This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

My system was infected with Sysnetwk.exe & mylucky123 [Solved]

91 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Well done - that looks better.

Run Zemana AntiMalware

I noticed that you had Zemana AntiMalware on your system: if you no longer have it, you can download it from here:

  • without changing any options, press Scan
  • after the scan is finished, if threats are detected press Next to remove them

Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.

  • open Zemana AntiMalware again and locate the latest report
  • please paste the contents into your reply

===================================================

Run Malwarebytes’ Anti-Malware

I noticed that you had MBAM on your system: if you no longer have it, you can download it from here:

  • on the Dashboard, click Update Now
  • after the update completes, click the Scan Now' button.
  • if an update is available, clicking the Update Now button will update it
  • a Threat Scan will begin.
  • when the scan is complete, if malware has been detected, click Apply Actions to allow MBAM to clean what was found
  • when the prompt to restart the computer appears, click Yes.
  • after the restart once you are back at your desktop, open MBAM once more
  • click on the “History” tab, the “Application Logs”
  • double-click on the scan log which shows the date and time of the scan just performed.
  • click Copy to Clipboard
  • please paste the contents of the clipboard into your reply.

Logs to include with the next post:

Zemana log
Mbam.txt


Satchfan

 

Scanned the PC with Zemana AntiMalware. It showed no infected files at all. The PC was clean hence no log is required, I suppose.

I tried updating Malwarebytes Anti-Malware but it says that PC isn't connected to the internet. That's what the problem is, all along. I can only access internet through Google Chrome. What do you suggest?

 

Let’s have a look with a different tool.

Download zoek.exe to your Desktop:

Important: Disable your AntiVirus and AntiSpyware programs, so they do not interfere with the running of Zoek.exe. You can find instructions how to disable your security applications here.

  • on Windows Vista, 7/8, 10 right-click Zoek.exe and select: Run as Administrator
  • give it a few seconds to appear
  • copy/paste the entire script inside the code box below into the input field of Zoek:
    resetIEproxy;
    network.proxy;ff
    reset Hosts;
    emptyFFcache;
    emptyIEcache;
    emptyIEflash;
    emptyIEjava;
    autoclean;
    emptyalltemp;
    emptyclsid;
    FFdefaults;
    iedefaults;
    chrdefaults;
    
  • make sure that the Scan All Users option is checked
  • close any open programs.
  • click the Run script button, and wait. It takes a few minutes to run.
  • when the tool finishes, the zoek-results.log is opened in Notepad: the log can also be found on the systemdrive, normally C:\
  • if a reboot is needed, the log will be opened after the reboot.

================================================

Download and run Tweaking.com - Windows Repair

Download Windows Repair from here and save it to your desktop.

  • install and then run the program
  • ignore steps 1-5 and click on + Repair
  • then, in the same window, click on the “Open Repairs” tab:
  • click Start
  • leave the default selected items as they are and check Restart System When Finished
  • also check Restart System When Finished.
  • now press Start.

Please post the zoek-results.log, try to connect to the Internet and let me know how it goes.

Satchfan

 

Hey, sorry for the late reply. 

I'm able to connect to the internet now. Thanks a ton

Here's the log from ZOEK, although I think it's partial cause it keeps getting stuck at a certain point, I've tried a bunch of times.
 

 
Zoek.exe v5.0.0.1 Updated 27-09-2015
Tool run by Jason on 11-11-2016 at  0:13:32.88.
Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x64
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\Jason\Desktop\zoek.exe [Scan all users] [Script inserted] 
 
==== System Restore Info ======================
 
11-11-2016 00:23:21 Zoek.exe System Restore Point Created Successfully.
 
==== Empty Folders Check ======================
 
C:\PROGRA~2\Anvisoft deleted successfully
C:\PROGRA~2\CGN deleted successfully
C:\PROGRA~2\Common Software deleted successfully
C:\PROGRA~2\ICQM deleted successfully
C:\PROGRA~2\Jihosoft deleted successfully
C:\PROGRA~2\Motorola Mobility deleted successfully
C:\PROGRA~2\Safety-lab deleted successfully
C:\PROGRA~2\Trend Micro deleted successfully
C:\PROGRA~2\Xilisoft deleted successfully
C:\Program Files\XBox deleted successfully
C:\PROGRA~3\4shared Desktop deleted successfully
C:\PROGRA~3\Freemake deleted successfully
C:\PROGRA~3\IDM deleted successfully
C:\PROGRA~3\Malwarebytes' Anti-Malware (portable) deleted successfully
C:\PROGRA~3\PicPick deleted successfully
C:\PROGRA~3\PSPVC deleted successfully
C:\Users\Jason\AppData\Roaming\Drerhty deleted successfully
C:\Users\Jason\AppData\Roaming\DVDVideoSoft deleted successfully
C:\Users\Jason\AppData\Roaming\HMYGSetting deleted successfully
C:\Users\Jason\AppData\Roaming\Media Player Classic deleted successfully
C:\Users\Jason\AppData\Roaming\Publish Providers deleted successfully
C:\Users\Jason\AppData\Roaming\Windows Live Writer deleted successfully
C:\Users\Jason\AppData\Roaming\youtubejs deleted successfully
C:\Users\Guest\AppData\Local\PDFC deleted successfully
C:\Users\Jason\AppData\Local\CrashDumps deleted successfully
C:\Users\Jason\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Jason\AppData\Local\EmieSiteList deleted successfully
C:\Users\Jason\AppData\Local\EmieUserList deleted successfully
C:\Users\Jason\AppData\Local\PDFC deleted successfully
C:\Users\Jason\AppData\Local\pinger.com deleted successfully
C:\Users\Jason\AppData\Local\Skype deleted successfully
C:\Users\Jason\AppData\Local\Unity deleted successfully

That certainly solved some problems and some of what was removed were seen in FRST.

 

That however was only the partial log of Zoek.

 

Please send the whole log and a new FRST log.

Sorry Jason, I just re-read your post and realised that Zoek stuck during the scan. Please try and run it again in safe mode.

  • restart your computer.
  • when the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with the Windows Advanced Boot Options menu
  • select the option for Safe Mode using the arrow keys
  • then press Enter on your keyboard to boot into Safe Mode.

You should then be presented with the Windows Login screen. Log in to Windows and then run the scan.
 

 

Still same, it gets stuck at the same point.

Here's the FRST log, though.

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
Ran by [removed] (administrator) on JASON-HP (13-11-2016 01:40:28)
Running from C:\Users\[removed]\Desktop
[removed] Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\BCMWLTRY.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Acunetix Ltd.) C:\Program Files (x86)\Acunetix\Web Vulnerability Scanner 7\WVSScheduler7.exe
() C:\Program Files (x86)\Common Files\Microsoft\Care Suite\ADUService\ADUService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Tenorshare Co,Ltd) C:\Program Files (x86)\ReiBoot\TenorshareReibootService.exe
() C:\Program Files\Reliance 3\bin\MonServiceUDisk.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Flux Software LLC) C:\Users\Jason\AppData\Local\FluxSoftware\Flux\flux.exe
(Dropbox, Inc.) C:\Users\Jason\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(i-Funbox.com) C:\Program Files (x86)\i-Funbox DevTeam\iFunBox_x64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Dropbox, Inc.) C:\Users\Jason\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\HPTouchSmartSyncCalReminderApp.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Tweaking.com) C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.)
HKLM\…\Run: [ZAM] => C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [13823216 2016-10-04] (Zemana Ltd.)
HKLM-x32\…\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKLM-x32\…\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9044392 2016-11-12] (AVAST Software)
HKU\S-1-5-21-4001190308-645597301-758162152-1001\…\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2860832 2016-10-13] (Valve Corporation)
HKU\S-1-5-21-4001190308-645597301-758162152-1001\…\Run: [f.lux] => C:\Users\Jason\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)
HKU\S-1-5-21-4001190308-645597301-758162152-1001\…\Run: [Dropbox Update] => C:\Users\Jason\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-11] (Dropbox, Inc.)
HKU\S-1-5-21-4001190308-645597301-758162152-1001\…\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-4001190308-645597301-758162152-1001\…\Run: [iFunBox] => C:\Program Files (x86)\i-Funbox DevTeam\iFunBox_x64.exe [2783232 2015-07-27] (i-Funbox.com)
HKU\S-1-5-21-4001190308-645597301-758162152-1001\…\Policies\Explorer: [NoInstrumentation] 0
Lsa: [Notification Packages] scecli c:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-11-12] (AVAST Software)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2016-10-28]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-11-12]
ShortcutTarget: Dropbox.lnk -> C:\Users\Jason\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk [2016-10-28]
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.1
Tcpip\..\Interfaces\{3B544C44-ABC4-4105-A677-4FC0AC8AC0CE}: [DhcpNameServer] 192.168.0.1 192.168.0.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-4001190308-645597301-758162152-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131227698710338198&GUID=00000000-0000-0000-0000-000000000000
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131227698710494198&GUID=00000000-0000-0000-0000-000000000000
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-4001190308-645597301-758162152-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-4001190308-645597301-758162152-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE09&ocid=UE09DHP
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-4001190308-645597301-758162152-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-11-12] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21] (HP Inc.)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-06] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-11-12] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-06] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-08-06] (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-08-06] (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-09-23] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\naweriweentcofise\Profiles\qtj95ygw.default-1458962998159\Profiles\qtj95ygw.default-1458962998159 [not found]
FF DefaultProfile: edgp4kre.default
FF ProfilePath: C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\Profiles\tseaflte.default-1477925802081 [2016-11-13]
FF NetworkProxy: Mozilla\Firefox\Profiles\tseaflte.default-1477925802081 -> type", 0
FF ProfilePath: C:\Users\Jason\AppData\Roaming\Firefox\Firefox\Profiles\edgp4kre.default [2016-10-28]
FF Extension: (Skype Click to Call) - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-12-19] [not signed]
FF Extension: (Skype Click to Call) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-12-19] [not signed]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-11-12]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-11-12]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKU\S-1-5-21-4001190308-645597301-758162152-1001\…\SeaMonkey\Extensions: [[removed]] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-12] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-12] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-10-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-10-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-10-10] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-06] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-06] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll [2014-01-16] (McAfee, Inc.)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-08-10] (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-09] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2012-10-13] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems)
FF Plugin HKU\S-1-5-21-4001190308-645597301-758162152-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Jason\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2016-10-31] <==== ATTENTION
CHR Extension: (Avast Online Security) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-07-13]
CHR Extension: (Bigasoft Video Downloader Pro) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\jpnkpjikgipojkofgjjkfgdhfanggcdm [2016-10-22]
CHR Extension: (Skype Click to Call) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-10-22]
CHR Extension: (Google Wallet) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-13]
CHR Extension: (Fast search) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pbdpajcdgknpendpmecafmopknefafha [2016-10-22]
CHR Extension: (Gmail) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-13]
CHR Profile: C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2 [2016-11-12]
CHR Extension: (Adblock Plus) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-09-20]
CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2016-10-27]
CHR Extension: (Skype) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-10-20]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Fast Video Downloader) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nocpfkkbaekckhcoekockfbidpcjgkbd [2015-08-27]
CHR Extension: (Video Cutter) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nodkcjollmmjidmcnhloaoahmciabnai [2015-08-28]
CHR Extension: (Hola - Unlimited Proxy VPN) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\opalpjjboefohnelaemnhdhlceibbcgl [2015-12-07]
CHR Extension: (Chrome Media Router) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-28]
CHR Extension: (26c8690aab4ced4ac840b6bf26e16a77_2) - C:\Program Files (x86)\Google\Chrome\Application\26c8690aab4ced4ac840b6bf26e16a77_2 [2016-06-01]
CHR Extension: (26c8690aab4ced4ac840b6bf26e16a77) - C:\Program Files (x86)\Google\Chrome\Application\26c8690aab4ced4ac840b6bf26e16a77 [2016-02-18]
CHR Profile: C:\Users\Jason\AppData\Local\Google\Chrome\User Data\System Profile [2016-11-07]
CHR HKLM\…\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx

Strange. I don't understand what happened with the "fix" but we'll have a different look.

Download and run ComboFix

Link 1
Link 2

**Note:  It is important that it is saved directly to your desktop**

——————————————————————–
IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
——————————————————————–
 

  • double click on ComboFix.exe & follow the prompts.
  • when finished, it will produce a report: please post the C:\ComboFix.txt log in your reply.

Satchfan

Here's the report from ComboFix:

ComboFix 16-11-06.01 - Jason 13-11-2016   5:24.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.91.1033.18.8148.5057 [GMT 5.5:30]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: Avast Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
FW: Avast Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
SP: Avast Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Created a new restore point
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\TEMP\HP Support Framework\HPSF_Config1.dll
.
.
(((((((((((((((((((((((((   Files Created from 2016-10-13 to 2016-11-13  )))))))))))))))))))))))))))))))
.
.
2016-11-13 00:07 . 2016-11-13 00:07    ——–    d—–w-    c:\users\Public\AppData\Local\temp
2016-11-13 00:07 . 2016-11-13 00:07    ——–    d—–w-    c:\users\HomeGroupUser$\AppData\Local\temp
2016-11-13 00:07 . 2016-11-13 00:07    ——–    d—–w-    c:\users\Guest\AppData\Local\temp
2016-11-13 00:07 . 2016-11-13 00:07    ——–    d—–w-    c:\users\Default\AppData\Local\temp
2016-11-13 00:07 . 2016-11-13 00:07    ——–    d—–w-    c:\users\Administrator\AppData\Local\temp
2016-11-12 20:09 . 2016-11-12 20:15    ——–    d—–w-    C:\FRST
2016-11-12 18:24 . 2016-11-12 18:24    ——–    d—–w-    C:\zoek
2016-11-11 20:48 . 2016-11-11 20:48    17352    —-a-w-    c:\program files (x86)\Mozilla Firefox\qipcap.dll
2016-11-11 20:40 . 2016-11-11 20:40    37144    —-a-w-    c:\windows\system32\drivers\aswKbd.sys
2016-11-11 20:37 . 2016-11-11 20:37    ——–    d—–w-    c:\users\Jason\AppData\Roaming\AVAST Software
2016-11-11 20:35 . 2016-11-11 20:35    163416    —-a-w-    c:\windows\system32\drivers\aswStm.sys
2016-11-11 20:35 . 2016-11-11 20:36    293352    —-a-w-    c:\windows\system32\drivers\aswvmm.sys
2016-11-11 20:35 . 2016-11-11 20:36    513632    —-a-w-    c:\windows\system32\drivers\aswsp.sys
2016-11-11 20:35 . 2016-11-11 20:35    74544    —-a-w-    c:\windows\system32\drivers\aswRvrt.sys
2016-11-11 20:35 . 2016-11-11 20:35    108816    —-a-w-    c:\windows\system32\drivers\aswMonFlt.sys
2016-11-11 20:35 . 2016-11-11 20:35    37656    —-a-w-    c:\windows\system32\drivers\aswHwid.sys
2016-11-11 20:35 . 2016-11-11 20:35    103064    —-a-w-    c:\windows\system32\drivers\aswRdr2.sys
2016-11-11 20:35 . 2016-11-11 20:36    969184    —-a-w-    c:\windows\system32\drivers\aswsnx.sys
2016-11-11 20:35 . 2016-11-11 20:35    453192    —-a-w-    c:\windows\system32\drivers\aswNetSec.sys
2016-11-11 20:35 . 2016-11-11 20:35    391496    —-a-w-    c:\windows\system32\aswBoot.exe
2016-11-11 20:35 . 2016-11-11 20:35    53208    —-a-w-    c:\windows\avastSS.scr
2016-11-11 20:35 . 2016-11-11 20:35    28312    —-a-w-    c:\windows\system32\drivers\aswNetNd6.sys
2016-11-11 20:34 . 2016-11-11 20:40    ——–    d—–w-    c:\program files\AVAST Software
2016-11-11 14:25 . 2016-11-11 14:29    ——–    d—–w-    c:\windows\system32\catroot2
2016-11-11 14:10 . 2016-11-11 14:10    ——–    d—–w-    c:\windows\SysWow64\wbem\Performance
2016-11-11 12:22 . 2016-11-11 12:22    ——–    d—–w-    C:\RegBackup
2016-11-11 12:20 . 2016-11-11 12:20    ——–    d—–w-    c:\program files (x86)\Tweaking.com
2016-11-09 05:39 . 2016-10-27 18:28    25763328    —-a-w-    c:\windows\system32\mshtml.dll
2016-11-05 21:46 . 2016-11-05 21:46    75888    —-a-w-    c:\programdata\Microsoft\Windows Defender\Definition Updates\{58B75706-F493-44FA-A574-26284CD5A258}\offreg.5028.dll
2016-11-04 13:54 . 2016-11-04 13:54    75888    —-a-w-    c:\programdata\Microsoft\Windows Defender\Definition Updates\{58B75706-F493-44FA-A574-26284CD5A258}\offreg.4792.dll
2016-11-04 11:10 . 2016-10-06 21:42    12033040    —-a-w-    c:\programdata\Microsoft\Windows Defender\Definition Updates\{58B75706-F493-44FA-A574-26284CD5A258}\mpengine.dll
2016-11-01 12:47 . 2016-11-03 14:04    28272    —-a-w-    c:\windows\system32\drivers\TrueSight.sys
2016-11-01 12:46 . 2016-11-01 12:47    ——–    d—–w-    c:\program files\RogueKiller
2016-11-01 12:46 . 2016-11-03 20:31    ——–    d—–w-    c:\programdata\RogueKiller
2016-10-29 07:47 . 2016-10-29 07:47    ——–    d—–w-    c:\program files\HitmanPro
2016-10-29 07:46 . 2016-10-29 09:39    ——–    d—–w-    c:\programdata\HitmanPro
2016-10-28 17:40 . 2016-10-29 07:20    ——–    d—–w-    c:\users\Jason\AppData\Local\PrivaZer
2016-10-28 17:40 . 2016-10-28 17:41    ——–    d—–w-    c:\program files (x86)\PrivaZer
2016-10-28 17:40 . 2016-10-28 17:40    ——–    d—–w-    c:\programdata\privazer
2016-10-28 16:33 . 2016-10-28 16:34    203680    —-a-w-    c:\windows\system32\drivers\zam64.sys
2016-10-28 16:33 . 2016-10-28 16:34    203680    —-a-w-    c:\windows\system32\drivers\zamguard64.sys
2016-10-28 16:33 . 2016-10-29 01:57    ——–    d—–w-    c:\program files (x86)\Zemana AntiMalware
2016-10-28 16:33 . 2016-10-28 16:33    ——–    d—–w-    c:\users\Jason\AppData\Local\Zemana
2016-10-27 15:40 . 2016-10-27 15:40    ——–    d—–w-    c:\users\Jason\AppData\Roaming\Firefox
2016-10-27 15:40 . 2016-10-27 15:40    ——–    d—–w-    c:\users\Jason\AppData\Local\Firefox
2016-10-26 17:39 . 2016-10-29 07:28    ——–    d—–w-    c:\windows\system32\log
2016-10-26 17:35 . 2016-11-04 21:51    ——–    d—–w-    c:\program files (x86)\UvConverter
2016-10-26 17:33 . 2016-10-26 17:33    ——–    d—–w-    c:\program files (x86)\isxthmba
2016-10-24 21:57 . 2016-10-24 21:57    ——–    d—–w-    c:\users\Jason\AppData\Roaming\Tenorshare
2016-10-24 21:54 . 2016-10-24 21:56    ——–    d—–w-    c:\program files (x86)\ReiBoot
2016-10-23 06:16 . 2016-10-23 06:16    ——–    d—–w-    c:\users\Jason\Jihosoft Phone Transfer
2016-10-22 18:59 . 2016-10-22 18:59    ——–    d—–w-    c:\users\Jason\AppData\Local\iMobie_Inc
2016-10-22 18:59 . 2016-10-22 18:59    ——–    d—–w-    c:\users\Jason\AppData\Roaming\iMobie
2016-10-22 18:59 . 2016-10-22 18:59    ——–    d—–w-    c:\program files (x86)\iMobie
2016-10-22 18:42 . 2016-10-22 19:08    ——–    d—–w-    c:\users\Jason\AppData\Roaming\Syncios Data Recovery
2016-10-22 18:42 . 2016-10-22 18:42    ——–    d—–w-    c:\program files (x86)\Anvsoft
2016-10-21 20:11 . 2016-10-21 20:11    ——–    d—–w-    c:\users\Jason\AppData\Roaming\BackupTrans
2016-10-21 19:48 . 2016-10-21 19:48    ——–    d—–w-    c:\users\Jason\AppData\Local\iphonebackupbrowser
2016-10-21 18:55 . 2016-10-21 18:55    ——–    d—–w-    c:\programdata\Avira
2016-10-21 18:55 . 2016-10-21 18:55    ——–    d—–w-    c:\programdata\Avg
2016-10-21 18:53 . 2016-10-21 18:54    ——–    d—–w-    c:\users\Jason\AppData\Local\Merhogh
2016-10-21 18:53 . 2016-10-21 18:53    ——–    d—–w-    c:\users\Jason\AppData\Roaming\Profiles
2016-10-21 18:41 . 2016-10-25 13:28    ——–    d—a-w-    C:\Android
2016-10-21 18:41 . 2016-10-21 18:41    ——–    d—–w-    c:\program files\DIFX
2016-10-21 18:41 . 2016-10-25 13:35    ——–    d—–w-    c:\program files (x86)\OnePlus USB Drivers
2016-10-21 18:31 . 2016-10-21 18:31    ——–    d—–w-    c:\users\Jason\AppData\Roaming\ADBDriverInstaller
2016-10-21 16:30 . 2016-10-21 16:30    12090776    —-a-w-    c:\users\Jason\AppData\Roaming\Microsoft\Windows\Templates\iTunes12x64Patch.exe
2016-10-21 16:26 . 2016-10-23 07:11    ——–    d–h–w-    c:\program files (x86)\Dr.Fone_Temp
2016-10-18 20:55 . 2016-10-18 20:55    2689680    —-a-w-    c:\program files (x86)\Common Files\Microsoft Shared\VBA\VBA7\VBE7.DLL
2016-10-17 15:34 . 2016-10-17 15:34    ——–    d—–w-    c:\program files (x86)\Common Files\Skype
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-11-11 20:59 . 2013-12-06 16:23    796352    —-a-w-    c:\windows\SysWow64\FlashPlayerApp.exe
2016-11-11 20:59 . 2012-06-01 04:46    142528    —-a-w-    c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2016-11-09 11:49 . 2013-05-06 12:45    141011376    -c–a-w-    c:\windows\system32\MRT.exe
2016-11-08 19:28 . 2014-04-17 23:48    192216    —-a-w-    c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-10-26 11:59 . 2010-11-21 03:27    485032    —-a-w-    c:\windows\system32\MpSigStub.exe
2016-10-07 15:12 . 2016-11-09 05:38    44032    —-a-w-    c:\windows\apppatch\acwow64.dll
2016-09-12 21:17 . 2016-10-12 08:58    77032    —-a-w-    c:\windows\system32\CompatTelRunner.exe
2016-09-12 21:08 . 2016-10-12 08:58    1226752    —-a-w-    c:\windows\system32\aeinv.dll
2016-09-12 21:08 . 2016-10-12 08:57    107520    —-a-w-    c:\windows\system32\adsmsext.dll
2016-09-12 20:49 . 2016-10-12 08:57    76800    —-a-w-    c:\windows\SysWow64\adsmsext.dll
2016-09-12 19:08 . 2016-10-12 08:57    1251328    —-a-w-    c:\windows\SysWow64\DWrite.dll
2016-09-12 18:43 . 2016-10-12 08:57    1180160    —-a-w-    c:\windows\system32\FntCache.dll
2016-09-12 18:43 . 2016-10-12 08:57    1648128    —-a-w-    c:\windows\system32\DWrite.dll
2016-09-09 15:54 . 2016-10-12 08:58    586752    —-a-w-    c:\windows\system32\generaltel.dll
2016-09-09 15:54 . 2016-10-12 08:58    314368    —-a-w-    c:\windows\system32\invagent.dll
2016-09-09 15:54 . 2016-10-12 08:58    575488    —-a-w-    c:\windows\system32\devinv.dll
2016-09-09 15:54 . 2016-10-12 08:58    273408    —-a-w-    c:\windows\system32\centel.dll
2016-09-09 15:54 . 2016-10-12 08:58    224256    —-a-w-    c:\windows\system32\aepic.dll
2016-09-09 15:54 . 2016-10-12 08:58    1629184    —-a-w-    c:\windows\system32\appraiser.dll
2016-09-09 15:54 . 2016-10-12 08:58    129024    —-a-w-    c:\windows\system32\acmigration.dll
2016-09-08 20:34 . 2016-10-12 08:57    263680    —-a-w-    c:\windows\system32\WebClnt.dll
2016-09-08 20:34 . 2016-10-12 08:57    108544    —-a-w-    c:\windows\system32\davclnt.dll
2016-09-08 20:34 . 2016-10-12 08:57    208896    —-a-w-    c:\windows\SysWow64\WebClnt.dll
2016-09-08 20:34 . 2016-10-12 08:57    87040    —-a-w-    c:\windows\SysWow64\davclnt.dll
2016-09-08 14:55 . 2016-10-12 08:57    142336    —-a-w-    c:\windows\system32\drivers\mrxdav.sys
2016-09-08 14:55 . 2016-10-12 08:57    106496    —-a-w-    c:\windows\system32\drivers\dfsc.sys
2016-08-29 15:31 . 2016-10-12 08:56    14183424    —-a-w-    c:\windows\system32\shell32.dll
2016-08-29 15:31 . 2016-10-12 08:56    1867776    —-a-w-    c:\windows\system32\ExplorerFrame.dll
2016-08-29 15:31 . 2016-10-12 08:56    1941504    —-a-w-    c:\windows\system32\authui.dll
2016-08-29 15:12 . 2016-10-12 08:56    1499648    —-a-w-    c:\windows\SysWow64\ExplorerFrame.dll
2016-08-29 15:12 . 2016-10-12 08:56    1806848    —-a-w-    c:\windows\SysWow64\authui.dll
2016-08-29 15:04 . 2016-10-12 08:56    3229696    —-a-w-    c:\windows\explorer.exe
2016-08-29 14:55 . 2016-10-12 08:56    2972672    —-a-w-    c:\windows\SysWow64\explorer.exe
2016-08-16 20:40 . 2016-10-12 08:56    343552    —-a-w-    c:\windows\system32\drivers\usbhub.sys
2016-08-16 20:40 . 2016-10-12 08:56    99840    —-a-w-    c:\windows\system32\drivers\usbccgp.sys
2016-08-16 20:40 . 2016-10-12 08:56    56320    —-a-w-    c:\windows\system32\drivers\usbehci.sys
2016-08-16 20:40 . 2016-10-12 08:56    327168    —-a-w-    c:\windows\system32\drivers\usbport.sys
2016-08-16 20:40 . 2016-10-12 08:56    25600    —-a-w-    c:\windows\system32\drivers\usbohci.sys
2016-08-16 20:40 . 2016-10-12 08:56    30720    —-a-w-    c:\windows\system32\drivers\usbuhci.sys
2016-08-16 20:40 . 2016-10-12 08:56    7808    —-a-w-    c:\windows\system32\drivers\usbd.sys
2016-08-16 17:36 . 2016-09-14 16:30    1009152    —-a-w-    c:\windows\system32\user32.dll
2016-08-16 02:48 . 2016-09-14 16:30    833024    —-a-w-    c:\windows\SysWow64\user32.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2016-11-07 22:53    223552    —-a-w-    c:\users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2016-11-07 22:53    223552    —-a-w-    c:\users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2016-11-07 22:53    223552    —-a-w-    c:\users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2016-11-07 22:53    223552    —-a-w-    c:\users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2016-11-07 22:53    223552    —-a-w-    c:\users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2016-11-07 22:53    223552    —-a-w-    c:\users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2016-11-07 22:53    223552    —-a-w-    c:\users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2016-11-07 22:53    223552    —-a-w-    c:\users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2016-10-13 2860832]
"f.lux"="c:\users\Jason\AppData\Local\FluxSoftware\Flux\flux.exe" [2013-10-23 1017224]
"Dropbox Update"="c:\users\Jason\AppData\Local\Dropbox\Update\DropboxUpdate.exe" [2016-11-11 143144]
"iFunBox"="c:\program files (x86)\i-Funbox DevTeam\iFunBox_x64.exe" [2015-07-27 2783232]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2016-01-29 594992]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2016-11-11 9044392]
.
c:\users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Jason\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2016-11-12 25673776]
OneNote 2010 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2015-10-13 228552]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2014-6-26 1396992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)
"SynchronousMachineGroupPolicy"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages    REG_MULTI_SZ       scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]
@=""
.
R2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe [x]
R2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 DirMngr;DirMngr;c:\program files (x86)\GNU\GnuPG\dirmngr.exe;c:\program files (x86)\GNU\GnuPG\dirmngr.exe [x]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 WsAppService;Wondershare Application Framework Service;c:\program files (x86)\Wondershare\WAF\2.3.0.5\WsAppService.exe;c:\program files (x86)\Wondershare\WAF\2.3.0.5\WsAppService.exe [x]
R3 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 CT_U_USBWAN4019;USB-NDIS miniport 4019;c:\windows\system32\DRIVERS\CT_U_USBWAN.sys;c:\windows\SYSNATIVE\DRIVERS\CT_U_USBWAN.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service;c:\program files\DAEMON Tools Lite\DiscSoftBusService.exe;c:\program files\DAEMON Tools Lite\DiscSoftBusService.exe [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 Generalusbserialser2204;Legacy Serial Communication 2204;c:\windows\system32\DRIVERS\CT_U_USBSER_C.sys;c:\windows\SYSNATIVE\DRIVERS\CT_U_USBSER_C.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.141\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.141\McCHSvc.exe [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 OCUSBVID;Oculus Tracker Service;c:\windows\system32\DRIVERS\OCUSBVID.sys;c:\windows\SYSNATIVE\DRIVERS\OCUSBVID.sys [x]
R3 rvrsbdib;rvrsbdib;c:\windows\system32\drivers\ngiodriver_x64;c:\windows\SYSNATIVE\drivers\ngiodriver_x64 [x]
R3 SAlphamHid;SteelHIDSvc;c:\windows\system32\DRIVERS\SAlpham64.sys;c:\windows\SYSNATIVE\DRIVERS\SAlpham64.sys [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssudserd.sys [x]
R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 usbUDisc;usbUDisc;c:\windows\system32\DRIVERS\USBDrv_AMD64.sys;c:\windows\SYSNATIVE\DRIVERS\USBDrv_AMD64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WsDrvInst;Wondershare Driver Install Service;c:\program files (x86)\Wondershare\Dr.Fone for iOS\DriverInstall.exe;c:\program files (x86)\Wondershare\Dr.Fone for iOS\DriverInstall.exe [x]
R3 ztemtusbser;ZTEMT Legacy Serial Communication;c:\windows\system32\DRIVERS\CT_ZTEMT_U_USBSER.sys;c:\windows\SYSNATIVE\DRIVERS\CT_ZTEMT_U_USBSER.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys [x]
S0 vsock;vSockets Driver;c:\windows\system32\drivers\vsock.sys;c:\windows\SYSNATIVE\drivers\vsock.sys [x]
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys;c:\windows\SYSNATIVE\drivers\aswKbd.sys [x]
S1 aswNetSec;aswNetSec;c:\windows\system32\drivers\aswNetSec.sys;c:\windows\SYSNATIVE\drivers\aswNetSec.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 nm3;Microsoft Network Monitor 3 Driver;c:\windows\system32\DRIVERS\nm3.sys;c:\windows\SYSNATIVE\DRIVERS\nm3.sys [x]
S1 ZAM;ZAM Helper Driver;c:\windows\System32\drivers\zam64.sys;c:\windows\SYSNATIVE\drivers\zam64.sys [x]
S1 ZAM_Guard;ZAM Guard Driver;c:\windows\System32\drivers\zamguard64.sys;c:\windows\SYSNATIVE\drivers\zamguard64.sys [x]
S2 AcuWVSSchedulerv7;Acunetix WVS Scheduler v7;c:\program files (x86)\Acunetix\Web Vulnerability Scanner 7\WVSScheduler7.exe;c:\program files (x86)\Acunetix\Web Vulnerability Scanner 7\WVSScheduler7.exe [x]
S2 ADUServiceNSRT;ADU Service (Nokia Software Recovery Tool);c:\program files (x86)\Common Files\Microsoft\Care Suite\ADUService\ADUService.exe;c:\program files (x86)\Common Files\Microsoft\Care Suite\ADUService\ADUService.exe [x]
S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 avast! Firewall;Avast Firewall;c:\program files\AVAST Software\Avast\afwServ.exe;c:\program files\AVAST Software\Avast\afwServ.exe [x]
S2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [x]
S2 BstHdUpdaterSvc;BlueStacks Updater Service;c:\program files (x86)\BlueStacks\HD-UpdaterService.exe;c:\program files (x86)\BlueStacks\HD-UpdaterService.exe [x]
S2 CalendarSynchService;CalendarSynchService;c:\program files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe;c:\program files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 HitmanProScheduler;HitmanPro Scheduler;c:\program files\HitmanPro\hmpsched.exe;c:\program files\HitmanPro\hmpsched.exe [x]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [x]
S2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;c:\program files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe;c:\program files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TenorshareReibootService;TenorshareReibootService;c:\program files (x86)\ReiBoot\TenorshareReibootService.exe;c:\program files (x86)\ReiBoot\TenorshareReibootService.exe [x]
S2 UDisk Monitor;UDisk Monitor;c:\program files\Reliance 3\bin\MonServiceUDisk.exe;c:\program files\Reliance 3\bin\MonServiceUDisk.exe [x]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [x]
S2 ZAMSvc;ZAM Controller Service;c:\program files (x86)\Zemana AntiMalware\ZAM.exe;c:\program files (x86)\Zemana AntiMalware\ZAM.exe [x]
S3 aswNetNd6;Avast Firewall NDIS6 Helper;c:\windows\system32\DRIVERS\aswNetNd6.sys;c:\windows\SYSNATIVE\DRIVERS\aswNetNd6.sys [x]
S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe [x]
S3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys;c:\windows\SYSNATIVE\DRIVERS\btwampfl.sys [x]
S3 busenum;SteelBusSvc;c:\windows\system32\DRIVERS\SteelBus64.sys;c:\windows\SYSNATIVE\DRIVERS\SteelBus64.sys [x]
S3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus;c:\windows\system32\DRIVERS\dtlitescsibus.sys;c:\windows\SYSNATIVE\DRIVERS\dtlitescsibus.sys [x]
S3 dtliteusbbus;DAEMON Tools Lite Virtual USB Bus;c:\windows\system32\DRIVERS\dtliteusbbus.sys;c:\windows\SYSNATIVE\DRIVERS\dtliteusbbus.sys [x]
S3 dtultrascsibus;DAEMON Tools Ultra Virtual SCSI Bus;c:\windows\system32\DRIVERS\dtultrascsibus.sys;c:\windows\SYSNATIVE\DRIVERS\dtultrascsibus.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
S3 tihub3;TI USB3 Hub Service;c:\windows\system32\DRIVERS\tihub3.sys;c:\windows\SYSNATIVE\DRIVERS\tihub3.sys [x]
S3 tixhci;TI XHCI Service;c:\windows\system32\drivers\tixhci.sys;c:\windows\SYSNATIVE\drivers\tixhci.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation    REG_MULTI_SZ       SSDPSRV upnphost SCardSvr QWAVE wcncsvc
Atamechterfu    REG_MULTI_SZ       Atamechterfu
WinSAPSvc    REG_MULTI_SZ       WinSAPSvc
ArcherGroupEx    REG_MULTI_SZ       Archer
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A6EADE66-0000-0000-484E-7E8A45000000}]
2016-06-30 11:55    322232    —-a-w-    c:\program files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll
.
Contents of the 'Scheduled Tasks' folder
.
2016-11-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-12 20:59]
.
2016-11-12 c:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-4001190308-645597301-758162152-1001Core.job
- c:\users\Jason\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18 16:53]
.
2016-11-12 c:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-4001190308-645597301-758162152-1001UA.job
- c:\users\Jason\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18 16:53]
.
2016-11-11 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4001190308-645597301-758162152-1001Core.job
- c:\users\Jason\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-19 07:56]
.
2016-11-12 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4001190308-645597301-758162152-1001UA.job
- c:\users\Jason\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-19 07:56]
.
2016-11-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2016-07-09 19:22]
.
2016-11-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2016-07-09 19:22]
.
2016-11-11 c:\windows\Tasks\HPCeeScheduleForJason.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16 04:21]
.
.
——— X64 Entries ———–
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2016-11-11 20:35    1031520    —-a-w-    c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2016-09-09 176440]
"ZAM"="c:\program files (x86)\Zemana AntiMalware\ZAM.exe" [2016-10-04 13823216]
.
——- Supplementary Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = www.google.com
mDefault_Page_URL = www.google.com
mDefault_Search_URL = www.google.com
uSearchAssistant = hxxp://www.google.com
TCP: DhcpNameServer = 192.168.0.1 192.168.0.1
FF - ProfilePath - c:\users\Jason\AppData\Roaming\Mozilla\Firefox\Profiles\tseaflte.default-1477925802081\
FF - prefs.js: network.proxy.type - 0
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-10 - (no file)
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
AddRemove-LocK-A-FoLdeR - c:\program files (x86)\LocK-A-FoLdeR\Uninstall.exe
AddRemove-Popcorn Time_is1 - c:\program files (x86)\Popcorn Time\unins000.exe
AddRemove-Seagate File Recovery for WindowsNSIS - c:\program files (x86)\Seagate File Recovery for Windows\Uninstall.exe
AddRemove-Yahoo! Messenger - c:\progra~2\Yahoo!\MESSEN~1\UNWISE.EXE
AddRemove-Yahoo! Software Update - c:\progra~2\Yahoo!\SOFTWA~1\UNINST~1.EXE
AddRemove-{050d4fc8-5d48-4b8f-8972-47c82c46020f} - c:\programdata\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe
AddRemove-{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f} - c:\programdata\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
AddRemove-{6CD59E5D-7E58-56CC-FF76-BB3EDFE18590} - c:\progra~3\INSTAL~1\{A5C1C~1\Setup.exe
AddRemove-{79C54A05-F146-4EA0-8A70-D4EFE6181E52} - c:\program files (x86)\InstallShield Installation Information\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}\setup.exe
AddRemove-{7D96C1E5-E641-E30A-2ED3-C895886A09CB} - c:\progra~3\INSTAL~1\{AAB93~1\Setup.exe
AddRemove-{8633c9e1-373f-4783-8f17-ba964d9e2eb9} - c:\programdata\Package Cache\{8633c9e1-373f-4783-8f17-ba964d9e2eb9}\Bootstrapper.exe
AddRemove-{b648d7cb-1b81-4465-8010-aa9cc396c3f2} - c:\programdata\Package Cache\{b648d7cb-1b81-4465-8010-aa9cc396c3f2}\Bootstrapper.exe
AddRemove-{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6} - c:\programdata\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe
AddRemove-{CAA2648E-1A13-62D5-08F6-F88D74B4149B} - c:\progra~3\INSTAL~1\{97EAB~1\Setup.exe
AddRemove-{f65db027-aff3-4070-886a-0d87064aabb1} - c:\programdata\Package Cache\{f65db027-aff3-4070-886a-0d87064aabb1}\vcredist_x86.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\rvrsbdib]
"ImagePath"="\??\c:\windows\system32\drivers\ngiodriver_x64"
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_USERS\S-1-5-21-4001190308-645597301-758162152-1001\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)
"datasecu"=hex:05,fa,a1,7b,8d,6d,45,7e,04,65,5d,08,fc,58,01,ec,4a,b8,e7,fb,68,
   71,d4,83,01,55,e9,de,85,e3,77,ad,a4,8f,d8,83,93,bb,20,95,ce,c4,6a,fb,64,cf,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_USERS\S-1-5-21-4001190308-645597301-758162152-1001_Classes\Wow6432Node\CLSID\{5e0f0aa5-1bda-4373-9123-38030f3580aa}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:000000a5
"Therad"=dword:00000020
"MData"=hex(0):2b,8f,78,29,5a,0c,ce,ec,48,d4,68,e5,9f,6a,96,3e,ab,de,c5,81,26,
   38,95,44,1b,04,dc,af,62,33,34,31,97,18,c9,f8,3e,8c,70,aa,d2,f0,7c,4e,78,16,\
.
[HKEY_USERS\S-1-5-21-4001190308-645597301-758162152-1001_Classes\Wow6432Node\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"scansk"=hex(0):8f,c8,80,14,60,54,0b,48,6b,5b,4c,11,d1,4e,f8,7f,3f,72,ef,d7,11,
   52,3f,67,e0,09,6e,b3,6a,61,03,a5,52,69,19,3a,48,63,f8,43,00,00,00,00,00,00,\
.
[HKEY_LOCAL_MACHINE\software\BlueStacks]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_23_0_0_207_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_23_0_0_207_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_23_0_0_207_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_23_0_0_207_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_23_0_0_207.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.23"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_23_0_0_207.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_23_0_0_207.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_23_0_0_207.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0\Alias]
@=""
"0"="ActionsPane Schema for Add-Ins"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@DACL=(02 0018)
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@DACL=(02 0018)
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@DACL=(02 0018)
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@DACL=(02 0018)
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@DACL=(02 0018)
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@DACL=(02 0018)
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@DACL=(02 0018)
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@DACL=(02 0018)
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@DACL=(02 0018)
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2016-11-13  05:41:00
ComboFix-quarantined-files.txt  2016-11-13 00:10
.
Pre-Run: 34,377,760,768 bytes free
Post-Run: 33,317,761,024 bytes free
.
- - End Of File - - C58748D1665CC2C153CF1D04767EE77A
A36C5E4F47E84449FF07ED3517B43A31
 

