03617792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 03541504 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03440660 _____ C:\WINDOWS\SysWOW64\Drivers\gm.dls

2016-07-16 14:42 - 2016-07-16 14:42 - 03440660 _____ C:\WINDOWS\system32\Drivers\gm.dls

2016-07-16 14:42 - 2016-07-16 14:42 - 03434496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03392000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 03369984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03299328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 03244032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03203072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03170304 _____ C:\WINDOWS\SysWOW64\boot.sdi

2016-07-16 14:42 - 2016-07-16 14:42 - 03170304 _____ C:\WINDOWS\system32\boot.sdi

2016-07-16 14:42 - 2016-07-16 14:42 - 03132928 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03110400 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03105792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 03056640 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 02947072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02913616 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02909696 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkAnalysis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02846208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02839552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02828384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02812416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02746880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02745232 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02712064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02710016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02681344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll

aucnn

Post #5August 6, 2016, 7:06 AM UTC

FRST.TXT (3RD PART)

2016-07-16 14:42 - 2016-07-16 14:42 - 02678056 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02643456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02630144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02538848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02512384 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02511792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02481768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02446704 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02435880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02422784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02389504 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 02368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02360832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02347008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02314752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02277800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02264064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02257248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 02222080 _____ (Microsoft Corporation) C:\WINDOWS\system32\certmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02216960 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02214784 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02183792 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02166240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02151208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVENCOD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02108928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkAnalysis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02107392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02104832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02083840 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02054144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmsipc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01990648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01987584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01985536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01980776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01980416 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01966296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01947280 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVENCOD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 01937920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01922920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplaySwitch.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01917440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01892352 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01875456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01858752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01853232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01851144 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01827840 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01811968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01792512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01785856 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01762816 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01738048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01723568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01714688 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01710080 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01707512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01699840 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01667584 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01633792 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01609408 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01599608 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01589248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01579520 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01573376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01570680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01564160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01560064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01556200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01546240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01543680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01536512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pla.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01529344 _____ (Microsoft) C:\WINDOWS\system32\dbghelp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01512448 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 01503032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01488384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmsipc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01476608 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01472536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01467584 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01457152 _____ (Microsoft Corporation) C:\WINDOWS\system32\pla.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01454000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\DxpTaskSync.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01433088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01429696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01415168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01402880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01400832 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagperf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01399296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Pimstore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01397248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01394176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DxpTaskSync.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01386496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvbvm60.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\connect.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01376512 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01375456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01369240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01368576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01368576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01364480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01358336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01357312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01354304 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01349128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2016-07-16 14:42 - 2016-07-16 14:42 - 01348608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01343936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01322848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01305088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01300056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01299968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01295360 _____ (Microsoft Corporation) C:\WINDOWS\system32\comres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01293312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcnwiz.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01291264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01281536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01280512 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01272832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01259720 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\system32\Taskmgr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01252864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01234944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01234456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfperfhelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01225728 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01220608 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbghelp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01218048 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01217888 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01202176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01201360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\networkexplorer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01187328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01184256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01184256 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01182048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01163696 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01157008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01155584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01155584 _____ (Microsoft Corporation) C:\WINDOWS\system32\shellstyle.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01154560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Pimstore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01145344 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01128960 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01122856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01122344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01120256 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\SysWOW64\Taskmgr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01112928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01099264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01099104 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 01092096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01088264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfperfhelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01086976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\onexui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01071104 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdosys.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 01069208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01069176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01067632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01066336 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01064960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmdskres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01064960 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdskres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01063472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01058816 _____ (Microsoft Corporation) C:\WINDOWS\system32\opengl32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01057792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagCpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01052672 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01046976 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2016-07-16 14:42 - 2016-07-16 14:42 - 01046368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 01041408 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01025536 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01013376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01012224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01006080 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00998920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00996192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi

2016-07-16 14:42 - 2016-07-16 14:42 - 00992256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh265enc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00992256 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00989696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00987488 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi3.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00978944 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkObjCore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00976184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00975360 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00968704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00967680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipcsecproc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00961024 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00959488 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00958632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00953856 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00945152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00944128 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00942432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi

2016-07-16 14:42 - 2016-07-16 14:42 - 00940544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00940032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00928608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00927744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00924944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc40u.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00924944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00919552 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlceqp40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00918304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00914272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00911872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallControlPanel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00907480 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00907104 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroles.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhuxpresentation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00885832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00878592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh265enc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00878080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00876032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcsecproc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00868824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00865680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00861296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00861184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSMDesktopProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00857088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00856872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00848736 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00844800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdosys.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipsecsnp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00831488 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00825856 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmIndexer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSMDesktopProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\comuid.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSync.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00820224 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintRenderAPIHost.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\provcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00813568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00811416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00808344 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00807776 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00803328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00798720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00794416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroles.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00788632 _____ C:\WINDOWS\SysWOW64\locale.nls

2016-07-16 14:42 - 2016-07-16 14:42 - 00788632 _____ C:\WINDOWS\system32\locale.nls

2016-07-16 14:42 - 2016-07-16 14:42 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00781312 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00776704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanpref.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00776704 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabletPC.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00775680 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\certca.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00773168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00772568 _____ (SQLite Development Team) C:\WINDOWS\system32\winsqlite3.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00765456 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00762856 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00762384 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00757736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00755648 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00755200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00753152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Vault.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00747392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00741888 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00740864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlsrv32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00729328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00725672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkObjCore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00714752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00714240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.PhoneNumberFormatting.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00702976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSync.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00699880 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00699744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00698720 _____ (Microsoft Corporation) C:\WINDOWS\system32\IasMigPlugin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00696712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagesp1.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00691592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbc32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsuiext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00684384 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00682848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00682816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00681824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00681312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00679936 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vault.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00673088 _____ C:\WINDOWS\SysWOW64\mlang.dat

2016-07-16 14:42 - 2016-07-16 14:42 - 00673088 _____ C:\WINDOWS\system32\mlang.dat

2016-07-16 14:42 - 2016-07-16 14:42 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\devmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00665776 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00665088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlsrv32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00658432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx

2016-07-16 14:42 - 2016-07-16 14:42 - 00656896 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00652352 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00651776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00650240 _____ (Microsoft) C:\WINDOWS\system32\DbgModel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00647680 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comuid.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00643072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00643072 _____ (Microsoft Corporation) C:\WINDOWS\system32\main.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00640984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00634824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00633920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certca.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00631176 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatq.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00628040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPTpm12.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00622080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00619520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxApplicabilityEngine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00617472 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00616736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00616048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00615168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00614912 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00608256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbc32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate_isv.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp60.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00602464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\riched20.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\psr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00595296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00594472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00593992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsdyn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00590952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00588824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp110_win.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00587456 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00586752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00584664 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\winsqlite3.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WLanConn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00583520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_9.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00577536 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00576408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00576000 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\system32\wvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00571392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00565760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate_isv.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00563712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_9.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\filemgmt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00552288 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00549088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00547008 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00546304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdohlp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00536064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx

2016-07-16 14:42 - 2016-07-16 14:42 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipsmsnap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00532992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxApplicabilityEngine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00532480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00529416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlcese40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00528896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00528360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clbcatq.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00526176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv

2016-07-16 14:42 - 2016-07-16 14:42 - 00524776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00516608 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFSv1.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdial32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00513024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00512416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00511488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00511488 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00506368 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdelta.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00506368 _____ (Microsoft Corporation) C:\WINDOWS\system32\localsec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\glmf32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00502784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00501760 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate_ssp_isv.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMActivate_ssp.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00501088 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00500064 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00498408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChxAPDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\system32\authfwcfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00487936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00487112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00486040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate_ssp_isv.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00484864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RMActivate_ssp.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00482392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00481792 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnfldr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00481280 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimeChsPinyinMainDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00480344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipcfile.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00476160 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\SysWOW64\wvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\filemgmt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdlgs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbemcomn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChxHAPDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00468320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx

2016-07-16 14:42 - 2016-07-16 14:42 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00461312 _____ (Microsoft) C:\WINDOWS\SysWOW64\DbgModel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00459264 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00458240 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFWMAAEC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00454600 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00454144 _____ (Microsoft Corporation) C:\WINDOWS\system32\shwebsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassdo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\localsec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwizards.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00449376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp60.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00443744 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroleui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsquery.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\certCredProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00435552 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00435095 _____ C:\WINDOWS\system32\ApnDatabase.xml

2016-07-16 14:42 - 2016-07-16 14:42 - 00435040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00433904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\certreq.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00432992 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00431296 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certCredProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00425664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00423776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\irprops.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChtCangjieDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00419840 _____ (Microsoft Corporation) C:\WINDOWS\system32\termmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00418816 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00417928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshipsec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx

2016-07-16 14:42 - 2016-07-16 14:42 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncInfrastructure.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00415256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp110_win.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00415072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizeng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00414744 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChtHkStrokeDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChsStrokeDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00413696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmdlgs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChtQuickDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2016-07-16 14:42 - 2016-07-16 14:42 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexch40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00407392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shrpubw.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFWMAAEC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00403888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxclu.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00400304 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc_isv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shrpubw.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00391520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wbemcomn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SDDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmicmiplugin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00385024 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\syncutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00383776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DavSyncProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptuiwizard.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\hdwwiz.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00381728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00380957 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\expsrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00380256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneOm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10_1core.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00378720 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00378072 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00377696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtckrm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00376160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00373936 _____ (Microsoft Corporation) C:\WINDOWS\system32\verifier.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hdwwiz.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\system32\difxapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSATAPI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00371200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AccountsRt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00369664 _____ C:\WINDOWS\system32\msinfo32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00369368 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00367456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgrx.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00367208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptuiwizard.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00364544 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00362848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00361984 _____ C:\WINDOWS\system32\HrtfApo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00361312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00360960 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certreq.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\eudcedit.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00357984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00357216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00356704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00353824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmontr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00352256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00351744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00351744 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00350680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00350208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncInfrastructure.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc_isv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcfile.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiag.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\es.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00342880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00340920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00339896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\difxapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10core.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00339416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSDECD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsnt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00336896 _____ C:\WINDOWS\SysWOW64\msinfo32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskraid.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroleui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\jpndecoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Proximity.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\socialapis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChsPinyinRanker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DavSyncProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00333640 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00332144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcbase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiagn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\chxinputrouter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00328520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwlauncher.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcorehc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00326656 _____ C:\WINDOWS\system32\wc_storage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\system32\cttune.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollUI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00325984 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_10ec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV1.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00322560 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysdm.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00322400 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mintdh.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00320512 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00320512 _____ (Microsoft Corporation) C:\WINDOWS\regedit.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfgui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00319488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00318784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3ui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00318176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00317952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcjt32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00312472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreCommonProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSATAPI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00308336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSDECD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs3D.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\provthrd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Proximity.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00306016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndfapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthFWGP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00304640 _____ C:\WINDOWS\SysWOW64\HrtfApo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00304640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00304240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00303968 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\PowerWmiProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\netdiagfx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00301680 _____ (Microsoft Corporation) C:\WINDOWS\system32\powrprof.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingASDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regedit.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscandui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00299872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcbase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp

2016-07-16 14:42 - 2016-07-16 14:42 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\EaseOfAccessDialog.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollUI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsnt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\MtfDecoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdprint.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskraid.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\TieringEngineService.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsnap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax

2016-07-16 14:42 - 2016-07-16 14:42 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschapext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\oemlicense.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EaseOfAccessDialog.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacEncoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsExt.dll

aucnn

Post #6August 6, 2016, 7:06 AM UTC

FRST.TXT (4TH PART)

2016-07-16 14:42 - 2016-07-16 14:42 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3gpui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\accountaccessor.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00275832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powrprof.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\qwave.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\lltdsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\sethc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00273232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityUxHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00271664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00271360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00271360 _____ (Microsoft Corporation) C:\WINDOWS\system32\offfilt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00269104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MPG4DECD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00269104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP43DECD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdskmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Maps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00267104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbroker.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mycomput.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountCloudAP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00266080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTFServer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\socialapis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00264704 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00263008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00262960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\jpnranker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\apds.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsRasterService.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax

2016-07-16 14:42 - 2016-07-16 14:42 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00259848 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgmgr32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwtpdui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wavemsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\HNetCfgClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssphtb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt20.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndfapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsku.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\cemapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsldpc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsldp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00247960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVol.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00246872 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00246360 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsAuth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileHistory.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhengine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstask.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00244824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringStation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\unattend.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00240216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPG4DECD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00239704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP43DECD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mlang.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApproveChildRequest.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\onex.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CortanaMapiHelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00237408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionQueue.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00237072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntasn1.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mycomput.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpsrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00236488 _____ C:\WINDOWS\system32\weretw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00235696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rometadata.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax

2016-07-16 14:42 - 2016-07-16 14:42 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvisioningHandlers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTF.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsnap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdmaud.drv

2016-07-16 14:42 - 2016-07-16 14:42 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquoui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00232904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00231424 _____ C:\WINDOWS\system32\ism32k.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icm32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netdiagfx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSyncMetastore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowslivelogin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsicpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrad.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offfilt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnputil.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00228192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_8086.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00227680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provthrd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\miutils.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\els.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcint.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcint.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00224768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qcap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsCfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00224096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacEncoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsldpc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoeacct.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00219040 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpresult.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsicpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountExtension.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringMgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingFolder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00216928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourcePolicyServer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DictationManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpsapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00216432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apds.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmdskmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsldp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00214360 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmllite.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\msls31.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdListen.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00213848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgmgr32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cemapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00212480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00212312 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_14e4.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdiageng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00211938 _____ C:\WINDOWS\system32\lcphrase.tbl

2016-07-16 14:42 - 2016-07-16 14:42 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmitomi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\OmaDmAgent.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput8.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00210272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WLanHC.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\sstpsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAMRNBEncoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.HardwareId.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\smbwmiv2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpnServiceDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdmaud.drv