At least that eliminated some possibilities but there are still infections on your computer.

 

Download TFC to your desktop

  • close any open windows
  • double click the TFC icon to run the program
  • TFC will close all open programs itself in order to run
  • click the Start button to begin the process
  • allow TFC to run uninterrupted
  • the program should not take long to finish it's job
  • once its finished it should automatically reboot your machine
  • if it doesn't, manually reboot to ensure a complete clean.

================================================

Download/run Rkill:

Please download Rkill from one of the following links and save to your Desktop:

Please download Rkill from one of the following links and save to your Desktop:

Link One
Link Two
Link Three
Link Four

  • on Windows XP double-click on the Rkill desktop icon to run the tool
  • on Windows Vista/Windows 7 or 8, right-click on the Rkill desktop icon and select Run As Administrator
  • a black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully
  • if not, delete the file, then download and use the one provided in Link 2
  • if it does not work, repeat the process and attempt to use one of the remaining links until the tool runs
  • if the tool does not run from any of the links provided, please let me know
  • do not reboot the computer or you will need to run the application again
  • please leave Rkill on the Desktop until otherwise advised.

Note: If your security software warns about Rkill, please ignore and allow the download to continue.

When you've done that, try running RogueKiller again and please send the result of the 2 logs.

Thanks

Satchfan

 

Rkill 2.8.4 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2016 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 11/13/2016 06:16:59 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * No malware processes found to kill.

Possibly Patched Files.

 * C:\Windows\system32\taskhost.exe
 * C:\Windows\system32\Dwm.exe
 * C:\Windows\Explorer.EXE
 * C:\Windows\system32\taskeng.exe
 * C:\Windows\system32\conhost.exe

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * Windows Defender Disabled

   [HKLM\SOFTWARE\Policies\Microsoft\Windows Defender]
   "DisableAntiSpyware" = dword:00000001

Checking Windows Service Integrity:

 * Windows Defender (WinDefend) is not Running.
   Startup Type set to: Manual

 * TBS [Missing Service]

Searching for Missing Digital Signatures:

 * C:\Windows\System32\browser.dll : 1,36,704 : 07/05/2012 03:43 AM : 05f5a0d14a2ee1d8255c2aa0e9e8e694 [NoSig]
 +-> C:\Windows\erdnt\cache64\browser.dll : 1,36,704 : 07/05/2012 03:43 AM : 05f5a0d14a2ee1d8255c2aa0e9e8e694 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-browserservice_31bf3856ad364e35_6.1.7601.17514_none_d70f2c28b49dffae\browser.dll : 1,36,192 : 11/21/2010 08:54 AM : 8ef0d5c41ec907751b8429162b1239ed [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-browserservice_31bf3856ad364e35_6.1.7601.17887_none_d6c68344b4d406bf\browser.dll : 1,36,704 : 07/05/2012 03:43 AM : 05f5a0d14a2ee1d8255c2aa0e9e8e694 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-browserservice_31bf3856ad364e35_6.1.7601.22044_none_d7783703cdd41e02\browser.dll : 1,36,704 : 07/05/2012 03:36 AM : 156768abae1daf29ba0b0c05c21fef09 [Pos Repl]

 * C:\Windows\System32\cngaudit.dll : 18,944 : 07/14/2009 07:10 AM : 86fe1b1f8fd42cd0db641ab1cdb13093 [NoSig]
 +-> C:\Windows\erdnt\cache64\cngaudit.dll : 18,944 : 07/14/2009 07:10 AM : 86fe1b1f8fd42cd0db641ab1cdb13093 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\cngaudit.dll : 12,288 : 07/14/2009 06:45 AM : 50ba656134f78af64e4dd3c8b6fefd7e [Pos Repl]
 +-> C:\Windows\SysWOW64\cngaudit.dll : 12,288 : 07/14/2009 06:45 AM : 50ba656134f78af64e4dd3c8b6fefd7e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll : 18,944 : 07/14/2009 07:10 AM : 86fe1b1f8fd42cd0db641ab1cdb13093 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll : 12,288 : 07/14/2009 06:45 AM : 50ba656134f78af64e4dd3c8b6fefd7e [Pos Repl]

 * C:\Windows\System32\comctl32.dll : 6,33,856 : 04/24/2015 11:47 PM : 51f89ce2d0fec66070354504e6c4c3e4 [NoSig]
 +-> C:\Windows\erdnt\cache64\comctl32.dll : 6,33,856 : 04/24/2015 11:47 PM : 51f89ce2d0fec66070354504e6c4c3e4 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\comctl32.dll : 5,30,432 : 04/24/2015 11:26 PM : 58788565442368b0615ddaf1d452b843 [Pos Repl]
 +-> C:\Windows\SysWOW64\comctl32.dll : 5,30,432 : 04/24/2015 11:26 PM : 58788565442368b0615ddaf1d452b843 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.17514_none_97c2246fee970dbb\comctl32.dll : 6,33,856 : 11/21/2010 08:54 AM : 14dfdeaf4e589ed3f1ff187a86b9408c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.18201_none_97c9d703ee91c7f1\comctl32.dll : 6,33,856 : 07/04/2013 06:20 PM : 9028d1621c43df8dfbd1c76860412a11 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.18837_none_97af745feea4a2b8\comctl32.dll : 6,33,856 : 04/24/2015 11:47 PM : 51f89ce2d0fec66070354504e6c4c3e4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.22376_none_980cc5cd07e3aa05\comctl32.dll : 6,33,856 : 07/04/2013 05:40 PM : 4f3c5ce9ef990e1c62b7e7eba0eba1c2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.23039_none_983ae9e107c0a872\comctl32.dll : 6,33,856 : 04/24/2015 11:53 PM : 8b2db34ccd937cd4adf7de62c9e79069 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll : 6,33,856 : 11/21/2010 08:54 AM : 14dfdeaf4e589ed3f1ff187a86b9408c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll : 6,33,856 : 07/04/2013 06:20 PM : 9028d1621c43df8dfbd1c76860412a11 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll : 6,33,856 : 04/24/2015 11:47 PM : 51f89ce2d0fec66070354504e6c4c3e4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.22376_none_a6ba9bf96e3dcd13\comctl32.dll : 6,33,856 : 07/04/2013 05:40 PM : 4f3c5ce9ef990e1c62b7e7eba0eba1c2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.23039_none_a6b7fbc96e401250\comctl32.dll : 6,33,856 : 04/24/2015 11:53 PM : 8b2db34ccd937cd4adf7de62c9e79069 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll : 20,30,080 : 11/21/2010 08:53 AM : 7fa8fdc2c2a27817fd0f624e78d3b50c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52\comctl32.dll : 20,30,592 : 03/30/2015 08:45 AM : 4ae5551e961cc766cc1488a7a7e1a68f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll : 20,30,592 : 04/24/2015 11:42 PM : 271dc9a33422d9a85e3790a0af0a91ef [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.23011_none_e36c02c33101d537\comctl32.dll : 20,30,592 : 03/30/2015 08:45 AM : 47b2383ef858719225311a4a259a4cd6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.23039_none_e36d4d173100d4ed\comctl32.dll : 20,30,592 : 04/24/2015 11:45 PM : e6fd06e7948b35b604cf188b554e9760 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.17514_none_3ba388ec36399c85\comctl32.dll : 5,30,432 : 11/21/2010 08:53 AM : bdac1aa64495d0f7e1ff810ebbf1f018 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.18201_none_3bab3b80363456bb\comctl32.dll : 5,30,432 : 07/04/2013 05:20 PM : 75f5e1fe8d55cf8e577e0ec5f2290d3f [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.18837_none_3b90d8dc36473182\comctl32.dll : 5,30,432 : 04/24/2015 11:26 PM : 58788565442368b0615ddaf1d452b843 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.22376_none_3bee2a494f8638cf\comctl32.dll : 5,30,432 : 07/04/2013 05:24 PM : 700bd5a6aa5381d1d8adc4045149dbf6 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.23039_none_3c1c4e5d4f63373c\comctl32.dll : 5,30,432 : 04/24/2015 11:30 PM : 71dd9528dd7d36eb853020401d66089d [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll : 5,30,432 : 11/21/2010 08:54 AM : bdac1aa64495d0f7e1ff810ebbf1f018 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_ec80f00e8593ece5\comctl32.dll : 5,30,432 : 07/04/2013 05:20 PM : 75f5e1fe8d55cf8e577e0ec5f2290d3f [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll : 5,30,432 : 04/24/2015 11:26 PM : 58788565442368b0615ddaf1d452b843 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.22376_none_ee67d2d082b9f619\comctl32.dll : 5,30,432 : 07/04/2013 05:24 PM : 700bd5a6aa5381d1d8adc4045149dbf6 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.23039_none_ee6532a082bc3b56\comctl32.dll : 5,30,432 : 04/24/2015 11:30 PM : 71dd9528dd7d36eb853020401d66089d [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll : 16,80,896 : 11/21/2010 08:53 AM : 352b3dc62a0d259a82a052238425c872 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_41e554362bd82458\comctl32.dll : 16,80,896 : 03/30/2015 08:32 AM : 346daa8204508a44b7211cc28b830cc5 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll : 16,80,896 : 04/24/2015 11:24 PM : 885e18b2d0a445fb637850282530eb72 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.23011_none_2b19399a457dfe3d\comctl32.dll : 16,80,896 : 03/30/2015 08:30 AM : 791206e0343ad8e61826e063f2e4c885 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.23039_none_2b1a83ee457cfdf3\comctl32.dll : 16,80,896 : 04/24/2015 11:27 PM : f7f754ddaa6af9d3f3549f7013bfdf70 [Pos Repl]

 * C:\Windows\System32\comres.dll : 12,97,408 : 07/14/2009 06:56 AM : 1a47d52e303b7543e4e6026595b95422 [NoSig]
 +-> C:\Windows\erdnt\cache64\comres.dll : 12,97,408 : 07/14/2009 06:56 AM : 1a47d52e303b7543e4e6026595b95422 [Pos Repl]
 +-> C:\Windows\SysWOW64\comres.dll : 12,97,408 : 07/14/2009 06:34 AM : 808d8a8b2a3074002852bc856d419576 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-complus.res_31bf3856ad364e35_6.1.7600.16385_none_88a5cc7effe2dfca\comres.dll : 12,97,408 : 07/14/2009 06:56 AM : 1a47d52e303b7543e4e6026595b95422 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-com-complus.res_31bf3856ad364e35_6.1.7600.16385_none_2c8730fb47856e94\comres.dll : 12,97,408 : 07/14/2009 06:34 AM : 808d8a8b2a3074002852bc856d419576 [Pos Repl]

 * C:\Windows\System32\conhost.exe : 3,38,432 : 10/07/2016 08:31 PM : e21493887e77353fd489699848ec84f0 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.17514_none_d281ccc018b94ff4\conhost.exe : 3,37,920 : 11/21/2010 08:53 AM : bd51024fb014064bc9fe8c715c18392f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.17641_none_d25e5e0418d454e9\conhost.exe : 3,38,432 : 06/01/2012 09:52 AM : 448bf22538f1dfcb3412ae2b1cf123a9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.17965_none_d24cc50618e0e99c\conhost.exe : 3,38,432 : 10/04/2012 08:51 PM : 3326166011c9bc13d6a8efd856e9921c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18015_none_d282acc418b89129\conhost.exe : 3,38,432 : 11/30/2012 08:53 AM : 1bcdb508143b517f21bbdac10f5777bf [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18229_none_d27be1cc18bd0cc4\conhost.exe : 3,38,432 : 08/02/2013 06:39 AM : bf95ea5809e3bbf55370f7cb309febd0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18798_none_d22f3b8c18f6a8c7\conhost.exe : 3,38,432 : 03/17/2015 10:45 AM : a32ca33e8692da882133341af31a4c36 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18839_none_d2711d4418c5179f\conhost.exe : 3,38,432 : 04/28/2015 00:52 AM : e55a72876bc5e244d0a8f7f07862a939 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18847_none_d2644cc418cf00e2\conhost.exe : 3,38,432 : 05/09/2015 08:55 AM : bbfa57e64ce337686c2bc3f56881d55b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18869_none_d250ad8018dd6b72\conhost.exe : 3,38,432 : 05/25/2015 11:48 PM : 48c30c54194142910fb6b86d308220ed [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18923_none_d275ed5a18c260cb\conhost.exe : 3,38,432 : 07/15/2015 08:48 AM : f8890f47a431717704be784917dda2f6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18933_none_d26b1d6e18ca7cbc\conhost.exe : 3,38,432 : 07/15/2015 11:39 PM : 354d59027de2bfb3a63e8e7dbaf081d8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18939_none_d2711f2a18c514c6\conhost.exe : 3,38,432 : 07/23/2015 05:31 AM : 6cba747b9cfbc875c59d9bc3eca6e77e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.19018_none_d28596da18b5f6cf\conhost.exe : 3,38,432 : 09/29/2015 08:39 AM : 5401c9d2f4b0a98b60259c621ddf1eb6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.19045_none_d262263818d0fe9d\conhost.exe : 3,38,432 : 10/20/2015 06:34 AM : 0ea14ee0c4b1da2447e36fd3e183c015 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.19110_none_d27d967018bd293e\conhost.exe : 3,38,432 : 12/30/2015 11:20 PM : 7ac830607d940a3dabb8e5eb6eb22df2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.19131_none_d268f6e218cc7a77\conhost.exe : 3,38,432 : 01/16/2016 11:20 PM : 27c89e88c03a38eff4997ec2c69564d2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.19135_none_d26cf80a18c8dfd3\conhost.exe : 3,38,432 : 01/22/2016 10:37 AM : 0164ab7d14560dce1b879e4f7cdb2faf [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.19160_none_d24786d418e5b4f3\conhost.exe : 3,38,432 : 02/11/2016 11:11 PM : 94c5b49d3e89ce9e02a6d6133a4f4321 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.21756_none_d2e22c5531f58f57\conhost.exe : 3,38,432 : 06/01/2012 09:52 AM : e86156efe7acd220dc5e705f1f735e05 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22125_none_d30179a331de4ce4\conhost.exe : 3,38,432 : 10/04/2012 08:48 PM : d1f53bedd4c2288af00142f74928ee0e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22177_none_d2cd6a9b32050b47\conhost.exe : 3,38,432 : 11/30/2012 11:19 AM : b19b30e594ee374c69f71dad26198400 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22209_none_d31b1c8931ca7785\conhost.exe : 3,38,432 : 01/04/2013 08:47 AM : a31ed9834a85e049585f95413a30c755 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22379_none_d2cf6efb32033843\conhost.exe : 3,38,432 : 07/08/2013 08:42 AM : 1405589128012abf97cdaa99073d4fd0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22411_none_d3084e1931d9c30c\conhost.exe : 3,38,432 : 08/02/2013 10:47 AM : f6018be264b73eeceda885fa250c5962 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22436_none_d2f7afb331e579a1\conhost.exe : 3,38,432 : 08/29/2013 06:44 AM : d62757257b2dcbd15b1ba9ea3b385c1a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22616_none_d30d535731d53c0d\conhost.exe : 3,38,432 : 03/04/2014 04:37 PM : abea1c74f6e876be8b98bb3c541bc882 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22653_none_d2df12c931f85fcc\conhost.exe : 3,38,432 : 04/12/2014 08:01 AM : e1936d112524bdc9bd05ce3eb9184088 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23002_none_d313ffef31d0e577\conhost.exe : 3,38,432 : 03/17/2015 10:40 AM : 98177f6a2c466346b9ab0705adabadd1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23040_none_d2e6bfab31f3228d\conhost.exe : 3,38,432 : 04/28/2015 00:46 AM : e2729a52bb10a9cbdb9ebae1a4827c4c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23049_none_d2efc24531eb069c\conhost.exe : 3,38,432 : 05/09/2015 11:34 AM : fa0fd0eb07bd1ddd05b6d0f9f8946a7e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23072_none_d2c8507b3209a90e\conhost.exe : 3,38,432 : 05/25/2015 11:51 PM : 64fe1240e6a96bf5da214584e7de573a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23126_none_d302632531dd7fdc\conhost.exe : 3,38,432 : 07/15/2015 08:49 AM : 373b58d7ef37ad455c4db675dacf5ee3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23136_none_d2f7933931e59bcd\conhost.exe : 3,38,432 : 07/15/2015 11:38 PM : 38bf3d598bb0e13dd34830617d73340c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23142_none_d2e8c22531f15262\conhost.exe : 3,38,432 : 07/23/2015 03:32 AM : 56e38401e9079d946b2306e4a1f287bc [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23153_none_d2def28331f887aa\conhost.exe : 3,38,432 : 08/04/2015 11:41 PM : 698e157678a5f55edfd3c9794bf340df [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23223_none_d2ff642d31e030fe\conhost.exe : 3,38,432 : 09/28/2015 11:45 PM : c0e65249395f90a77563aa86166084ef [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23226_none_d302650b31dd7d03\conhost.exe : 3,38,432 : 10/01/2015 11:35 PM : c149e8ce2d8506b93dc320e7de468ec9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23250_none_d2dbf38b31fb38cc\conhost.exe : 3,38,432 : 10/20/2015 06:40 AM : 1820c1501024021960c88c47288aac58 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23313_none_d30a35ff31d81234\conhost.exe : 3,38,432 : 12/30/2015 11:27 PM : a474c99bebcdb466da882bf2a6ef5b50 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23334_none_d2f5967131e7636d\conhost.exe : 3,38,432 : 01/17/2016 04:55 AM : 5bfb5ef722ebbe7e652cf6450f3f8cda [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23338_none_d2f9979931e3c8c9\conhost.exe : 3,38,432 : 01/22/2016 11:57 AM : 1ba221073058f25ab97a9bd200c17850 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23349_none_d2efc7f731eafe11\conhost.exe : 3,38,432 : 02/10/2016 11:17 PM : e11c0cab2e5e2308f706a7c4fecc6dab [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23391_none_d2b1b60b321abf0e\conhost.exe : 3,38,432 : 03/16/2016 11:11 PM : 2d4a5babdb591eb789de8306bca1f449 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23392_none_d2b2b6553219d865\conhost.exe : 3,38,432 : 03/18/2016 03:14 AM : 3d6ae177faf7e3296251ddb05773618e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23418_none_d30f395731d38e0e\conhost.exe : 3,38,432 : 04/09/2016 11:18 AM : 46392e6bddcb04cbd4d48be01d3ca715 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23539_none_d2fa9baf31e2dc6e\conhost.exe : 3,38,432 : 09/02/2016 08:28 PM : 9ae1fcec20546d3fb24dd568bfe74223 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23543_none_d2e9ca0731f06055\conhost.exe : 3,38,432 : 09/09/2016 11:18 PM : 4e9e8889c38522b5a2027c38c3beb3a2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23569_none_d2da2beb31fb3041\conhost.exe : 3,38,432 : 10/07/2016 08:31 PM : e21493887e77353fd489699848ec84f0 [Pos Repl]