2016-07-16 14:42 - 2016-07-16 14:42 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wecsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vaultcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00205664 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchangeHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oemlicense.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiohlp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsadmin.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlceoledb40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorShell.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditcse.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00204105 _____ C:\WINDOWS\SysWOW64\winrm.vbs

2016-07-16 14:42 - 2016-07-16 14:42 - 00204105 _____ C:\WINDOWS\system32\winrm.vbs

2016-07-16 14:42 - 2016-07-16 14:42 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00202992 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\remotepg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00202000 _____ (Microsoft Corporation) C:\WINDOWS\system32\COLORCNV.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RstrtMgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LegacyNetUXHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00201056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\VerifierExt.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00201056 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mlang.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlandlg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remotepg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsdmo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\itircl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00198496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\cic.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msoeacct.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmvdspa.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PersonaX.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsigd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00196642 _____ C:\WINDOWS\system32\C_950.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00196642 _____ C:\WINDOWS\system32\C_949.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00196642 _____ C:\WINDOWS\system32\C_936.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00195618 _____ C:\WINDOWS\SysWOW64\C_10002.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00195618 _____ C:\WINDOWS\system32\C_10002.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAMRNBEncoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinRtTracing.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00193536 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\SysWOW64\l3codecp.acm

2016-07-16 14:42 - 2016-07-16 14:42 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactHarvesterDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpresult.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\qcap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CortanaMapiHelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00191840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSyncMetastore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlhtml.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00189986 _____ C:\WINDOWS\system32\C_1361.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fms.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00189608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntmarta.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsdmo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti_ci.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\L2SecHC.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\irftp.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00188768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlunirl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00187938 _____ C:\WINDOWS\system32\C_20005.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\uireng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\devicengccredprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COLORCNV.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miutils.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\prncache.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00186880 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\system32\msconfig.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00186464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsBroker.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00186402 _____ C:\WINDOWS\system32\C_20001.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdiageng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Geolocation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10_1.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.HardwareId.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00185378 _____ C:\WINDOWS\system32\C_20003.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00185368 _____ C:\WINDOWS\SysWOW64\weretw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00184416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00184416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPHLPAPI.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\els.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchTM.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00183864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\modemui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\miguiresource.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcpsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00183296 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codecp.acm

2016-07-16 14:42 - 2016-07-16 14:42 - 00182840 _____ (Microsoft Corporation) C:\WINDOWS\system32\HdcpHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miguiresource.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchTM.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrecst.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\rgb9rast.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mskeyprotcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingDiagSpp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00181600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ulib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\verifiergui.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00180770 _____ C:\WINDOWS\system32\C_20932.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00180258 _____ C:\WINDOWS\system32\C_20004.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00180258 _____ C:\WINDOWS\system32\C_20000.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCCSEngineShared.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\slr100.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\netid.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00177698 _____ C:\WINDOWS\SysWOW64\C_10003.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00177698 _____ C:\WINDOWS\system32\C_20949.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00177698 _____ C:\WINDOWS\system32\C_10003.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmgp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00177152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00177152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsadmin.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfmon.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00175672 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmvdspa.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\net1.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00175280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rometadata.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00174592 _____ C:\WINDOWS\system32\IHDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdiagprv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppExtension.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdminst.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00173602 _____ C:\WINDOWS\SysWOW64\C_10008.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00173602 _____ C:\WINDOWS\system32\C_20936.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00173602 _____ C:\WINDOWS\system32\C_20002.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00173602 _____ C:\WINDOWS\system32\C_10008.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00173408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scsiport.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00173008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntasn1.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00172896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00172896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\dps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uireng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiohlp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsprop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Cortana.Persona.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RstrtMgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EthernetMediaManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafupnp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00169312 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowslivelogin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00168504 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\uudf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00167640 _____ C:\WINDOWS\SysWOW64\chs_singlechar_pinyin.dat

2016-07-16 14:42 - 2016-07-16 14:42 - 00167640 _____ C:\WINDOWS\system32\chs_singlechar_pinyin.dat

2016-07-16 14:42 - 2016-07-16 14:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaatext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Tabbtn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\keymgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mydocs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\cabview.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itircl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ocsetapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ocsetapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidcom.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\desk.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00164264 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmmbase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfmon.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbctrac.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\netjoin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoplay.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00162850 _____ C:\WINDOWS\SysWOW64\C_10001.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00162850 _____ C:\WINDOWS\system32\C_10001.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cic.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Compression.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fde.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00160768 _____ C:\WINDOWS\system32\EditionUpgradeHelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00160608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pacer.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\twext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\softkbd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSOpusDecoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidpolicyconverter.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00159072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingMonitor.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdiagprv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAuto.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceSyncProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keymgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Help.Runtime.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdadiag.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskpart.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mydocs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingDiagSpp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mimofcodec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\CourtesyEngine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsutil.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MtcModel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00156000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmitomi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\regsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhshl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.Schema.Shell.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\playtomenu.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsicli.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_OneCore_BatterySaver.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00154488 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00154432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntmarta.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdadiag.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfdvdec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00153440 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winjson.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00152928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00152576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PersonaX.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00152576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00152576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cabview.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00152576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00152576 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCCSEngineShared.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ufat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fundisc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmwmicsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00151904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00151904 _____ (Microsoft Corporation) C:\WINDOWS\system32\devobj.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00151552 _____ (Microsoft) C:\WINDOWS\system32\dbgcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\trie.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiexe.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00151352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssenh.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00151232 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsicli.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskpart.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dsui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00149044 _____ C:\WINDOWS\system32\LargeRoom.bin

2016-07-16 14:42 - 2016-07-16 14:42 - 00149019 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crtdll.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsprop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapsimextdesktop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdsapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlhtml.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsquirt.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreCommonProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastingShellExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00145640 _____ C:\WINDOWS\SysWOW64\devmgmt.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00145640 _____ C:\WINDOWS\system32\devmgmt.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00145519 _____ C:\WINDOWS\SysWOW64\perfmon.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00145519 _____ C:\WINDOWS\system32\perfmon.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Sockets.PushEnabledApplication.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssadmin.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00145216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cabinet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00145127 _____ C:\WINDOWS\SysWOW64\eventvwr.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00145127 _____ C:\WINDOWS\system32\eventvwr.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00145059 _____ C:\WINDOWS\SysWOW64\taskschd.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00145059 _____ C:\WINDOWS\system32\taskschd.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00144998 _____ C:\WINDOWS\SysWOW64\lusrmgr.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00144998 _____ C:\WINDOWS\system32\lusrmgr.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00144909 _____ C:\WINDOWS\SysWOW64\fsmgmt.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00144909 _____ C:\WINDOWS\system32\fsmgmt.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devicengccredprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwtpw32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00144862 _____ C:\WINDOWS\SysWOW64\tpm.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00144862 _____ C:\WINDOWS\system32\tpm.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00144736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00144673 _____ C:\WINDOWS\system32\WmiMgmt.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00144632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imm32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\net1.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwmi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00142904 _____ C:\WINDOWS\SysWOW64\slmgr.vbs

2016-07-16 14:42 - 2016-07-16 14:42 - 00142904 _____ C:\WINDOWS\system32\slmgr.vbs

2016-07-16 14:42 - 2016-07-16 14:42 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvfw32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00142616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00142584 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAuto.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx

2016-07-16 14:42 - 2016-07-16 14:42 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netjoin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Cortana.Persona.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlcecompact40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmCommon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\embeddedmodesvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00140496 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\playtomenu.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00139952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfAACEnc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00139810 _____ C:\WINDOWS\system32\C_20261.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppExtension.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhmanagew.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmview.ocx

2016-07-16 14:42 - 2016-07-16 14:42 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassvcs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00139104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbctrac.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSOpusDecoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00137936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\CfgSPPolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\IDStore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mskeyprotcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSyncProviders.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpcsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00135680 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\advpack.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00135376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidcom.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceSyncProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\verifier.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Kswdmcap.ax

2016-07-16 14:42 - 2016-07-16 14:42 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnscmmc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdart.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFIoT.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafDockingProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00133984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxlib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fsquirt.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00133472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CastingShellExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMPushRouterCore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcProCsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhuxadapter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorAPI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquota.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmusic.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00132272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dssenh.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00132232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devobj.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\VocabRoamingHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtstocom.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00131248 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxva2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00131208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmmbase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsExtensibilityHandlers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\gcdef.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsentUX.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00130048 _____ C:\WINDOWS\system32\chartv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netid.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fde.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysclass.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\oledlg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmiv2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbceip.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ClosedCaptioning.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAMRNBDecoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMediaManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorAuthn.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00128648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gamingtcui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcshext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00127624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptxml.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwbase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtclog.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fundisc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpclean.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00126816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpiex.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Compression.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\networkhelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisImPlatform.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00126304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ndu.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceElementSource.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00124992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HdcpHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvfw32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSaveExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00124552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00124480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cabinet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.SystemManagement.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbccp32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpauditapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00124118 _____ C:\WINDOWS\SysWOW64\comexp.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00124118 _____ C:\WINDOWS\system32\comexp.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00124080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoipRT.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAMRNBDecoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsadu.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00122984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Clipc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\loadperf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsicpl.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfdvdec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00121376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsicpl.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EhStorAuthn.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcksp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\negoexts.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontview.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\fingerprintcredential.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00120424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00120384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mimofcodec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\irda.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmsynth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSyncProviders.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWiProv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00119360 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00119328 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlgpclnt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00118816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Kswdmcap.ax

2016-07-16 14:42 - 2016-07-16 14:42 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EhStorAPI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\dispdiag.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwreg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\txflog.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\StaticDictDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\rekeywiz.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoert2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fphc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbnetlib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\control.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdart.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppwmi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbrokerAx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\trkwks.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\logman.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertPolEng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00116064 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00115744 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndfhcdiscovery.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcshext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprmsg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\avifil32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00115160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00115091 _____ C:\WINDOWS\system32\WF.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00114720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxva2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\eeprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtstocom.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmview.ocx

2016-07-16 14:42 - 2016-07-16 14:42 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeParserTask.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00114016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00113256 _____ C:\WINDOWS\SysWOW64\compmgmt.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00113256 _____ C:\WINDOWS\system32\compmgmt.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00113144 _____ (Microsoft Corporation) C:\WINDOWS\system32\VIDRESZR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rekeywiz.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advpack.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\uexfat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc_ssp_isv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\secproc_ssp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameBarPresenceWriter.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\CameraCaptureUI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthFWWizFwk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112632 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfAACEnc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssadmin.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IDStore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.tlb

2016-07-16 14:42 - 2016-07-16 14:42 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\profprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWinPalMisc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\EhStorPwdMgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.tlb

2016-07-16 14:42 - 2016-07-16 14:42 - 00112120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\OptionalFeatures.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Fondue.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\comrepl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00110944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oledlg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\resmon.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngcredui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00110024 _____ C:\WINDOWS\system32\MediumRoom.bin

2016-07-16 14:42 - 2016-07-16 14:42 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcwutl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00109056 _____ C:\WINDOWS\SysWOW64\chartv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00109056 _____ (Microsoft) C:\WINDOWS\system32\VaultRoaming.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resmon.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds_ps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\telephon.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapiui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00109016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00108976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VIDRESZR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbccp32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTFFuzzyDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\networkhelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrscmd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00107440 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00107032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Renewal.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EhStorPwdMgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wecutil.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00106336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootsect.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbnetlib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\container_xml.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00105392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingCSP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00104808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00104800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\remotesp.tsp

2016-07-16 14:42 - 2016-07-16 14:42 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnshc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppHostRegistrationVerifier.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\negoexts.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtfwd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapistub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapi32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\spinf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\PinEnrollmentHelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00103312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\joinutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevDispItemProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00102800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourcePolicyClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\DesktopShellExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\console.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00102248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Clipc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\systeminfo.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\spfileq.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\DuCsps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanext.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipsec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00101264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00101264 _____ (Microsoft Corporation) C:\WINDOWS\system32\capauthz.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\txflog.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidfdp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmInit.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\tasklist.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00100704 _____ (Microsoft Corporation) C:\WINDOWS\system32\apisetschema.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBrokerUI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00100168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptxml.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msoert2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avifil32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcpurapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\joy.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertPolEng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\radardt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00098664 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00098632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciavi32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00098152 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.SystemManagement.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdsapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comrepl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.SharedPC.CredentialProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Query.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\joinutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00097128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.CredentialPicker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00097128 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrscmd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-processor-power-events.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\raspptp.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmclient.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\amstream.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmiv2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDPrintProxy.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskkill.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\alg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdport.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureTimeAggregator.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndishc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\chxranker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcl.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputInjectionBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingWizard.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00094568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlsrv32.rll

2016-07-16 14:42 - 2016-07-16 14:42 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlsrv32.rll

2016-07-16 14:42 - 2016-07-16 14:42 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceProperties.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthci.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00093984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00093696 _____ C:\WINDOWS\system32\BthpanContextHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmstp.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmifw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00092746 _____ C:\WINDOWS\SysWOW64\services.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00092746 _____ C:\WINDOWS\system32\services.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngckeyenum.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\netsh.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseresourcemanager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallButtons.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00092488 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00092448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EncDump.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00092324 _____ C:\WINDOWS\system32\DiskSnapshot.conf

2016-07-16 14:42 - 2016-07-16 14:42 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\radardt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\console.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\PNPXAssoc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olethk32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsockhc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdSched.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc_ssp_isv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc_ssp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolss.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlahc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\hotplug.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncCsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00091132 _____ C:\WINDOWS\system32\gatherNetworkInfo.vbs