 * C:\Windows\System32\cryptsvc.dll : 1,90,976 : 06/14/2016 10:46 PM : bb724567892383010b8436dcc0a84628 [NoSig]
 +-> C:\Windows\erdnt\cache64\cryptsvc.dll : 1,90,976 : 06/14/2016 10:46 PM : bb724567892383010b8436dcc0a84628 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\cryptsvc.dll : 1,45,920 : 06/14/2016 08:51 PM : 6f8e0d147e53d4ce2f4d975ab976e80a [Pos Repl]
 +-> C:\Windows\SysWOW64\cryptsvc.dll : 1,45,920 : 06/14/2016 08:51 PM : 6f8e0d147e53d4ce2f4d975ab976e80a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_d4259ed3b16ed82a\cryptsvc.dll : 1,77,152 : 11/21/2010 08:54 AM : 15597883fbe9b056f276ada3ad87d9af [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_d3fc6569b18d7211\cryptsvc.dll : 1,84,320 : 06/02/2012 11:11 AM : 9c01375be382e834cc26d1b7eaf2c4fe [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18150_none_d3f63f9bb1930797\cryptsvc.dll : 1,84,320 : 05/10/2013 11:19 AM : 7fdc4626b01106a8ef328c88c7c0dee3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_d3f73fe5b19220ee\cryptsvc.dll : 1,84,320 : 05/13/2013 11:21 AM : d8129c49798cbbfb2e4351d4b7b8ef9c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_d431528fb165f7bc\cryptsvc.dll : 1,84,320 : 07/09/2013 11:16 AM : 6b400f211bee880a37a1ed0368776bf4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18526_none_d41cb8b3b175406a\cryptsvc.dll : 1,87,904 : 07/07/2014 07:36 AM : 19d511cc455c19de1adf60e6c39c85b6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18741_none_d4021b35b189f3e7\cryptsvc.dll : 1,87,904 : 02/03/2015 09:00 AM : 1cd76a83b9e8e9a5a3519b39e28354d9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18839_none_d414ef57b17a9fd5\cryptsvc.dll : 1,88,416 : 04/28/2015 00:53 AM : 7bc3e861f7e8eb543a630090fae779e0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_d4ab184aca903d4f\cryptsvc.dll : 1,86,880 : 06/04/2012 01:22 PM : 7e7d2dacf65d750d466f36bd3d09ae20 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22321_none_d4a14e5aca976a0c\cryptsvc.dll : 1,86,880 : 05/10/2013 10:48 AM : ca13c4f92bee66db48e58ab3223ddf6e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_d4a24ea4ca968363\cryptsvc.dll : 1,86,880 : 05/11/2013 10:48 AM : 8122252f0a4acfa92fa0c1d50d18493b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_d45f6e88cac8f85b\cryptsvc.dll : 1,86,880 : 07/09/2013 08:17 PM : 434cce8e7150cd1324c5faa088d1d061 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22473_none_d46d4138cabe2596\cryptsvc.dll : 1,86,880 : 10/05/2013 07:55 AM : 509d31797a4b8a3d6ed78a330b19a919 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22736_none_d49b8778ca9af94c\cryptsvc.dll : 1,90,976 : 07/07/2014 07:36 AM : 63a15ba9875364c4147b226cb70468b3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22908_none_d4bdfb9cca80d275\cryptsvc.dll : 1,90,976 : 07/07/2014 07:36 AM : 63a15ba9875364c4147b226cb70468b3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22948_none_d492bbeccaa14239\cryptsvc.dll : 1,90,976 : 02/03/2015 09:20 AM : 00d0f7ba3b27126a3e25b540979a9f39 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.23040_none_d48a91becaa8aac3\cryptsvc.dll : 1,90,976 : 04/28/2015 00:47 AM : 0925e2beac4493c887099f850d69ba3b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.23468_none_d47cfbcecab1a1f9\cryptsvc.dll : 1,90,976 : 06/06/2016 10:20 PM : b1962e21f74697ab442fa4432b970e85 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.23471_none_d46b29dccac00c89\cryptsvc.dll : 1,90,976 : 06/14/2016 10:46 PM : bb724567892383010b8436dcc0a84628 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll : 1,36,192 : 11/21/2010 08:54 AM : a585bebf7d054bd9618eda0922d5484a [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_77ddc9e5f93000db\cryptsvc.dll : 1,40,288 : 06/02/2012 10:06 AM : 96c0e38905cfd788313be8e11dae3f2f [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18150_none_77d7a417f9359661\cryptsvc.dll : 1,40,288 : 05/10/2013 10:19 AM : 33adf6e0853ab39ea1723be82842c1d3 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_77d8a461f934afb8\cryptsvc.dll : 1,40,288 : 05/13/2013 10:15 AM : 3897dff247d9ed0006190349de264e14 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_7812b70bf9088686\cryptsvc.dll : 1,40,288 : 07/09/2013 10:16 AM : 7ca1becea5de2643addad32670e7a4c9 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18526_none_77fe1d2ff917cf34\cryptsvc.dll : 1,43,872 : 07/07/2014 07:10 AM : 623e143f2df17c0106a9988f5d7dc878 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18741_none_77e37fb1f92c82b1\cryptsvc.dll : 1,43,872 : 02/03/2015 08:42 AM : 49474b3e37969af4b5c076f42b623aff [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18839_none_77f653d3f91d2e9f\cryptsvc.dll : 1,43,872 : 04/28/2015 00:34 AM : 33f67bbcc3c0499d3f3382473114cfa8 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_788c7cc71232cc19\cryptsvc.dll : 1,42,336 : 06/02/2012 10:22 AM : 063dd65889d21035311463337bd268e7 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22321_none_7882b2d71239f8d6\cryptsvc.dll : 1,42,848 : 05/10/2013 10:36 AM : e122aa1c9a3cc46ff9ddde46e5eb0c58 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_7883b3211239122d\cryptsvc.dll : 1,42,848 : 05/11/2013 10:29 AM : ac04d05309bb2c418d0d80b9fb014642 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_7840d305126b8725\cryptsvc.dll : 1,42,848 : 07/09/2013 07:27 PM : 6db499defcc827317c5371164a7cdb27 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22473_none_784ea5b51260b460\cryptsvc.dll : 1,42,848 : 10/05/2013 07:22 AM : f2d9242c3bbd1c36467fcae1ae01733f [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22736_none_787cebf5123d8816\cryptsvc.dll : 1,45,920 : 07/07/2014 07:10 AM : 90bfc30e730a6760f1fee2a55f8ab029 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22908_none_789f60191223613f\cryptsvc.dll : 1,45,920 : 10/30/2014 07:44 AM : 3031b5dc2a58a7bce6651ea9b7dd6390 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22948_none_787420691243d103\cryptsvc.dll : 1,45,920 : 02/03/2015 09:01 AM : b97e16d36db7b7dd22c97857506fa58a [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.23040_none_786bf63b124b398d\cryptsvc.dll : 1,45,920 : 04/28/2015 00:25 AM : 59af628bef750ee470fd36751ca52137 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.23468_none_785e604b125430c3\cryptsvc.dll : 1,45,920 : 06/06/2016 08:53 PM : bec72ba50e703184ba0cf2dd06b707c8 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.23471_none_784c8e5912629b53\cryptsvc.dll : 1,45,920 : 06/14/2016 08:51 PM : 6f8e0d147e53d4ce2f4d975ab976e80a [Pos Repl]

 * C:\Windows\System32\csrss.exe : 7,680 : 07/14/2009 07:09 AM : 60c2862b4bf0fd9f582ef344c2b1ec72 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-csrss_31bf3856ad364e35_6.1.7600.16385_none_b4d8d57efdc6b4f3\csrss.exe : 7,680 : 07/14/2009 07:09 AM : 60c2862b4bf0fd9f582ef344c2b1ec72 [Pos Repl]

 * C:\Windows\System32\ctfmon.exe : 9,728 : 07/14/2009 07:09 AM : 42b6a94dd747df2b5f628a2752e62a98 [NoSig]
 +-> C:\Windows\erdnt\cache64\ctfmon.exe : 9,728 : 07/14/2009 07:09 AM : 42b6a94dd747df2b5f628a2752e62a98 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\ctfmon.exe : 8,704 : 07/14/2009 06:44 AM : 4a3cdcef8ed41b221f3dbef5792fb52d [Pos Repl]
 +-> C:\Windows\SysWOW64\ctfmon.exe : 8,704 : 07/14/2009 06:44 AM : 4a3cdcef8ed41b221f3dbef5792fb52d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..cesframework-ctfmon_31bf3856ad364e35_6.1.7600.16385_none_f9257e7aaa4290ce\ctfmon.exe : 9,728 : 07/14/2009 07:09 AM : 42b6a94dd747df2b5f628a2752e62a98 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-t..cesframework-ctfmon_31bf3856ad364e35_6.1.7600.16385_none_9d06e2f6f1e51f98\ctfmon.exe : 8,704 : 07/14/2009 06:44 AM : 4a3cdcef8ed41b221f3dbef5792fb52d [Pos Repl]

 * C:\Windows\System32\d3d8thk.dll : 12,288 : 07/14/2009 07:10 AM : 3044d07abdf4bbea27e2ee7b1e0c0c65 [NoSig]
 +-> C:\Windows\SysWOW64\d3d8thk.dll : 11,264 : 07/14/2009 06:45 AM : 77b1471a490b53b24efe136f09f76550 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-directx-direct3d9_31bf3856ad364e35_6.1.7601.17514_none_207372147765c03a\d3d8thk.dll : 12,288 : 07/14/2009 07:10 AM : 3044d07abdf4bbea27e2ee7b1e0c0c65 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-directx-direct3d9_31bf3856ad364e35_6.1.7601.17514_none_c454d690bf084f04\d3d8thk.dll : 11,264 : 07/14/2009 06:45 AM : 77b1471a490b53b24efe136f09f76550 [Pos Repl]

 * C:\Windows\System32\d3d9.dll : 20,67,456 : 11/21/2010 08:54 AM : 4c3daee652b005b483f16b8e9131c99d [NoSig]
 +-> C:\Windows\erdnt\cache86\d3d9.dll : 18,28,352 : 11/21/2010 08:54 AM : 6ef5f3f18413c367195f06e503ab86a6 [Pos Repl]
 +-> C:\Windows\SysWOW64\d3d9.dll : 18,28,352 : 11/21/2010 08:54 AM : 6ef5f3f18413c367195f06e503ab86a6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-directx-direct3d9_31bf3856ad364e35_6.1.7601.17514_none_207372147765c03a\d3d9.dll : 20,67,456 : 11/21/2010 08:54 AM : 4c3daee652b005b483f16b8e9131c99d [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-directx-direct3d9_31bf3856ad364e35_6.1.7601.17514_none_c454d690bf084f04\d3d9.dll : 18,28,352 : 11/21/2010 08:54 AM : 6ef5f3f18413c367195f06e503ab86a6 [Pos Repl]

 * C:\Windows\System32\ddraw.dll : 5,69,344 : 07/14/2009 07:10 AM : a6c09924c6730de8deed9890a12aa691 [NoSig]
 +-> C:\Windows\erdnt\cache86\ddraw.dll : 5,31,968 : 07/14/2009 06:45 AM : 198552aefeca69d646867ec8d792de95 [Pos Repl]
 +-> C:\Windows\SysWOW64\ddraw.dll : 5,31,968 : 07/14/2009 06:45 AM : 198552aefeca69d646867ec8d792de95 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-directx-directdraw_31bf3856ad364e35_6.1.7600.16385_none_60fa9493d9b24564\ddraw.dll : 5,69,344 : 07/14/2009 07:10 AM : a6c09924c6730de8deed9890a12aa691 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-directx-directdraw_31bf3856ad364e35_6.1.7600.16385_none_04dbf9102154d42e\ddraw.dll : 5,31,968 : 07/14/2009 06:45 AM : 198552aefeca69d646867ec8d792de95 [Pos Repl]

 * C:\Windows\System32\dllhost.exe : 9,728 : 07/14/2009 07:09 AM : a8edb86fc2a4d6d1285e4c70384ac35a [NoSig]
 +-> C:\Windows\SysWOW64\dllhost.exe : 7,168 : 07/14/2009 06:44 AM : a63dc5c2ea944e6657203e0c8edeaf61 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-surrogate_31bf3856ad364e35_6.1.7600.16385_none_a018e05d0d33081d\dllhost.exe : 9,728 : 07/14/2009 07:09 AM : a8edb86fc2a4d6d1285e4c70384ac35a [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-com-surrogate_31bf3856ad364e35_6.1.7600.16385_none_43fa44d954d596e7\dllhost.exe : 7,168 : 07/14/2009 06:44 AM : a63dc5c2ea944e6657203e0c8edeaf61 [Pos Repl]

 * C:\Windows\System32\dnsapi.dll : 3,57,888 : 06/01/2012 09:51 AM : 492d07d79e7024ca310867b526d9636d [NoSig]
 +-> C:\Windows\SysWOW64\dnsapi.dll : 2,70,336 : 06/01/2012 09:51 AM : b40420876b9288e0a1c8cca8a84e5dc9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.17514_none_4008824c98f8edac\dnsapi.dll : 3,57,888 : 11/21/2010 08:54 AM : a52b6cc24063cc83c78c0e6f24deec01 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.17570_none_3fc3a19c992d2ff6\dnsapi.dll : 3,57,888 : 06/01/2012 09:51 AM : 492d07d79e7024ca310867b526d9636d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.21673_none_40503f45b2481bc5\dnsapi.dll : 3,57,888 : 06/01/2012 09:51 AM : dcc0888655823103f19ef8ffd330080d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.17514_none_4a5d2c9ecd59afa7\dnsapi.dll : 2,70,336 : 11/21/2010 08:54 AM : 59df156711a76bcb993253ec6c9bbf41 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.17570_none_4a184beecd8df1f1\dnsapi.dll : 2,70,336 : 06/01/2012 09:51 AM : b40420876b9288e0a1c8cca8a84e5dc9 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.21673_none_4aa4e997e6a8ddc0\dnsapi.dll : 2,70,336 : 06/01/2012 09:51 AM : 1f79f611109c2b97260b68fd6b4fc7dd [Pos Repl]

 * C:\Windows\System32\dsound.dll : 5,40,672 : 07/14/2009 07:10 AM : 9110ffad124283f37d38771bb60556af [NoSig]
 +-> C:\Windows\erdnt\cache86\dsound.dll : 4,53,632 : 07/14/2009 06:45 AM : 0e85c11f8850d524b02181c6e02ba9ae [Pos Repl]
 +-> C:\Windows\SysWOW64\dsound.dll : 4,53,632 : 07/14/2009 06:45 AM : 0e85c11f8850d524b02181c6e02ba9ae [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-audio-dsound_31bf3856ad364e35_6.1.7600.16385_none_b490afff5b93e5a7\dsound.dll : 5,40,672 : 07/14/2009 07:10 AM : 9110ffad124283f37d38771bb60556af [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-audio-dsound_31bf3856ad364e35_6.1.7600.16385_none_5872147ba3367471\dsound.dll : 4,53,632 : 07/14/2009 06:45 AM : 0e85c11f8850d524b02181c6e02ba9ae [Pos Repl]

 * C:\Windows\System32\dwm.exe : 1,20,320 : 07/14/2009 07:09 AM : f162d5f5e845b9dc352dd1bad8cef1bc [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.1.7601.17514_none_ebc99983d3d18578\dwm.exe : 1,20,320 : 07/14/2009 07:09 AM : f162d5f5e845b9dc352dd1bad8cef1bc [Pos Repl]

 * C:\Windows\System32\es.dll : 4,02,944 : 07/14/2009 07:10 AM : 4166f82be4d24938977dd1746be9b8a0 [NoSig]
 +-> C:\Windows\erdnt\cache64\es.dll : 4,02,944 : 07/14/2009 07:10 AM : 4166f82be4d24938977dd1746be9b8a0 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\es.dll : 2,71,360 : 07/14/2009 06:45 AM : f6916efc29d9953d5d0df06882ae8e16 [Pos Repl]
 +-> C:\Windows\SysWOW64\es.dll : 2,71,360 : 07/14/2009 06:45 AM : f6916efc29d9953d5d0df06882ae8e16 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-c..complus-eventsystem_31bf3856ad364e35_6.1.7600.16385_none_68e290c46b6ea6d0\es.dll : 4,02,944 : 07/14/2009 07:10 AM : 4166f82be4d24938977dd1746be9b8a0 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-c..complus-eventsystem_31bf3856ad364e35_6.1.7600.16385_none_73373b169fcf68cb\es.dll : 2,71,360 : 07/14/2009 06:45 AM : f6916efc29d9953d5d0df06882ae8e16 [Pos Repl]

 * C:\Windows\System32\hid.dll : 30,208 : 07/14/2009 07:11 AM : 896f15a6434d93edb42519d5e18e6b50 [NoSig]
 +-> C:\Windows\SysWOW64\hid.dll : 22,016 : 07/14/2009 06:45 AM : 63df770df74acb370ef5a16727069aaf [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-hid-user_31bf3856ad364e35_6.1.7600.16385_none_32a13a14a11faede\hid.dll : 30,208 : 07/14/2009 07:11 AM : 896f15a6434d93edb42519d5e18e6b50 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-hid-user_31bf3856ad364e35_6.1.7600.16385_none_3cf5e466d58070d9\hid.dll : 22,016 : 07/14/2009 06:45 AM : 63df770df74acb370ef5a16727069aaf [Pos Repl]

 * C:\Windows\System32\hnetcfg.dll : 4,24,448 : 07/14/2009 07:11 AM : 3b367397320c26dba890b260f80d1b1b [NoSig]
 +-> C:\Windows\erdnt\cache64\hnetcfg.dll : 4,24,448 : 07/14/2009 07:11 AM : 3b367397320c26dba890b260f80d1b1b [Pos Repl]
 +-> C:\Windows\SysWOW64\hnetcfg.dll : 2,88,256 : 07/14/2009 06:45 AM : 6383c60ec0133b14f5705f96369421b2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..ectionsharingconfig_31bf3856ad364e35_6.1.7600.16385_none_0c2b375bae4a8d38\hnetcfg.dll : 4,24,448 : 07/14/2009 07:11 AM : 3b367397320c26dba890b260f80d1b1b [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-i..ectionsharingconfig_31bf3856ad364e35_6.1.7600.16385_none_167fe1ade2ab4f33\hnetcfg.dll : 2,88,256 : 07/14/2009 06:45 AM : 6383c60ec0133b14f5705f96369421b2 [Pos Repl]

 * C:\Windows\System32\ias.dll : 26,624 : 07/14/2009 07:11 AM : 39415b10172c431f5ab87488d79e9dc4 [NoSig]
 +-> C:\Windows\erdnt\cache86\ias.dll : 19,456 : 07/14/2009 06:45 AM : a1e91b5b5273573fc132b683e550b5e6 [Pos Repl]
 +-> C:\Windows\SysWOW64\ias.dll : 19,456 : 07/14/2009 06:45 AM : a1e91b5b5273573fc132b683e550b5e6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-n..ion_service_runtime_31bf3856ad364e35_6.1.7601.17514_none_5726e0135925cd59\ias.dll : 26,624 : 07/14/2009 07:11 AM : 39415b10172c431f5ab87488d79e9dc4 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-n..ion_service_runtime_31bf3856ad364e35_6.1.7601.17514_none_fb08448fa0c85c23\ias.dll : 19,456 : 07/14/2009 06:45 AM : a1e91b5b5273573fc132b683e550b5e6 [Pos Repl]

 * C:\Windows\System32\imm32.dll : 1,67,424 : 07/14/2009 07:11 AM : aa2c08ce85653b1a0d2e4ab407fa176c [NoSig]
 +-> C:\Windows\erdnt\cache64\imm32.dll : 1,67,424 : 07/14/2009 07:11 AM : aa2c08ce85653b1a0d2e4ab407fa176c [Pos Repl]
 +-> C:\Windows\erdnt\cache86\imm32.dll : 1,19,808 : 11/21/2010 08:54 AM : a6f09e5669d9a19035f6d942caa15882 [Pos Repl]
 +-> C:\Windows\SysWOW64\imm32.dll : 1,19,808 : 11/21/2010 08:54 AM : a6f09e5669d9a19035f6d942caa15882 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-imm32_31bf3856ad364e35_6.1.7600.16385_none_b84b0fbd941c03a9\imm32.dll : 1,67,424 : 07/14/2009 07:11 AM : aa2c08ce85653b1a0d2e4ab407fa176c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-imm32_31bf3856ad364e35_6.1.7601.17514_none_c4d0cdd7c56b493e\imm32.dll : 1,19,808 : 11/21/2010 08:54 AM : a6f09e5669d9a19035f6d942caa15882 [Pos Repl]

 * C:\Windows\System32\ipsecsvc.dll : 5,02,272 : 05/12/2016 10:44 PM : 80d6b0563ed2bf10656b1d4748331082 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.1.7601.17514_none_a2347d4102a4c8ad\IPSECSVC.DLL : 5,01,248 : 11/21/2010 08:53 AM : 4f15d75adf6156bf56eced6d4a55c389 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.1.7601.23452_none_a290a86c1be4de81\IPSECSVC.DLL : 5,02,272 : 05/12/2016 10:44 PM : 80d6b0563ed2bf10656b1d4748331082 [Pos Repl]

 * C:\Windows\System32\kernel32.dll : 11,63,264 : 10/07/2016 09:02 PM : bbcad604a848f959ccf81ecbdc8bb8c4 [NoSig]
 +-> C:\Windows\erdnt\cache64\kernel32.dll : 11,63,264 : 10/07/2016 09:02 PM : bbcad604a848f959ccf81ecbdc8bb8c4 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\kernel32.dll : 11,14,112 : 10/07/2016 08:42 PM : 5d58a9a092cc9f1aeaf8a2cfcfff5b95 [Pos Repl]
 +-> C:\Windows\SysWOW64\kernel32.dll : 11,14,112 : 10/07/2016 08:42 PM : 5d58a9a092cc9f1aeaf8a2cfcfff5b95 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17514_none_f1e3eab06ceb12ef\kernel32.dll : 11,61,216 : 11/21/2010 08:54 AM : 7a6326d96d53048fdec542df23d875a0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17651_none_f1b5ac086d0e33d5\kernel32.dll : 11,62,752 : 06/01/2012 09:52 AM : b9b42a302325537d7b9dc52d47f33a73 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17965_none_f1aee2f66d12ac97\kernel32.dll : 11,61,216 : 10/04/2012 11:11 PM : 1dc3504ca4c57900f1557e9a3f01d272 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18015_none_f1e4cab46cea5424\kernel32.dll : 11,61,216 : 11/30/2012 11:11 AM : 65c113214f7b05820f6d8a65b1485196 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18229_none_f1ddffbc6ceecfbf\kernel32.dll : 11,61,216 : 08/02/2013 07:43 AM : d8973e71f1b35cd3f3dea7c12d49d0f0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18409_none_f1f3a3606cde922b\kernel32.dll : 11,63,264 : 03/04/2014 03:14 PM : d2a513ee880d71bde7f0257f38b9d019 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18798_none_f191597c6d286bc2\kernel32.dll : 11,63,264 : 03/17/2015 10:46 AM : e75074efbe3c24fbc95c7c1985e08fde [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18839_none_f1d33b346cf6da9a\kernel32.dll : 11,62,752 : 04/28/2015 00:53 AM : 1c9f2f4a2c603739bd8cc8c64310afd7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18847_none_f1c66ab46d00c3dd\kernel32.dll : 11,62,752 : 05/09/2015 08:56 AM : 6aa0dd89d7a90033fc3111cc83187c1d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18869_none_f1b2cb706d0f2e6d\kernel32.dll : 11,62,752 : 05/25/2015 11:49 PM : 6fdf03a3b110c5264f52f979335ae301 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18923_none_f1d80b4a6cf423c6\kernel32.dll : 11,63,264 : 07/15/2015 08:49 AM : 9d0a88df1ccb89596ddb876093cd16a4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18933_none_f1cd3b5e6cfc3fb7\kernel32.dll : 11,63,264 : 07/15/2015 11:40 PM : 72585bdaf2ec5237ebd71d540657d6a2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18939_none_f1d33d1a6cf6d7c1\kernel32.dll : 11,63,264 : 07/23/2015 05:32 AM : 9c261ab78de420aa52fc08d69fd5745d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19018_none_f1e7b4ca6ce7b9ca\kernel32.dll : 11,64,800 : 09/29/2015 08:40 AM : 11c18d613f66cb5ce829b821599ed339 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19045_none_f1c444286d02c198\kernel32.dll : 11,64,800 : 10/20/2015 06:35 AM : 386bf677b78b66aabba92c0fca0579a6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19110_none_f1dfb4606ceeec39\kernel32.dll : 11,63,264 : 12/31/2015 00:27 AM : fe0c67d8d5d54f37b3a92e129a15c03a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19131_none_f1cb14d26cfe3d72\kernel32.dll : 11,63,264 : 01/17/2016 00:28 AM : 8ec342039b7c4b5e596147ec1f4b9051 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19135_none_f1cf15fa6cfaa2ce\kernel32.dll : 11,63,264 : 01/22/2016 11:45 AM : 0547e50f916294862fdaf11a4d701547 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19160_none_f1a9a4c46d1777ee\kernel32.dll : 11,63,264 : 02/12/2016 00:14 AM : 4e3e2f8ea0920fc793634479866c5198 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.21772_none_f22aa945863b24d8\kernel32.dll : 11,63,264 : 06/01/2012 09:52 AM : 27ac02d8ee4c02e7648c41cb880151da [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22125_none_f263979386100fdf\kernel32.dll : 11,62,240 : 10/04/2012 11:07 PM : f3c594d0da3acfa6c7b781a490ab4282 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22177_none_f22f888b8636ce42\kernel32.dll : 11,63,264 : 11/30/2012 11:22 AM : b3bea6420d482356e53b7c728e05c637 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22209_none_f27d3a7985fc3a80\kernel32.dll : 11,62,240 : 01/04/2013 11:06 AM : b844114b247d8ef1e5e4e93a282d2e6f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22379_none_f2318ceb8634fb3e\kernel32.dll : 11,62,240 : 07/08/2013 10:44 AM : 38e54d419a2962e24d35d868e4724ae7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22411_none_f26a6c09860b8607\kernel32.dll : 11,62,240 : 08/02/2013 11:52 AM : c525d51a79b01342344f02e38866cf60 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22436_none_f259cda386173c9c\kernel32.dll : 11,62,240 : 08/29/2013 07:49 AM : 786d234a90fcac72633ae6fc52653a49 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22616_none_f26f71478606ff08\kernel32.dll : 11,64,800 : 03/04/2014 04:38 PM : 52e77dc8e31c89fbb1e968699c8121c5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22653_none_f24130b9862a22c7\kernel32.dll : 11,64,800 : 04/12/2014 08:02 AM : 77bbbf70bce286cd19e1e68f248363fa [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23002_none_f2761ddf8602a872\kernel32.dll : 11,64,800 : 03/17/2015 10:41 AM : 36f241a637a424a75c98926189115502 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23040_none_f248dd9b8624e588\kernel32.dll : 11,63,776 : 04/28/2015 00:47 AM : 2a782d0dd0c53c8b0a0a2318ebbcec5d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23049_none_f251e035861cc997\kernel32.dll : 11,63,776 : 05/09/2015 11:35 AM : b4e1d3b522a9fd13581a1880a13e68e7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23072_none_f22a6e6b863b6c09\kernel32.dll : 11,63,776 : 05/25/2015 11:52 PM : 3a2e4cb43cc4ae0195f686146adcad3d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23126_none_f2648115860f42d7\kernel32.dll : 11,64,288 : 07/15/2015 08:50 AM : 093861bb2a36b95ce824683714737cad [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23136_none_f259b12986175ec8\kernel32.dll : 11,64,288 : 07/15/2015 11:39 PM : a3a71e4bee2ba121c969b39ad1eb30fc [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23142_none_f24ae0158623155d\kernel32.dll : 11,64,288 : 07/23/2015 03:33 AM : 313d319ab74d0218f44cc66be393e38a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23153_none_f2411073862a4aa5\kernel32.dll : 11,64,288 : 08/04/2015 11:42 PM : e58cb7f258edd938cec4cfe44abec764 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23223_none_f261821d8611f3f9\kernel32.dll : 11,66,336 : 09/28/2015 11:46 PM : fa37233f148a06c9995854b890deacbd [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23226_none_f26482fb860f3ffe\kernel32.dll : 11,66,336 : 10/01/2015 11:36 PM : 2e52d789c4b17017556ed45d771da5eb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23250_none_f23e117b862cfbc7\kernel32.dll : 11,66,336 : 10/20/2015 06:41 AM : c86a77f9c93b7e04e4044b1d12e4e085 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23313_none_f26c53ef8609d52f\kernel32.dll : 11,63,264 : 12/31/2015 00:39 AM : ff40a21d0127e86406c4e62924be85ca [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23334_none_f257b46186192668\kernel32.dll : 11,63,264 : 01/17/2016 06:00 AM : 09421707ee6879fbaf337184c3279117 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23338_none_f25bb58986158bc4\kernel32.dll : 11,64,288 : 01/22/2016 11:58 AM : 57194c298622069b98bc40fd80a2beff [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23349_none_f251e5e7861cc10c\kernel32.dll : 11,63,264 : 02/11/2016 00:21 AM : 10f0bafdbb4c0d4b73d135ad65562938 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23391_none_f213d3fb864c8209\kernel32.dll : 11,63,264 : 03/17/2016 00:18 AM : 97027cd66ba95e4c832600ee57f97241 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23392_none_f214d445864b9b60\kernel32.dll : 11,63,264 : 03/18/2016 04:23 AM : b46d03babd31b23e6fcb226cb22d4d6b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23418_none_f271574786055109\kernel32.dll : 11,63,264 : 04/09/2016 12:27 AM : acedf96749861db3da92ae9b9d94fe72 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23539_none_f25cb99f86149f69\kernel32.dll : 11,63,264 : 09/02/2016 09:00 PM : c9805cde0b275e7554f9023497169b9b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23543_none_f24be7f786222350\kernel32.dll : 11,63,264 : 09/09/2016 11:50 PM : 409b4b2f559f62f136fc14b8bfc18931 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23569_none_f23c49db862cf33c\kernel32.dll : 11,63,264 : 10/07/2016 09:02 PM : bbcad604a848f959ccf81ecbdc8bb8c4 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17514_none_fc389502a14bd4ea\kernel32.dll : 8,37,632 : 11/21/2010 08:54 AM : e80758cf485db142fca1ee03a34ead05 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17651_none_fc0a565aa16ef5d0\kernel32.dll : 11,14,112 : 06/01/2012 09:52 AM : 99c3f8e9cc59d95666eb8d8a8b4c2beb [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17965_none_fc038d48a1736e92\kernel32.dll : 11,14,112 : 10/04/2012 10:17 PM : d4f3176082566cefa633b4945802d4c4 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18015_none_fc397506a14b161f\kernel32.dll : 11,14,112 : 11/30/2012 10:23 AM : ac0b6f41882fc6ed186962d770ebf1d2 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18229_none_fc32aa0ea14f91ba\kernel32.dll : 11,14,112 : 08/02/2013 07:20 AM : 365a5034093ad9e04f433046c4cdf6ab [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18409_none_fc484db2a13f5426\kernel32.dll : 11,14,112 : 03/04/2014 02:46 PM : 76161b9d78a275f8f28dd67436013110 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18798_none_fbe603cea1892dbd\kernel32.dll : 11,14,112 : 03/17/2015 10:26 AM : 99de8badc0e85c9ab4a8301a3723ffea [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18839_none_fc27e586a1579c95\kernel32.dll : 11,14,112 : 04/28/2015 00:33 AM : 1569f20bb9db9fdc87a6d3c8a3726abf [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18847_none_fc1b1506a16185d8\kernel32.dll : 11,14,112 : 05/09/2015 08:42 AM : 84433e17027542d333861ab5615dca2d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18869_none_fc0775c2a16ff068\kernel32.dll : 11,14,112 : 05/25/2015 11:29 PM : f81920adb15012cf4e9ff8238c85686a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18923_none_fc2cb59ca154e5c1\kernel32.dll : 11,14,112 : 07/15/2015 08:24 AM : c3856345c4fb053140237236d1146242 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18933_none_fc21e5b0a15d01b2\kernel32.dll : 11,14,112 : 07/15/2015 11:23 PM : a38e10b4143a19f32d64517b6a1fcb98 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18939_none_fc27e76ca15799bc\kernel32.dll : 11,14,112 : 07/22/2015 11:22 PM : 1e679bb6671c67b2097a5e53d884d4d0 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19018_none_fc3c5f1ca1487bc5\kernel32.dll : 11,14,112 : 09/29/2015 08:27 AM : 9e83a4f6e776f7a3e5f7fb90180fbc0b [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19045_none_fc18ee7aa1638393\kernel32.dll : 11,14,112 : 10/20/2015 06:14 AM : 4166c05fa57548e6518d7ee20896c0a5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19110_none_fc345eb2a14fae34\kernel32.dll : 11,14,112 : 12/31/2015 00:11 AM : e149fe1fd23748986551f4e1f5752090 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19131_none_fc1fbf24a15eff6d\kernel32.dll : 11,14,112 : 01/17/2016 00:07 AM : 426462dfde05f334131c67d24c6a2df4 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19135_none_fc23c04ca15b64c9\kernel32.dll : 11,14,112 : 01/22/2016 11:36 AM : 8a4577de02c55182ed46202ba2e06da5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19160_none_fbfe4f16a17839e9\kernel32.dll : 11,14,112 : 02/12/2016 00:08 AM : a51056f0ab2386c1032977e89bcb267a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.21772_none_fc7f5397ba9be6d3\kernel32.dll : 11,14,112 : 06/01/2012 09:52 AM : d3cb12854171df61d117d7c2bf22c675 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22125_none_fcb841e5ba70d1da\kernel32.dll : 11,14,112 : 10/04/2012 10:06 PM : 5fa395364ee727e4bee6b1406c207f98 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22177_none_fc8432ddba97903d\kernel32.dll : 11,14,112 : 11/30/2012 10:27 AM : 9cc2571e3646b9a24296ad7adcc71682 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22209_none_fcd1e4cbba5cfc7b\kernel32.dll : 11,14,112 : 01/04/2013 10:22 AM : 7e55988f5cb3ba67e2732370e8d71bbb [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22379_none_fc86373dba95bd39\kernel32.dll : 11,14,112 : 07/08/2013 10:35 AM : 2997a7bc59e3eefe8e86d1b0f3a3d748 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22411_none_fcbf165bba6c4802\kernel32.dll : 11,14,112 : 08/02/2013 11:25 AM : 61579f821ab5ff7fa2966d64d1070ba8 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22436_none_fcae77f5ba77fe97\kernel32.dll : 11,14,112 : 08/29/2013 07:27 AM : ee751cbd5d0c332fdf3df7187b612416 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22616_none_fcc41b99ba67c103\kernel32.dll : 11,14,112 : 03/04/2014 04:08 PM : 866696fbe24914047462e34812169954 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22653_none_fc95db0bba8ae4c2\kernel32.dll : 11,14,112 : 04/12/2014 07:35 AM : c8c41ebee097feb29fb816854d3ad1e7 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23002_none_fccac831ba636a6d\kernel32.dll : 11,14,112 : 03/17/2015 10:14 AM : 9fba00aa15c45a2f1d26776193e543c1 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23040_none_fc9d87edba85a783\kernel32.dll : 11,14,112 : 04/28/2015 00:24 AM : b4e11856df2535df158d32da7b780fdf [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23049_none_fca68a87ba7d8b92\kernel32.dll : 11,14,112 : 05/09/2015 11:09 AM : fe8aa1f56e845c0a36c12d2f83243c4c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23072_none_fc7f18bdba9c2e04\kernel32.dll : 11,14,112 : 05/25/2015 11:35 PM : 5ea4d6d52db2679b8f9de67a7f8bc41a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23126_none_fcb92b67ba7004d2\kernel32.dll : 11,14,112 : 07/15/2015 08:28 AM : ca1a5ee549fe248bc127c1a5cab72b70 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23136_none_fcae5b7bba7820c3\kernel32.dll : 11,14,112 : 07/15/2015 11:18 PM : 50159c0aee9029d43b7e27022b6c0b37 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23142_none_fc9f8a67ba83d758\kernel32.dll : 11,14,112 : 07/23/2015 05:26 AM : 6f5c056d1aeb8713e403259b5fb38ee8 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23153_none_fc95bac5ba8b0ca0\kernel32.dll : 11,14,112 : 08/04/2015 11:21 PM : f7c976a71c09a6b4141cc5c8097de81c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23223_none_fcb62c6fba72b5f4\kernel32.dll : 11,14,112 : 09/29/2015 01:45 AM : a0cfced64576c13ec04ad7b39940be93 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23250_none_fc92bbcdba8dbdc2\kernel32.dll : 11,14,112 : 10/20/2015 06:15 AM : 6d2b6bcae365f879f958bcab2b0ebc9d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23313_none_fcc0fe41ba6a972a\kernel32.dll : 11,14,112 : 12/31/2015 00:25 AM : d6bac40f57558e09045e52f0bd995524 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23334_none_fcac5eb3ba79e863\kernel32.dll : 11,14,112 : 01/17/2016 05:47 AM : 591ddcca27efc5a931084b6d4b4542b6 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23338_none_fcb05fdbba764dbf\kernel32.dll : 11,14,112 : 01/22/2016 11:36 AM : 0395fcc1f6de5155acb84f6bbf771b45 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23349_none_fca69039ba7d8307\kernel32.dll : 11,14,112 : 02/11/2016 00:00 AM : 60a14a0bb9bafd0b37ff6e2fde66c19d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23391_none_fc687e4dbaad4404\kernel32.dll : 11,14,112 : 03/17/2016 00:01 AM : 991d33667beb392cd6c9828893f165b0 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23392_none_fc697e97baac5d5b\kernel32.dll : 11,14,112 : 03/18/2016 04:01 AM : 002e17d37479281c5d241a189f973c5f [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23418_none_fcc60199ba661304\kernel32.dll : 11,14,112 : 04/09/2016 12:24 AM : 7214f85dde720f547c88746044a9df50 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23539_none_fcb163f1ba756164\kernel32.dll : 11,14,112 : 09/02/2016 08:46 PM : 9ffaa819b32476804ed0fed6dd245094 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23543_none_fca09249ba82e54b\kernel32.dll : 11,14,112 : 09/09/2016 11:30 PM : 007f92891add2f4785abbd84966b51ef [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23569_none_fc90f42dba8db537\kernel32.dll : 11,14,112 : 10/07/2016 08:42 PM : 5d58a9a092cc9f1aeaf8a2cfcfff5b95 [Pos Repl]

 * C:\Windows\System32\ksuser.dll : 5,120 : 12/09/2015 00:37 AM : 6d21051c8ea17c1dd0a6fd07ccab8232 [NoSig]
 +-> C:\Windows\erdnt\cache64\ksuser.dll : 5,120 : 12/09/2015 00:37 AM : 6d21051c8ea17c1dd0a6fd07ccab8232 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\ksuser.dll : 4,608 : 12/09/2015 03:23 AM : a4c85f362ebb7815676f1cd9cfc5ba59 [Pos Repl]
 +-> C:\Windows\SysWOW64\ksuser.dll : 4,608 : 12/09/2015 03:23 AM : a4c85f362ebb7815676f1cd9cfc5ba59 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-d..tshow-kernelsupport_31bf3856ad364e35_6.1.7601.17514_none_4627a1cbadebced2\ksuser.dll : 5,120 : 07/14/2009 07:11 AM : 8560fffc8eb3a806dcd4f82252cfc8c6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-d..tshow-kernelsupport_31bf3856ad364e35_6.1.7601.19091_none_45cdea7fae2fa3d4\ksuser.dll : 5,120 : 12/09/2015 00:37 AM : 6d21051c8ea17c1dd0a6fd07ccab8232 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-d..tshow-kernelsupport_31bf3856ad364e35_6.1.7601.23290_none_465688e6c74e276e\ksuser.dll : 5,120 : 12/09/2015 00:28 AM : 468170e293ddaab403e925cbfcc777ea [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-d..tshow-kernelsupport_31bf3856ad364e35_6.1.7601.17514_none_ea090647f58e5d9c\ksuser.dll : 4,608 : 07/14/2009 06:45 AM : 9c67f6bbda3881cfd02095160cf91576 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-d..tshow-kernelsupport_31bf3856ad364e35_6.1.7601.19091_none_e9af4efbf5d2329e\ksuser.dll : 4,608 : 12/09/2015 03:23 AM : a4c85f362ebb7815676f1cd9cfc5ba59 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-d..tshow-kernelsupport_31bf3856ad364e35_6.1.7601.23290_none_ea37ed630ef0b638\ksuser.dll : 4,608 : 12/09/2015 00:02 AM : 6c912895540700020fdf81cb8c57b4b0 [Pos Repl]

 * C:\Windows\System32\linkinfo.dll : 29,696 : 07/14/2009 07:11 AM : a0a65d306a5490d2eb8e7de66898ecfd [NoSig]
 +-> C:\Windows\erdnt\cache64\linkinfo.dll : 29,696 : 07/14/2009 07:11 AM : a0a65d306a5490d2eb8e7de66898ecfd [Pos Repl]
 +-> C:\Windows\erdnt\cache86\linkinfo.dll : 22,016 : 07/14/2009 06:45 AM : 5987ea8a82c53359bcd2c29d6588583e [Pos Repl]
 +-> C:\Windows\SysWOW64\linkinfo.dll : 22,016 : 07/14/2009 06:45 AM : 5987ea8a82c53359bcd2c29d6588583e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-linkinfo_31bf3856ad364e35_6.1.7600.16385_none_945a23c3bf051859\linkinfo.dll : 29,696 : 07/14/2009 07:11 AM : a0a65d306a5490d2eb8e7de66898ecfd [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-linkinfo_31bf3856ad364e35_6.1.7600.16385_none_9eaece15f365da54\linkinfo.dll : 22,016 : 07/14/2009 06:45 AM : 5987ea8a82c53359bcd2c29d6588583e [Pos Repl]

 * C:\Windows\System32\lpk.dll : 41,472 : 11/02/2016 09:02 PM : 72164450a57f51d1100d982d84a9c976 [NoSig]
 +-> C:\Windows\erdnt\cache64\lpk.dll : 41,472 : 11/02/2016 09:02 PM : 72164450a57f51d1100d982d84a9c976 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\lpk.dll : 25,600 : 11/02/2016 08:46 PM : 5e0def87d65768c38758254a8ab05180 [Pos Repl]
 +-> C:\Windows\SysWOW64\lpk.dll : 25,600 : 11/02/2016 08:46 PM : 5e0def87d65768c38758254a8ab05180 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17514_none_07f91de77125e78d\lpk.dll : 41,984 : 07/14/2009 07:11 AM : d202223587518b13d72d68937b7e3f70 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17537_none_07e67eed71336b74\lpk.dll : 41,984 : 07/14/2009 07:11 AM : d202223587518b13d72d68937b7e3f70 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17563_none_07c20e01714f59eb\lpk.dll : 41,984 : 07/14/2009 07:11 AM : d202223587518b13d72d68937b7e3f70 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18032_none_07e15d357138149f\lpk.dll : 41,984 : 07/14/2009 07:11 AM : d202223587518b13d72d68937b7e3f70 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18177_none_07bb20dd7154003d\lpk.dll : 41,472 : 06/06/2013 11:20 AM : 796b47a4b82ef1c39f13435b88834c48 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18768_none_07c6fc77714aec8d\lpk.dll : 41,984 : 02/20/2015 10:11 AM : f351b0e520502552734be70aa5940784 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18914_none_07f90eb77125f5ca\lpk.dll : 41,984 : 07/03/2015 11:35 PM : 373cb9c184589e3be07412dfd5df3d4f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18923_none_07ed3e81712ef864\lpk.dll : 41,984 : 07/15/2015 08:49 AM : d57c03d365bc71c7a30504644515f3f8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18946_none_07da9f87713c7c4b\lpk.dll : 41,984 : 07/30/2015 11:36 PM : 0365e7aed8a38cb5fff1dfb4458c0593 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18985_none_07ae5f8d715dd2b8\lpk.dll : 41,984 : 09/02/2015 08:34 AM : 0e8d254b70e880f032036bfd45266754 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.19146_none_07da798f713cacb4\lpk.dll : 41,472 : 02/06/2016 00:24 AM : c8b4e3dbd1d0a6e5819aa8f546945504 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.21636_none_086f1b6e8a51f1e7\lpk.dll : 41,984 : 07/14/2009 07:11 AM : d202223587518b13d72d68937b7e3f70 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.21664_none_084cab168a6c130c\lpk.dll : 41,984 : 07/14/2009 07:11 AM : d202223587518b13d72d68937b7e3f70 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22195_none_082d1b568a83a814\lpk.dll : 41,984 : 07/14/2009 07:11 AM : d202223587518b13d72d68937b7e3f70 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22350_none_08535d608a67b3eb\lpk.dll : 41,472 : 06/06/2013 10:47 AM : 22fc61b8e1eba296ff416c3678e26dd3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22974_none_0841ca148a744013\lpk.dll : 41,984 : 02/20/2015 10:55 AM : deee064a330560593bbed835f591f0a5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23117_none_088584828a4114db\lpk.dll : 41,984 : 07/03/2015 11:43 PM : 2f518a6c7be454c9a60880281f9beaaa [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23126_none_0879b44c8a4a1775\lpk.dll : 41,984 : 07/15/2015 08:50 AM : 7f55fe319ef06c1986b994a3e86c52b4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23149_none_086715528a579b5c\lpk.dll : 41,984 : 07/30/2015 11:52 PM : 6399191eee641f711e094b95b91dba4b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23188_none_083ad5588a78f1c9\lpk.dll : 41,984 : 09/02/2015 08:40 AM : 38e22adc0d95a1c860c900513a8dc5e9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23346_none_086418408a5a49a5\lpk.dll : 41,472 : 02/06/2016 04:36 AM : 09d95d7531e858f6bc2c8abad3a27d49 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23453_none_0856495c8a6516b8\lpk.dll : 41,472 : 05/14/2016 03:39 AM : 67d8eb188a5f235ac26473681cfde7a1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23587_none_0839dca68a79cd0e\lpk.dll : 41,472 : 11/02/2016 09:02 PM : 72164450a57f51d1100d982d84a9c976 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17514_none_124dc839a586a988\lpk.dll : 25,600 : 07/14/2009 06:41 AM : 384721ef4024890092625e20cadfaf85 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17537_none_123b293fa5942d6f\lpk.dll : 25,600 : 07/14/2009 06:41 AM : 384721ef4024890092625e20cadfaf85 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.17563_none_1216b853a5b01be6\lpk.dll : 25,600 : 07/14/2009 06:41 AM : 384721ef4024890092625e20cadfaf85 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18032_none_12360787a598d69a\lpk.dll : 25,600 : 07/14/2009 06:41 AM : 384721ef4024890092625e20cadfaf85 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18177_none_120fcb2fa5b4c238\lpk.dll : 25,600 : 06/06/2013 10:27 AM : cc23295da8f7b5c53f93804d2f5d30eb [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18768_none_121ba6c9a5abae88\lpk.dll : 25,600 : 02/20/2015 09:42 AM : 01d9c9a70323bc7e5835b92442dd7ec2 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18914_none_124db909a586b7c5\lpk.dll : 25,600 : 07/03/2015 11:25 PM : 4644a3b2afddaea57c3ec30f8d079e54 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18923_none_1241e8d3a58fba5f\lpk.dll : 25,600 : 07/15/2015 08:24 AM : d80ecb18d64ae3c2a9d8220abebce40a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18946_none_122f49d9a59d3e46\lpk.dll : 25,600 : 07/30/2015 11:25 PM : 9e2f12744dd9810961031c56fbb691f4 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18985_none_120309dfa5be94b3\lpk.dll : 25,600 : 09/02/2015 08:17 AM : 415fb89174e6d8bfc885a00a01c3446b [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.19146_none_122f23e1a59d6eaf\lpk.dll : 25,600 : 02/06/2016 00:20 AM : bc8ea7cd95a7ba8b468b47bd7d9e55af [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.21636_none_12c3c5c0beb2b3e2\lpk.dll : 25,600 : 07/14/2009 06:41 AM : 384721ef4024890092625e20cadfaf85 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.21664_none_12a15568beccd507\lpk.dll : 25,600 : 07/14/2009 06:41 AM : 384721ef4024890092625e20cadfaf85 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22195_none_1281c5a8bee46a0f\lpk.dll : 25,600 : 07/14/2009 06:41 AM : 384721ef4024890092625e20cadfaf85 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22350_none_12a807b2bec875e6\lpk.dll : 25,600 : 06/06/2013 10:37 AM : 84ca3579eeb69d8e1ee67e4f721bf71c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22974_none_12967466bed5020e\lpk.dll : 25,600 : 02/20/2015 10:44 AM : 7b1cabc4896210612ae600238e59cf15 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23117_none_12da2ed4bea1d6d6\lpk.dll : 25,600 : 07/03/2015 11:16 PM : e6bd42b2acd11455768a4dda38ced674 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23126_none_12ce5e9ebeaad970\lpk.dll : 25,600 : 07/15/2015 08:28 AM : 20503eb76cae40d601abd38fc1b2cdcf [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23149_none_12bbbfa4beb85d57\lpk.dll : 25,600 : 07/30/2015 11:23 PM : ffe0fa7543e1b9b37352710bc8b9121c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23188_none_128f7faabed9b3c4\lpk.dll : 25,600 : 09/02/2015 08:06 AM : 3edcbf9078520f613922e0d70a5906a7 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23346_none_12b8c292bebb0ba0\lpk.dll : 25,600 : 02/06/2016 04:09 AM : 9c75ceed81d8ea8802a0563b00e13de5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23453_none_12aaf3aebec5d8b3\lpk.dll : 25,600 : 05/14/2016 03:20 AM : d5fee6bbf541655933c6c929505cece7 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23587_none_128e86f8beda8f09\lpk.dll : 25,600 : 11/02/2016 08:46 PM : 5e0def87d65768c38758254a8ab05180 [Pos Repl]

 * C:\Windows\System32\lsass.exe : 30,720 : 10/10/2016 08:25 PM : 92daf7d21711117b007608cb50fbd2e2 [NoSig]
 +-> C:\Windows\erdnt\cache64\lsass.exe : 30,720 : 10/10/2016 08:25 PM : 92daf7d21711117b007608cb50fbd2e2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe : 31,232 : 07/14/2009 07:09 AM : 0793f40b9b8a1bdd266296409dbd91ea [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0466c45b7371f20d\lsass.exe : 31,232 : 06/01/2012 09:53 AM : c118a82cd78818c29ab228366ebf81c3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_044756c773895c5e\lsass.exe : 31,232 : 06/01/2012 09:53 AM : c118a82cd78818c29ab228366ebf81c3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18270_none_042b9307739f26ed\lsass.exe : 30,720 : 09/25/2013 06:33 AM : 4d71227301dd8d09097b9e4cc6527e5a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18443_none_044f07757384196d\lsass.exe : 31,232 : 04/12/2014 07:49 AM : 204f3f58212b3e422c90bd9691a2df28 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18489_none_0429c981739f213b\lsass.exe : 31,232 : 05/30/2014 01:37 PM : f23812f9f7b130854e4bc0389f7c688c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18496_none_041bf8b773a9f127\lsass.exe : 31,232 : 04/12/2014 07:49 AM : 204f3f58212b3e422c90bd9691a2df28 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18526_none_0467aa1173712ab7\lsass.exe : 31,232 : 04/12/2014 07:49 AM : 204f3f58212b3e422c90bd9691a2df28 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18606_none_047d4bcf7360effc\lsass.exe : 31,232 : 09/19/2014 03:12 PM : 341655b216721d89cade9dea2f33872f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18637_none_045ddc5573785d26\lsass.exe : 31,232 : 04/12/2014 07:49 AM : 204f3f58212b3e422c90bd9691a2df28 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18714_none_04707d35736ad666\lsass.exe : 31,232 : 01/10/2015 12:17 AM : c8152b86c0f12e61b0ad5c95751547d3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18717_none_04737e137368226b\lsass.exe : 31,232 : 01/14/2015 11:34 AM : 1e31700d9c9e0fb79999d02a8437482c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18719_none_04757ea773665519\lsass.exe : 31,232 : 01/15/2015 01:39 PM : e0105f3b5b1c4b0f5b3d788a13504ec6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18738_none_045ede85737773a4\lsass.exe : 31,232 : 01/29/2015 08:48 AM : 43fe6f74d2d43443cf2279613fa0a516 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18741_none_044d0c937385de34\lsass.exe : 31,232 : 02/03/2015 09:00 AM : 7554a1b82b4a222fd4cc292abd38a558 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18779_none_04349f1f7396fcbf\lsass.exe : 31,232 : 03/06/2015 11:11 AM : b6c7729936aaf8e0697f0a7dca82ced8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_041dfefd73a81b4a\lsass.exe : 31,232 : 03/17/2015 10:45 AM : ca4fc33fb22d92368a0b221092b46374 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_046e7e87736ca0df\lsass.exe : 31,232 : 04/04/2015 08:50 AM : 4c3fac816925f73a34ad52f1f7c0a7ea [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18839_none_045fe0b573768a22\lsass.exe : 31,232 : 04/28/2015 00:52 AM : 9262d6e2c239edd6d87b080f2bccec9f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18869_none_043f70f1738eddf5\lsass.exe : 31,232 : 05/25/2015 11:48 PM : 17a6a9aad04ccc6ee53290585bfc43af [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18909_none_0480525f735e3376\lsass.exe : 31,232 : 06/27/2015 11:32 PM : fccd46f56dd641ed856fc0e65757b4fd [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18912_none_046e806d736c9e06\lsass.exe : 31,232 : 07/02/2015 02:17 AM : 97d879a884e7cdfed51ad63348a35254 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18923_none_0464b0cb7373d34e\lsass.exe : 31,232 : 07/15/2015 08:49 AM : a7c232f194de012b41b5ee0c5021cfdb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18933_none_0459e0df737bef3f\lsass.exe : 31,232 : 07/15/2015 11:40 PM : 0d48e93c6be3143c0198cb252b992d16 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18939_none_045fe29b73768749\lsass.exe : 31,232 : 07/23/2015 05:31 AM : fdd980360c9d72da77f4c59376ae95c9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.19007_none_047e29ed7360340a\lsass.exe : 31,232 : 09/15/2015 11:40 PM : 5424ec756808c1002457033d969115c7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.19043_none_044ee91573843e72\lsass.exe : 31,232 : 10/16/2015 11:34 PM : 50996040c28f2e644f7270d2a3be2bc8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.19044_none_044fe95f738357c9\lsass.exe : 31,232 : 10/17/2015 11:39 PM : aecdfb5f08dc5069563afc6f47c0dde5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.19045_none_0450e9a973827120\lsass.exe : 31,232 : 10/20/2015 06:34 AM : 2bc45f4cf55b45bdd650828192f132b8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.19110_none_046c59e1736e9bc1\lsass.exe : 30,720 : 12/30/2015 11:11 PM : cb0e57424a776c51ef42469064adbf08 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.19131_none_0457ba53737decfa\lsass.exe : 30,720 : 01/16/2016 11:09 PM : 6313b3e6cea11b4829094edab9ea2fa5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.19135_none_045bbb7b737a5256\lsass.exe : 30,720 : 01/22/2016 10:27 AM : 5673794f254fe312af62d9da32805a2f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.19160_none_04364a4573972776\lsass.exe : 30,720 : 02/11/2016 11:02 PM : 7fb33a9a2e6b6d5ca9318668b95ca69c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_04c1204e8cb39c3f\lsass.exe : 31,232 : 06/01/2012 09:53 AM : 0a10b74fbb437ff9a23f1d5de4446a83 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_04f609a88c8c279c\lsass.exe : 31,232 : 06/04/2012 01:21 PM : 79c908caa6f43021eb05f4c733a927d1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22465_none_04c503168cb026a0\lsass.exe : 30,720 : 09/25/2013 06:38 AM : f021dafb1f87616fceba159c2ed7042f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22653_none_04cdd63a8ca9d24f\lsass.exe : 31,232 : 04/12/2014 08:01 AM : 6598ebc4d209318ebd81f76833ecbedb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22705_none_0505e8508c7f766f\lsass.exe : 31,232 : 05/30/2014 01:30 PM : 04f6c08b30c599d301ce8530a6f6a703 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22712_none_04f817868c8a465b\lsass.exe : 31,232 : 04/12/2014 08:01 AM : 6598ebc4d209318ebd81f76833ecbedb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22736_none_04e678d68c96e399\lsass.exe : 31,232 : 04/12/2014 08:01 AM : 6598ebc4d209318ebd81f76833ecbedb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22807_none_0507eaca8c7da644\lsass.exe : 31,232 : 04/12/2014 08:01 AM : 6598ebc4d209318ebd81f76833ecbedb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22814_none_04fa1a008c887630\lsass.exe : 31,232 : 09/19/2014 03:17 PM : b84317193b6a29f5f5dcf538c34fdced [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22843_none_04d8a9f28ca1b0ac\lsass.exe : 31,232 : 04/12/2014 08:01 AM : 6598ebc4d209318ebd81f76833ecbedb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22920_none_04eb4ad28c9429ec\lsass.exe : 31,232 : 01/10/2015 12:39 AM : 55c62f66528a7bf58ea964b70bcb3d96 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22923_none_04ee4bb08c9175f1\lsass.exe : 31,232 : 04/12/2014 08:01 AM : 6598ebc4d209318ebd81f76833ecbedb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22925_none_04f04c448c8fa89f\lsass.exe : 31,232 : 04/12/2014 08:01 AM : 6598ebc4d209318ebd81f76833ecbedb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22943_none_04d8abd88ca1add3\lsass.exe : 31,232 : 01/27/2015 09:26 AM : 5b63917a1be4728d8111850cdef252f1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22948_none_04ddad4a8c9d2c86\lsass.exe : 31,232 : 02/03/2015 09:20 AM : cbb80cc43e683f929f8d5e50330f7ba6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22983_none_04ad6c288cc21d97\lsass.exe : 31,232 : 03/06/2015 11:02 AM : 395cae11172bebb0253895e8b5f82bfa [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_0502c3608c8257fa\lsass.exe : 31,232 : 03/17/2015 10:41 AM : dccdd65a4e68360e5cf57afc864c64e0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_04fcf4e68c85f29e\lsass.exe : 31,232 : 04/04/2015 08:55 AM : bb9c1b746086558899935e3333cd4580 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23040_none_04d5831c8ca49510\lsass.exe : 31,232 : 04/28/2015 00:46 AM : d52c700254e7fbd9bf6d817ba7ba5309 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23072_none_04b713ec8cbb1b91\lsass.exe : 31,232 : 05/25/2015 11:51 PM : 2a953a1104439ba166fd63a5806a16df [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23112_none_04f7f55a8c8a7112\lsass.exe : 31,232 : 06/27/2015 11:42 PM : bd1e0ada58d82453182f297c4c6aa00a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23115_none_04faf6388c87bd17\lsass.exe : 31,232 : 07/01/2015 11:50 PM : 5f8423e7fda0eb902c6d156f6121e094 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23126_none_04f126968c8ef25f\lsass.exe : 31,232 : 07/15/2015 08:49 AM : 2ccfa4793b9696f26214634300fe8b37 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23136_none_04e656aa8c970e50\lsass.exe : 31,232 : 07/15/2015 11:38 PM : 31359eda482f9a4c5db36741596550ac [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23142_none_04d785968ca2c4e5\lsass.exe : 31,232 : 07/23/2015 03:33 AM : fbd94ddab6d96de7ece7d38e48035a75 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23153_none_04cdb5f48ca9fa2d\lsass.exe : 31,232 : 08/04/2015 11:41 PM : 2bb259a51ddadbcf9652c67a3e82447c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23211_none_04f6f6f68c8b54e2\lsass.exe : 31,232 : 09/16/2015 05:07 AM : a51431778979b82e6c7041eab29f66f4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23249_none_04de89828c9c736d\lsass.exe : 31,232 : 10/16/2015 11:40 PM : 642713b5efa4a27e1cb88e99208f160a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23250_none_04cab6fc8cacab4f\lsass.exe : 31,232 : 10/20/2015 06:40 AM : 0f3591fd0f246cd5941b6dc8184e66b7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23313_none_04f8f9708c8984b7\lsass.exe : 30,720 : 12/30/2015 11:17 PM : 8a6ed755df7097571660723e06ba7b81 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23334_none_04e459e28c98d5f0\lsass.exe : 30,720 : 01/17/2016 04:45 AM : 111a2a677ed641a7bd8d884ec4f6a185 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23338_none_04e85b0a8c953b4c\lsass.exe : 31,232 : 01/22/2016 11:57 AM : c102a257679340184dcd801b5634230b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23349_none_04de8b688c9c7094\lsass.exe : 30,720 : 02/10/2016 11:08 PM : 4faaa369494a207617165dbfd10e34b5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23390_none_049f79328ccd183a\lsass.exe : 30,720 : 03/16/2016 04:30 AM : 12b9792dea6ad9c344de2a5fe308b7a9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23391_none_04a0797c8ccc3191\lsass.exe : 30,720 : 03/16/2016 11:01 PM : d5276e4bd17a3b477e3d9127c2eebea5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23392_none_04a179c68ccb4ae8\lsass.exe : 30,720 : 03/18/2016 03:05 AM : 626be7cd27f44185aa4dcd3603830312 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23418_none_04fdfcc88c850091\lsass.exe : 30,720 : 04/09/2016 11:13 AM : 54c0e3156872881f6ab017210278e27e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23452_none_04ccbb5c8caad84b\lsass.exe : 30,720 : 05/12/2016 08:27 PM : c8a7f80db5c193dd67747a1ba4b1782e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23497_none_04a67d1e8cc6c6c2\lsass.exe : 30,720 : 07/08/2016 08:25 PM : 13fe29c1c8e782829c7faa3b14f4a666 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23539_none_04e95f208c944ef1\lsass.exe : 30,720 : 09/02/2016 08:23 PM : 07932d7ba536b0bb58306a156a9afc31 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23545_none_04da8e0c8ca00586\lsass.exe : 30,720 : 09/13/2016 02:01 AM : 0ee3b249d8079d72d4c84b108e99a16f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23571_none_04b61d208cbbf3fd\lsass.exe : 30,720 : 10/10/2016 08:25 PM : 92daf7d21711117b007608cb50fbd2e2 [Pos Repl]