2016-07-16 14:42 - 2016-07-16 14:42 - 00090912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00090624 _____ C:\WINDOWS\system32\Drivers\NetAdapterCx.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapistub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapi32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevDispItemProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAMRNBSource.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mibincodec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompMgmtLauncher.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpbcreds.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CameraCaptureUI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Utilman.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbccu32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdsrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\spcompat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\InternetMailCsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\iashlpr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootcfg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00088928 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlsbres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdAutoSetup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filecrypt.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\correngine.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00088416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorClass.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmInit.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlaySndSrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00087880 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olecli32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbccr32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00087296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spfileq.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinMsoIrmProtector.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.UI.GameBar.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.Schema.DesktopShell.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdRes.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00087040 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codeca.acm

2016-07-16 14:42 - 2016-07-16 14:42 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAMRNBSource.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShellCommonCommonProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\nslookup.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPELoggingDictationHelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00086232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\cliconfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndfhcdiscovery.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciavi32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winethc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\makecab.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\INETRES.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipfltdrv.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00085344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00085248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\INETRES.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\WfHC.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\perftrack.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\igdDiag.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00084664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\frprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\EventAggregation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngcksp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesRemote.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesProtection.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesPerformance.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesHardware.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesDataExecutionPrevention.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesComputerName.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemPropertiesAdvanced.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasacct.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\getmac.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiskSnapshot.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netsh.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.ServiceHostBuilder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\tabcal.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardDlg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcirt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspatchc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\loghours.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00083128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\amstream.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\prvdmofcomp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSchedExe.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventvwr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00082648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfvdsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00082616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\KdsCli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiOnboardingPlugin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvvmtransport.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\hbaapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\driverquery.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DataModel.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtfwd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlaySndSrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventvwr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinOpcIrmProtector.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rspndr.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\raspppoe.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00081184 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00081176 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wecutil.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spinf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00080560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.CredentialPicker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmci.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\efslsaext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00080224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_AuthenticAMD.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00080088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00080056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capauthz.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00080016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ResourcePolicyClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wecapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\eqossnap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\colbact.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00079544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Query.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usp10.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\samcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbussdapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhuxgraphics.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DpiScaling.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\avicap32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00079200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SpbCx.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipcontainer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Syncreg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\sihost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSAppXHelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinAUG.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usp10.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nslookup.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\playlistfolder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\hascsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mslldp.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00078176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cliconfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabbtnEx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rassstp.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\cabapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDiscoveryPlugin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdiag.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintIsolationHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MuiUnattend.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DocumentPerformanceEvents.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00076640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\CEA.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00076632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndishc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogonext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapimig.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00075960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00075920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00075888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallButtons.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00075448 _____ (Microsoft Corporation) C:\WINDOWS\system32\sessionmsg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdmat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MaintenanceUI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsidsc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinMsoIrmProtector.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Utilman.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mibincodec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\unenrollhook.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\sigverif.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\nduprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhevents.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00074592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpnUserService.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\slwga.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\reg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\provplatformdesktop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcad32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasdatastore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stream.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00073840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfvdsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapimig.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.Fontgroups.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\scripto.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasads.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\feclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073728 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\SysWOW64\l3codeca.acm

2016-07-16 14:42 - 2016-07-16 14:42 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00073392 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slwga.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\execmodelproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\djoin.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConfigureExpandedStorage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\btpanui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AllJoynDiscoveryPlugin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbccu32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcad32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\RunLegacyCPLElevated.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\openfiles.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetailsUpdate.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmghost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00072336 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastSrv.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00072286 _____ C:\WINDOWS\system32\normidna.nls

2016-07-16 14:42 - 2016-07-16 14:42 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbccr32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanHC.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SortWindows6Compat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00071848 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdll.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00071824 _____ C:\WINDOWS\system32\normnfkc.nls

2016-07-16 14:42 - 2016-07-16 14:42 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3hc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Printers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WABSyncProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmonui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipcontainer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mferror.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\colbact.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeservice.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanman.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprovisionsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mferror.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\licensingdiag.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchph.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinOpcIrmProtector.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avicap32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\whoami.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\umb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\radarrs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\registry.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3cfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafGip.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069776 _____ C:\WINDOWS\system32\SmallRoom.bin

2016-07-16 14:42 - 2016-07-16 14:42 - 00069776 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\makecab.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsbSettingsHandlers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacctprofile.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoveDeviceContextHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069264 _____ (Microsoft Corporation) C:\WINDOWS\system32\profapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netapi32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.ServiceHostBuilder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SCardDlg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScanProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\threadpoolwinrt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RuleBasedDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhonePlatformAbstraction.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidfdp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\TempSignedLicenseExchangeTask.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAlacEncoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentprf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\frprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Lockdown.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vfwwdm32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintPlatformConfig.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\LegacyNetUX.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\EasPoliciesBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvvmtransport.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmci.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\loghours.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\driverquery.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Storprop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\NapiNSP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvhostsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DfsShlEx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AddressParser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067168 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputInjectionBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hbaapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmlfilter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\expand.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\SysWOW64\C_437.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_874.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_869.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_866.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_865.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_864.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_863.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_862.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_861.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_860.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_858.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_857.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_855.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_852.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_850.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_775.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_737.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_720.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066594 _____ C:\WINDOWS\system32\C_437.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetmib1.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhlisten.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_875.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_870.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_500.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_21027.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_21025.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20924.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20905.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20880.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20871.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20838.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20833.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20424.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20423.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20420.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20297.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20290.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20285.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20284.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20280.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20278.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20277.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20273.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20269.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20108.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20107.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20106.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_20105.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1252.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1149.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1148.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1147.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1146.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1145.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1144.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1143.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1142.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1141.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1140.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1047.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_1026.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10082.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10081.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10079.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10029.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10021.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10017.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10010.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10007.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10006.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10005.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10004.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_10000.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\SysWOW64\C_037.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_875.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_870.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_708.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_500.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_28605.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\c_28603.nls

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_28599.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_28598.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_28597.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_28596.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_28595.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_28594.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_28593.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_28592.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_28591.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_21866.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_21027.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_21025.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20924.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20905.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20880.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20871.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20866.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20838.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20833.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20424.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20423.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20420.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20297.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20290.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20285.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20284.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20280.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20278.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20277.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20273.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20269.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20127.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20108.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20107.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20106.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_20105.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1258.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1257.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1256.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1255.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1254.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1253.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1252.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1251.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1250.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1149.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1148.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1147.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1146.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1145.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1144.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1143.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1142.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1141.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1140.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1047.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_1026.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_10082.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_10081.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_10079.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_10029.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_10021.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_10017.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_10010.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_10007.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_10006.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_10005.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_10004.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_10000.NLS

2016-07-16 14:42 - 2016-07-16 14:42 - 00066082 _____ C:\WINDOWS\system32\C_037.NLS

aucnn

Post #7August 6, 2016, 7:08 AM UTC

FRST.TXT (5TH PART)

2016-07-16 14:42 - 2016-07-16 14:42 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\getmac.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidnsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\lltdio.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065888 _____ (Microsoft Corporation) C:\WINDOWS\system32\PSHED.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00065698 _____ C:\WINDOWS\system32\normnfkd.nls

2016-07-16 14:42 - 2016-07-16 14:42 - 00065648 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxGipRadioManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndadmin.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\fthsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhautoplay.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certenc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065376 _____ (Microsoft Corporation) C:\WINDOWS\system32\gacinstall.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065128 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.UI.GameBar.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MuiUnattend.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbussdapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hdwwiz.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\bidispl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlrmdr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentprf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTFSpellcheckDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msident.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfscli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wtsapi32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\radarrs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndadmin.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsnmp32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\pautoenr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationNotificationWindows.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00063488 _____ C:\WINDOWS\system32\BWContextHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Syncreg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prvdmofcomp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hdwwiz.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetailsUpdate.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\xwizard.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwanRadioManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanRadioManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprovfw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndisuio.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00063081 _____ C:\WINDOWS\SysWOW64\certlm.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00063081 _____ C:\WINDOWS\system32\certlm.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00063070 _____ C:\WINDOWS\SysWOW64\certmgr.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00063070 _____ C:\WINDOWS\system32\certmgr.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00063048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcRtRemote.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msobjs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\msobjs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mskeyprotect.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-pdc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2nacp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmxmlhelputils.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fsdepends.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scripto.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\takeown.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\stclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenanceClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\capiprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\openfiles.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcommandscsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsRdpWebAccess.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\TsUsbFlt.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertPKICmdlet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\bfsvc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00061280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00061040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00061000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00060968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbrand.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00060968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdll.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzsync.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmbmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\PnPUnattend.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsActionDialog.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhtask.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00060124 _____ C:\WINDOWS\system32\tcpmon.ini

2016-07-16 14:42 - 2016-07-16 14:42 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WABSyncProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\reg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Background.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00059744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PSHED.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00059416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msasn1.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.Fontgroups.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPELoggingDictationHelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintIsolationProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CspProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\adprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00059232 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwminit.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\whoami.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vfwwdm32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucmhc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskSchdPS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmprc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\g711codc.ax

2016-07-16 14:42 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3dlg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dispci.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\devrtl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCredential.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058720 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Storprop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanman.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\winver.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzutil.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\runonce.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSPnf.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdPnp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3gpclnt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsigd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wecapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\threadpoolwinrt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprovisionsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3hc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransliterationRanker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\InprocLogger.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAlacEncoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DfsShlEx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PNPXAssocPrx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\HelpPaneProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapiprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmwappushsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypttpmeksvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothDesktopHandlers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00057184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbios.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SortWindows6Compat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.SystemId.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsvd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAlacDecoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwcfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitsProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certenc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdhui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\watchdog.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmintf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00056119 _____ C:\WINDOWS\system32\srms.dat

2016-07-16 14:42 - 2016-07-16 14:42 - 00055808 ____R (Microsoft Corporation) C:\WINDOWS\system32\mdmpostprocessevaluator.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00055808 _____ (Microsoft) C:\WINDOWS\system32\cero.rs

2016-07-16 14:42 - 2016-07-16 14:42 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cabapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpowmi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\setx.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\net.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhsetup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ftp.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcleanup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AtBroker.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsidsc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capiprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\efssvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054784 _____ (Microsoft) C:\WINDOWS\system32\fpb.rs

2016-07-16 14:42 - 2016-07-16 14:42 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\WudfSMCClassExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\TapiMigPlugin.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msports.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\eeutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAConn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactActivation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmlfilter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Management.Lockdown.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pautoenr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetmib1.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AddressParser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSTheme.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\networkitemfactory.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MultiDigiMon.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jpninputrouter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iyuv_32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmojiDS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00054240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\signdrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacctprofile.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.BioEnrollment.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAProfileNotificationHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\edptask.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00053088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\condrv.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Cortana.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\takeown.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprovfw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsRdpWebAccess.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\prauthproviders.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\joinproviderol.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052224 _____ (Microsoft) C:\WINDOWS\system32\esrb.rs

2016-07-16 14:42 - 2016-07-16 14:42 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mskeyprotect.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartCardBackgroundPolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdiagschd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\provlaunch.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnppolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NAPCRYPT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingService.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00052192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcRtRemote.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00052192 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWESEProviderResources.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\virtdisk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\spopk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\RegCtrl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeXmlParser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\luainstall.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontGlyphAnimator.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWESEProviderResources.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmocx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdl32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00051552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pcw.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SortWindows61.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh263enc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\lodctr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstallerComHandler.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geocommon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditpolcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PickerHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00050880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PimIndexMaintenanceClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\grpconv.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\deskadp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcpapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00050616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrameHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Background.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ustprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\videoprt.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiscap.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComputerDefaults.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00050144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iri.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00050112 _____ C:\WINDOWS\system32\normnfc.nls

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tetheringclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ssdpapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iyuv_32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdPnp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapiprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\sfc_os.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\PSModuleDiscoveryProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnification.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\forfiles.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmloader.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devrtl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\EtwRundown.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\amsi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00049080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msasn1.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucmhc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\runonce.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAlacDecoder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrs.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnNetsh.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardBi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\qwavedrv.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\deskmon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048608 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdhui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactActivation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFCoinstaller.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmictimeprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\rrinstaller.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcacli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\lltdapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\iaspolcy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhuxcommon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mmcss.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00047682 _____ C:\WINDOWS\SysWOW64\diskmgmt.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00047682 _____ C:\WINDOWS\system32\diskmgmt.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vds_ps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setx.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmxmlhelputils.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\xcopy.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\typeperf.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddrawex.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSTheme.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\net.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\APHostClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnikeapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandBrokerClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\fodhelper.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\credui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00046908 _____ C:\WINDOWS\system32\OutdoorAudioEnvironment.bin

2016-07-16 14:42 - 2016-07-16 14:42 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HelpPaneProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acppage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInputUap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SortServer2003Compat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\regini.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcbcp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetEvtFwdr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsroam.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\cipher.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00046080 _____ (Microsoft) C:\WINDOWS\system32\oflc-nz.rs

2016-07-16 14:42 - 2016-07-16 14:42 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypttpmeksvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SebBackgroundManagerPolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtffilt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelineprxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimtf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PickerHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00045920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.SystemId.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhsetup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmiclnt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityServicePal.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\pid.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfctrs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspatcha.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Udecx.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00045496 _____ (Microsoft Corporation) C:\WINDOWS\system32\utildll.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045228 _____ C:\WINDOWS\system32\hypervisor.mof

2016-07-16 14:42 - 2016-07-16 14:42 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShellCommonCommonProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh263enc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\joinproviderol.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\format.com

2016-07-16 14:42 - 2016-07-16 14:42 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmocx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfscli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbioext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxshared.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfvfw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmlua.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsUtilsV2.dll

aucnn

Post #8August 6, 2016, 7:09 AM UTC

FRST.TXT (LAST PART)