 * C:\Windows\System32\lsm.exe : 3,43,040 : 11/21/2010 08:53 AM : 9662ee182644511439f1c53745dc1c88 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..localsessionmanager_31bf3856ad364e35_6.1.7601.17514_none_036ad230212a39ce\lsm.exe : 3,43,040 : 11/21/2010 08:53 AM : 9662ee182644511439f1c53745dc1c88 [Pos Repl]

 * C:\Windows\System32\midimap.dll : 20,480 : 07/14/2009 07:11 AM : ca2a0750ed830678997695ff61b04c30 [NoSig]
 +-> C:\Windows\erdnt\cache86\midimap.dll : 16,896 : 07/14/2009 06:45 AM : 5a12c364ad1d4fcc0ad0e56dbbc34462 [Pos Repl]
 +-> C:\Windows\SysWOW64\midimap.dll : 16,896 : 07/14/2009 06:45 AM : 5a12c364ad1d4fcc0ad0e56dbbc34462 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-audio-mmecore-other_31bf3856ad364e35_6.1.7600.16385_none_e8f2b9ab2a40e84d\midimap.dll : 20,480 : 07/14/2009 07:11 AM : ca2a0750ed830678997695ff61b04c30 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-audio-mmecore-other_31bf3856ad364e35_6.1.7600.16385_none_8cd41e2771e37717\midimap.dll : 16,896 : 07/14/2009 06:45 AM : 5a12c364ad1d4fcc0ad0e56dbbc34462 [Pos Repl]

 * C:\Windows\System32\mshtml.dll : 2,57,63,328 : 10/27/2016 11:58 PM : 3f23d0f5a8fce133e0e19fb044f2dcb6 [NoSig]
 +-> C:\Windows\erdnt\cache64\mshtml.dll : 2,57,63,328 : 10/27/2016 11:58 PM : 3f23d0f5a8fce133e0e19fb044f2dcb6 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\mshtml.dll : 2,03,04,896 : 10/27/2016 08:35 PM : cf67f56d3d87bb166e7c758ba72ef9b3 [Pos Repl]
 +-> C:\Windows\SysWOW64\mshtml.dll : 2,03,04,896 : 10/27/2016 08:35 PM : cf67f56d3d87bb166e7c758ba72ef9b3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16618_none_91103c8292a6cee0\mshtml.dll : 1,92,33,792 : 07/04/2013 03:01 AM : 5c41af3f4b83340d2783ce8fde30566a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16635_none_9112816e92a4b4ab\mshtml.dll : 1,92,38,912 : 06/12/2013 04:55 AM : 9586ec4e1cc39ccba26a5e7dfe774c9e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16660_none_9115f43492a1808b\mshtml.dll : 1,92,39,424 : 07/26/2013 10:42 AM : 396889142bd839db8a055a0be0ad2f79 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16686_none_91176c1892a04cff\mshtml.dll : 1,92,46,592 : 08/10/2013 10:51 AM : cc4ae7e2ecaee7612b3c0d3ab302375c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16721_none_91070c5892ad50c1\mshtml.dll : 1,92,52,224 : 09/23/2013 04:24 AM : f026c6f104758d0eb215b017016fae27 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16736_none_91079aba92acea3d\mshtml.dll : 1,92,69,632 : 10/12/2013 02:13 PM : 25c356a79b7002e0a20aaf592ed59de4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.20742_none_7a3b4f88ac52fcc5\mshtml.dll : 1,94,82,112 : 06/12/2013 10:40 AM : 884691f819503dd2191a2641cc827a52 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.20768_none_7a3cc76cac51c939\mshtml.dll : 1,94,82,112 : 07/26/2013 09:29 AM : 865eb4e69daf2de052e8d020f4f7d313 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.20794_none_7a40236aac4eaeba\mshtml.dll : 1,94,88,768 : 08/10/2013 10:43 AM : c2793fdc1edb82635c538630fe192cc9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.20831_none_7a2f961aac5be5be\mshtml.dll : 1,94,94,912 : 09/23/2013 04:53 AM : 9958430ce5bfc43d693d6138c31788cc [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.20848_none_7a2ff6ecac5bb27c\mshtml.dll : 1,95,10,784 : 10/12/2013 12:45 AM : bed01c981aa5d47941f6baf30b6fe12c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.16428_none_f59a25aa3737acc2\mshtml.dll : 2,32,12,032 : 12/05/2013 03:02 AM : d233e1a32ce6af918c9de1bc44afeb2a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.16476_none_f59f54ac3732f833\mshtml.dll : 2,31,83,360 : 11/26/2013 05:24 PM : 16b0a65f52531b769b891dc251ecc6c0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.16518_none_f58e55743740af5c\mshtml.dll : 2,31,70,048 : 02/06/2014 05:46 PM : d016f5092e4ffc41147e8555a71d2dde [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.16521_none_f58ff536373f154c\mshtml.dll : 2,31,33,696 : 03/01/2014 11:35 AM : 4e0709d9bb951ad1c22e4ff519b90839 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.16659_none_f5876fe837454a4a\mshtml.dll : 2,31,34,208 : 03/31/2014 06:46 AM : c3e3efd320d0000be6f9cdb00cd6086f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17041_none_f5c8074c3714b96c\mshtml.dll : 2,35,49,440 : 03/06/2014 03:51 PM : 37d0fb9e5e8eda40b66fc3fb3d660261 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17105_none_f5b8db183720d685\mshtml.dll : 2,35,47,904 : 04/29/2014 07:31 PM : a98da2ec1e56cf52c682d072f77d9874 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17107_none_f5b8ad88372109c7\mshtml.dll : 2,35,44,320 : 05/06/2014 10:10 AM : 797e2e5c309aff76990d5b7af457eaca [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17126_none_f5bac4e4371f22d4\mshtml.dll : 2,34,14,784 : 05/30/2014 03:51 PM : 56803b20d168c1b740d12ce0be4588f5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17207_none_f5addd9c372925b8\mshtml.dll : 2,34,64,448 : 06/19/2014 07:09 AM : fec19c351ef1b2c998a85d1bfd765675 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17239_none_f5b0b0ea3726a4ff\mshtml.dll : 2,36,45,696 : 07/25/2014 08:22 PM : eca387dcd57f683c52171c766cf400f0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17280_none_f5b67f6437213d09\mshtml.dll : 2,35,91,424 : 08/19/2014 04:31 AM : 920bd93a0b64657a20ca66c2ebb167ea [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17358_none_f5a7f85a372cd9fd\mshtml.dll : 2,36,31,360 : 09/19/2014 07:55 AM : 7415b29afe2e4494a57358b8c7e78600 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17420_none_f59addd03736dce1\mshtml.dll : 2,51,10,016 : 11/06/2014 09:33 AM : bbd6a636aaa65d874f3863280cd8373d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17501_none_f58df6883740dfc5\mshtml.dll : 2,50,59,840 : 11/22/2014 08:43 AM : d478a4cf07fb8adf72fb16b88e8030b8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17633_none_f585f9ea37467afd\mshtml.dll : 2,50,56,256 : 01/12/2015 08:39 AM : cd726c899bd9a398e8420564a957320b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17691_none_f58c29363740dfc5\mshtml.dll : 2,50,21,440 : 02/21/2015 06:46 AM : 1193400d8e29a5a010135fb09a4eb1e8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17728_none_f579b7cc374ffdbc\mshtml.dll : 2,49,80,480 : 03/13/2015 10:02 AM : dbc0c4554a8b2a81f68690d30f12c99e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17801_none_f56d86c437593398\mshtml.dll : 2,49,71,776 : 04/21/2015 10:44 PM : c31d57f7a58facda2671075ceba75199 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17843_none_f5715a5c3755cc36\mshtml.dll : 2,49,17,504 : 05/27/2015 08:05 PM : a29bafc1543f9d2234afffea9bce76c8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17914_none_f56372ca3760b5c3\mshtml.dll : 2,51,95,008 : 06/25/2015 09:10 AM : 6755794418fd4c81e3372c4622956b6c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17923_none_f56489dc375fb579\mshtml.dll : 2,51,93,984 : 07/03/2015 02:19 AM : d74e2be157b8a2a9cf29bebb052b8a42 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17959_none_f567020a375d9b44\mshtml.dll : 2,51,92,448 : 07/17/2015 02:44 AM : e6cf1778145272a83e58c4ab66358af3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17963_none_f5688b04375c1ad5\mshtml.dll : 2,51,91,936 : 08/11/2015 06:50 AM : e5f2bb962f84a8f8d996fea33f4c817b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18015_none_f5c4ad343717d112\mshtml.dll : 2,51,90,400 : 08/15/2015 12:18 AM : 2555def683bdf9b4947591827d6de69a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18059_none_f5c8533c37149cf2\mshtml.dll : 2,58,51,904 : 09/16/2015 10:18 AM : 99ba96f5ac545d857e662a9fc576d919 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18097_none_f5cc81f43710cf0c\mshtml.dll : 2,58,18,624 : 10/31/2015 05:16 AM : 67d3a8e2f5decd6b6f7194bbf58696e6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18124_none_f5baf45a371eecb9\mshtml.dll : 2,58,37,568 : 11/11/2015 09:51 PM : a8b4563632baf46bb005a0127727e82d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18163_none_f5bf0c4a371b3874\mshtml.dll : 2,58,37,568 : 12/13/2015 00:24 AM : 6aeba30a9af45d0c83385f48ec943426 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18204_none_f5ae23da3728d5fc\mshtml.dll : 2,58,37,568 : 01/22/2016 12:58 AM : 7cbd82b1f1c56a990cc64512fbe69a99 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18211_none_f5af687c3727a270\mshtml.dll : 2,58,39,104 : 02/06/2016 04:18 PM : 748391d06e84ea371ade4b10e38d54e9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18230_none_f5b17fd83725bb7d\mshtml.dll : 2,58,16,576 : 02/09/2016 01:35 AM : 8f84d4d9632c0b95d16c1bb5d74c793b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18282_none_f5b653ba37216d72\mshtml.dll : 2,58,17,600 : 03/31/2016 06:24 AM : 31c8c489e5c51a72b52cc0f0b292fb3b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18314_none_f5a4543837300b44\mshtml.dll : 2,58,16,064 : 04/23/2016 10:55 AM : 29feba062df8ccdaff7d2c5db2e010c5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18349_none_f5a6e32e372dd76e\mshtml.dll : 2,58,02,752 : 05/21/2016 10:58 PM : 5d0ea73a910a2004a5a6598bdb26857b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18376_none_f5aa2864372ad690\mshtml.dll : 2,58,14,016 : 06/11/2016 02:35 AM : 8203acd37b0d0277172491e755bdc67d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18426_none_f59a5706373773ce\mshtml.dll : 2,58,08,384 : 08/02/2016 12:24 AM : e3e3b1226692db497226ccd7f43ad7df [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18449_none_f59c13423735f35f\mshtml.dll : 2,57,70,496 : 09/01/2016 06:15 AM : 33063f69d8e97d6a5c81ae5d9083239d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18499_none_f5a114b437317212\mshtml.dll : 2,57,65,376 : 09/30/2016 01:25 PM : 843fb9914923880db5bd7d794914edb1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18524_none_f58fb4aa373f5c7d\mshtml.dll : 2,57,63,328 : 10/27/2016 11:58 PM : 3f23d0f5a8fce133e0e19fb044f2dcb6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7601.17514_none_8c235f42afcafdda\mshtml.dll : 89,88,160 : 11/21/2010 08:54 AM : 1c8b787baa52dead1a6fec1502d652f0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7601.17720_none_8c1491faafd6aebd\mshtml.dll : 90,18,880 : 06/01/2012 09:53 AM : 312dd305113be3aca3a849b45048247e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7601.21855_none_8c82c073c908210d\mshtml.dll : 90,18,368 : 06/01/2012 09:53 AM : 8ccb66627cf562b7294847277a0f9f68 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_87e150ddf4cd3dc7\mshtml.dll : 1,77,73,056 : 06/01/2012 09:49 AM : 82682ba2df50b94cd798b8315b3f7896 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16440_none_87cab0bbf4de5c52\mshtml.dll : 1,77,86,368 : 06/01/2012 09:50 AM : e7bd23bec69cf23436eede9b18de186d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16457_none_87c6e2d5f4e029a4\mshtml.dll : 1,78,11,968 : 11/14/2012 12:36 AM : cff3c4abdcc5356b0674743bdf0fb674 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16464_none_87b9120bf4eaf990\mshtml.dll : 1,78,12,992 : 01/09/2013 07:18 AM : 14deb733acb08a71cc0783ed02ff1f8d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16470_none_87aa40f7f4f6b025\mshtml.dll : 1,78,15,040 : 02/02/2013 01:01 PM : 460723a080d6f22e56d45bc8c1f15b2a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16476_none_87b042b3f4f1482f\mshtml.dll : 1,78,17,088 : 02/22/2013 12:27 AM : 1154fefc73880a2ef44295ef0dbdc59f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16483_none_87a271e9f4fc181b\mshtml.dll : 1,78,18,624 : 04/05/2013 07:21 AM : f63d8615292792d36edf24913636685d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16484_none_87a37233f4fb3172\mshtml.dll : 1,78,18,624 : 05/06/2013 03:06 AM : 7212340908e00ad2f28e58ea04ceb852 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16490_none_8794a11ff506e807\mshtml.dll : 1,78,24,768 : 05/17/2013 09:35 AM : a820869140978ccaf33cf7770eee19f5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20544_none_88584eaf0df86178\mshtml.dll : 1,77,86,368 : 06/01/2012 09:50 AM : 5770c4ba825c42d6efd9486029747108 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20565_none_8843af210e07b2b1\mshtml.dll : 1,78,11,968 : 11/14/2012 10:27 AM : 5024cacd183e4c0fccde6db8a38eec7b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20573_none_8836dea10e119bf4\mshtml.dll : 1,78,14,528 : 01/09/2013 06:16 AM : b6c5bc6d4e1d79cb8df107112a9f37cb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20580_none_88290dd70e1c6be0\mshtml.dll : 1,78,15,040 : 02/02/2013 01:34 PM : 1cd82d510d370cb04bb6bd1c660aa96f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20586_none_882f0f930e1703ea\mshtml.dll : 1,78,17,600 : 02/22/2013 12:42 AM : 0e860bf2bcddd94202a6ab9a10ee95eb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20593_none_88213ec90e21d3d6\mshtml.dll : 1,78,18,624 : 04/05/2013 06:03 AM : 43fef944ff64be0354a5c129c98eb13d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20594_none_88223f130e20ed2d\mshtml.dll : 1,78,19,136 : 05/06/2013 04:05 AM : e139a28843f52f383d414bf0aaef6ce4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20600_none_887f8f1d0ddb897f\mshtml.dll : 1,78,24,768 : 05/17/2013 07:07 AM : cd451fee119b7557633039ca39290331 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16618_none_9b64e6d4c70790db\mshtml.dll : 1,43,27,808 : 07/04/2013 03:01 AM : 05920bd009621d06722a1cd339da6481 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16635_none_9b672bc0c70576a6\mshtml.dll : 1,43,29,856 : 06/12/2013 05:13 AM : af31e7d2c385f647adfd5f5736b3ba64 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16660_none_9b6a9e86c7024286\mshtml.dll : 1,43,29,344 : 07/26/2013 08:42 AM : e631b408882f8320739f6e0caf444397 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16686_none_9b6c166ac7010efa\mshtml.dll : 1,43,32,928 : 08/10/2013 09:28 AM : 5d2d7e7850ce963c2f401d4dee7bb32a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16721_none_9b5bb6aac70e12bc\mshtml.dll : 1,43,35,488 : 09/23/2013 04:57 AM : a7221924181c8eb92b64c5a2d888bea5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16736_none_9b5c450cc70dac38\mshtml.dll : 1,43,55,968 : 10/12/2013 12:32 AM : 02a04841906a8892ad6cc7bdbcb5f61d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.20742_none_848ff9dae0b3bec0\mshtml.dll : 1,43,58,528 : 06/12/2013 09:47 AM : e6cc3f7eaa761794e13e0f99393eeb97 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.20768_none_849171bee0b28b34\mshtml.dll : 1,43,56,480 : 07/26/2013 08:39 AM : 523d2e830830fd6da5b7faae3c251bc5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.20794_none_8494cdbce0af70b5\mshtml.dll : 1,43,62,624 : 08/10/2013 10:02 AM : a0fab45701efaa4eda60b7614ed431be [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.20831_none_8484406ce0bca7b9\mshtml.dll : 1,43,64,672 : 09/23/2013 05:06 AM : 9d6d52aed095bc8c9023aa739e978eac [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.20848_none_8484a13ee0bc7477\mshtml.dll : 1,43,81,568 : 10/12/2013 12:24 AM : 9c2714e4cf56dd8cd27bf6dee9e7a1bf [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.16428_none_ffeecffc6b986ebd\mshtml.dll : 1,71,42,784 : 12/05/2013 03:02 AM : f9f114b2a6f876c92d317a755494f233 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.16476_none_fff3fefe6b93ba2e\mshtml.dll : 1,71,12,576 : 11/26/2013 03:41 PM : bfafe990c4a191e83843362b5ac64a9b [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.16518_none_ffe2ffc66ba17157\mshtml.dll : 1,71,03,872 : 02/06/2014 04:08 PM : c863e5a2417df0f2a31ed32c3b2cb23f [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.16521_none_ffe49f886b9fd747\mshtml.dll : 1,70,74,688 : 03/01/2014 10:00 AM : 70462e0a4e293fc80620ab945d8a59bb [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.16659_none_ffdc1a3a6ba60c45\mshtml.dll : 1,70,73,152 : 03/31/2014 05:27 AM : ccf19c82f6145e4a467f7cb9af82026c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17041_none_001cb19e6b757b67\mshtml.dll : 1,73,87,008 : 03/06/2014 02:49 PM : ea85144f35ede6ee25c484d4242ff2c8 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17105_none_000d856a6b819880\mshtml.dll : 1,73,84,448 : 04/29/2014 06:18 PM : 5869fbc754578a59c8c8635b99db79de [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17107_none_000d57da6b81cbc2\mshtml.dll : 1,73,82,912 : 05/06/2014 08:55 AM : eb5347f6149d3ff25f4d609a21a3bd67 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17126_none_000f6f366b7fe4cf\mshtml.dll : 1,72,71,296 : 05/30/2014 02:48 PM : d5ecbb3bfdc73a59440d9ca79ab3a342 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17207_none_000287ee6b89e7b3\mshtml.dll : 1,72,76,416 : 06/19/2014 05:46 AM : dfa59840bb1220afd261fdae83543959 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17239_none_00055b3c6b8766fa\mshtml.dll : 1,75,24,224 : 07/25/2014 07:21 PM : 8453ddf167ce2986aa4ab04bc6824925 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17280_none_000b29b66b81ff04\mshtml.dll : 1,74,55,104 : 08/19/2014 03:56 AM : 7bf1ce9240cb9dd27c3e30733176eb8e [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17358_none_fffca2ac6b8d9bf8\mshtml.dll : 1,74,84,800 : 09/19/2014 07:14 AM : f91e55da404b834648a3b0a2477c10db [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17420_none_ffef88226b979edc\mshtml.dll : 1,97,81,632 : 11/06/2014 08:40 AM : 93074c4fa92a8399404d032f6af72c1b [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17501_none_ffe2a0da6ba1a1c0\mshtml.dll : 1,97,49,376 : 11/22/2014 07:52 AM : 220505b0b3e96c857dd01729af0cd369 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17633_none_ffdaa43c6ba73cf8\mshtml.dll : 1,97,40,160 : 01/12/2015 07:55 AM : 61c74d794c14e9fc94d93f5f0f72a3f9 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17691_none_ffe0d3886ba1a1c0\mshtml.dll : 1,97,20,192 : 02/21/2015 05:55 AM : 95cb6079b3e62d4301958023c2070a48 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17728_none_ffce621e6bb0bfb7\mshtml.dll : 1,96,95,616 : 03/13/2015 09:12 AM : 2f42037dd6f2831332653eb7f35d7e9a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17801_none_ffc231166bb9f593\mshtml.dll : 1,96,91,008 : 04/21/2015 09:54 PM : d74445161e58644309f858342f5e265c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17843_none_ffc604ae6bb68e31\mshtml.dll : 1,96,07,040 : 05/27/2015 07:38 PM : 975421ac32f9f6e27a58f75dab4b5871 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17914_none_ffb81d1c6bc177be\mshtml.dll : 1,98,77,376 : 06/25/2015 08:40 AM : fa9dfdaf0d0ba0f2e5bf85c2aa557a6f [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17923_none_ffb9342e6bc07774\mshtml.dll : 1,98,77,376 : 07/03/2015 02:51 AM : 116f506573b59b85cd0dc18527e9951a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17959_none_ffbbac5c6bbe5d3f\mshtml.dll : 1,98,70,208 : 07/17/2015 01:50 AM : baaac903bf7f9ca5f1129c972aede6bd [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17963_none_ffbd35566bbcdcd0\mshtml.dll : 1,98,71,232 : 08/11/2015 05:50 AM : a98799eba5baabf1ab2bafce488fc9f9 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18015_none_001957866b78930d\mshtml.dll : 1,98,56,896 : 08/15/2015 11:36 AM : 1730f4b69593eb38072daf273b5565ab [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18059_none_001cfd8e6b755eed\mshtml.dll : 2,03,57,632 : 09/16/2015 09:28 AM : d586cb95b4eadc0525e8929a241898f5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18097_none_00212c466b719107\mshtml.dll : 2,03,31,520 : 10/31/2015 04:22 AM : d49701891d475f61b23ba4dbef6e71ec [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18124_none_000f9eac6b7faeb4\mshtml.dll : 2,03,66,848 : 11/11/2015 09:11 PM : b206e8bd4938b6c6b1c84dd13c12c4df [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18163_none_0013b69c6b7bfa6f\mshtml.dll : 2,03,67,360 : 12/12/2015 11:32 PM : d120251f43699d6c08e13950c3c72978 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18204_none_0002ce2c6b8997f7\mshtml.dll : 2,03,66,336 : 01/22/2016 12:04 AM : 2a6b5f4f2743e8c4456477ac2054854d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18211_none_000412ce6b88646b\mshtml.dll : 2,03,66,848 : 02/06/2016 03:31 PM : 5aa6b93a3561dd11be89a0e994c78b9e [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18230_none_00062a2a6b867d78\mshtml.dll : 2,03,52,512 : 02/09/2016 02:35 AM : 3df6c79b9f93a289d02395642645319c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18282_none_000afe0c6b822f6d\mshtml.dll : 2,03,52,512 : 03/31/2016 05:33 AM : 8c99981e6b4209abc8bcf887bdebce53 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18314_none_fff8fe8a6b90cd3f\mshtml.dll : 2,03,50,464 : 04/23/2016 09:41 AM : 63a16c06142dc21b143c1694f0e98fd4 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18349_none_fffb8d806b8e9969\mshtml.dll : 2,03,41,248 : 05/21/2016 10:27 PM : fe55bdceb1f9e12feb0de7b302c6331b [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18376_none_fffed2b66b8b988b\mshtml.dll : 2,03,48,928 : 06/11/2016 00:12 AM : e850fc00f21ffeb37d668871ce7e3d27 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18426_none_ffef01586b9835c9\mshtml.dll : 2,03,43,808 : 08/02/2016 11:24 AM : b234b83e0efca74f50e9eb6f6f899928 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18449_none_fff0bd946b96b55a\mshtml.dll : 2,03,12,064 : 09/01/2016 08:38 AM : fcdb0fd3a1ecdafa4c953ed0f0af5071 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18499_none_fff5bf066b92340d\mshtml.dll : 2,03,06,944 : 09/30/2016 11:17 AM : 4f564ad743b4eff167bfbd89359d383b [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.18524_none_ffe45efc6ba01e78\mshtml.dll : 2,03,04,896 : 10/27/2016 08:35 PM : cf67f56d3d87bb166e7c758ba72ef9b3 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7601.17514_none_96780994e42bbfd5\mshtml.dll : 59,77,600 : 11/21/2010 08:55 AM : c50799f0d47dfb9774f721521b6c41d5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7601.17720_none_96693c4ce43770b8\mshtml.dll : 59,97,056 : 06/01/2012 09:53 AM : 61c09b5ad2932538659d133c875dbb0f [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7601.21855_none_96d76ac5fd68e308\mshtml.dll : 59,97,568 : 06/01/2012 09:53 AM : 3e218028099f62ca630e2afe936f1f0d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_9235fb30292dffc2\mshtml.dll : 1,22,68,544 : 06/01/2012 09:49 AM : 4def8126cabaa6cdc12103cd74c6a919 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16440_none_921f5b0e293f1e4d\mshtml.dll : 1,22,79,808 : 06/01/2012 09:50 AM : 66c0aee61d1c5c35bf1b4642a153b114 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16457_none_921b8d282940eb9f\mshtml.dll : 1,23,20,256 : 11/14/2012 08:18 AM : 07f649cd36f266bbe33b814fa678aa43 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16464_none_920dbc5e294bbb8b\mshtml.dll : 1,23,21,280 : 01/09/2013 03:53 AM : c97434c851c4821bd92d2831fdf1ecbe [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16470_none_91feeb4a29577220\mshtml.dll : 1,23,21,792 : 02/02/2013 09:39 AM : 263963d93a3ca8f685efa5966f1e6581 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16476_none_9204ed0629520a2a\mshtml.dll : 1,23,24,352 : 02/22/2013 09:35 AM : 658ebc74bd38d16805648c4775f7fa82 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16483_none_91f71c3c295cda16\mshtml.dll : 1,23,24,864 : 04/05/2013 03:53 AM : 79b0d843b26bea808ea89ba2d8a026f2 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16484_none_91f81c86295bf36d\mshtml.dll : 1,23,24,864 : 05/06/2013 00:55 AM : 26f30066b9fa78c97a0e92803d496211 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16490_none_91e94b722967aa02\mshtml.dll : 1,23,29,984 : 05/17/2013 04:38 AM : a6f5b25905cd01ae714990e02c7205a5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20544_none_92acf90142592373\mshtml.dll : 1,22,79,808 : 06/01/2012 09:50 AM : a21b983e40578d0e6cfa9864ac4e1219 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20565_none_92985973426874ac\mshtml.dll : 1,23,21,280 : 11/14/2012 07:44 AM : 8021ef27048f9ece5286ea8c8eed23b8 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20573_none_928b88f342725def\mshtml.dll : 1,23,22,304 : 01/09/2013 02:47 AM : b6ad225b3bcc07332fbb2c2824315534 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20580_none_927db829427d2ddb\mshtml.dll : 1,23,22,304 : 02/02/2013 09:45 AM : 88c27474e61271b49677f22cee76fb3e [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20586_none_9283b9e54277c5e5\mshtml.dll : 1,23,24,864 : 02/22/2013 09:36 AM : 474d43d76e2a33fee21c6f4bb7c4a3b7 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20593_none_9275e91b428295d1\mshtml.dll : 1,23,25,376 : 04/05/2013 03:03 AM : 4ebf337d1f52ea9202072348ba41ca95 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20594_none_9276e9654281af28\mshtml.dll : 1,23,25,888 : 05/06/2013 01:56 AM : 1152de9d7fe16ec92a12165d1cbe8406 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20600_none_92d4396f423c4b7a\mshtml.dll : 1,23,30,496 : 05/17/2013 03:38 AM : 097654708fe5f07278a1e36d9f78ca94 [Pos Repl]

 * C:\Windows\System32\msimg32.dll : 8,192 : 07/14/2009 07:11 AM : e424b3ef666b184cee0b6871aaa8c9f6 [NoSig]
 +-> C:\Windows\erdnt\cache64\msimg32.dll : 8,192 : 07/14/2009 07:11 AM : e424b3ef666b184cee0b6871aaa8c9f6 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\msimg32.dll : 4,608 : 07/14/2009 06:45 AM : 18ab2e5a40064ed5f7791ac5946a90f3 [Pos Repl]
 +-> C:\Windows\SysWOW64\msimg32.dll : 4,608 : 07/14/2009 06:45 AM : 18ab2e5a40064ed5f7791ac5946a90f3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-gdi-painting_31bf3856ad364e35_6.1.7600.16385_none_d360c9c235bd1868\msimg32.dll : 8,192 : 07/14/2009 07:11 AM : e424b3ef666b184cee0b6871aaa8c9f6 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-gdi-painting_31bf3856ad364e35_6.1.7600.16385_none_77422e3e7d5fa732\msimg32.dll : 4,608 : 07/14/2009 06:45 AM : 18ab2e5a40064ed5f7791ac5946a90f3 [Pos Repl]

 * C:\Windows\System32\msprivs.dll : 2,048 : 07/14/2009 06:59 AM : 02b64609f865a39365ff88580df11738 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-lsa-msprivs_31bf3856ad364e35_6.1.7600.16385_none_680de2b99516e12e\msprivs.dll : 2,048 : 07/14/2009 06:59 AM : 02b64609f865a39365ff88580df11738 [Pos Repl]