2016-07-16 14:42 - 2016-07-16 14:42 - 00044896 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdusb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xcopy.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geocommon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AtBroker.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\uicom.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndfetw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsmproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\embeddedmodesvcapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\compact.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00044496 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00044464 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044032 _____ (Microsoft) C:\WINDOWS\system32\csrr.rs

2016-07-16 14:42 - 2016-07-16 14:42 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\signdrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoiceActivationManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmcompc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\RoamingSecurity.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\notificationplatformcomponent.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\nci.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsiCofire.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\linkinfo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00043872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlwoa.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00043566 _____ C:\WINDOWS\system32\normnfd.nls

2016-07-16 14:42 - 2016-07-16 14:42 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidnsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfc_os.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFrameworkInternalPS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceCredential.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucsvc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\relog.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsjob.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00043416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00043416 _____ (Microsoft Corporation) C:\WINDOWS\system32\PasswordOnWakeSettingFlyout.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00043416 _____ (Microsoft Corporation) C:\WINDOWS\system32\netutils.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00043131 _____ C:\WINDOWS\mib.bin

2016-07-16 14:42 - 2016-07-16 14:42 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spopk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.Extensions.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\unlodctr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSa.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciqtz32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpkinstall.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scfilter.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00042936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msgsm32.acm

2016-07-16 14:42 - 2016-07-16 14:42 - 00042848 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_15b3.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrs.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SortWindows61.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitsProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\UI0Detect.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\traffic.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\htui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\cttunesvr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmmon32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmgrcspps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00042352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tpmcompc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\forfiles.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\execmodelproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\docprop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafDnsSd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00041587 _____ C:\WINDOWS\SysWOW64\azman.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00041587 _____ C:\WINDOWS\system32\azman.msc

2016-07-16 14:42 - 2016-07-16 14:42 - 00041472 _____ (Microsoft) C:\WINDOWS\system32\cob-au.rs

2016-07-16 14:42 - 2016-07-16 14:42 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ustprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\sfc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcreate.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compact.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Portable.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\where.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsbCApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfos.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfdisk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SortServer2003Compat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rrinstaller.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcbcp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cipher.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\auditpolcore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-pnp-events.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthudtask.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00040288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdi.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciqtz32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ACCTRES.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSaveProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\waitfor.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecEdit.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Netplwiz.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidphone.tsp

2016-07-16 14:42 - 2016-07-16 14:42 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprnext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACCTRES.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\werkernel.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00039776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfmifs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039424 _____ C:\WINDOWS\system32\efsext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInputUap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmprovhost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSa.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PSModuleDiscoveryProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsroam.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\navshutdown.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsauth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\cnvfat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00039264 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_1969.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvidc32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mimefilt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00038792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\svchost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00038792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00038768 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00038752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cnghwassist.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00038696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PasswordOnWakeSettingFlyout.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00038400 _____ C:\WINDOWS\SysWOW64\dtdump.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmiclnt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthudtask.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NETSTAT.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\gmsaclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcfghost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00038240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Diskdump.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInput1_4.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapPeerProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocationFlyout.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackagedCWALauncher.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MirrorDrvCompat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksetup.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddodiag.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\credwiz.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmcfg32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037784 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_0C_8086.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WalletProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtffilt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cliconfg.rll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmprovhost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrnsave.scr

2016-07-16 14:42 - 2016-07-16 14:42 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\lfsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\klist.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\icacls.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dtsh.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\cliconfg.rll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00037192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoiceActivationManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandBrokerClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Workplace.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapAuthProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncInfrastructureps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxstrace.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidserv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\format.com

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\esevss.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBCAMD2.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialer.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msgsm32.acm

2016-07-16 14:42 - 2016-07-16 14:42 - 00036704 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkPS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netutils.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcacli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndfetw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\datusage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00036176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\embeddedmodesvcapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsjob.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetProxyCredential.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdhcinst.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\pifmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastInputMgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcsubs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IndirectKmd.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filetrace.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditpol.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00035696 _____ (Microsoft Corporation) C:\WINDOWS\system32\imaadp32.acm

2016-07-16 14:42 - 2016-07-16 14:42 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dumpata.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\traffic.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Netplwiz.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cnvfat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnsruprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\witnesswmiv2provider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32topl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\RacEngn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pots.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsium.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\FDResPub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmtask.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Apphlpdm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esevss.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasphone.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwlauncher.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipconfig.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\hid.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\findstr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\FdDevQuery.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\extrac32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadauthhelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00034640 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserAccountBroker.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00034640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msadp32.acm

2016-07-16 14:42 - 2016-07-16 14:42 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\where.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olesvr32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mimefilt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\vidcap.ax

2016-07-16 14:42 - 2016-07-16 14:42 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\proquota.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\RNDISMP.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevQueryBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDisplayStatusManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nci.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\linkinfo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofUtil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Workplace.WorkplaceSettings.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ThumbnailExtractionHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppinst.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\choice.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00033632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininitext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033616 _____ (Microsoft Corporation) C:\WINDOWS\system32\RuntimeBroker.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00033544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NETSTAT.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvidc32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gmsaclient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddodiag.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\userinit.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapilua.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\cofiredm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthMtpContextHandler.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00033064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdmo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\waitfor.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vidcap.ax

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmpapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcnsh.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndproxystub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsutilext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnscacheugc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmNotificationBroker.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cacls.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00032592 _____ (Microsoft Corporation) C:\WINDOWS\system32\avrt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnsi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pots.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hidserv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSaveTask.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimgvw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwsso.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsCtfMonitor.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifmon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhf.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthTelemetry.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthpanapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031744 _____ (Microsoft) C:\WINDOWS\system32\usk.rs

2016-07-16 14:42 - 2016-07-16 14:42 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Portable.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAgent.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprtPS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrnr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\syskey.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mode.com

2016-07-16 14:42 - 2016-07-16 14:42 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsparse.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsdport.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmprocessxmlfiltered.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzSqlExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WppRecorder.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00031584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhv.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00031584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fs_rec.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00031528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptbase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserAccountBroker.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00031232 _____ C:\WINDOWS\SysWOW64\efsext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\proquota.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfvfw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Apphlpdm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModelShim.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ias.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDOIProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DdcWnsListener.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdlg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031080 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptbase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00031072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdcom.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030749 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbajet32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxlegih.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\timeout.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsisvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxdm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tape.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cliconfg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00030504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imaadp32.acm

2016-07-16 14:42 - 2016-07-16 14:42 - 00030504 _____ (Microsoft Corporation) C:\WINDOWS\system32\version.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030504 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackagedCWALauncher.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icacls.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findstr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\extrac32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceDisplayStatusManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credwiz.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsdchngr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.TimeBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ureg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcPing.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltMC.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapprovp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\clip.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeevts.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msadp32.acm

2016-07-16 14:42 - 2016-07-16 14:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Management.Workplace.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxstrace.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\auditpol.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmiprop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxsstore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpupdate.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWNet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dot3Conn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscdll.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\at.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00029536 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_19a2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029536 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_10df.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hwpolicy.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00029448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avrt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32topl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vss_ps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsium.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ipconfig.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cliconfg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\choice.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\shgina.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\setspn.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provmigrate.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.drv

2016-07-16 14:42 - 2016-07-16 14:42 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dispex.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdmo.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppinst.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FdDevQuery.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrshost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\prevhost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAMRNBSink.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MemoryDiagnostic.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.proxystub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmpbk32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\CheckNetIsolation.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininitext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028512 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDACLSys.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsrole.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\syskey.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcnsh.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RacEngn.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcsubs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysntfy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\secur32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\asyncmac.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallButtons.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Management.Workplace.WorkplaceSettings.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userinit.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com

2016-07-16 14:42 - 2016-07-16 14:42 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cacls.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BthTelemetry.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wephostsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msyuv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\more.com

2016-07-16 14:42 - 2016-07-16 14:42 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dswave.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidtel.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00027400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsRemoveDevice.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcPing.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifmon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fsutilext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ctl3d32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.SystemManufacturers.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSaUacHelper.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\lmhsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEject.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tbs.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00026968 _____ (Microsoft Corporation) C:\WINDOWS\system32\streamci.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026920 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcwum.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winnsi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timeout.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzSqlExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\winusb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\VaultCmd.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncuprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifibus.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmoleaututils.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\davhlpr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAgent.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.TimeBroker.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdlg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSaProxy.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\osbaseln.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksthunk.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DefaultPrinterProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ARP.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00025952 _____ (Microsoft Corporation) C:\WINDOWS\system32\BOOTVID.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00025864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcwum.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\snmpapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shutdownext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxdm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hid.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpupdate.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINSRPC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsldr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\stordiag.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdiagnhost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\netbtugc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gptext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\drprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcfgutils.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskperf.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\chkwudrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\chkdsk.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00025440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFrameworkPS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DDACLSys.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025440 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_1137.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msg711.acm

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ C:\WINDOWS\system32\GamePanelExternalHook.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmiprop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ureg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWNet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdProp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\midimap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Direct2DDesktop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\comp.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsperf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd1394.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsrole.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxsstore.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAMRNBSink.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.drv

2016-07-16 14:42 - 2016-07-16 14:42 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fltMC.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmintf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clip.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\serwvdrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Register-CimProvider.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AJRouter.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024114 _____ C:\WINDOWS\system32\lcptr.tbl

2016-07-16 14:42 - 2016-07-16 14:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrshost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrnr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msyuv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\more.com

2016-07-16 14:42 - 2016-07-16 14:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsparse.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\sort.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdown.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ktmw32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BOOTVID.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00023816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksuser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaProxy.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscdll.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comp.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshcon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.ps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ROUTE.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\regsvr32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileAppxStreamingDataSource.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbnmpntw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\cofire.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\capisp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msg711.acm

2016-07-16 14:42 - 2016-07-16 14:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaUacHelper.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lsmproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fc.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chkdsk.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ARP.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.RemoteDesktop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\mgmtapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltLib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvcctl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\easconsent.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\acu.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdiagnhost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DefaultPrinterProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davhlpr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsDeviceAccessRevocation.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\shunimpl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\IpNatHlpClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ws2ifsl.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mcd.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00022368 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdstub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022232 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumbase.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022016 _____ (Microsoft) C:\WINDOWS\system32\grb.rs

2016-07-16 14:42 - 2016-07-16 14:42 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shutdown.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndproxystub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmlprovi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\uniplat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbservicetrigger.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\smclib.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00021856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00021656 _____ C:\WINDOWS\system32\NetTrace.PLA.Diagnostics.xml

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblGameSaveProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winusb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sort.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osbaseln.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NcdProp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gptext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bitsperf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\replace.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasctrs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogHost3D.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\PING.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\nbtstat.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\fixmapi.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\convert.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\bridgeunattend.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00021344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlS0WndH.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00021344 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllhost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft) C:\WINDOWS\system32\pegi-pt.rs

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft) C:\WINDOWS\system32\pegi.rs

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Register-CimProvider.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drprov.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Direct2DDesktop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Background.ps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shpafact.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiltcfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCCSPal.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdPHost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\energytask.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgwdi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMmRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\atlthunk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksuser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdial.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanui2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\netevent.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnosticsTool.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisVirtualBus.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmstplua.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\chkntfs.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\attrib.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhv1394.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wmilib.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00020160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SlideToShutDown.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00020152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nsi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winnlsres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnlsres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\userinitext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\umdmxfrm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\tree.com

2016-07-16 14:42 - 2016-07-16 14:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\runas.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\irclass.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\EsdSip.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdkey.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dllhost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\system32\backgroundTaskHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemEventsBrokerClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ROUTE.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\replace.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PING.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbnmpntw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\convert.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capisp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshqos.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Startupscan.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\PATHPING.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\nrpsrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpnotify.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontgroupsoverride.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseetw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\irenum.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\doskey.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmOmaCpMo.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidcertstorecheck.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00019296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlS0WndH.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.RemoteDesktop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\midimap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\attrib.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsgapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\TieringEngineProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\serialui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\netbios.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\localui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHostProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018784 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupetw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018656 _____ (Microsoft Corporation) C:\WINDOWS\system32\psapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schedcli.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiltcfg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fltLib.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsock32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\syssetup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\muifontsetup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernelceip.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\clb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\hh.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00018144 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrss.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00017935 _____ C:\WINDOWS\SysWOW64\EventViewer_EventDetails.xsl

2016-07-16 14:42 - 2016-07-16 14:42 - 00017935 _____ C:\WINDOWS\system32\EventViewer_EventDetails.xsl

2016-07-16 14:42 - 2016-07-16 14:42 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com

2016-07-16 14:42 - 2016-07-16 14:42 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncInfrastructureps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\runas.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallButtons.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\TRACERT.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\RmClient.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrle32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmpushproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlwid.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\backgroundTaskHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_07_1415.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb

2016-07-16 14:42 - 2016-07-16 14:42 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wowreg32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb

2016-07-16 14:42 - 2016-07-16 14:42 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mountvol.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ktmutil.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCHERP.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\find.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasacd.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00017048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshqos.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userinitext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDCHERP.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fixmapi.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EsdSip.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\doskey.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmApplicationHealthMonitorProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsbyuv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\secinit.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\print.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfts.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\label.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsavailux.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhuxapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\CortanaMapiHelper.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016736 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016736 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet_uart16550.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PATHPING.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hh.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\whhelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\subst.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommonPal.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRINFO.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDJPN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetmon.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft) C:\WINDOWS\system32\djctq.rs

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmsgapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.ps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RmClient.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ktmutil.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcmsetup.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmptrap.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\pstorec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcwrun.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcico.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKOR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutilx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\finger.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft) C:\WINDOWS\system32\pcbp.rs