 * C:\Windows\System32\msvcrt.dll : 6,34,880 : 12/16/2011 02:16 PM : c391fc68282a000cdf953f8b6b55d2ef [NoSig]
 +-> C:\Windows\erdnt\cache64\msvcrt.dll : 6,34,880 : 12/16/2011 02:16 PM : c391fc68282a000cdf953f8b6b55d2ef [Pos Repl]
 +-> C:\Windows\erdnt\cache86\msvcrt.dll : 6,90,688 : 12/16/2011 01:22 PM : 9dc80a8aaaaac397bdab3c67165a824e [Pos Repl]
 +-> C:\Windows\SysWOW64\msvcrt.dll : 6,90,688 : 12/16/2011 01:22 PM : 9dc80a8aaaaac397bdab3c67165a824e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-msvcrt_31bf3856ad364e35_6.1.7600.16385_none_2d4a27c7b8972454\msvcrt.dll : 6,34,880 : 07/14/2009 07:11 AM : 7319bb10fa1f86e49e3dcf4136f6c957 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-msvcrt_31bf3856ad364e35_6.1.7601.17744_none_2f5acf97b59df60f\msvcrt.dll : 6,34,880 : 12/16/2011 02:16 PM : c391fc68282a000cdf953f8b6b55d2ef [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-msvcrt_31bf3856ad364e35_6.1.7601.21878_none_2fc7fdc6ced04f08\msvcrt.dll : 6,34,880 : 12/16/2011 02:09 PM : f9a4c695c86cc32048fe2c987a0bd387 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-msvcrt_31bf3856ad364e35_6.1.7600.16385_none_d12b8c440039b31e\msvcrt.dll : 6,90,688 : 07/14/2009 06:45 AM : e46d48a7fe961401f1cbf85531cdf05d [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-msvcrt_31bf3856ad364e35_6.1.7601.17744_none_d33c3413fd4084d9\msvcrt.dll : 6,90,688 : 12/16/2011 01:22 PM : 9dc80a8aaaaac397bdab3c67165a824e [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-msvcrt_31bf3856ad364e35_6.1.7601.21878_none_d3a962431672ddd2\msvcrt.dll : 6,90,688 : 12/16/2011 02:28 PM : 2f740c4b458331357e825e94afb0953a [Pos Repl]

 * C:\Windows\System32\mswsock.dll : 3,27,168 : 05/11/2016 10:32 PM : 963d7fa2110eb9e03ab0d200e6ae2614 [NoSig]
 +-> C:\Windows\erdnt\cache64\mswsock.dll : 3,27,168 : 05/11/2016 10:32 PM : 963d7fa2110eb9e03ab0d200e6ae2614 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\mswsock.dll : 2,31,424 : 05/11/2016 08:49 PM : a88241c2a519afd2c99a40000f9113e6 [Pos Repl]
 +-> C:\Windows\SysWOW64\mswsock.dll : 2,31,424 : 05/11/2016 08:49 PM : a88241c2a519afd2c99a40000f9113e6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.17514_none_16795c7543eb48cf\mswsock.dll : 3,26,144 : 11/21/2010 08:54 AM : 1d5185a4c7e6695431ae4b55c3d7d333 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.18254_none_164e004b440bdabf\mswsock.dll : 3,27,168 : 09/08/2013 07:57 AM : 9a9f9f1a77d6a80ee28b57664f00013e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.22444_none_16e26ee85d215bbf\mswsock.dll : 3,27,168 : 09/07/2013 07:54 AM : bddb1fd258b92dee00f222d3304b5d9c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.23451_none_16d487565d2c454c\mswsock.dll : 3,27,168 : 05/11/2016 10:32 PM : 963d7fa2110eb9e03ab0d200e6ae2614 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.17514_none_ba5ac0f18b8dd799\mswsock.dll : 2,32,448 : 11/21/2010 08:54 AM : 8999b8631c7fd9f7f9ec3cafd953ba24 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.18254_none_ba2f64c78bae6989\mswsock.dll : 2,31,424 : 09/08/2013 07:33 AM : e94c583cde2348950155f2af2876f34d [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.22444_none_bac3d364a4c3ea89\mswsock.dll : 2,31,424 : 09/07/2013 07:34 AM : 6547d445c4b69dc0083b619ac642df04 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.23451_none_bab5ebd2a4ced416\mswsock.dll : 2,31,424 : 05/11/2016 08:49 PM : a88241c2a519afd2c99a40000f9113e6 [Pos Repl]

 * C:\Windows\System32\netlogon.dll : 6,95,808 : 11/21/2010 08:54 AM : aa339dd8bb128ef66660dfbbb59043d3 [NoSig]
 +-> C:\Windows\erdnt\cache64\netlogon.dll : 6,95,808 : 11/21/2010 08:54 AM : aa339dd8bb128ef66660dfbbb59043d3 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\netlogon.dll : 5,63,712 : 11/21/2010 08:54 AM : c1809b9907adedaf16f50c894100883b [Pos Repl]
 +-> C:\Windows\SysWOW64\netlogon.dll : 5,63,712 : 11/21/2010 08:54 AM : c1809b9907adedaf16f50c894100883b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll : 6,95,808 : 11/21/2010 08:54 AM : aa339dd8bb128ef66660dfbbb59043d3 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll : 5,63,712 : 11/21/2010 08:54 AM : c1809b9907adedaf16f50c894100883b [Pos Repl]

 * C:\Windows\System32\netman.dll : 3,60,448 : 07/14/2009 07:11 AM : 847d3ae376c0817161a14a82c8922a9e [NoSig]
 +-> C:\Windows\erdnt\cache64\netman.dll : 3,60,448 : 07/14/2009 07:11 AM : 847d3ae376c0817161a14a82c8922a9e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-netman_31bf3856ad364e35_6.1.7600.16385_none_6bb20d3d6b80d9da\netman.dll : 3,60,448 : 07/14/2009 07:11 AM : 847d3ae376c0817161a14a82c8922a9e [Pos Repl]

 * C:\Windows\System32\ole32.dll : 20,84,864 : 03/18/2016 04:26 AM : 10f466ef4048ca32caf98fe4a3a16982 [NoSig]
 +-> C:\Windows\erdnt\cache64\ole32.dll : 20,84,864 : 03/18/2016 04:26 AM : 10f466ef4048ca32caf98fe4a3a16982 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\ole32.dll : 14,14,144 : 03/18/2016 03:58 AM : e518b37f8c82a4320732352e4da9bf41 [Pos Repl]
 +-> C:\Windows\SysWOW64\ole32.dll : 14,14,144 : 03/18/2016 03:58 AM : e518b37f8c82a4320732352e4da9bf41 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_0a43accb08f0eac5\ole32.dll : 20,86,912 : 11/21/2010 08:53 AM : 6c60b5aca7442efb794082cdacfc001c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.18915_none_0a449de508f01259\ole32.dll : 20,87,424 : 07/04/2015 11:37 PM : e3eb94b45a2735d4559558b5899732e8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.19131_none_0a2ad6ed09041548\ole32.dll : 20,85,888 : 01/17/2016 00:31 AM : e8089a2512554e3c97423d89f3253cd0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.23118_none_0ad113b0220b316a\ole32.dll : 20,86,912 : 07/04/2015 11:44 PM : c0eacfb89f9f32705f5576d49cc32e9b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.23334_none_0ab7767c221efe3e\ole32.dll : 20,84,864 : 01/17/2016 06:01 AM : 6fa99818268b8b77f82d9e11052945cf [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.23392_none_0a74966022517336\ole32.dll : 20,84,864 : 03/18/2016 04:26 AM : 10f466ef4048ca32caf98fe4a3a16982 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_ae2511475093798f\ole32.dll : 14,14,144 : 11/21/2010 08:54 AM : 928cf7268086631f54c3d8e17238c6dd [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.18915_none_ae2602615092a123\ole32.dll : 14,14,656 : 07/04/2015 11:18 PM : 4548507ed3c17db4739dbbeaf6378004 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.19131_none_ae0c3b6950a6a412\ole32.dll : 14,13,632 : 01/17/2016 00:06 AM : e00604ce082ba387ac1d354c45f7edec [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.23118_none_aeb2782c69adc034\ole32.dll : 14,14,656 : 07/04/2015 11:18 PM : 1327be7f332b0695c0158d6dde9551a9 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.23334_none_ae98daf869c18d08\ole32.dll : 14,14,144 : 01/17/2016 05:45 AM : b91f14203010707e6c75f858c944cd5a [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.23392_none_ae55fadc69f40200\ole32.dll : 14,14,144 : 03/18/2016 03:58 AM : e518b37f8c82a4320732352e4da9bf41 [Pos Repl]

 * C:\Windows\System32\perfctrs.dll : 44,544 : 07/14/2009 07:11 AM : 8056a3e51b569c3f437a5026a0abe66d [NoSig]
 +-> C:\Windows\erdnt\cache86\perfctrs.dll : 39,424 : 07/14/2009 06:46 AM : edd2ad141debd425d74a52a4d7be6ac4 [Pos Repl]
 +-> C:\Windows\SysWOW64\perfctrs.dll : 39,424 : 07/14/2009 06:46 AM : edd2ad141debd425d74a52a4d7be6ac4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.1.7600.16385_none_8d682f6a76cad93f\perfctrs.dll : 44,544 : 07/14/2009 07:11 AM : 8056a3e51b569c3f437a5026a0abe66d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.1.7600.16385_none_97bcd9bcab2b9b3a\perfctrs.dll : 39,424 : 07/14/2009 06:46 AM : edd2ad141debd425d74a52a4d7be6ac4 [Pos Repl]

 * C:\Windows\System32\powrprof.dll : 1,67,424 : 07/14/2009 07:11 AM : 716175021bda290504ce434273f666bc [NoSig]
 +-> C:\Windows\erdnt\cache64\powrprof.dll : 1,67,424 : 07/14/2009 07:11 AM : 716175021bda290504ce434273f666bc [Pos Repl]
 +-> C:\Windows\erdnt\cache86\powrprof.dll : 1,45,408 : 07/14/2009 06:46 AM : 08dfdbd2fd4ea951dc46b1c7661ed35a [Pos Repl]
 +-> C:\Windows\SysWOW64\powrprof.dll : 1,45,408 : 07/14/2009 06:46 AM : 08dfdbd2fd4ea951dc46b1c7661ed35a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-userpowermanagement_31bf3856ad364e35_6.1.7600.16385_none_ff0e900816896618\powrprof.dll : 1,67,424 : 07/14/2009 07:11 AM : 716175021bda290504ce434273f666bc [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-userpowermanagement_31bf3856ad364e35_6.1.7600.16385_none_a2eff4845e2bf4e2\powrprof.dll : 1,45,408 : 07/14/2009 06:46 AM : 08dfdbd2fd4ea951dc46b1c7661ed35a [Pos Repl]

 * C:\Windows\System32\psbase.dll : 52,224 : 07/14/2009 07:11 AM : ab95fbae4f9a5a56b177cec427b2b35e [NoSig]
 +-> C:\Windows\SysWOW64\psbase.dll : 50,688 : 07/14/2009 06:46 AM : 274992d0945889a6b56d0e1bd4288a6e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.1.7600.16385_none_a43e06414a0fcb4b\psbase.dll : 52,224 : 07/14/2009 07:11 AM : ab95fbae4f9a5a56b177cec427b2b35e [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.1.7600.16385_none_ae92b0937e708d46\psbase.dll : 50,688 : 07/14/2009 06:46 AM : 274992d0945889a6b56d0e1bd4288a6e [Pos Repl]

 * C:\Windows\System32\pstorsvc.dll : 36,352 : 07/14/2009 07:11 AM : 35ba5aa671887fe8a62b88a9a6229fd5 [NoSig]
 +-> C:\Windows\SysWOW64\pstorsvc.dll : 23,552 : 07/14/2009 06:46 AM : 0a3ccb2c4f603d99f34d742fc9544b97 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.1.7600.16385_none_a43e06414a0fcb4b\pstorsvc.dll : 36,352 : 07/14/2009 07:11 AM : 35ba5aa671887fe8a62b88a9a6229fd5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.1.7600.16385_none_ae92b0937e708d46\pstorsvc.dll : 23,552 : 07/14/2009 06:46 AM : 0a3ccb2c4f603d99f34d742fc9544b97 [Pos Repl]

 * C:\Windows\System32\qmgr.dll : 8,49,920 : 11/21/2010 08:53 AM : 1ea7969e3271cbc59e1730697dc74682 [NoSig]
 +-> C:\Windows\erdnt\cache64\qmgr.dll : 8,49,920 : 11/21/2010 08:53 AM : 1ea7969e3271cbc59e1730697dc74682 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-bits-client_31bf3856ad364e35_6.1.7601.17514_none_81b6ca5c101195cd\qmgr.dll : 8,49,920 : 11/21/2010 08:53 AM : 1ea7969e3271cbc59e1730697dc74682 [Pos Repl]

 * C:\Windows\System32\rasadhlp.dll : 16,384 : 07/14/2009 07:11 AM : 88351b29b622b30962d2feb6ca8d860b [NoSig]
 +-> C:\Windows\erdnt\cache86\rasadhlp.dll : 11,776 : 07/14/2009 06:46 AM : ed6ee83d61ebc683c2cd8e899ea6febe [Pos Repl]
 +-> C:\Windows\SysWOW64\rasadhlp.dll : 11,776 : 07/14/2009 06:46 AM : ed6ee83d61ebc683c2cd8e899ea6febe [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rasautodial_31bf3856ad364e35_6.1.7600.16385_none_6bcef05d7f04260a\rasadhlp.dll : 16,384 : 07/14/2009 07:11 AM : 88351b29b622b30962d2feb6ca8d860b [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-rasautodial_31bf3856ad364e35_6.1.7600.16385_none_76239aafb364e805\rasadhlp.dll : 11,776 : 07/14/2009 06:46 AM : ed6ee83d61ebc683c2cd8e899ea6febe [Pos Repl]

 * C:\Windows\System32\regsvc.dll : 1,59,232 : 07/14/2009 07:11 AM : e4d94f24081440b5fc5aa556c7c62702 [NoSig]
 +-> C:\Windows\erdnt\cache64\regsvc.dll : 1,59,232 : 07/14/2009 07:11 AM : e4d94f24081440b5fc5aa556c7c62702 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-remoteregistry-service_31bf3856ad364e35_6.1.7600.16385_none_e55af7609d2857a8\regsvc.dll : 1,59,232 : 07/14/2009 07:11 AM : e4d94f24081440b5fc5aa556c7c62702 [Pos Repl]

 * C:\Windows\System32\rpcss.dll : 5,11,488 : 02/03/2016 00:27 AM : 622c96afb07bb82c8650b47172137ac4 [NoSig]
 +-> C:\Windows\erdnt\cache64\rpcss.dll : 5,11,488 : 02/03/2016 00:27 AM : 622c96afb07bb82c8650b47172137ac4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7601.17514_none_c7f0e16b547f887d\rpcss.dll : 5,12,000 : 11/21/2010 08:54 AM : 5c627d1b1138676c0a7ab2c2c190d123 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7601.19143_none_c7cf3c355499019f\rpcss.dll : 5,11,488 : 02/03/2016 00:27 AM : 622c96afb07bb82c8650b47172137ac4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7601.23342_none_c857da9c6db78539\rpcss.dll : 5,12,000 : 01/31/2016 00:38 AM : 701f356a52ead0e7f675157b518c8650 [Pos Repl]

 * C:\Windows\System32\scecli.dll : 2,32,960 : 11/21/2010 08:54 AM : ed78427259134c63ed69804d2132b86c [NoSig]
 +-> C:\Windows\erdnt\cache64\scecli.dll : 2,32,960 : 11/21/2010 08:54 AM : ed78427259134c63ed69804d2132b86c [Pos Repl]
 +-> C:\Windows\erdnt\cache86\scecli.dll : 1,75,616 : 11/21/2010 08:53 AM : 8124944ec89d6a1815e4e53f5b96aaf4 [Pos Repl]
 +-> C:\Windows\SysWOW64\scecli.dll : 1,75,616 : 11/21/2010 08:53 AM : 8124944ec89d6a1815e4e53f5b96aaf4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll : 2,32,960 : 11/21/2010 08:54 AM : ed78427259134c63ed69804d2132b86c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll : 1,75,616 : 11/21/2010 08:53 AM : 8124944ec89d6a1815e4e53f5b96aaf4 [Pos Repl]

 * C:\Windows\System32\schannel.dll : 3,45,600 : 10/10/2016 09:03 PM : b59bf151a214538720f3eb9134c9ef22 [NoSig]
 +-> C:\Windows\SysWOW64\schannel.dll : 2,54,464 : 10/10/2016 08:46 PM : 8c1b4231df981a8d95d0b58799dd7a35 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_803c507d6be26102\schannel.dll : 3,40,992 : 11/21/2010 08:54 AM : a199de544bf5c61c134b22c7592226fc [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17725_none_803284a76be99098\schannel.dll : 3,40,992 : 06/01/2012 09:53 AM : fbd1d2169aceee3073861f8ca3a28c49 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17856_none_801317136c00fae9\schannel.dll : 3,40,992 : 06/02/2012 11:15 AM : 1573c45e65de32b1bc3572634f8f1e8e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18270_none_7ff753536c16c578\schannel.dll : 3,40,992 : 09/25/2013 07:52 AM : 31ffed18c7b836cec1b559347e32e151 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18409_none_804c092d6bd5e03e\schannel.dll : 3,40,992 : 03/04/2014 03:14 PM : 481f70241d4ea038bb02590a30f15a23 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18489_none_7ff589cd6c16bfc6\schannel.dll : 3,40,992 : 05/30/2014 01:38 PM : e8e98b3b7a6e1250f4aa7af8fa17d5bb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18606_none_80490c1b6bd88e87\schannel.dll : 3,42,016 : 09/19/2014 03:12 PM : a71b81ac2c14aba013ccf1225d9e3e36 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18714_none_803c3d816be274f1\schannel.dll : 3,41,504 : 01/10/2015 12:18 AM : ddacb408e607655ec64269706bfd504c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18738_none_802a9ed16bef122f\schannel.dll : 3,41,504 : 01/29/2015 08:49 AM : 601444fa61995a41962808f3968ff2da [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18741_none_8018ccdf6bfd7cbf\schannel.dll : 3,41,504 : 02/03/2015 09:01 AM : 7d483fe15799c3a0a676a97ef1bfa5dc [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18779_none_80005f6b6c0e9b4a\schannel.dll : 3,41,504 : 03/06/2015 11:12 AM : 3807605bda83c0da729a5219cebb9041 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18798_none_7fe9bf496c1fb9d5\schannel.dll : 3,41,504 : 03/17/2015 10:46 AM : 5ea8a53a243ed52da1f705d000854b2a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18812_none_803a3ed36be43f6a\schannel.dll : 3,41,504 : 04/04/2015 08:52 AM : bcbfedd97eb9f959b6ba541ca793d347 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18839_none_802ba1016bee28ad\schannel.dll : 3,41,504 : 04/28/2015 00:53 AM : 639e3005261836e526263087f64ff888 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18843_none_801acf596bfbac94\schannel.dll : 3,42,016 : 05/05/2015 06:59 AM : 8ad8d17425c75d2621b2cdfe0deabd21 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18869_none_800b313d6c067c80\schannel.dll : 3,42,016 : 05/25/2015 11:49 PM : 37dfcc91e419952772e02f2b3bbb2e2b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18909_none_804c12ab6bd5d201\schannel.dll : 3,42,016 : 06/27/2015 11:33 PM : 228d948ece24d9df8438d14151a6697b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18912_none_803a40b96be43c91\schannel.dll : 3,42,016 : 07/02/2015 02:19 AM : 9ea6da45b95599c27b1661c1d99307d7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18923_none_803071176beb71d9\schannel.dll : 3,42,016 : 07/15/2015 08:50 AM : 9696551f77c0ab73dbbaae4f24b21976 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18933_none_8025a12b6bf38dca\schannel.dll : 3,42,016 : 07/15/2015 11:40 PM : 46041293d887f4d89979874015f26b30 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18939_none_802ba2e76bee25d4\schannel.dll : 3,42,016 : 07/23/2015 05:32 AM : 84f5617f3edae4ab573c87bde53b3132 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19007_none_8049ea396bd7d295\schannel.dll : 3,42,016 : 09/15/2015 11:41 PM : ee035334b7a58c7f748c3d0394574a35 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19043_none_801aa9616bfbdcfd\schannel.dll : 3,44,064 : 10/16/2015 11:34 PM : 1a29e4bd53f4fed0e7d8f7d4ecc79d69 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19044_none_801ba9ab6bfaf654\schannel.dll : 3,44,064 : 10/17/2015 11:39 PM : 0f39b73658011f46d1c11fd4ebba5b36 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19045_none_801ca9f56bfa0fab\schannel.dll : 3,44,064 : 10/20/2015 06:35 AM : 08a922374554ba576f96fd3fdfe66964 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19110_none_80381a2d6be63a4c\schannel.dll : 3,44,064 : 12/31/2015 00:31 AM : cd2249aedd225cab5cc88b40126c987f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19131_none_80237a9f6bf58b85\schannel.dll : 3,44,064 : 01/17/2016 00:31 AM : 208a004b8b295878f6777320a723cef3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19135_none_80277bc76bf1f0e1\schannel.dll : 3,44,064 : 01/22/2016 11:49 AM : 8b240443503dc920964a9ad0216da10f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19160_none_80020a916c0ec601\schannel.dll : 3,44,064 : 02/12/2016 00:18 AM : f3cf4e9a48e3ce7011a8ff2e188d8208 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.21861_none_808ce09a852b3aca\schannel.dll : 3,40,992 : 06/01/2012 09:53 AM : ed848d806f639ce611b3bedc6c958140 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22010_none_80c1c9f48503c627\schannel.dll : 3,40,992 : 06/04/2012 01:24 PM : f6184411925d84c41a87fb9821554da8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22465_none_8090c3628527c52b\schannel.dll : 3,40,992 : 09/25/2013 07:57 AM : df0d854e2be8e77d54194d16d4ad3ff3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22616_none_80c7d71484fe4d1b\schannel.dll : 3,40,992 : 03/04/2014 04:38 PM : 6b5f46014ead4e77d87815cc8b5aaba9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22705_none_80d1a89c84f714fa\schannel.dll : 3,40,992 : 05/30/2014 01:30 PM : 7909370782de12e5351103f4eb0a2a2c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22712_none_80c3d7d28501e4e6\schannel.dll : 3,40,992 : 06/05/2014 08:14 PM : 1bca4929809615d451b04aeb1ae8d1b8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22736_none_80b23922850e8224\schannel.dll : 3,41,504 : 07/07/2014 07:36 AM : 5eb5654f3153f1c606323ef31c8c52a6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22807_none_80d3ab1684f544cf\schannel.dll : 3,41,504 : 07/07/2014 07:36 AM : 5eb5654f3153f1c606323ef31c8c52a6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22814_none_80c5da4c850014bb\schannel.dll : 3,41,504 : 09/19/2014 03:18 PM : ec0f72e63a48291e0f6ceb4320b901d6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22843_none_80a46a3e85194f37\schannel.dll : 3,41,504 : 10/14/2014 07:46 AM : 365406bd88682252672a687200ecfd11 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22865_none_8090cafa8527b9c7\schannel.dll : 3,41,504 : 10/14/2014 07:46 AM : 365406bd88682252672a687200ecfd11 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22920_none_80b70b1e850bc877\schannel.dll : 3,41,504 : 01/10/2015 12:39 AM : 2b4a9210b3a5905b8dc9f53f8e1af9cf [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22923_none_80ba0bfc8509147c\schannel.dll : 3,41,504 : 01/14/2015 11:59 AM : b981e85f94fc3fa14da7363a58434949 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22925_none_80bc0c908507472a\schannel.dll : 3,41,504 : 01/15/2015 01:55 PM : fa99be8d6a333ce932d02edddfb7347b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22943_none_80a46c2485194c5e\schannel.dll : 3,41,504 : 01/27/2015 09:26 AM : 6c4df506f0d4bcdef6caf5ab13aeaa47 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22948_none_80a96d968514cb11\schannel.dll : 3,41,504 : 02/03/2015 09:21 AM : f4731e851c2a635368e1219b2733cb45 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22983_none_80792c748539bc22\schannel.dll : 3,42,016 : 03/06/2015 11:02 AM : e8fccce51d55daf76ef66f699c4b9abf [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23002_none_80ce83ac84f9f685\schannel.dll : 3,41,504 : 03/17/2015 10:41 AM : 00f4fcd90332a8f82900f964229753bf [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23017_none_80c8b53284fd9129\schannel.dll : 3,41,504 : 04/04/2015 08:56 AM : 1347ba418567cdd288e1f010e3002a3b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23040_none_80a14368851c339b\schannel.dll : 3,41,504 : 04/28/2015 00:47 AM : 760f8d0ed534f1efef7d38442d8cae0c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23045_none_80a644da8517b24e\schannel.dll : 3,42,528 : 05/05/2015 09:13 AM : 16c331f388a8fd75c964ee29f9d72d1f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23072_none_8082d4388532ba1c\schannel.dll : 3,42,016 : 05/25/2015 11:52 PM : 9c04158a3f5843922a549d8b05f30d45 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23112_none_80c3b5a685020f9d\schannel.dll : 3,42,016 : 06/27/2015 11:42 PM : ca027e3e67357470dd70c6797e630e28 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23115_none_80c6b68484ff5ba2\schannel.dll : 3,42,016 : 07/01/2015 11:50 PM : ea97428a88f59d0398467a36c7f5c63f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23126_none_80bce6e2850690ea\schannel.dll : 3,42,016 : 07/15/2015 08:50 AM : 6455745691519b100804bfb5b68e233c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23136_none_80b216f6850eacdb\schannel.dll : 3,42,016 : 07/15/2015 11:39 PM : 378d6442d7197a07e098922db6b30147 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23142_none_80a345e2851a6370\schannel.dll : 3,42,016 : 07/23/2015 03:34 AM : 93e80ff25ace1651a65d48a4d3d04f26 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23153_none_80997640852198b8\schannel.dll : 3,42,016 : 08/04/2015 11:42 PM : 649f9e92edfb4463176ee22eea5f3948 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23211_none_80c2b7428502f36d\schannel.dll : 3,42,016 : 09/16/2015 05:07 AM : 9921fbc6b55a452749f12429af3c8d0b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23249_none_80aa49ce851411f8\schannel.dll : 3,44,064 : 10/16/2015 11:41 PM : ab9b400507c355339f47026b1453e979 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23250_none_80967748852449da\schannel.dll : 3,44,064 : 10/20/2015 06:41 AM : c234e8f41df4371feedb3af84a6e7251 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23313_none_80c4b9bc85012342\schannel.dll : 3,44,064 : 12/31/2015 00:42 AM : 56b648a0a09cb66439e0cbb04086db57 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23334_none_80b01a2e8510747b\schannel.dll : 3,44,064 : 01/17/2016 06:01 AM : cc3595f71cead87c1912961f80e6819d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23338_none_80b41b56850cd9d7\schannel.dll : 3,44,064 : 01/22/2016 11:58 AM : ee79c501f78c71e018eb7384d808f966 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23349_none_80aa4bb485140f1f\schannel.dll : 3,44,064 : 02/11/2016 00:24 AM : a088684f7c9a89dd7672dd32624e0cde [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23390_none_806b397e8544b6c5\schannel.dll : 3,44,064 : 03/16/2016 05:46 AM : 08eb8eaef4f121b6ab897568e9a68bf4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23391_none_806c39c88543d01c\schannel.dll : 3,44,064 : 03/17/2016 00:22 AM : dbb3847a28d05c8cebdb6757c0584fe6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23392_none_806d3a128542e973\schannel.dll : 3,44,064 : 03/18/2016 04:27 AM : 4f374ed543fc9f3bb17ec6a7c8df39a1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23418_none_80c9bd1484fc9f1c\schannel.dll : 3,44,064 : 04/09/2016 12:28 AM : aad83be49fbf04c9bd9dd4a9dc7a348f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23452_none_80987ba8852276d6\schannel.dll : 3,44,064 : 05/12/2016 10:44 PM : 3f0e9f9109ec12c5ed470ffbb0f18ae2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23497_none_80723d6a853e654d\schannel.dll : 3,43,552 : 07/08/2016 09:02 PM : b6000cc0f681d94f2afc15be6193f241 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23539_none_80b51f6c850bed7c\schannel.dll : 3,45,600 : 09/02/2016 09:00 PM : ef275a532a94e4deb0b5661acb791b94 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23545_none_80a64e588517a411\schannel.dll : 3,45,600 : 09/13/2016 02:38 AM : 6f21ee65f3b52fba10dc4fc45034d357 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23571_none_8081dd6c85339288\schannel.dll : 3,45,600 : 10/10/2016 09:03 PM : b59bf151a214538720f3eb9134c9ef22 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_8a90facfa04322fd\schannel.dll : 2,24,256 : 11/21/2010 08:54 AM : 135f7ac9be35ab1df727faf2e60e92f8 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17725_none_8a872ef9a04a5293\schannel.dll : 2,24,768 : 06/01/2012 09:53 AM : 1affb765af1fdcc0c185c38e9ddddaee [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17856_none_8a67c165a061bce4\schannel.dll : 2,25,280 : 06/02/2012 10:10 AM : 3d3cbd1847f980fb03343a63671e7886 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18270_none_8a4bfda5a0778773\schannel.dll : 2,47,808 : 09/25/2013 07:27 AM : aa6f6457116b559b76bc6a012cb4c293 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18409_none_8aa0b37fa036a239\schannel.dll : 2,47,808 : 03/04/2014 02:47 PM : 828185688fdaae6c7959b884abed1766 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18489_none_8a4a341fa07781c1\schannel.dll : 2,47,808 : 05/30/2014 01:22 PM : f95e1e9d97d25c11f29ca34c843a6f4d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18606_none_8a9db66da0395082\schannel.dll : 2,48,832 : 09/19/2014 02:53 PM : 8cfaefcd7f1e004950fcae870a501b3e [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18714_none_8a90e7d3a04336ec\schannel.dll : 2,48,832 : 01/10/2015 11:57 AM : 7c893dba0a58855a99da68b751fd223b [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18738_none_8a7f4923a04fd42a\schannel.dll : 2,48,832 : 01/29/2015 08:31 AM : c13a0b0d53f0e8277d1e695981ef7855 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18741_none_8a6d7731a05e3eba\schannel.dll : 2,48,832 : 02/03/2015 08:42 AM : 77949ecd7d87bc4a181c9b5e3d019d4f [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18779_none_8a5509bda06f5d45\schannel.dll : 2,48,832 : 03/06/2015 10:40 AM : d5063b86dc3f85b93d02af68099f4c9a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18798_none_8a3e699ba0807bd0\schannel.dll : 2,48,832 : 03/17/2015 10:27 AM : bc09159aff6639db2cb28058731199f0 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18812_none_8a8ee925a0450165\schannel.dll : 2,48,832 : 04/04/2015 08:35 AM : dc5aeeef4234ec50aa2162285034bf82 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18839_none_8a804b53a04eeaa8\schannel.dll : 2,48,832 : 04/28/2015 00:35 AM : c34e0f9846d0ff902ced82db5ab104ba [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18843_none_8a6f79aba05c6e8f\schannel.dll : 2,48,832 : 05/05/2015 06:42 AM : 2665a3d34d1c62df303723422215b001 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18869_none_8a5fdb8fa0673e7b\schannel.dll : 2,48,832 : 05/25/2015 11:31 PM : bbabc6702529cfadac0ec2b28168a288 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18909_none_8aa0bcfda03693fc\schannel.dll : 2,48,832 : 06/27/2015 11:20 PM : 5497deedb238cc233b4b71b56a82262a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18912_none_8a8eeb0ba044fe8c\schannel.dll : 2,48,832 : 07/02/2015 02:00 AM : 98226182583df1715f1be6ccea6e8d95 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18923_none_8a851b69a04c33d4\schannel.dll : 2,48,832 : 07/15/2015 08:25 AM : 38e51c1356d8669105b797ca6562da6d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18933_none_8a7a4b7da0544fc5\schannel.dll : 2,48,832 : 07/15/2015 11:25 PM : fe748feaa8a5a7677da1c2c6ce405ade [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18939_none_8a804d39a04ee7cf\schannel.dll : 2,48,832 : 07/22/2015 11:23 PM : f58753faee561563530d110d1da78df4 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19007_none_8a9e948ba0389490\schannel.dll : 2,48,832 : 09/15/2015 11:06 PM : 0834e70a068360d85cdc47697a4b7898 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19043_none_8a6f53b3a05c9ef8\schannel.dll : 2,51,392 : 10/16/2015 11:08 PM : 7421cf73303664edfcdd968cfe91ccd2 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19044_none_8a7053fda05bb84f\schannel.dll : 2,51,392 : 10/17/2015 11:18 PM : b11a43f734199715aa5d243d231f7fae [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19045_none_8a715447a05ad1a6\schannel.dll : 2,51,392 : 10/20/2015 06:15 AM : 0dd296312e531c6e0bf1ab7f2c092801 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19110_none_8a8cc47fa046fc47\schannel.dll : 2,51,392 : 12/31/2015 00:10 AM : afcf45621028d4b6d252b1429a07a530 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19131_none_8a7824f1a0564d80\schannel.dll : 2,51,392 : 01/17/2016 00:06 AM : a9485a2191447f4752b13ece7e308298 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19135_none_8a7c2619a052b2dc\schannel.dll : 2,51,392 : 01/22/2016 11:35 AM : d2cb5ae05c05a22428d0d241b1b93615 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.19160_none_8a56b4e3a06f87fc\schannel.dll : 2,51,392 : 02/12/2016 00:07 AM : 1827e4cad59c32a1e913aac375ac094f [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.21861_none_8ae18aecb98bfcc5\schannel.dll : 2,24,768 : 06/01/2012 09:53 AM : 3dbcbd8adb406c43a2127544d7ba974e [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22010_none_8b167446b9648822\schannel.dll : 2,25,280 : 06/02/2012 10:25 AM : c5b2dc72f2453cef2e150a81f696703d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22465_none_8ae56db4b9888726\schannel.dll : 2,47,808 : 09/25/2013 07:30 AM : b3d791020560fff9438fca764027ce3d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22616_none_8b1c8166b95f0f16\schannel.dll : 2,47,808 : 03/04/2014 04:09 PM : 2ca65ec66d4ea3c6e8bad9f2115aaa64 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22705_none_8b2652eeb957d6f5\schannel.dll : 2,47,808 : 05/30/2014 01:05 PM : ee9b43c83860e9a0e824965f4e4c719a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22712_none_8b188224b962a6e1\schannel.dll : 2,47,808 : 06/05/2014 07:46 PM : 515869f5d4a1bf839d74e381766285a9 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22736_none_8b06e374b96f441f\schannel.dll : 2,47,808 : 07/07/2014 07:10 AM : c2597cc43e9f3f54f87526045e5d616a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22807_none_8b285568b95606ca\schannel.dll : 2,47,808 : 07/07/2014 07:10 AM : c2597cc43e9f3f54f87526045e5d616a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22814_none_8b1a849eb960d6b6\schannel.dll : 2,48,832 : 09/19/2014 02:59 PM : f07fc786d166ab6c6c7e217c82ad4a78 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22843_none_8af91490b97a1132\schannel.dll : 2,48,832 : 10/14/2014 07:20 AM : 51499f7d51aa8ee15d94e397796a8da2 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22865_none_8ae5754cb9887bc2\schannel.dll : 2,48,832 : 10/14/2014 07:20 AM : 51499f7d51aa8ee15d94e397796a8da2 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22920_none_8b0bb570b96c8a72\schannel.dll : 2,48,832 : 01/10/2015 12:28 AM : 4af0f351c4cf3294818fc76a3e1c4043 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22923_none_8b0eb64eb969d677\schannel.dll : 2,48,832 : 01/14/2015 11:51 AM : b5583d45daa4f8912107e2d2eff773fc [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22925_none_8b10b6e2b9680925\schannel.dll : 2,48,832 : 01/15/2015 01:39 PM : a8a5f532bc58817e2044bea8f1deaa59 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22943_none_8af91676b97a0e59\schannel.dll : 2,48,832 : 01/27/2015 08:58 AM : 25271a7bda42737dd5d5339f50ef431c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22948_none_8afe17e8b9758d0c\schannel.dll : 2,48,832 : 02/03/2015 09:02 AM : 86ceda9380e183b19c76adc62e380301 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22983_none_8acdd6c6b99a7e1d\schannel.dll : 2,48,832 : 03/06/2015 10:41 AM : 19efcc3987487958463aae6012821d3c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23002_none_8b232dfeb95ab880\schannel.dll : 2,48,832 : 03/17/2015 10:15 AM : 7cc414a44d15221a14f7e8ec7994c2f9 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23017_none_8b1d5f84b95e5324\schannel.dll : 2,48,832 : 04/04/2015 08:41 AM : a9884624df5f6fd874a543d281164b78 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23040_none_8af5edbab97cf596\schannel.dll : 2,48,832 : 04/28/2015 00:26 AM : 2c1c6a33216f25acec06126911697765 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23045_none_8afaef2cb9787449\schannel.dll : 2,48,832 : 05/05/2015 08:57 AM : 81e49397682c109eb2b0a9fe7838d89c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23072_none_8ad77e8ab9937c17\schannel.dll : 2,48,832 : 05/25/2015 11:37 PM : d44f44ef0bb8c2947bc20e40a33258d3 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23112_none_8b185ff8b962d198\schannel.dll : 2,48,832 : 06/27/2015 11:34 PM : c269830364fd00a4fda8bcdc6dfaf03d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23115_none_8b1b60d6b9601d9d\schannel.dll : 2,48,832 : 07/01/2015 11:22 PM : 2a6acff1df12d136e55a3578380778e7 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23126_none_8b119134b96752e5\schannel.dll : 2,48,832 : 07/15/2015 08:30 AM : 57675cc4e04cb9fa452f3e06ed6589f5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23136_none_8b06c148b96f6ed6\schannel.dll : 2,48,832 : 07/15/2015 11:19 PM : 1ac49dba31773666d2115f0809e20939 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23142_none_8af7f034b97b256b\schannel.dll : 2,48,832 : 07/23/2015 05:27 AM : 129dea6c35bd7e537569e40dac45dd81 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23153_none_8aee2092b9825ab3\schannel.dll : 2,48,832 : 08/04/2015 11:22 PM : 8cf9cf9986436315b1036e3fd72b0eb5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23211_none_8b176194b963b568\schannel.dll : 2,48,832 : 09/16/2015 04:55 AM : d700d80c0b49ba3deae29098c3a0314c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23249_none_8afef420b974d3f3\schannel.dll : 2,51,392 : 10/16/2015 11:14 PM : 99a55ab326f8f5eaa4146ad3cf1fd69a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23250_none_8aeb219ab9850bd5\schannel.dll : 2,51,392 : 10/20/2015 06:17 AM : 6353bff4e7d154d87dfde8887297ece8 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23313_none_8b19640eb961e53d\schannel.dll : 2,51,392 : 12/31/2015 00:24 AM : 1c14e2db3b3bb52a22decbff04970448 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23334_none_8b04c480b9713676\schannel.dll : 2,51,392 : 01/17/2016 05:45 AM : 45caf4d0929a58a30d80d9ae052402d4 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23338_none_8b08c5a8b96d9bd2\schannel.dll : 2,51,392 : 01/22/2016 11:38 AM : b20045753ecef6eaea9d2986a1f53f32 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23349_none_8afef606b974d11a\schannel.dll : 2,51,392 : 02/10/2016 11:58 PM : 7a6d4652e96b2a440d6f86b18e4a9d14 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23390_none_8abfe3d0b9a578c0\schannel.dll : 2,51,392 : 03/16/2016 05:23 AM : 6c53bab40cfd819e943f738c24153de5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23391_none_8ac0e41ab9a49217\schannel.dll : 2,51,392 : 03/16/2016 11:59 PM : 32a993b64436ea60187d8c32ca82e403 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23392_none_8ac1e464b9a3ab6e\schannel.dll : 2,51,392 : 03/18/2016 03:59 AM : 2610c8ef506344326f7250691093a3b9 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23418_none_8b1e6766b95d6117\schannel.dll : 2,51,392 : 04/09/2016 12:24 AM : 5490a3788cf61248dc3423f279abf876 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23452_none_8aed25fab98338d1\schannel.dll : 2,51,392 : 05/12/2016 08:48 PM : bc554741b07e33bbb098c16189430868 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23497_none_8ac6e7bcb99f2748\schannel.dll : 2,51,392 : 07/08/2016 08:46 PM : 8241c71becb78fe347e26f1444ff0408 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23539_none_8b09c9beb96caf77\schannel.dll : 2,54,464 : 09/02/2016 08:46 PM : 95bf306be1d8c32867f680766788931e [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23545_none_8afaf8aab978660c\schannel.dll : 2,54,464 : 09/13/2016 02:19 AM : abb33f9bc14a4b37c5e6017d99e0fb91 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23571_none_8ad687beb9945483\schannel.dll : 2,54,464 : 10/10/2016 08:46 PM : 8c1b4231df981a8d95d0b58799dd7a35 [Pos Repl]

 * C:\Windows\System32\schedsvc.dll : 11,10,016 : 08/05/2015 11:26 PM : 40686b59c127f0c93b4234e4a1e3472a [NoSig]
 +-> C:\Windows\erdnt\cache64\schedsvc.dll : 11,10,016 : 08/05/2015 11:26 PM : 40686b59c127f0c93b4234e4a1e3472a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-taskscheduler-service_31bf3856ad364e35_6.1.7601.17514_none_8d272400ada202f9\schedsvc.dll : 11,10,016 : 11/21/2010 08:54 AM : 262f6592c3299c005fd6bec90fc4463a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-taskscheduler-service_31bf3856ad364e35_6.1.7601.18951_none_8cf8d442adc534f5\schedsvc.dll : 11,10,016 : 08/05/2015 11:26 PM : 40686b59c127f0c93b4234e4a1e3472a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-taskscheduler-service_31bf3856ad364e35_6.1.7601.23154_none_8d854a0dc6e05406\schedsvc.dll : 11,10,528 : 08/05/2015 11:34 PM : e1f233ce5da10ac41c0545f5dad25998 [Pos Repl]

 * C:\Windows\System32\services.exe : 3,28,704 : 04/13/2015 08:58 AM : 71c85477df9347fe8e7bc55768473fca [NoSig]
 +-> C:\Windows\erdnt\cache64\services.exe : 3,28,704 : 04/13/2015 08:58 AM : 71c85477df9347fe8e7bc55768473fca [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe : 3,28,704 : 07/14/2009 07:09 AM : 24acb7e5be595468e3b9aa488b9b4fcb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.18829_none_2d7fe646e3ec3705\services.exe : 3,28,704 : 04/13/2015 08:58 AM : 71c85477df9347fe8e7bc55768473fca [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.23033_none_2df8898bfd178df8\services.exe : 3,28,704 : 04/11/2015 10:01 AM : 43dcec23557c32f7702c8d5bc729738f [Pos Repl]

 * C:\Windows\System32\setupapi.dll : 19,00,544 : 11/21/2010 08:54 AM : 5d8e6c95156ed1f79a63d1eade6f9ed5 [NoSig]
 +-> C:\Windows\SysWOW64\setupapi.dll : 16,67,584 : 11/21/2010 08:53 AM : 10fb16b50affda6d44588f3c445dc273 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-setupapi_31bf3856ad364e35_6.1.7601.17514_none_931b5f1fdcdd6496\setupapi.dll : 19,00,544 : 11/21/2010 08:54 AM : 5d8e6c95156ed1f79a63d1eade6f9ed5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-setupapi_31bf3856ad364e35_6.1.7601.17514_none_9d700972113e2691\setupapi.dll : 16,67,584 : 11/21/2010 08:53 AM : 10fb16b50affda6d44588f3c445dc273 [Pos Repl]

 * C:\Windows\System32\sfc.dll : 3,072 : 07/14/2009 07:03 AM : c6dcd1d11ed6827f05c00773c3e7053c [NoSig]
 +-> C:\Windows\erdnt\cache64\sfc.dll : 3,072 : 07/14/2009 07:03 AM : c6dcd1d11ed6827f05c00773c3e7053c [Pos Repl]
 +-> C:\Windows\erdnt\cache86\sfc.dll : 2,560 : 07/14/2009 06:40 AM : 40caeee0eaf1b8569f7c8df6420f2cb9 [Pos Repl]
 +-> C:\Windows\SysWOW64\sfc.dll : 2,560 : 07/14/2009 06:40 AM : 40caeee0eaf1b8569f7c8df6420f2cb9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-sfc_31bf3856ad364e35_6.1.7600.16385_none_032ab4f375e2ac1f\sfc.dll : 3,072 : 07/14/2009 07:03 AM : c6dcd1d11ed6827f05c00773c3e7053c [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-sfc_31bf3856ad364e35_6.1.7600.16385_none_a70c196fbd853ae9\sfc.dll : 2,560 : 07/14/2009 06:40 AM : 40caeee0eaf1b8569f7c8df6420f2cb9 [Pos Repl]

 * C:\Windows\System32\shsvcs.dll : 3,70,688 : 11/21/2010 08:53 AM : aaf932b4011d14052955d4b212a4da8d [NoSig]
 +-> C:\Windows\erdnt\cache64\shsvcs.dll : 3,70,688 : 11/21/2010 08:53 AM : aaf932b4011d14052955d4b212a4da8d [Pos Repl]
 +-> C:\Windows\erdnt\cache86\shsvcs.dll : 3,28,192 : 11/21/2010 08:54 AM : 414da952a35bf5d50192e28263b40577 [Pos Repl]
 +-> C:\Windows\SysWOW64\shsvcs.dll : 3,28,192 : 11/21/2010 08:54 AM : 414da952a35bf5d50192e28263b40577 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-shsvcs_31bf3856ad364e35_6.1.7601.17514_none_2b566299338d2123\shsvcs.dll : 3,70,688 : 11/21/2010 08:53 AM : aaf932b4011d14052955d4b212a4da8d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-shsvcs_31bf3856ad364e35_6.1.7601.17514_none_35ab0ceb67ede31e\shsvcs.dll : 3,28,192 : 11/21/2010 08:54 AM : 414da952a35bf5d50192e28263b40577 [Pos Repl]

 * C:\Windows\System32\smss.exe : 1,12,640 : 10/07/2016 08:26 PM : a4bdb0372693a539c21d4c7d21cc0c46 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe : 1,12,640 : 07/14/2009 07:09 AM : 1911a3356fa3f77ccc825ccbac038c2a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_0a5f8ec22fd235a9\smss.exe : 1,12,640 : 03/19/2013 08:36 AM : f0371de302ffff8f086661611be60848 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18229_none_0a5ac2782fd4e6cb\smss.exe : 1,12,640 : 08/02/2013 06:29 AM : f0970a4bc8395659c22bf53d0fadf16f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18738_none_0a4efbc02fdddb28\smss.exe : 1,12,640 : 01/29/2015 08:48 AM : 83c0199b7c06ac3c33212e1a0dc2260e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18741_none_0a3d29ce2fec45b8\smss.exe : 1,12,640 : 02/03/2015 09:00 AM : 63d3c30b497347495b8ea78a38188969 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18798_none_0a0e1c38300e82ce\smss.exe : 1,12,640 : 03/17/2015 10:46 AM : 0b6514a14631e41de4d6d40d1c80be68 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18839_none_0a4ffdf02fdcf1a6\smss.exe : 1,12,640 : 04/28/2015 00:52 AM : da5ef2cc0764be7097bafa9caf903fe8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18869_none_0a2f8e2c2ff54579\smss.exe : 1,12,640 : 05/25/2015 11:48 PM : 9bbea639884c0338dd78654277bd188a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18923_none_0a54ce062fda3ad2\smss.exe : 1,12,640 : 07/15/2015 08:49 AM : b094fd54a16671683b4a27a8c43bcdd0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18933_none_0a49fe1a2fe256c3\smss.exe : 1,12,640 : 07/15/2015 11:40 PM : 55c48343919a72b0c8f5c42e4c798fca [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18939_none_0a4fffd62fdceecd\smss.exe : 1,12,640 : 07/23/2015 05:32 AM : 50eee09d03b94a13dfefefc1d774fc31 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.19018_none_0a6477862fcdd0d6\smss.exe : 1,12,640 : 09/29/2015 08:40 AM : d2e2a613ebd0c959e72556c3a63a6b4a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.19045_none_0a4106e42fe8d8a4\smss.exe : 1,12,640 : 10/20/2015 06:35 AM : 9066ae964d95b1abc999ced271556a7c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.19110_none_0a5c771c2fd50345\smss.exe : 1,12,640 : 12/30/2015 11:11 PM : fa792622268ee423fc5e6ae23fb43599 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.19131_none_0a47d78e2fe4547e\smss.exe : 1,12,640 : 01/16/2016 11:09 PM : 14b751d2c502a2e3e37cd3c8c99f5488 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.19135_none_0a4bd8b62fe0b9da\smss.exe : 1,12,640 : 01/22/2016 10:27 AM : 789035a84618ac25cedc91606029a4a2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.19160_none_0a2667802ffd8efa\smss.exe : 1,12,640 : 02/11/2016 11:02 PM : bab3e8c0c2cfc7a9dc6a52615bc6064e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22280_none_0a9a7b3b492b4d05\smss.exe : 1,12,640 : 03/19/2013 08:27 AM : 498e2a20e145199709cd100cdba8603d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22379_none_0aae4fa7491b124a\smss.exe : 1,12,640 : 07/08/2013 08:20 AM : e65601cf4bc0cf3718afbe56a9ad846f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22411_none_0ae72ec548f19d13\smss.exe : 1,12,640 : 08/02/2013 10:36 AM : cb5da3e44456d1084bcd87f5b1b3152b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22436_none_0ad6905f48fd53a8\smss.exe : 1,12,640 : 08/29/2013 06:34 AM : b2b31d4c79efd883097fa24d02e79c12 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22653_none_0abdf375491039d3\smss.exe : 1,12,640 : 04/12/2014 08:01 AM : 3442a918386d4716d74c661543151746 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22780_none_0a9a84b9492b3ec8\smss.exe : 1,12,640 : 04/12/2014 08:01 AM : 3442a918386d4716d74c661543151746 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22908_none_0af90a3548e32446\smss.exe : 1,12,640 : 04/12/2014 08:01 AM : 3442a918386d4716d74c661543151746 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22921_none_0adc685748f9aac7\smss.exe : 1,12,640 : 04/12/2014 08:01 AM : 3442a918386d4716d74c661543151746 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22923_none_0ade68eb48f7dd75\smss.exe : 1,12,640 : 04/12/2014 08:01 AM : 3442a918386d4716d74c661543151746 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22943_none_0ac8c91349081557\smss.exe : 1,12,640 : 01/27/2015 09:26 AM : b75198d88a34994de1e4d9f2286df759 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22948_none_0acdca854903940a\smss.exe : 1,12,640 : 02/03/2015 09:20 AM : 8cd5a97b8d155718d357b2d9bc6b113d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23002_none_0af2e09b48e8bf7e\smss.exe : 1,12,640 : 03/17/2015 10:41 AM : 206a6b71ac09d9f7651f0a8b015676c7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23040_none_0ac5a057490afc94\smss.exe : 1,12,640 : 04/28/2015 00:47 AM : cf8dc00fa29243a347ad4b605afff1e5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23072_none_0aa7312749218315\smss.exe : 1,12,640 : 05/25/2015 11:51 PM : 18196a0f4c3904c81ace6e91529227d9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23126_none_0ae143d148f559e3\smss.exe : 1,12,640 : 07/15/2015 08:49 AM : c95509f69d3584bb216c5b2365e74956 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23136_none_0ad673e548fd75d4\smss.exe : 1,12,640 : 07/15/2015 11:38 PM : 5e200958cfbdb2b82c78b6f883236640 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23142_none_0ac7a2d149092c69\smss.exe : 1,12,640 : 07/23/2015 03:33 AM : e31f311aeacdab79cfa4e5b5acb2b954 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23153_none_0abdd32f491061b1\smss.exe : 1,12,640 : 08/04/2015 11:42 PM : 673173e434a15dcf217998299c356a9e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23223_none_0ade44d948f80b05\smss.exe : 1,12,640 : 09/28/2015 11:45 PM : 740dbd927ae4c290e62023f09cc8740e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23226_none_0ae145b748f5570a\smss.exe : 1,12,640 : 10/01/2015 11:36 PM : 9815b80e8f45d4cff468899a444fe3b8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23250_none_0abad437491312d3\smss.exe : 1,12,640 : 10/20/2015 06:41 AM : 12e497414382ef5970a5e42aeba7ad2e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23313_none_0ae916ab48efec3b\smss.exe : 1,12,640 : 12/30/2015 11:16 PM : e2aabc6f2de2b7e7ebbc08e66873ebb8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23334_none_0ad4771d48ff3d74\smss.exe : 1,12,640 : 01/17/2016 04:45 AM : 839cd174f686363771b6a0bbe87ccd16 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23338_none_0ad8784548fba2d0\smss.exe : 1,12,640 : 01/22/2016 11:57 AM : f7ef6821e330d14e3a84649a35c86217 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23349_none_0acea8a34902d818\smss.exe : 1,12,640 : 02/10/2016 11:07 PM : 56518e444ca1d4bead4819b6d9528e4b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23391_none_0a9096b749329915\smss.exe : 1,12,640 : 03/16/2016 11:01 PM : 7fcfd859f3b53c6a2f334d41bc54b3fe [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23392_none_0a9197014931b26c\smss.exe : 1,12,640 : 03/18/2016 03:05 AM : 682586cacd78ef53ef7301b4180eb595 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23418_none_0aee1a0348eb6815\smss.exe : 1,12,640 : 04/09/2016 11:13 AM : 1cbdcac093542013bee9e4700c74c784 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23539_none_0ad97c5b48fab675\smss.exe : 1,12,640 : 09/02/2016 08:23 PM : 07fa7b813f15f0a19af82d77ce8cf978 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23543_none_0ac8aab349083a5c\smss.exe : 1,12,640 : 09/09/2016 11:13 PM : b4ea50c9844e9f7f27af7f374de1a4ea [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23569_none_0ab90c9749130a48\smss.exe : 1,12,640 : 10/07/2016 08:26 PM : a4bdb0372693a539c21d4c7d21cc0c46 [Pos Repl]

 * C:\Windows\System32\spoolsv.exe : 5,59,104 : 02/11/2012 12:06 AM : 85daa09a98c9286d4ea2ba8d0e644377 [NoSig]
 +-> C:\Windows\erdnt\cache64\spoolsv.exe : 5,59,104 : 02/11/2012 12:06 AM : 85daa09a98c9286d4ea2ba8d0e644377 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17514_none_3471a890d8284f57\spoolsv.exe : 5,59,104 : 11/21/2010 08:54 AM : b96c17b5dc1424d56eea3a99e97428cd [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17777_none_3433cdb2d8563d50\spoolsv.exe : 5,59,104 : 02/11/2012 12:06 AM : 85daa09a98c9286d4ea2ba8d0e644377 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.21921_none_34ed7a43f150b682\spoolsv.exe : 5,59,616 : 02/11/2012 11:50 AM : b9d7a4858cf32a6a15d2763f1de47e0e [Pos Repl]

 * C:\Windows\System32\ssdpsrv.dll : 1,93,024 : 07/14/2009 07:11 AM : 51b52fbd583cde8aa9ba62b8b4298f33 [NoSig]
 +-> C:\Windows\erdnt\cache64\ssdpsrv.dll : 1,93,024 : 07/14/2009 07:11 AM : 51b52fbd583cde8aa9ba62b8b4298f33 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-upnpssdp_31bf3856ad364e35_6.1.7600.16385_none_dbbe6492eae9505c\ssdpsrv.dll : 1,93,024 : 07/14/2009 07:11 AM : 51b52fbd583cde8aa9ba62b8b4298f33 [Pos Repl]

 * C:\Windows\System32\svchost.exe : 27,136 : 07/14/2009 07:09 AM : c78655bc80301d76ed4fef1c1ea40a7d [NoSig]
 +-> C:\Windows\erdnt\cache64\svchost.exe : 27,136 : 07/14/2009 07:09 AM : c78655bc80301d76ed4fef1c1ea40a7d [Pos Repl]
 +-> C:\Windows\erdnt\cache86\svchost.exe : 20,992 : 07/14/2009 06:44 AM : 54a47f6b5e09a77e61649109c6a08866 [Pos Repl]
 +-> C:\Windows\SysWOW64\svchost.exe : 20,992 : 07/14/2009 06:44 AM : 54a47f6b5e09a77e61649109c6a08866 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe : 27,136 : 07/14/2009 07:09 AM : c78655bc80301d76ed4fef1c1ea40a7d [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe : 20,992 : 07/14/2009 06:44 AM : 54a47f6b5e09a77e61649109c6a08866 [Pos Repl]

 * C:\Windows\System32\tapisrv.dll : 3,16,928 : 11/21/2010 08:54 AM : 40f0849f65d13ee87b9a9ae3c1dd6823 [NoSig]
 +-> C:\Windows\erdnt\cache64\tapisrv.dll : 3,16,928 : 11/21/2010 08:54 AM : 40f0849f65d13ee87b9a9ae3c1dd6823 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\tapisrv.dll : 2,42,176 : 11/21/2010 08:54 AM : 613bf4820361543956909043a265c6ac [Pos Repl]
 +-> C:\Windows\SysWOW64\tapisrv.dll : 2,42,176 : 11/21/2010 08:54 AM : 613bf4820361543956909043a265c6ac [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-tapiservice_31bf3856ad364e35_6.1.7601.17514_none_4162de4afb9222c0\tapisrv.dll : 3,16,928 : 11/21/2010 08:54 AM : 40f0849f65d13ee87b9a9ae3c1dd6823 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-tapiservice_31bf3856ad364e35_6.1.7601.17514_none_e54442c74334b18a\tapisrv.dll : 2,42,176 : 11/21/2010 08:54 AM : 613bf4820361543956909043a265c6ac [Pos Repl]

 * C:\Windows\System32\taskeng.exe : 4,64,384 : 11/21/2010 08:54 AM : 65ea57712340c09b1b0c427b4848ae05 [NoSig]
 +-> C:\Windows\SysWOW64\taskeng.exe : 1,92,000 : 11/21/2010 08:53 AM : 4f2659160afcca990305816946f69407 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-taskscheduler-engine_31bf3856ad364e35_6.1.7601.17514_none_43d2529dd579f798\taskeng.exe : 4,64,384 : 11/21/2010 08:54 AM : 65ea57712340c09b1b0c427b4848ae05 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-taskscheduler-engine_31bf3856ad364e35_6.1.7601.17514_none_e7b3b71a1d1c8662\taskeng.exe : 1,92,000 : 11/21/2010 08:53 AM : 4f2659160afcca990305816946f69407 [Pos Repl]

 * C:\Windows\System32\taskhost.exe : 68,608 : 11/23/2012 08:43 AM : 639774c9acd063f028f6084abf5593ad [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-taskhost_31bf3856ad364e35_6.1.7601.17514_none_8664adc870f5633a\taskhost.exe : 69,120 : 11/21/2010 08:54 AM : 517110bd83835338c037269e603db55d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-taskhost_31bf3856ad364e35_6.1.7601.18010_none_86608c5a70f925bc\taskhost.exe : 68,608 : 11/23/2012 08:43 AM : 639774c9acd063f028f6084abf5593ad [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-taskhost_31bf3856ad364e35_6.1.7601.22172_none_86ab4a318a459fda\taskhost.exe : 69,120 : 11/23/2012 11:20 AM : c671f1b7d4242a5ec7af2d548f072671 [Pos Repl]

 * C:\Windows\System32\termsrv.dll : 6,83,520 : 10/14/2014 07:43 AM : 008cd4ebfabcf78d0f19b3778492648c [NoSig]
 +-> C:\Windows\erdnt\cache64\termsrv.dll : 6,83,520 : 10/14/2014 07:43 AM : 008cd4ebfabcf78d0f19b3778492648c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll : 6,80,960 : 11/21/2010 08:54 AM : 2e648163254233755035b46dd7b89123 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18540_none_eca0bf836affa9bb\termsrv.dll : 6,81,984 : 07/17/2014 07:37 AM : 4fc4c50985e5b840f4d72e57286887b8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18637_none_ecb2935b6af13c52\termsrv.dll : 6,83,520 : 10/14/2014 07:43 AM : 008cd4ebfabcf78d0f19b3778492648c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22750_none_ed1f8e488425629d\termsrv.dll : 6,86,080 : 07/16/2014 08:53 AM : f4d7114060c034134a440846f411bb7f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22843_none_ed2d60f8841a8fd8\termsrv.dll : 6,86,592 : 10/14/2014 07:46 AM : 6a5b600ad0041e9af564de73b716f3d2 [Pos Repl]

 * C:\Windows\System32\upnphost.dll : 3,53,792 : 07/14/2009 07:11 AM : d47ec6a8e81633dd18d2436b19baf6de [NoSig]
 +-> C:\Windows\erdnt\cache86\upnphost.dll : 2,66,752 : 07/14/2009 06:46 AM : 833fbb672460efce8011d262175fad33 [Pos Repl]
 +-> C:\Windows\SysWOW64\upnphost.dll : 2,66,752 : 07/14/2009 06:46 AM : 833fbb672460efce8011d262175fad33 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-upnpdevicehost_31bf3856ad364e35_6.1.7600.16385_none_1ddd261c4e350476\upnphost.dll : 3,53,792 : 07/14/2009 07:11 AM : d47ec6a8e81633dd18d2436b19baf6de [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-upnpdevicehost_31bf3856ad364e35_6.1.7600.16385_none_2831d06e8295c671\upnphost.dll : 2,66,752 : 07/14/2009 06:46 AM : 833fbb672460efce8011d262175fad33 [Pos Repl]