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wowreg32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TRACERT.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\syssetup.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscpxl32.dLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mountvol.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\label.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\find.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clb.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmplpxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshirda.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\workerdd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudDomainJoinAUG.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsddd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwinsat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\regidle.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\pstask.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpts.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msidcrl40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\applockerfltr.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00015064 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumdll.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\subst.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secinit.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\print.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrle32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\sas.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpSaPs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\panmap.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcommandlineutils.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcmonitor.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfmifsproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\amsiproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Background.ps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\whhelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pstorec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommonPal.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfts.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MRINFO.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpPortingLibrary.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrssrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbperf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeSyncTask.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\TapiUnattend.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncHostps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoveDeviceElevated.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\prflbmsg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\IconCodecService.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\HOSTNAME.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsui.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\EasPoliciesBrokerPS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dmpusbstor.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\DockInterface.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmiso8601utils.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\coreaudiopolicymanagerext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\chcp.com

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_ISCII.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\browseui.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsbyuv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\finger.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DDOIProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmcodecdspps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\verclsid.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\svsvc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentTask.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityRtapiPal.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameBarPresenceWriter.proxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBthProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\FamilySafetyExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\dabapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msidcrl40.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutilx.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundPlayback.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsUsbRedirectionGroupPolicyExtension.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringIeProvider.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\TapiSysprep.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCShellCommonProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonUI.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InfDefaultInstall.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Eap3Host.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rootmdm.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUxRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwinsat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcico.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsui.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSHTCPIP.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wship6.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletBackgroundServiceProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\txfw32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\netwphelper.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\EasPoliciesBrokerHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mstee.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CHxReadingStringIME.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxStreamingDataSourcePS.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\acproxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpPortingLibrary.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundPlayback.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usbperf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HOSTNAME.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_ISCII.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\TCPSVCS.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapiperf.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemotePosWorker.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdiagnostics.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiwer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MinstoreEvents.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-battery-events.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsied.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dvdplay.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllhst3g.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\DefaultDeviceManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmplpxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensApi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdpSaPs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityRtapiPal.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscat32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InfDefaultInstall.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CortanaMapiHelper.ProxyStub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeDateMUICallback.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\spnet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regedt32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msidle.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscat32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mshidumdf.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomcnfg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00011616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxlibres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011616 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlibres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\write.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wship6.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WalletBackgroundServiceProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncHostps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FamilySafetyExt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdext.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_8.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapihost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\write.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcfgex.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\nddeapi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Locator.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtprio.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\help.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_8.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSHTCPIP.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmcodecdspps.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrssrv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TCPSVCS.EXE

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\softpub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regedt32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBthProxy.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dvdplay.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInput9_1_0.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\WppRecorderUM.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systray.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spmpm.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\softpub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\shfolder.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetHost.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdnecat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mspqm.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mspclock.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctfmon.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\acledit.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010540 _____ C:\WINDOWS\system32\TransformPPSToWlan.xslt

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\winhlp32.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sas.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcji32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiwer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\help.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DefaultDeviceManager.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomcnfg.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\riched32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\plasrv.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\OskSupport.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Nlsdl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssip32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfime.ime

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHEPT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\idndl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\comcat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009926 _____ C:\WINDOWS\SysWOW64\l_intl.nls

2016-07-16 14:42 - 2016-07-16 14:42 - 00009926 _____ C:\WINDOWS\system32\l_intl.nls

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ C:\WINDOWS\system32\VpnSohDesktop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeDateMUICallback.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHEPT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsied.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshhyperv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcNs4.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\osuninst.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxex.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\beep.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spnet.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssip32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acledit.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDYCL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUS.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSMSNO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSMSFI.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRUM.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDROST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDROPR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdnecnt.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLVST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINEN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCAN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00009129 _____ C:\WINDOWS\system32\ResPriHMImageList

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OskSupport.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odtext32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odpdx32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odfox32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odexl32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oddbse32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Nlsdl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDYCL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSMSNO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSMSFI.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDROST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDROPR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLVST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDCAN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\f3ahvoas.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comcat.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUKX.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTUF.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTIPRD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSORST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSOREX.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSL1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSG.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDPL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDNSO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDNO1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdnec95.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdnec.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdlk41a.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINUK2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDIBO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHU.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGRLND.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFI1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCZ2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCZ1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCZ.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\f3ahvoas.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mshidkmdf.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00008598 _____ C:\WINDOWS\system32\ResPriImageList

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ C:\WINDOWS\system32\settings.dat

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccessRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\simpdata.tlb

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osuninst.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxex.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUS.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSL1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRUM.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDPL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDNO1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdnecnt.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdnec.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINUK2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINEN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHU.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGRLND.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDFI1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDCZ2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDCZ1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDCZ.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDCR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\idndl.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccessRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\simpdata.tlb

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDYBA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDWOL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUSX.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTZM.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTUQ.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTIPRC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSW09.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSW.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSP.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSORS1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSORA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSF.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDPO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDNO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDNEPR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLV1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLV.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDIULAT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINORI.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINMAL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINBEN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdibm02.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHELA3.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHELA2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHE220.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGR1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGKL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFI.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDEST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDES.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDDA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBENE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdax2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd106n.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd106.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd101.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\gpuenergydrv.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshhyperv.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDYBA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDWOL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUSX.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTZM.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTUQ.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTUF.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTIPRD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSW09.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSW.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSP.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSORST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSORS1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSOREX.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSG.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSF.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDPO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDNSO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLV1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLV.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDIULAT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHELA3.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGR1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGKL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDFC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDEST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDES.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDCA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBENE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdax2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106n.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd101.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmsdk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDYCC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDYAK.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDVNTC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUZB.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUSR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUSL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUSA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDURDU.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUR1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUGHR1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUGHR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTURME.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTT102.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTIFI2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTIFI.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTH3.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTH2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTH1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTH0.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTAT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTAJIK.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTAILE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSYR2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSYR1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDSN1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRU1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRU.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDPL1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdphags.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDPASH.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDOSM.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDOLDIT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDOLCH.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDOGHAM.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDNTL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdnko.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDNE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMYAN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMONST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMONMO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMON.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMLT48.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMLT47.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMAORI.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMACST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDMAC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLT2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLT1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdlisus.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdlisub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDLAO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKYR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKURD.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKNI.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKHMR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKAZ.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDJAV.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDIT142.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDIT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINTEL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINTAM.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINPUN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINMAR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINKAN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINHIN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINGUJ.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINDEV.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINBE2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINBE1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDINASA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDIC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHU1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdhebl3.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHEB.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHE319.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHAW.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDHAU.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGTHC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeoqw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeooa.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeome.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeoer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGAE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFTHRK.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdfar.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDFA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDDZO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDDIV2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDDIV1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDCHER.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBULG.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBUG.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBU.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBLR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBHC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBGPH1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBGPH.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBASH.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZEL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdarmty.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdarmph.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDA3.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDA2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDA1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd103.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd101c.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd101b.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd101a.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDYCC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDYAK.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUZB.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUSR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUSL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUSA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUR1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUGHR1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTT102.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTIFI2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTIFI.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTH3.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTH2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTH1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTH0.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTAT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTAJIK.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTAILE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSYR2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSYR1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDSN1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRU1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRU.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDPL1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdphags.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDPASH.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDNTL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDNO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdnko.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDNE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMYAN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMONST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMLT48.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMLT47.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMACST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDMAC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLT2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLT1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLT.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdlisus.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdlisub.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDLAO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKNI.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKHMR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINTEL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINTAM.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINPUN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINORI.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINMAR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINMAL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINKAN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINHIN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINGUJ.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINDEV.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINBEN.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINBE2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINBE1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDINASA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDIC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHU1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHELA2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdhebl3.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHEB.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHE319.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHE220.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHAW.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHAU.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGTHC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeoqw.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeooa.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeome.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeoer.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGAE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDFTHRK.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDFR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDFO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDFI.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdfar.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDFA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDDIV2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDDIV1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDDA.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDCHER.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBULG.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBUG.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBLR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBHC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBGPH1.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBGPH.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBASH.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZST.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZEL.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdarmty.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdarmph.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDA3.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDA2.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd101c.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd101b.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd101a.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole32.tlb

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimeng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUK.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDIR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDGEO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDDV.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDARMW.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDARME.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Firewall.cpl

2016-07-16 14:42 - 2016-07-16 14:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\null.sys

2016-07-16 14:42 - 2016-07-16 14:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDVNTC.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDUK.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDOGHAM.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKAZ.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDIT142.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDIR.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDHE.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDGEO.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDDV.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBU.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDARMW.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDARME.DLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-hal-events.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\normaliz.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-storage-tiering-events.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-sleepstudy-events.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdrmsdk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimeng.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\normaliz.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmi.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdatsrc.tlb

2016-07-16 14:42 - 2016-07-16 14:42 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\security.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msidntld.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatsrc.tlb

2016-07-16 14:42 - 2016-07-16 14:42 - 00004675 _____ C:\WINDOWS\SysWOW64\wsmanconfig_schema.xml

2016-07-16 14:42 - 2016-07-16 14:42 - 00004675 _____ C:\WINDOWS\system32\wsmanconfig_schema.xml

2016-07-16 14:42 - 2016-07-16 14:42 - 00004608 _____ (Microsoft) C:\WINDOWS\system32\WEB.rs

2016-07-16 14:42 - 2016-07-16 14:42 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2help.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaccrc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00004453 _____ C:\WINDOWS\SysWOW64\odbcconf.rsp

2016-07-16 14:42 - 2016-07-16 14:42 - 00004148 _____ C:\WINDOWS\system32\psmodulediscoveryprovider.mof

2016-07-16 14:42 - 2016-07-16 14:42 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe

2016-07-16 14:42 - 2016-07-16 14:42 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzsyncres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-processor-aggregator-events.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00004014 _____ C:\WINDOWS\system32\xwizard.dtd

2016-07-16 14:42 - 2016-07-16 14:42 - 00003666 _____ C:\WINDOWS\system32\sysprtj.sep

2016-07-16 14:42 - 2016-07-16 14:42 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanutil.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00003317 _____ C:\WINDOWS\system32\sysprint.sep

2016-07-16 14:42 - 2016-07-16 14:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\sfc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\rnr20.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msafd.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lz32.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\icmp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootstr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002711 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml

2016-07-16 14:42 - 2016-07-16 14:42 - 00002711 _____ C:\WINDOWS\system32\AppxProvisioning.xml

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfc.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rnr20.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneutilRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netmsg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\neth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3r.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorc32r.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscpx32r.dLL

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprop.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icmp.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmdskres2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUserRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneutilRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netmsg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\neth.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3r.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msprivs.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\lltdres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iologmsg.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmdskres2.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAppsRes.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bridgeres.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32res.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002426 _____ C:\WINDOWS\SysWOW64\WsmTxt.xsl

2016-07-16 14:42 - 2016-07-16 14:42 - 00002426 _____ C:\WINDOWS\system32\WsmTxt.xsl

2016-07-16 14:42 - 2016-07-16 14:42 - 00002307 _____ C:\WINDOWS\SysWOW64\WimBootCompress.ini

2016-07-16 14:42 - 2016-07-16 14:42 - 00002307 _____ C:\WINDOWS\system32\WimBootCompress.ini

2016-07-16 14:42 - 2016-07-16 14:42 - 00002233 _____ C:\WINDOWS\SysWOW64\12520850.cpx

2016-07-16 14:42 - 2016-07-16 14:42 - 00002219 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiracastView.lnk

2016-07-16 14:42 - 2016-07-16 14:42 - 00002151 _____ C:\WINDOWS\SysWOW64\12520437.cpx

2016-07-16 14:42 - 2016-07-16 14:42 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrsmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrsmgr.dll

2016-07-16 14:42 - 2016-07-16 14:42 - 00001820 _____ C:\WINDOWS\system32\rasctrnm.h

2016-07-16 14:42 - 2016-07-16 14:42 - 00001688 _____ C:\WINDOWS\system32\TransformPPSToWlanCredentials.xslt

2016-07-16 14:42 - 2016-07-16 14:42 - 00001673 _____ C:\WINDOWS\system32\tcpbidi.xml

2016-07-16 14:42 - 2016-07-16 14:42 - 00001559 _____ C:\WINDOWS\SysWOW64\WsmPty.xsl

2016-07-16 14:42 - 2016-07-16 14:42 - 00001559 _____ C:\WINDOWS\system32\WsmPty.xsl

2016-07-16 14:42 - 2016-07-16 14:42 - 00000843 _____ C:\WINDOWS\system32\onlinesetup.cmd

2016-07-16 14:42 - 2016-07-16 14:42 - 00000726 _____ C:\WINDOWS\system32\wpr.config.xml

2016-07-16 14:42 - 2016-07-16 14:42 - 00000714 _____ C:\WINDOWS\SysWOW64\RestartManager.mof

2016-07-16 14:42 - 2016-07-16 14:42 - 00000714 _____ C:\WINDOWS\system32\RestartManager.mof

2016-07-16 14:42 - 2016-07-16 14:42 - 00000670 ___RH C:\WINDOWS\WindowsShell.Manifest

2016-07-16 14:42 - 2016-07-16 14:42 - 00000646 _____ C:\WINDOWS\SysWOW64\Drivers\gmreadme.txt

2016-07-16 14:42 - 2016-07-16 14:42 - 00000646 _____ C:\WINDOWS\system32\Drivers\gmreadme.txt

2016-07-16 14:42 - 2016-07-16 14:42 - 00000614 _____ C:\WINDOWS\system32\WdsUnattendTemplate.xml

2016-07-16 14:42 - 2016-07-16 14:42 - 00000565 _____ C:\WINDOWS\SysWOW64\NdfEventView.xml

2016-07-16 14:42 - 2016-07-16 14:42 - 00000565 _____ C:\WINDOWS\system32\NdfEventView.xml

2016-07-16 14:42 - 2016-07-16 14:42 - 00000263 _____ C:\WINDOWS\system32\odbcconf.rsp

2016-07-16 14:42 - 2016-07-16 14:42 - 00000199 _____ C:\WINDOWS\SysWOW64\winrm.cmd

2016-07-16 14:42 - 2016-07-16 14:42 - 00000199 _____ C:\WINDOWS\system32\winrm.cmd

2016-07-16 14:42 - 2016-07-16 14:42 - 00000176 _____ C:\WINDOWS\SysWOW64\RestartManagerUninstall.mof

2016-07-16 14:42 - 2016-07-16 14:42 - 00000176 _____ C:\WINDOWS\system32\RestartManagerUninstall.mof

2016-07-16 14:42 - 2016-07-16 14:42 - 00000167 _____ C:\WINDOWS\system32\removehypervisor.mof

2016-07-16 14:42 - 2016-07-16 14:42 - 00000150 _____ C:\WINDOWS\system32\pcl.sep

2016-07-16 14:42 - 2016-07-16 14:42 - 00000051 _____ C:\WINDOWS\system32\pscript.sep

2016-07-16 14:42 - 2016-07-16 14:42 - 00000003 _____ C:\WINDOWS\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

2016-07-16 14:42 - 2016-07-16 14:42 - 00000003 _____ C:\WINDOWS\system32\Drivers\MsftWdf_Kernel_01019_Inbox_Critical.Wdf

2016-07-16 14:41 - 2016-07-17 01:15 - 00038752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\terminpt.sys

2016-07-16 14:41 - 2016-07-17 01:15 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpbus.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 03418976 _____ (QLogic Corporation) C:\WINDOWS\system32\Drivers\evbda.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 02104160 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4vx64.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 01135456 _____ (PMC-Sierra) C:\WINDOWS\system32\Drivers\adp80xx.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00965120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00842584 _____ (Mellanox) C:\WINDOWS\system32\Drivers\mlx4_bus.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00714080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00705888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00673120 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorAV.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00575840 _____ (LSI Corporation, Inc.) C:\WINDOWS\system32\Drivers\megasr.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00544608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00535904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2016-07-16 14:41 - 2016-07-16 14:41 - 00533856 _____ (QLogic Corporation) C:\WINDOWS\system32\Drivers\bxvbda.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00526176 _____ (Mellanox) C:\WINDOWS\system32\Drivers\ibbus.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00521216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 00501088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00412000 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorV.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00381792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS

2016-07-16 14:41 - 2016-07-16 14:41 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00346976 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4sx64.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00336224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthHFSrv.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 00305504 _____ (VIA Corporation) C:\WINDOWS\system32\Drivers\VSTXRAID.SYS

2016-07-16 14:41 - 2016-07-16 14:41 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00277344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 00259424 _____ (AMD Technologies Inc.) C:\WINDOWS\system32\Drivers\amdsbs.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\1394ohci.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtp.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 00220000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00191840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ataport.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe

2016-07-16 14:41 - 2016-07-16 14:41 - 00176384 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_I2C.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdrom.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00169312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00166752 _____ (VIA Technologies Inc.,Ltd) C:\WINDOWS\system32\Drivers\vsmraid.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00166240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvstor.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00150368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvraid.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtpUS.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 00137056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufxsynopsys.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00131936 _____ (PMC-Sierra, Inc.) C:\WINDOWS\system32\Drivers\arcsas.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00131424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00129888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS

2016-07-16 14:41 - 2016-07-16 14:41 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmdisk0101.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pcmcia.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorTcgDrv.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00113152 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSSi_I2C.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00110432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sbp2port.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00108896 _____ (Mellanox) C:\WINDOWS\system32\Drivers\ndfltr.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00108896 _____ (LSI Corporation) C:\WINDOWS\system32\Drivers\lsi_sas.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00107360 _____ (LSI) C:\WINDOWS\system32\Drivers\3ware.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00105824 _____ (LSI Corporation) C:\WINDOWS\system32\Drivers\lsi_sas2i.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00104288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00102752 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4dx64.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00101720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00101216 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\lsi_sas3i.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\parport.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00096608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UfxChipidea.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00096096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00089952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winusb.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00088416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmbus.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS

2016-07-16 14:41 - 2016-07-16 14:41 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serial.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00083296 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdsata.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00082784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00082776 _____ (LSI Corporation) C:\WINDOWS\system32\Drivers\lsi_sss.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00081760 _____ (Silicon Integrated Systems) C:\WINDOWS\system32\Drivers\sisraid4.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00081408 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\iai2c.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00080224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00077152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uaspstor.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe

2016-07-16 14:41 - 2016-07-16 14:41 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthmodem.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00064864 _____ (Mellanox) C:\WINDOWS\system32\Drivers\winverbs.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00064512 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_GPIO2.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00064352 _____ (Hewlett-Packard Company) C:\WINDOWS\system32\Drivers\HpSAMD.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Synth3dVsc.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00063840 _____ (Marvell Semiconductor, Inc.) C:\WINDOWS\system32\Drivers\mvumis.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00062304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00061792 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\percsas3i.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00059744 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\megasas.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00059232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00058720 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\percsas2i.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\umbus.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicDisplay.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00053088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vdrvroot.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00052576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciidex.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidi2c.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00050528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpiowin32.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00050016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidinterrupt.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\circlass.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00048152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00046944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmstorfl.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidir.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00044896 _____ (Silicon Integrated Systems Corp.) C:\WINDOWS\system32\Drivers\sisraid2.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\devauthe.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00043360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssmbios.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthAvrcpTg.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsUsbGDCoInstaller.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\RfxVmt.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00038128 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSSi_GPIO.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00036704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbatt.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00036192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsc.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00036192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\battc.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dmvsc.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\TsUsbGD.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsUpdateElevatedInstaller.exe

2016-07-16 14:41 - 2016-07-16 14:41 - 00033280 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\iagpio.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00032608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fdc.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00032096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00032096 _____ (Mellanox) C:\WINDOWS\system32\Drivers\winmad.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthhfHid.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00031072 _____ (Promise Technology, Inc.) C:\WINDOWS\system32\Drivers\stexstor.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wacompen.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\CmBatt.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00028512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urschipidea.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00028512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00028512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\atapi.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00028456 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00027488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urssynopsys.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00026976 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdxata.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npsvctrig.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\flpydisk.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\VMBusHID.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serenum.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kdnic.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSDScan.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00022880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\isapnp.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSDPrint.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00020504 _____ (Microsoft Corporation) C:\WINDOWS\system32\HalExtIntcLpioDMA.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\genericusbfn.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00019296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelide.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00018784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msisadrv.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wmiacpi.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sfloppy.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AcpiDev.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00017944 _____ (Microsoft Corporation) C:\WINDOWS\system32\HalExtPL080.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 00017944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRTProxy.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\swenum.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsilog.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hyperkbd.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volume.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciide.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00016168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MTConfig.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpipmi.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\umpass.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmgencounter.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\errdev.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpitime.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpipagr.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\CIRCoInst.dll

2016-07-16 14:41 - 2016-07-16 14:41 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmgid.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00009728 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\bcmfn2.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00009728 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\bcmfn.sys

2016-07-16 14:41 - 2016-07-16 14:41 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vms3cap.sys

2016-07-16 14:36 - 2016-08-04 11:01 - 00000000 ____D C:\WINDOWS\CbsTemp

2016-07-16 11:27 - 2016-08-05 08:47 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\EurekaLog

2016-07-16 11:11 - 2016-07-16 11:11 - 00000000 ____D C:\ProgramData\Bitdefender Agent

2016-07-16 09:04 - 2016-08-04 14:28 - 00524288 _____ C:\WINDOWS\system32\config\BBI

2016-07-16 09:04 - 2016-08-04 10:26 - 00032768 _____ C:\WINDOWS\system32\config\ELAM

2016-07-16 09:04 - 2016-08-04 10:15 - 00000000 ____D C:\WINDOWS\system32\Sysprep

2016-07-16 09:04 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism

2016-07-16 09:04 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\system32\Dism

2016-07-16 09:04 - 2016-07-17 01:12 - 00000000 ____D C:\WINDOWS\servicing

2016-07-16 09:04 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers

2016-07-16 09:04 - 2016-07-16 14:47 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers

2016-07-16 09:04 - 2016-07-16 09:04 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmiEngine.dll

2016-07-16 09:04 - 2016-07-16 09:04 - 00267104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdscore.dll

2016-07-16 09:04 - 2016-07-16 09:04 - 00220000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdscore.dll

2016-07-16 09:04 - 2016-07-16 09:04 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\PkgMgr.exe

2016-07-16 09:04 - 2016-07-16 09:04 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PkgMgr.exe

2016-07-16 09:04 - 2016-07-16 09:04 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe

2016-07-16 09:04 - 2016-07-16 09:04 - 00133472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SSShim.dll

2016-07-16 09:04 - 2016-07-16 09:04 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe

2016-07-16 09:04 - 2016-07-16 09:04 - 00115552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SSShim.dll

2016-07-16 09:04 - 2016-07-16 09:04 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel

2016-07-16 09:04 - 2016-07-16 09:04 - 00000000 ____D C:\WINDOWS\system32\SMI

2016-07-16 09:04 - 2016-07-16 09:04 - 00000000 ____D C:\WINDOWS\system32\downlevel

2016-07-15 17:36 - 2016-07-25 08:43 - 00000000 ____D C:\ProgramData\HitmanPro

2016-07-15 16:42 - 2016-07-18 11:30 - 00000000 ____D C:\NPE

2016-07-14 17:05 - 2016-07-14 17:16 - 00348619 _____ C:\Users\UMIT CANAN\Downloads\kisa-f-sevkiyat(1).xlsx

2016-07-14 12:24 - 2016-07-14 12:24 - 01065671 _____ C:\Users\UMIT CANAN\Downloads\com.incorporateapps.fakegps.v4.6-GlobalAPK.Co.apk

2016-07-14 11:51 - 2016-07-19 15:02 - 00000000 ____D C:\ProgramData\BlueStacksSetup

2016-07-14 10:26 - 2016-07-14 10:26 - 06111601 _____ C:\Users\UMIT CANAN\Downloads\lucky-patcher-6-2-4.apk

2016-07-14 10:24 - 2016-07-14 10:25 - 13407150 _____ C:\Users\UMIT CANAN\Downloads\NewKingrootV4.95_C149_B283_en_release_2016_07_05_105203.apk

2016-07-14 10:19 - 2016-07-19 16:12 - 00000000 ____D C:\Program Files (x86)\BlueStacks

2016-07-14 09:57 - 2016-07-14 09:57 - 00788771 _____ C:\Users\UMIT CANAN\Downloads\de.robv.android.xposed.installer_v33_36570c.apk

2016-07-14 09:46 - 2016-07-14 09:46 - 00026566 _____ C:\Users\UMIT CANAN\Downloads\com.brandonnalls.mockmocklocations_v6_bfa37e.apk

2016-07-14 09:35 - 2016-07-14 09:35 - 00626521 _____ C:\Users\UMIT CANAN\Downloads\XposedInstaller_3.0_alpha4.apk

2016-07-13 16:36 - 2016-07-13 16:38 - 60878833 ____R C:\Users\UMIT CANAN\Downloads\Pokemon Go 0.29.2 New Versiyon For Android.apk

2016-07-12 13:29 - 2016-07-12 13:29 - 00005063 _____ C:\Users\UMIT CANAN\Downloads\com.brandonnalls.mockmocklocations_v4_2cd658.apk

2016-07-12 11:54 - 2016-07-12 12:00 - 126801948 _____ C:\Users\UMIT CANAN\Downloads\mrt.201.rar

2016-07-12 08:57 - 2016-07-12 08:57 - 00000000 ____D C:\tmpDownload

2016-07-12 08:55 - 2016-08-04 10:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Youtube Music Downloader

2016-07-12 08:55 - 2016-07-16 12:10 - 00000000 ____D C:\Program Files (x86)\YouTubeMusicDownloader

2016-07-12 08:43 - 2016-07-12 08:45 - 17547934 _____ C:\Users\UMIT CANAN\Downloads\YouTube.Music.Downloader.7.8.1.WT.rar

2016-07-12 08:40 - 2016-07-12 08:41 - 11861492 _____ C:\Users\UMIT CANAN\Downloads\YMD.7.6.0.Portable.rar

2016-07-12 03:01 - 2016-07-12 03:01 - 00385288 _____ (Intel Corporation) C:\WINDOWS\system32\ibtproppage.dll

2016-07-12 03:01 - 2016-07-12 03:01 - 00349960 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\ibtusb.sys

2016-07-12 03:01 - 2016-07-12 03:01 - 00189704 _____ (Intel Corporation) C:\WINDOWS\system32\ibtsiva.exe

2016-07-11 12:15 - 2016-07-11 12:15 - 00000857 _____ C:\Users\UMIT CANAN\Downloads\Ftp tapeedge (1).xml

2016-07-09 10:40 - 2016-07-09 10:44 - 14248446 _____ C:\Users\UMIT CANAN\Downloads\kolik bebek .m4a

2016-07-09 09:34 - 2016-07-09 09:34 - 08761055 _____ C:\Users\UMIT CANAN\Downloads\wordpress-4.5.3-en_CA.zip

2016-07-09 09:31 - 2016-07-16 12:17 - 00000000 ____D C:\xampp

2016-07-09 09:26 - 2016-07-09 09:29 - 124494408 _____ (Bitnami) C:\Users\UMIT CANAN\Downloads\xampp-win32-7.0.8-0-VC14-installer.exe

2016-07-09 09:17 - 2016-07-16 11:47 - 00000000 ____D C:\Users\UMIT CANAN\Downloads\Wordpress Theme Pack 9 Themeforest Divi builder X the (Shailab) April 2016