* C:\Windows\System32\user32.dll : 10,09,152 : 08/16/2016 11:06 PM : 8f4b991e7837e8e0f90c856659456652 [NoSig]
 +-> C:\Windows\erdnt\cache64\user32.dll : 10,09,152 : 08/16/2016 11:06 PM : 8f4b991e7837e8e0f90c856659456652 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\user32.dll : 8,33,024 : 08/16/2016 08:18 AM : 0fbc0e335b65ee5a0175631237817510 [Pos Repl]
 +-> C:\Windows\SysWOW64\user32.dll : 8,33,024 : 08/16/2016 08:18 AM : 0fbc0e335b65ee5a0175631237817510 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll : 10,08,128 : 11/21/2010 08:54 AM : fe70103391a64039a921dbfff9c7ab1b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.19061_none_2b252a2884278aa2\user32.dll : 10,08,640 : 11/11/2015 00:25 AM : 06bf84d26a05d400f6b3fb3d3de0b03a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.23265_none_2bb2ca019d418cef\user32.dll : 10,09,152 : 11/11/2015 00:29 AM : e42cb2576d5c8456c60988b1c908f41a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.23528_none_2be110419d1e60a5\user32.dll : 10,09,152 : 08/16/2016 11:06 PM : 8f4b991e7837e8e0f90c856659456652 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll : 8,33,024 : 11/21/2010 08:54 AM : 5e0db2d8b2750543cd2ebb9ea8e6cdd3 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.19061_none_3579d47ab8884c9d\user32.dll : 8,33,024 : 11/11/2015 00:07 AM : 0a78439765e31510d75c9e2284f3a722 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.23265_none_36077453d1a24eea\user32.dll : 8,33,024 : 11/11/2015 00:05 AM : d0a3a0dbf77ee35ce97e55de92014e05 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.23528_none_3635ba93d17f22a0\user32.dll : 8,33,024 : 08/16/2016 08:18 AM : 0fbc0e335b65ee5a0175631237817510 [Pos Repl]

 * C:\Windows\System32\userinit.exe : 30,720 : 11/21/2010 08:54 AM : bafe84e637bf7388c96ef48d4d3fdd53 [NoSig]
 +-> C:\Windows\erdnt\cache64\userinit.exe : 30,720 : 11/21/2010 08:54 AM : bafe84e637bf7388c96ef48d4d3fdd53 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\userinit.exe : 26,624 : 11/21/2010 08:53 AM : 61ac3efdfacfdd3f0f11dd4fd4044223 [Pos Repl]
 +-> C:\Windows\SysWOW64\userinit.exe : 26,624 : 11/21/2010 08:53 AM : 61ac3efdfacfdd3f0f11dd4fd4044223 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe : 30,720 : 11/21/2010 08:54 AM : bafe84e637bf7388c96ef48d4d3fdd53 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe : 26,624 : 11/21/2010 08:53 AM : 61ac3efdfacfdd3f0f11dd4fd4044223 [Pos Repl]

 * C:\Windows\System32\usp10.dll : 8,02,304 : 11/04/2015 00:34 AM : 077cc8bf1076d49e85687aacb30956a1 [NoSig]
 +-> C:\Windows\erdnt\cache64\usp10.dll : 8,02,304 : 11/04/2015 00:34 AM : 077cc8bf1076d49e85687aacb30956a1 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\usp10.dll : 6,27,712 : 11/04/2015 00:26 AM : 3553707b119ad5aaf1f31bff5517a093 [Pos Repl]
 +-> C:\Windows\SysWOW64\usp10.dll : 6,27,712 : 11/04/2015 00:26 AM : 3553707b119ad5aaf1f31bff5517a093 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.17514_none_0b207e7d6f1bea6f\usp10.dll : 8,00,256 : 11/21/2010 08:54 AM : 2f8b1e3ee3545d3b5a8d56fa1ae07b65 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.18009_none_0b302f956f0f750f\usp10.dll : 8,00,768 : 11/22/2012 11:14 AM : dbf99fd9caf75ca66d042bd8d050ff71 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.18454_none_0af5261f6f3c76ad\usp10.dll : 8,01,280 : 04/25/2014 08:04 AM : 088cf6afcd5cdd44e40c0acde3c1a5e0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.19054_none_0af507bf6f3c9bb2\usp10.dll : 8,02,304 : 11/04/2015 00:34 AM : 077cc8bf1076d49e85687aacb30956a1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.22171_none_0b661a9c886d0db8\usp10.dll : 8,01,280 : 11/22/2012 11:29 AM : e4accc7927a1478df636534864e03666 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.22666_none_0b75f5788860623d\usp10.dll : 8,01,792 : 04/25/2014 07:57 AM : bb2b03c6b6778a9b2866a049cc600d55 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.23259_none_0b83a7e28855b756\usp10.dll : 8,02,304 : 11/04/2015 00:37 AM : 9255da3e4662edf10170e30e8b97c194 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.17514_none_af01e2f9b6be7939\usp10.dll : 6,26,176 : 11/21/2010 08:54 AM : 804aaafebb3ad5f49334dd906bcb1de5 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.18009_none_af119411b6b203d9\usp10.dll : 6,26,688 : 11/22/2012 10:15 AM : b7230010d97787af3d25e4c82f2b06b9 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.18454_none_aed68a9bb6df0577\usp10.dll : 6,26,688 : 04/25/2014 07:36 AM : a5f833506bf6a1b5d693e1499dee2444 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.19054_none_aed66c3bb6df2a7c\usp10.dll : 6,27,712 : 11/04/2015 00:26 AM : 3553707b119ad5aaf1f31bff5517a093 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.22171_none_af477f18d00f9c82\usp10.dll : 6,26,688 : 11/22/2012 11:06 AM : ca68408922b02e8d955a2967c7cbf8ce [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.22666_none_af5759f4d002f107\usp10.dll : 6,26,688 : 04/25/2014 07:28 AM : 5a7b3405c2aae5369f6cb42fe248fbb0 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-usp_31bf3856ad364e35_6.1.7601.23259_none_af650c5ecff84620\usp10.dll : 6,27,712 : 11/04/2015 00:24 AM : d529d8f23f9c686a293203eb837b61ec [Pos Repl]

 * C:\Windows\System32\UxTheme.dll : 3,32,288 : 07/14/2009 07:11 AM : d29e998e8277666982b4f0303bf4e7af [NoSig]
 +-> C:\Windows\SysWOW64\uxtheme.dll : 2,45,760 : 07/14/2009 06:41 AM : 43964fa89ccf97ba6be34d69455ac65f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-uxtheme_31bf3856ad364e35_6.1.7600.16385_none_01d98c7b2040a1b9\uxtheme.dll : 3,32,288 : 07/14/2009 07:11 AM : d29e998e8277666982b4f0303bf4e7af [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-uxtheme_31bf3856ad364e35_6.1.7600.16385_none_0c2e36cd54a163b4\uxtheme.dll : 2,45,760 : 07/14/2009 06:41 AM : 43964fa89ccf97ba6be34d69455ac65f [Pos Repl]

 * C:\Windows\System32\version.dll : 29,184 : 07/14/2009 07:11 AM : 94e026870a55aaeaff7853c1754091e9 [NoSig]
 +-> C:\Windows\erdnt\cache86\version.dll : 21,504 : 07/14/2009 06:46 AM : 702254574e7e52052de39408457b7149 [Pos Repl]
 +-> C:\Windows\SysWOW64\version.dll : 21,504 : 07/14/2009 06:46 AM : 702254574e7e52052de39408457b7149 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-version_31bf3856ad364e35_6.1.7600.16385_none_70f340d66a96c29b\version.dll : 29,184 : 07/14/2009 07:11 AM : 94e026870a55aaeaff7853c1754091e9 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-version_31bf3856ad364e35_6.1.7600.16385_none_14d4a552b2395165\version.dll : 21,504 : 07/14/2009 06:46 AM : 702254574e7e52052de39408457b7149 [Pos Repl]

 * C:\Windows\System32\w32time.dll : 3,81,952 : 07/14/2009 07:11 AM : 1c9d80cc3849b3788048078c26486e1a [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-time-service_31bf3856ad364e35_6.1.7600.16385_none_e49c555686fbabd6\w32time.dll : 3,81,952 : 07/14/2009 07:11 AM : 1c9d80cc3849b3788048078c26486e1a [Pos Repl]

 * C:\Windows\System32\wbem\wmiprvse.exe : 3,72,736 : 11/21/2010 08:54 AM : 619a67c9f617b7e69315bb28ecd5e1df [NoSig]
 +-> C:\Windows\SysWOW64\wbem\WmiPrvSE.exe : 2,57,536 : 11/21/2010 08:54 AM : 4fb491ac8d46aaf22ba8bc5c73dabef7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.1.7601.17514_none_6e88c3faa2049408\WmiPrvSE.exe : 3,72,736 : 11/21/2010 08:54 AM : 619a67c9f617b7e69315bb28ecd5e1df [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.1.7601.17514_none_78dd6e4cd6655603\WmiPrvSE.exe : 2,57,536 : 11/21/2010 08:54 AM : 4fb491ac8d46aaf22ba8bc5c73dabef7 [Pos Repl]

 * C:\Windows\System32\wdigest.dll : 2,10,432 : 10/10/2016 09:04 PM : 92f10ab561c3e414370757683a711f36 [NoSig]
 +-> C:\Windows\SysWOW64\wdigest.dll : 1,72,032 : 10/10/2016 08:46 PM : cba76f0d87ed8f481cd87b023efd64af [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7600.16385_none_96c23cbe96661a70\wdigest.dll : 2,10,432 : 07/14/2009 07:11 AM : 95fb6ca4374e343ddd653fcc43f9d26b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18409_none_9903093693481d46\wdigest.dll : 2,10,944 : 03/04/2014 03:14 PM : 26af184300c0868d854d5a3092234e24 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18489_none_98ac89d69388fcce\wdigest.dll : 2,10,944 : 05/30/2014 01:38 PM : bfc98590eab40c785d6134b1fa818a62 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18606_none_99000c24934acb8f\wdigest.dll : 2,10,944 : 09/19/2014 03:12 PM : 55f0cf40479a1fc89cfa578909a540f2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18714_none_98f33d8a9354b1f9\wdigest.dll : 2,10,944 : 01/10/2015 12:18 AM : 5350a548bec957978b7014cdff091542 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18738_none_98e19eda93614f37\wdigest.dll : 2,10,944 : 01/29/2015 08:49 AM : 1bda82e4c6cae797820107d5bcbbeb03 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18741_none_98cfcce8936fb9c7\wdigest.dll : 2,10,944 : 02/03/2015 09:01 AM : 1fcdcf88da3e83a7ff4bc7078a305210 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18779_none_98b75f749380d852\wdigest.dll : 2,10,944 : 03/06/2015 11:12 AM : 9b644ac070576aae701910874c241dbd [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18798_none_98a0bf529391f6dd\wdigest.dll : 2,10,944 : 03/17/2015 10:46 AM : 7220246418a40d3bf7470058a2db939a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18812_none_98f13edc93567c72\wdigest.dll : 2,10,944 : 04/04/2015 08:52 AM : c6430870504e2d73ead55a863d6fb310 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18839_none_98e2a10a936065b5\wdigest.dll : 2,10,944 : 04/28/2015 00:53 AM : 2292cd8500725b94b7d2e3c0c84f2d19 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18869_none_98c231469378b988\wdigest.dll : 2,10,944 : 05/25/2015 11:49 PM : ad54856a16b635720b0be5faf44526fc [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18909_none_990312b493480f09\wdigest.dll : 2,10,944 : 06/27/2015 11:33 PM : 388baf83ed4559912af9a3cb807f8989 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18912_none_98f140c293567999\wdigest.dll : 2,10,944 : 07/02/2015 02:19 AM : 09730d830b2b69b626817f4a95945308 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18923_none_98e77120935daee1\wdigest.dll : 2,10,944 : 07/15/2015 08:50 AM : 1217f3c9dfd9d03372016f3796ae034d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18933_none_98dca1349365cad2\wdigest.dll : 2,10,944 : 07/15/2015 11:41 PM : d6431591deed9d47e9266890fb2bfbbc [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18939_none_98e2a2f0936062dc\wdigest.dll : 2,10,944 : 07/23/2015 05:32 AM : a87e3ab7d2bafb91b0ec64197a3b5373 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19018_none_98f71aa0935144e5\wdigest.dll : 2,10,944 : 09/29/2015 08:41 AM : e43f36d0b4c674fea2c992564a3e0f28 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19043_none_98d1a96a936e1a05\wdigest.dll : 2,10,944 : 10/16/2015 11:35 PM : 2c81b816ef1a570177712090ae97d88f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19044_none_98d2a9b4936d335c\wdigest.dll : 2,10,944 : 10/17/2015 11:40 PM : 75114ba778c97c7964e75c5e0a55949e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19045_none_98d3a9fe936c4cb3\wdigest.dll : 2,10,944 : 10/20/2015 06:35 AM : 1a05fb05e701a9d65eb42656cf46d173 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19110_none_98ef1a3693587754\wdigest.dll : 2,10,432 : 12/31/2015 00:32 AM : f557804c926be42b0dcf0cb2ac138156 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19131_none_98da7aa89367c88d\wdigest.dll : 2,10,432 : 01/17/2016 00:33 AM : 3f97fbaa39c5ba7c834bc140f57c8cf7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19135_none_98de7bd093642de9\wdigest.dll : 2,10,432 : 01/22/2016 11:50 AM : d37fff32f1f5ce52b0c5c527e8e7f213 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19160_none_98b90a9a93810309\wdigest.dll : 2,10,432 : 02/12/2016 00:19 AM : ae92d51d6df58c9d3c996ecc9262cbc9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22616_none_997ed71dac708a23\wdigest.dll : 2,10,944 : 03/04/2014 04:38 PM : 8416bdbdca85f783b56631d3d5ba0829 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22705_none_9988a8a5ac695202\wdigest.dll : 2,10,944 : 05/30/2014 01:30 PM : ff1c6119e31036f48a4117fcdb57e8d7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22712_none_997ad7dbac7421ee\wdigest.dll : 2,10,944 : 03/04/2014 04:38 PM : 8416bdbdca85f783b56631d3d5ba0829 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22736_none_9969392bac80bf2c\wdigest.dll : 2,10,944 : 03/04/2014 04:38 PM : 8416bdbdca85f783b56631d3d5ba0829 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22807_none_998aab1fac6781d7\wdigest.dll : 2,10,944 : 03/04/2014 04:38 PM : 8416bdbdca85f783b56631d3d5ba0829 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22814_none_997cda55ac7251c3\wdigest.dll : 2,10,944 : 09/19/2014 03:18 PM : 4f9e08a6da15029f9216abd3ca59201e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22843_none_995b6a47ac8b8c3f\wdigest.dll : 2,10,944 : 03/04/2014 04:38 PM : 8416bdbdca85f783b56631d3d5ba0829 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22865_none_9947cb03ac99f6cf\wdigest.dll : 2,10,944 : 03/04/2014 04:38 PM : 8416bdbdca85f783b56631d3d5ba0829 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22920_none_996e0b27ac7e057f\wdigest.dll : 2,10,944 : 01/10/2015 12:39 AM : 8fbd97a96e20e3714aa5ed85b4c460f5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22923_none_99710c05ac7b5184\wdigest.dll : 2,10,944 : 03/04/2014 04:38 PM : 8416bdbdca85f783b56631d3d5ba0829 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22925_none_99730c99ac798432\wdigest.dll : 2,10,944 : 03/04/2014 04:38 PM : 8416bdbdca85f783b56631d3d5ba0829 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22943_none_995b6c2dac8b8966\wdigest.dll : 2,10,944 : 01/27/2015 09:26 AM : ac17fb20f84eb81be7b4c38cc3cd5cba [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22948_none_99606d9fac870819\wdigest.dll : 2,10,944 : 02/03/2015 09:21 AM : 57d2bc9c2402367d83eeaf5ba564de33 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22983_none_99302c7dacabf92a\wdigest.dll : 2,10,944 : 03/06/2015 11:03 AM : 4bb21f8f42e0a2a888bc35c859964105 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23002_none_998583b5ac6c338d\wdigest.dll : 2,10,944 : 03/17/2015 10:41 AM : 6deec85dc8bec1229e3b7fadf1c549d2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23017_none_997fb53bac6fce31\wdigest.dll : 2,10,944 : 04/04/2015 08:56 AM : 858003a38b3393b61b103b1db3c43738 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23040_none_99584371ac8e70a3\wdigest.dll : 2,10,944 : 04/28/2015 00:47 AM : 3e1014d91bfb24a7eb7c7ba9561a7229 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23072_none_9939d441aca4f724\wdigest.dll : 2,10,944 : 05/25/2015 11:52 PM : 798393e05a57944f5e3f18024ede7185 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23112_none_997ab5afac744ca5\wdigest.dll : 2,10,944 : 06/27/2015 11:42 PM : 48c77087b01e93f55751bc157b7d8ce7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23115_none_997db68dac7198aa\wdigest.dll : 2,10,944 : 07/01/2015 11:51 PM : bbae23b46dae85911eca7ac5019969be [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23126_none_9973e6ebac78cdf2\wdigest.dll : 2,10,944 : 07/15/2015 08:50 AM : d43e95fa8372c7a7c4dda0fd23e9ac68 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23136_none_996916ffac80e9e3\wdigest.dll : 2,10,944 : 07/15/2015 11:39 PM : c8e4d25be348f13163fec13f799a50b5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23142_none_995a45ebac8ca078\wdigest.dll : 2,10,944 : 07/23/2015 03:34 AM : 82177b295b9a89cf0647ac2d7fe47cde [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23153_none_99507649ac93d5c0\wdigest.dll : 2,10,944 : 08/04/2015 11:42 PM : c8b14daeae2f21d6df53a89d88ffc75a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23223_none_9970e7f3ac7b7f14\wdigest.dll : 2,10,944 : 09/28/2015 11:46 PM : 337648b86e940a43d41739974fce87fd [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23226_none_9973e8d1ac78cb19\wdigest.dll : 2,10,944 : 10/01/2015 11:36 PM : 0dca126c590b329433f87a0dd3c4cc56 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23249_none_996149d7ac864f00\wdigest.dll : 2,10,944 : 10/16/2015 11:41 PM : c98e1cd0a40fdc196b111a1386f46185 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23250_none_994d7751ac9686e2\wdigest.dll : 2,10,944 : 10/20/2015 06:41 AM : cdd73d09fe8c71fa28460a0bdf98e24f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23313_none_997bb9c5ac73604a\wdigest.dll : 2,10,432 : 12/31/2015 00:43 AM : 2a3a857d17adc94670af44155e81161d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23334_none_99671a37ac82b183\wdigest.dll : 2,10,432 : 01/17/2016 06:02 AM : 78755e028454ee7ce9d14f4647bdf919 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23338_none_996b1b5fac7f16df\wdigest.dll : 2,10,944 : 01/22/2016 11:58 AM : f21b38bb0842b6fb8fd54ce65625a50d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23349_none_99614bbdac864c27\wdigest.dll : 2,10,432 : 02/11/2016 00:26 AM : fc670971f3173e8d78c67d2230316ed1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23390_none_99223987acb6f3cd\wdigest.dll : 2,10,432 : 03/16/2016 05:46 AM : 167e89db3cd72d010b92c506f62ed32b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23391_none_992339d1acb60d24\wdigest.dll : 2,10,432 : 03/17/2016 00:23 AM : 52f06093b9451742f43d8b5619ee33e7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23392_none_99243a1bacb5267b\wdigest.dll : 2,10,432 : 03/18/2016 04:28 AM : 7407a5c092dad554a3fc768b9859a847 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23418_none_9980bd1dac6edc24\wdigest.dll : 2,10,432 : 04/09/2016 12:28 AM : ba7a6057c4837ca5a6000e87791949b6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23452_none_994f7bb1ac94b3de\wdigest.dll : 2,10,432 : 05/12/2016 10:45 PM : 54e0e2e06e5fe252105bfb239ea0e2dc [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23497_none_99293d73acb0a255\wdigest.dll : 2,10,432 : 07/08/2016 09:02 PM : 0fd231d3bb3867bd2cf35d76e35e4157 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23539_none_996c1f75ac7e2a84\wdigest.dll : 2,10,432 : 09/02/2016 09:01 PM : b77589c7f1f2ba410f68b921e3d46ab7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23545_none_995d4e61ac89e119\wdigest.dll : 2,10,432 : 09/13/2016 02:38 AM : 64d2d9dea61d5a634843dbfd076be817 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23571_none_9938dd75aca5cf90\wdigest.dll : 2,10,432 : 10/10/2016 09:04 PM : 92f10ab561c3e414370757683a711f36 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7600.16385_none_a116e710cac6dc6b\wdigest.dll : 1,71,520 : 07/14/2009 06:46 AM : 0450cf487ecd8a67b56f59f9a96d024d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18409_none_a357b388c7a8df41\wdigest.dll : 1,72,032 : 03/04/2014 02:47 PM : 3a1abe045a3e30799576e83a2d012b43 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18489_none_a3013428c7e9bec9\wdigest.dll : 1,72,032 : 05/30/2014 01:22 PM : c71cc796f0e2e9bd542c87532706fcfe [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18606_none_a354b676c7ab8d8a\wdigest.dll : 1,72,032 : 09/19/2014 02:53 PM : 37bc079204bf9b087d6de6b728908b4b [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18714_none_a347e7dcc7b573f4\wdigest.dll : 1,72,032 : 01/10/2015 11:57 AM : a12d64a94ec57079c2d96a741cb4ff53 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18738_none_a336492cc7c21132\wdigest.dll : 1,72,032 : 01/29/2015 08:31 AM : 1956eebac1414d270b7f3576dc6dbb4d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18741_none_a324773ac7d07bc2\wdigest.dll : 1,72,032 : 02/03/2015 08:42 AM : 49376c9720930363acf92799c6878bff [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18779_none_a30c09c6c7e19a4d\wdigest.dll : 1,72,032 : 03/06/2015 10:40 AM : 4e15e2d20ae755fdeacd96f359f732db [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18798_none_a2f569a4c7f2b8d8\wdigest.dll : 1,72,032 : 03/17/2015 10:27 AM : 655c88135254c78e6fb66b6c2f6ac5da [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18812_none_a345e92ec7b73e6d\wdigest.dll : 1,72,032 : 04/04/2015 08:35 AM : 6954b10c2cf2d99e3f138fb9bdf32547 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18839_none_a3374b5cc7c127b0\wdigest.dll : 1,72,032 : 04/28/2015 00:35 AM : 850f756363237a2eb069b9b25ef8bec3 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18869_none_a316db98c7d97b83\wdigest.dll : 1,72,032 : 05/25/2015 11:31 PM : a9e8f961f7fe1edeef8f46eeb800f2d8 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18909_none_a357bd06c7a8d104\wdigest.dll : 1,72,032 : 06/27/2015 11:20 PM : 6e1039fd5dc9ce93e234464a09f3fa41 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18912_none_a345eb14c7b73b94\wdigest.dll : 1,72,032 : 07/02/2015 02:00 AM : 6ae6e08938d5ba9d8ba305506620b48d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18923_none_a33c1b72c7be70dc\wdigest.dll : 1,72,032 : 07/15/2015 08:25 AM : 33b93baf8f7cca02828ac3d564e2798a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18933_none_a3314b86c7c68ccd\wdigest.dll : 1,72,032 : 07/15/2015 11:25 PM : 51c161d5638465251857b2207bd535cb [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18939_none_a3374d42c7c124d7\wdigest.dll : 1,72,032 : 07/22/2015 11:23 PM : 3f4331e86ddfdebdeab55b24b4dfdc46 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19018_none_a34bc4f2c7b206e0\wdigest.dll : 1,72,032 : 09/29/2015 08:29 AM : 6d16d1b9db2526b985bbb9b27a56b70b [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19043_none_a32653bcc7cedc00\wdigest.dll : 1,72,032 : 10/16/2015 11:08 PM : 5061cb79b956807ad5ae5a43b8697f17 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19044_none_a3275406c7cdf557\wdigest.dll : 1,72,032 : 10/17/2015 11:18 PM : d5b34f4a4ef5cada09f18529c8b6e609 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19045_none_a3285450c7cd0eae\wdigest.dll : 1,72,032 : 10/20/2015 06:15 AM : a748dec93b4e8c9dde11b79fb6e97088 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19110_none_a343c488c7b9394f\wdigest.dll : 1,71,520 : 12/31/2015 00:11 AM : dc9222a325acfc29e019013505ae33db [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19131_none_a32f24fac7c88a88\wdigest.dll : 1,71,520 : 01/17/2016 00:07 AM : bdc5f5f64a38ea3f9b5e827bc5e24bf5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19135_none_a3332622c7c4efe4\wdigest.dll : 1,71,520 : 01/22/2016 11:36 AM : fe2f52304f3b5bd8281350dc69e13063 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.19160_none_a30db4ecc7e1c504\wdigest.dll : 1,71,520 : 02/12/2016 00:08 AM : 21404a9b0692e19e04ee714f5d5c6c48 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22616_none_a3d3816fe0d14c1e\wdigest.dll : 1,72,032 : 03/04/2014 04:09 PM : 2d934b2b5ca353d353a8166c0125d122 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22705_none_a3dd52f7e0ca13fd\wdigest.dll : 1,72,032 : 05/30/2014 01:05 PM : 16cb333a257a1f4f32df2000287b4ba0 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22712_none_a3cf822de0d4e3e9\wdigest.dll : 1,72,032 : 03/04/2014 04:09 PM : 2d934b2b5ca353d353a8166c0125d122 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22736_none_a3bde37de0e18127\wdigest.dll : 1,72,032 : 03/04/2014 04:09 PM : 2d934b2b5ca353d353a8166c0125d122 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22807_none_a3df5571e0c843d2\wdigest.dll : 1,72,032 : 03/04/2014 04:09 PM : 2d934b2b5ca353d353a8166c0125d122 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22814_none_a3d184a7e0d313be\wdigest.dll : 1,72,032 : 09/19/2014 02:59 PM : 3d46ee1128a16acc8df8ac9e44939c0d [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22843_none_a3b01499e0ec4e3a\wdigest.dll : 1,72,032 : 03/04/2014 04:09 PM : 2d934b2b5ca353d353a8166c0125d122 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22865_none_a39c7555e0fab8ca\wdigest.dll : 1,72,032 : 03/04/2014 04:09 PM : 2d934b2b5ca353d353a8166c0125d122 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22920_none_a3c2b579e0dec77a\wdigest.dll : 1,72,032 : 01/10/2015 12:28 AM : c8ad6cae235349b1b21300e206b5ff51 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22923_none_a3c5b657e0dc137f\wdigest.dll : 1,72,032 : 03/04/2014 04:09 PM : 2d934b2b5ca353d353a8166c0125d122 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22925_none_a3c7b6ebe0da462d\wdigest.dll : 1,72,032 : 03/04/2014 04:09 PM : 2d934b2b5ca353d353a8166c0125d122 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22943_none_a3b0167fe0ec4b61\wdigest.dll : 1,72,032 : 01/27/2015 08:58 AM : fb5c9a4d643f6c0fa3b2386d35c7a2d9 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22948_none_a3b517f1e0e7ca14\wdigest.dll : 1,72,032 : 02/03/2015 09:02 AM : ac863cc3ed0fe6faad8cc1a5f4a9507b [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22983_none_a384d6cfe10cbb25\wdigest.dll : 1,72,032 : 03/06/2015 10:42 AM : 80c225e765b2239084829d821fe5c537 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23002_none_a3da2e07e0ccf588\wdigest.dll : 1,72,032 : 03/17/2015 10:15 AM : 94956fceb403a6a5d32f22fbcf4a45a9 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23017_none_a3d45f8de0d0902c\wdigest.dll : 1,72,032 : 04/04/2015 08:41 AM : d8620bb81e6b8d0f861a59705cd902d6 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23040_none_a3acedc3e0ef329e\wdigest.dll : 1,72,032 : 04/28/2015 00:26 AM : a77fb2fe527836b10cd2a1cd4695b17c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23072_none_a38e7e93e105b91f\wdigest.dll : 1,72,032 : 05/25/2015 11:37 PM : 523476c1b9322a9f71df8f2cebe61f8c [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23112_none_a3cf6001e0d50ea0\wdigest.dll : 1,72,032 : 06/27/2015 11:34 PM : a6639c62ae100428b8b23f1c7b375490 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23115_none_a3d260dfe0d25aa5\wdigest.dll : 1,72,032 : 07/01/2015 11:22 PM : ef7087780f9dc32f9f6c554bd1257900 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23126_none_a3c8913de0d98fed\wdigest.dll : 1,72,032 : 07/15/2015 08:30 AM : 5c07d3b50e7f488c3de5c85ba5f2ab06 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23136_none_a3bdc151e0e1abde\wdigest.dll : 1,72,032 : 07/15/2015 11:19 PM : b12092d69d1c936339fb37f9d181cfc5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23142_none_a3aef03de0ed6273\wdigest.dll : 1,72,032 : 07/23/2015 05:27 AM : a858c6416a8fd4e5bc0dc86747227984 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23153_none_a3a5209be0f497bb\wdigest.dll : 1,72,032 : 08/04/2015 11:22 PM : d032e1ad68c6c948c854009576567fea [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23223_none_a3c59245e0dc410f\wdigest.dll : 1,72,032 : 09/29/2015 01:47 AM : bcdf2b2d49ac9574079b0f6d7c4dfb3b [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23249_none_a3b5f429e0e710fb\wdigest.dll : 1,72,032 : 10/16/2015 11:14 PM : 1b21c820d84178ada8ec5b7df299a6f5 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23250_none_a3a221a3e0f748dd\wdigest.dll : 1,72,032 : 10/20/2015 06:17 AM : e74d851c1b5c9da828d799262a4b5d0a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23313_none_a3d06417e0d42245\wdigest.dll : 1,71,520 : 12/31/2015 00:25 AM : e69aa002e74138aaf6bea782f8f1daa7 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23334_none_a3bbc489e0e3737e\wdigest.dll : 1,71,520 : 01/17/2016 05:46 AM : 3501e42fedaf949fcf169de2ec11b83f [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23338_none_a3bfc5b1e0dfd8da\wdigest.dll : 1,72,032 : 01/22/2016 11:38 AM : 5987a890b0966f47a21755d513a20493 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23349_none_a3b5f60fe0e70e22\wdigest.dll : 1,71,520 : 02/10/2016 11:59 PM : cef2d5f1954689e6f27e3fe5a8820ab6 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23390_none_a376e3d9e117b5c8\wdigest.dll : 1,71,520 : 03/16/2016 05:24 AM : 2c02195abfea9824c67f5f424844384e [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23391_none_a377e423e116cf