2016-07-09 09:13 - 2016-07-16 11:47 - 00000000 ____D C:\Users\UMIT CANAN\Downloads\Wordpress theme pack 7 march 2016 Betheme The7 - Themeforest (shailab)

2016-07-09 09:04 - 2016-07-13 16:44 - 00000000 ____D C:\Users\UMIT CANAN\Downloads\ThemeForest - Impreza v2.3 - Retina Responsive WordPress Theme

2016-07-09 08:31 - 2016-07-09 08:31 - 00027535 _____ C:\Users\UMIT CANAN\Downloads\xxLA620S-ZA99993.rar

2016-07-09 08:10 - 2016-07-09 08:10 - 00000000 ____D C:\Users\UMIT CANAN\Downloads\Yaz Hit 2016 - Vol. 1 (2016) Full Albüm [320 Kbps]

2016-07-09 08:09 - 2016-07-09 08:46 - 2323150249 ____R C:\Users\UMIT CANAN\Downloads\Warcraft.2016.1080p.HC.HDRip.2.1GB.MkvCage.mkv

2016-07-08 14:18 - 2016-07-08 14:19 - 50021494 _____ C:\Users\UMIT CANAN\Downloads\myriad.rar

2016-07-08 12:05 - 2016-07-08 12:08 - 54773711 _____ C:\Users\UMIT CANAN\Downloads\Full Version - 743507.zip

2016-07-08 10:34 - 2016-07-08 10:44 - 35694736 _____ C:\Users\UMIT CANAN\Downloads\promoinst.rar

2016-07-08 10:31 - 2016-07-08 10:31 - 00011776 ___SH C:\Users\UMIT CANAN\Documents\Thumbs.db

2016-07-08 10:13 - 2016-07-08 10:27 - 1466941064 ____R C:\Users\UMIT CANAN\Downloads\Somuncu.Baba.Askin.Sirri.2016.HDRip.XviD_2.avi

2016-07-08 09:23 - 2016-07-09 09:24 - 06569088 _____ (Tim Kosse) C:\Users\UMIT CANAN\Downloads\FileZilla_3.19.0_win64-setup.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-08-06 09:31 - 2015-12-07 11:21 - 00000000 ____D C:\Users\UMIT CANAN\Documents\Outlook Dosyaları

2016-08-06 09:30 - 2015-11-22 21:56 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\BitTorrent

2016-08-06 09:24 - 2015-11-22 14:48 - 01492190 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2016-08-06 09:21 - 2015-12-07 11:25 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\ViberPC

2016-08-06 09:20 - 2016-02-16 11:52 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\CrashDumps

2016-08-06 09:19 - 2015-11-22 14:51 - 00000000 __SHD C:\Users\UMIT CANAN\IntelGraphicsProfiles

2016-08-06 09:18 - 2016-02-20 09:42 - 1294502650 _____ C:\WINDOWS\MEMORY.DMP

2016-08-06 08:16 - 2016-02-10 14:01 - 00000000 ____D C:\Program Files (x86)\Garena Plus

2016-08-06 07:57 - 2015-12-02 23:51 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\Adobe

2016-08-05 21:46 - 2015-12-16 11:33 - 10669056 ___SH C:\Users\UMIT CANAN\Desktop\Thumbs.db

2016-08-05 18:03 - 2015-12-05 22:07 - 00000000 ____D C:\Program Files (x86)\Steam

2016-08-05 17:45 - 2015-12-03 00:50 - 00000000 ____D C:\Users\UMIT CANAN\Desktop\müşteri fiyat hesaplamaları

2016-08-05 17:00 - 2015-12-14 12:09 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\DMCache

2016-08-05 15:02 - 2016-05-09 15:35 - 00000000 ____D C:\Users\UMIT CANAN\.android

2016-08-05 10:57 - 2015-11-20 08:50 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\Packages

2016-08-05 08:47 - 2015-01-14 05:16 - 00000000 ____D C:\ProgramData\Temp

2016-08-04 16:43 - 2016-03-24 10:42 - 00000000 ____D C:\Users\UMIT CANAN\Desktop\MUHASEBE

2016-08-04 15:38 - 2015-11-22 11:50 - 00625152 ___SH C:\Users\UMIT CANAN\Downloads\Thumbs.db

2016-08-04 10:51 - 2015-12-03 07:45 - 00002512 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk

2016-08-04 10:51 - 2015-11-22 21:48 - 00002407 _____ C:\Users\UMIT CANAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2016-08-04 10:51 - 2015-11-22 21:48 - 00000000 ___RD C:\Users\UMIT CANAN\OneDrive

2016-08-04 10:46 - 2015-11-20 08:46 - 00000000 __RHD C:\Users\Public\AccountPictures

2016-08-04 10:41 - 2015-10-30 10:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated

2016-08-04 10:34 - 2015-11-22 14:47 - 00023012 _____ C:\WINDOWS\system32\emptyregdb.dat

2016-08-04 10:26 - 2016-05-25 14:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flip PDF Professional

2016-08-04 10:26 - 2016-05-04 21:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tivibu TV Player

2016-08-04 10:26 - 2016-04-20 13:10 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber

2016-08-04 10:26 - 2016-04-13 13:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link-AssistantCom

2016-08-04 10:26 - 2016-02-16 19:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2016-08-04 10:26 - 2016-02-16 09:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

2016-08-04 10:26 - 2016-02-12 10:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie

2016-08-04 10:26 - 2016-02-10 14:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garena

2016-08-04 10:26 - 2016-01-20 18:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2016-08-04 10:26 - 2016-01-06 13:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp

2016-08-04 10:26 - 2015-12-28 15:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Scanitto Pro

2016-08-04 10:26 - 2015-12-22 13:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF

2016-08-04 10:26 - 2015-12-21 11:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Torrent Privacy

2016-08-04 10:26 - 2015-12-14 21:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2016-08-04 10:26 - 2015-12-14 12:09 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager

2016-08-04 10:26 - 2015-12-14 12:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager

2016-08-04 10:26 - 2015-12-11 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS, Inc

2016-08-04 10:26 - 2015-12-08 09:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++

2016-08-04 10:26 - 2015-12-07 18:48 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Email Sender Deluxe

2016-08-04 10:26 - 2015-12-07 18:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CargoWiz

2016-08-04 10:26 - 2015-12-07 17:10 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2016-08-04 10:26 - 2015-12-05 22:12 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2016-08-04 10:26 - 2015-12-05 22:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2016-08-04 10:26 - 2015-12-03 08:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico

2016-08-04 10:26 - 2015-12-03 08:06 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2016-08-04 10:26 - 2015-12-03 08:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

2016-08-04 10:26 - 2015-12-03 07:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Araçları

2016-08-04 10:26 - 2015-12-03 07:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech

2016-08-04 10:26 - 2015-12-02 23:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Uninstaller! 7

2016-08-04 10:26 - 2015-11-22 21:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player

2016-08-04 10:26 - 2015-11-22 04:10 - 00000000 ____D C:\WINDOWS\system32\pt

2016-08-04 10:26 - 2015-11-22 04:04 - 00000000 ____D C:\WINDOWS\system32\fr

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\sv

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\sk

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\ru

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\pl

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\no

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\nl

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\it

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\hu

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\fi

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\es

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\el

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\de

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\da

2016-08-04 10:26 - 2015-01-14 05:23 - 00000000 ____D C:\WINDOWS\system32\cs

2016-08-04 10:26 - 2015-01-14 05:17 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink MediaStory

2016-08-04 10:26 - 2014-03-13 23:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2016-08-04 10:26 - 2014-03-13 21:19 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA

2016-08-04 10:23 - 2015-10-30 09:28 - 00000000 ____D C:\Users\Default.migrated

2016-08-04 10:21 - 2015-01-14 05:10 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles

2016-08-04 10:21 - 2013-08-22 18:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared

2016-08-04 10:21 - 2013-08-22 18:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared

2016-08-04 10:20 - 2016-05-13 18:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IPVanish

2016-08-04 10:20 - 2016-05-09 14:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2016-08-04 10:20 - 2016-04-13 13:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BuzzBundle

2016-08-04 10:20 - 2016-03-10 10:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung

2016-08-04 10:20 - 2016-02-12 11:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kvisoft

2016-08-04 10:20 - 2015-01-14 05:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2016-08-04 10:18 - 2016-05-09 15:34 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Coolmuster

2016-08-04 10:18 - 2016-01-14 15:14 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NATIONAL GEOGRAPHIC TURKIYE

2016-08-04 10:11 - 2015-01-14 04:58 - 00000000 ____D C:\Intel

2016-08-04 09:39 - 2014-03-13 23:04 - 00001048 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2016-08-04 09:30 - 2016-02-22 11:34 - 00000814 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2016-08-04 09:22 - 2015-11-22 22:46 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\IPVanish

2016-08-04 09:22 - 2015-11-22 22:46 - 00000000 ____D C:\Program Files (x86)\IPVanish

2016-08-04 08:11 - 2014-03-13 23:04 - 00001044 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2016-08-03 15:07 - 2015-12-07 11:25 - 00000000 ____D C:\Users\UMIT CANAN\Documents\ViberDownloads

2016-08-03 13:10 - 2015-12-14 12:09 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager

2016-08-02 09:17 - 2015-01-14 05:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2016-08-02 09:16 - 2016-06-21 10:34 - 00000438 _____ C:\WINDOWS\Tasks\Yandex.Browser güncellemesi .job

2016-08-01 18:01 - 2015-12-14 12:09 - 00000000 ____D C:\Users\UMIT CANAN\Downloads\Compressed

2016-08-01 14:29 - 2015-12-08 09:51 - 00000000 ____D C:\Users\UMIT CANAN\Desktop\programlar

2016-08-01 12:45 - 2016-02-16 09:40 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\FileZilla

2016-08-01 12:02 - 2015-12-07 11:24 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\Viber

2016-07-30 13:20 - 2015-11-22 21:47 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Local\MicrosoftEdge

2016-07-30 12:47 - 2016-06-10 12:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-07-29 11:55 - 2015-11-20 09:35 - 00000000 ____D C:\Program Files\Common Files\AV

2016-07-29 10:02 - 2015-12-03 08:07 - 00000000 ____D C:\Program Files\KMSpico

2016-07-29 09:51 - 2016-01-02 09:27 - 00000000 ____D C:\ProgramData\Norton

2016-07-29 09:37 - 2016-01-02 09:27 - 00000000 ____D C:\Users\Public\Downloads\Norton

2016-07-29 08:34 - 2015-12-02 22:29 - 00000000 ____D C:\Users\UMIT CANAN\Documents\outlook yedek

2016-07-27 22:25 - 2015-11-22 21:58 - 00504488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe

2016-07-25 16:01 - 2015-12-07 18:19 - 00000000 ____D C:\Users\UMIT CANAN\AppData\Roaming\CargoWiz

2016-07-25 10:56 - 2015-01-14 05:02 - 00000000 ____D C:\ProgramData\Package Cache

2016-07-22 05:51 - 2016-04-25 00:36 - 01499408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01007.dll

2016-07-22 05:51 - 2016-04-25 00:36 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinUSBCoInstaller.dll

2016-07-22 05:51 - 2016-04-25 00:35 - 00164992 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudmdm.sys

2016-07-22 05:51 - 2016-04-25 00:35 - 00130688 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus.sys

2016-07-20 13:44 - 2015-12-03 00:50 - 00000000 ____D C:\Users\UMIT CANAN\Desktop\Yeni klasör

2016-07-19 14:51 - 2016-05-09 14:42 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2016-07-19 11:02 - 2015-12-03 00:30 - 00000000 ____D C:\Users\UMIT CANAN\Desktop\VERRA DIŞ TİC

2016-07-18 14:01 - 2015-11-22 12:46 - 00000000 ____D C:\WINDOWS\system32\MRT

2016-07-18 13:56 - 2015-11-22 12:46 - 144749672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2016-07-18 11:37 - 2015-12-25 18:02 - 00000000 ____D C:\Program Files (x86)\NeoDownloader

2016-07-18 08:46 - 2016-05-25 14:56 - 00000000 ____D C:\Program Files (x86)\Flip PDF Professional

2016-07-18 08:30 - 2016-06-17 15:30 - 06079168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe

2016-07-16 12:14 - 2015-10-30 21:09 - 00000000 ____D C:\WINDOWS\ShellNew

2016-07-16 12:11 - 2016-02-16 19:59 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2016-07-16 12:11 - 2016-02-16 19:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2016-07-14 17:29 - 2016-06-06 12:02 - 00348898 _____ C:\Users\UMIT CANAN\Downloads\kisa-f-sevkiyat.xlsx

2016-07-12 17:21 - 2016-01-11 11:32 - 00000000 ____D C:\Users\UMIT CANAN\Desktop\Graphicriver 40 Pages Photoshop Wedding Photobook Template

2016-07-12 09:43 - 2016-06-01 08:31 - 00000000 ____D C:\Users\UMIT CANAN\Downloads\The.Lover's.Guide.1991.720p.BRRip.x264.AAC-ETRG

==================== Files in the root of some directories =======

2015-12-09 12:04 - 2015-12-09 12:04 - 0000132 _____ () C:\Users\UMIT CANAN\AppData\Roaming\Adobe GIF Formatı CS6 Tercihleri

2016-07-29 09:21 - 2016-07-29 09:21 - 0242994 _____ () C:\ProgramData\1469772861.bdinstall.bin

2016-07-30 12:41 - 2016-07-30 12:41 - 0028352 _____ () C:\ProgramData\1469871692.bdinstall.bin

2016-08-04 10:11 - 2016-08-04 10:11 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\wininit.exe => File is digitally signed

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-08-04 10:06

==================== End of FRST.txt ============================

aucnn

Post #9August 6, 2016, 7:27 AM UTC

127.0.0.1 tradeadexchange.com

127.0.0.1 http://www.tradeadexchange.com

127.0.0.1 104.197.47.161

I have added these to the host file trying to block the internet access to tradead website and ip address but didn't work either

aucnn

Post #10August 6, 2016, 7:35 AM UTC

aswMBR.txt

Run date: 2016-08-06 09:36:09

—————————–

09:36:09.722 OS Version: Windows x64 6.2.9200

09:36:09.723 Number of processors: 8 586 0x3C03

09:36:09.723 ComputerName: UMITCANAN UserName:

09:36:11.903 Initialize success

09:36:12.049 VM: initialized successfully

09:36:12.050 VM: Intel CPU supported

09:36:20.699 VM: not used

09:42:50.490 AVAST engine defs: 16080500

09:45:09.877 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000003a

09:45:09.880 Disk 0 Vendor: TOSHIBA_MQ02ABD100H HKF03M Size: 953869MB BusType: 11

09:45:10.004 Disk 0 MBR read successfully

09:45:10.005 Disk 0 MBR scan

09:45:10.008 Disk 0 unknown MBR code

09:45:10.011 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1

09:45:10.023 Disk 0 scanning C:\WINDOWS\system32\drivers

09:45:13.909 Service scanning

09:45:23.337 Modules scanning

09:45:23.341 Disk 0 trace - called modules:

09:45:23.672 ntoskrnl.exe CLASSPNP.SYS disk.sys thpdrv.sys ACPI.sys storport.sys hal.dll iaStorA.sys

09:45:23.676 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xffffd78b63d9a060]

09:45:23.680 3 CLASSPNP.SYS[fffff80dd8c05eeb] -> nt!IofCallDriver -> \Device\THPDRV1[0xffffd78b63cd94f0]

09:45:23.687 5 thpdrv.sys[fffff80dd8995c97] -> nt!IofCallDriver -> [0xffffd78b6233de40]

09:45:23.692 7 ACPI.sys[fffff80dd79e4571] -> nt!IofCallDriver -> \Device\0000003a[0xffffd78b62336060]

09:45:25.734 AVAST engine scan C:\WINDOWS

09:45:27.326 AVAST engine scan C:\WINDOWS\system32

09:46:55.636 AVAST engine scan C:\WINDOWS\system32\drivers

09:46:59.729 AVAST engine scan C:\Users\UMIT CANAN

10:14:21.787 AVAST engine scan C:\ProgramData

10:27:58.963 Disk 0 statistics 3166395/0/0 @ 0,75 MB/s

10:27:58.964 Scan finished successfully

10:34:28.298 Disk 0 MBR has been saved successfully to "C:\Users\UMIT CANAN\Desktop\MBR.dat"

10:34:28.301 The log file has been saved successfully to "C:\Users\UMIT CANAN\Desktop\aswMBR.txt"

Juliet

Post #11August 7, 2016, 12:16 PM UTC

You have markers in your logs to suggest that you have some illegal cracked software on your system. It looks like Office, Adobe and maybe the Operating System itself is illegal. This forum as well as most other malware removal forums do not support the use of illegal software. What most people dont understand is that almost 100% of illegal cracked software downloaded via torrents is infected.

~~~

Is this your location?
co.uk. Location, GB, United Kingdom

If not, we will have to make adjustments to remove it off your computer.

Please open Notepad *Do Not Use Wordpad!* or use any other text editor than Notepad or the script will fail. (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the quote box below:
To do this highlight the contents of the box and right click on it and select copy.
Paste this into the open notepad. save it to the Desktop as fixlist.txt
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)

[external image: FRSTfix.JPG]

start
CreateRestorePoint:
CloseProcesses:
Task: {046BB4D1-6176-4A20-AE12-4465FC978F58} - \Adobe Flash Player Updater -> No File <==== ATTENTION
Task: {0D3C822F-D58B-4C8A-A0C4-86AD985E124D} - \McAfee Remediation (Prepare) -> No File <==== ATTENTION
Task: {0ED97A3D-D6CD-46CC-BA4E-5763D5B66249} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {186010EB-E4A6-456C-B8A8-C5C3C996D7C9} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> No File <==== ATTENTION
Task: {1A4230A2-E136-4936-9B22-DDF624BB8332} - \Microsoft\Windows\IME\SQM data sender -> No File <==== ATTENTION
Task: {29EC4B0C-D89A-47B1-ADEF-01F9F9B87777} - \[removed] -> No File <==== ATTENTION
Task: {2A857020-AA33-497D-A2C0-75DBE8EC25D2} - \RTKCPL -> No File <==== ATTENTION
Task: {34499A29-2313-4699-AAF4-A0B4CB15B81D} - \Resolution+ Setting Task -> No File <==== ATTENTION
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - \Microsoft\Windows\Workplace Join\Automatic-Workplace-Join -> No File <==== ATTENTION
Task: {3AF5706B-8F77-49B9-9474-E26715527814} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> No File <==== ATTENTION
Task: {41C02912-3E96-42D0-A15C-7E4A7E9AE793} - \Synaptics TouchPad Enhancements -> No File <==== ATTENTION
Task: {4F9DA716-4FEB-41B0-8ED9-1657F97E8556} - \dts_apo_service_task -> No File <==== ATTENTION
Task: {51F5EF5C-2A71-4B58-BDEA-B42D56ABA379} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
Task: {5400ECE1-8F61-4225-83FA-80A8866C36BC} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> No File <==== ATTENTION
Task: {5A3FB241-0B11-4EA5-BC66-0D9F1B406040} - \Microsoft\Windows\Customer Experience Improvement Program\BthSQM -> No File <==== ATTENTION
Task: {5FFD8DF5-FB6C-4DAB-98BE-2C8A13B69CB5} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {610626D0-4F2A-4786-BE3D-7FF6405486EB} - \Adobe Acrobat Update Task -> No File <==== ATTENTION
Task: {650B59EE-3B16-40EC-9EF3-6A878271D6C3} - \Microsoft\Windows\WindowsUpdate\AUScheduledInstall -> No File <==== ATTENTION
Task: {655D0834-B01D-471B-AD33-36BB499FB471} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - \Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task -> No File <==== ATTENTION
Task: {7B0A26EB-B5D6-4363-B474-1979237265FA} - \Yandex.Browser güncellemesi -> No File <==== ATTENTION
Task: {846BAA5B-6913-4FE9-8BA0-A786F1750CBD} - \WPD\SqmUpload_S-1-5-21-3330027656-3945394898-1623029764-1001 -> No File <==== ATTENTION
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - \Microsoft\Windows\SkyDrive\Routine Maintenance Task -> No File <==== ATTENTION
Task: {87BBEEEE-18C2-47D4-9187-61D891ACFE6A} - \Microsoft\Office\Office ClickToRun Service Monitor -> No File <==== ATTENTION
Task: {906F5939-11AD-4140-BF8C-3A6DE360E8B2} - \Norton WSC Integration -> No File <==== ATTENTION
Task: {9541CFCA-D743-4759-A8B3-4CC4BAC11594} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {9EAB824A-F6AE-45D7-874D-DCF8B1595A6F} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {A9DA8E72-582A-4052-86DC-7BC6199B3CA1} - \Microsoft\Windows\RemovalTools\MRT_HB -> No File <==== ATTENTION
Task: {AAB702BE-797F-4D97-8AD9-4B8F1F6333D9} - \GoogleUpdateTaskMachineCore -> No File <==== ATTENTION
Task: {AF119C49-5780-4AAC-A0B7-06C00B3A79FC} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> No File <==== ATTENTION
Task: {B554CD87-7925-400B-A0ED-34A2A3810661} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {B7F08AFC-6F4D-4783-B954-391DAAD6C39F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {BCE8E494-316C-47C0-B0C8-11D444ED6B9A} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {C2586B0A-AEDF-4E7A-884E-E9B6B9F9171C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {C30402C7-4F31-4FE0-8242-B39A52F71ED0} - \Microsoft\Office\Office Automatic Updates -> No File <==== ATTENTION
Task: {C4AE3C3E-C327-4689-B6FD-C11FB31AE88B} - \Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler -> No File <==== ATTENTION
Task: {C5FF3A2C-4DA8-4841-A7DF-E8604B8BF0EC} - \Microsoft\Windows\WindowsUpdate\AUFirmwareInstall -> No File <==== ATTENTION
Task: {C92C2AD4-CE30-4EA2-A0B4-516E5130E5E7} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> No File <==== ATTENTION
Task: {D2CF45E2-3685-474D-B9DF-4930EB0808D5} - \Optimize Start Menu Cache Files-S-1-5-21-3330027656-3945394898-1623029764-500 -> No File <==== ATTENTION
Task: {DE8E7B79-461B-4A64-AE7A-2747C5C6F1FE} - \Обновление Браузера Яндекс -> No File <==== ATTENTION
Task: {EC4FC158-786C-475A-8E62-CFE571118B24} - \TOSHIBA\Service Station -> No File <==== ATTENTION
Task: {ECC2C054-EB1D-4828-B331-94FDD7E7D465} - \Toshiba\CommonNotifier -> No File <==== ATTENTION
Task: {F04CAD1E-BC2B-4EF5-8E56-94EA91621EC8} - \Microsoft\Windows\Shell\FamilySafetyUpload -> No File <==== ATTENTION
Task: {F3ECE55D-CC7E-4E7C-96AB-28C9B66DC27B} - \Optimize Start Menu Cache Files-S-1-5-21-3330027656-3945394898-1623029764-1001 -> No File <==== ATTENTION
Task: {F6D63EAE-9FE0-4203-B327-DE576EDBBFAF} - \Microsoft\Windows\WindowsUpdate\AUSessionConnect -> No File <==== ATTENTION
Task: {F948BB2A-035C-4D23-A759-76997DB23E25} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {FC6CDB33-B3AA-4ACD-9D3B-CD5CAE786692} - \Microsoft\Windows\WindowsUpdate\Scheduled Start With Network -> No File <==== ATTENTION
Task: C:\WINDOWS\Tasks\Yandex.Browser güncellemesi .job => C:\Users\UMIT CANAN\AppData\Local\Yandex\YandexBrowser\Application\browser.exe–background-updateUMITCANAN\UMIT CANANYandex.Bro
Task: C:\WINDOWS\Tasks\Обновление Браузера Яндекс .job => C:\Users\UMIT CANAN\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
C:\Users\UMIT CANAN\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
AlternateDataStreams: C:\Windows:nlsPreferences [0]
AlternateDataStreams: C:\ProgramData\Temp:1CE11B51 [178]
AlternateDataStreams: C:\ProgramData\Temp:EC76150E [133]
HKU\S-1-5-21-3330027656-3945394898-1623029764-1001\…\Run: [] => 0
SearchScopes: HKU\S-1-5-21-3330027656-3945394898-1623029764-1001 -> DefaultScope {6F31C505-536A-44AE-97E1-9ED9166F1D77} URL =
SearchScopes: HKU\S-1-5-21-3330027656-3945394898-1623029764-1001 -> {6F31C505-536A-44AE-97E1-9ED9166F1D77} URL =
CMD: ipconfig /flushdns
CMD: netsh winsock reset all
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
Hosts:
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
End

Open FRST/FRST64 and press the > Fix < button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

~~~~~

I know you may have already used AdwCleaner and JRT but, since they do not have auto update features, at this time please right click and delete those so we might download updated copies.

[external image: BY4dvz9.png]AdwCleaner

Please download AdwCleaner and save the file to your Desktop.
Right-click AdwCleaner.exe and select [external image: AVOiBNU.jpg] Run as administrator to run the programme.
Follow the prompts.
Click [external image: A49sxPr.png]Scan.
Upon completion, click [external image: 6cyn5v5.png]Logfile. A log (AdwCleaner[S1].txt) will open. Briefly check the log for anything you know to be legitimate.
Return to AdwCleaner. Ensure anything you know to be legitimate does not have a checkmark under the corresponding tab.
Click [external image: MqHawIb.png]Clean.
Follow the prompts and allow your computer to reboot.
After the reboot, a log (AdwCleaner[C1].txt) will open. Copy the contents of the log and paste in your next reply.

– File and folder backups are made for items removed using this programme. Should a legitimate file or folder be removed (otherwise known as a 'false-positive'), simple steps can be taken to restore the item. Please do not overly concern yourself with the contents of AdwCleaner[C1].txt.

======================================================

Please download Junkware Removal Tool
or from here http://downloads.malwarebytes.org/file/jrt
to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

~~~
please post
Fixlog.txt
AdwCleaner[C1].txt
JRT.txt

aucnn

Post #12August 8, 2016, 6:56 AM UTC

Dear Juliet,

I would like to thank you for your kind help,

I will check the office and adobe products on my computer, as there is a guy installed all the applications over a year ago.

But i am sure operating system is legal as It was installed already one i bought my notebook.

co.uk. Location, GB, United Kingdom

is not my location, probably it is due to this malware. I rarely use VPN but never used one from UK before.

so this location is false.

I will add the reports, log files to the following messages.

thank you again for your kind help,

aucnn

Post #13August 8, 2016, 6:58 AM UTC

JRT.TXT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.0.7 (07.03.2016)

Operating System: Windows 10 Home Single Language x64

Ran by [removed] (Administrator) on Pzt 08.08.2016 at 9:42:27,89

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 2

Successfully deleted: C:\ProgramData\1469772861.bdinstall.bin (File)

Successfully deleted: C:\ProgramData\1469871692.bdinstall.bin (File)

Registry: 0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Pzt 08.08.2016 at 9:44:58,77

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

aucnn

Post #14August 8, 2016, 6:58 AM UTC

FIXLOG.TXT

Fix result of Farbar Recovery Scan Tool (x64) Version: 03-08-2016

Ran by [removed] (2016-08-08 09:13:37) Run:2

Running from C:\Users\[removed]\Desktop

[removed]

Boot Mode: Normal

==============================================

fixlist content:

*****************

start

CreateRestorePoint:

CloseProcesses: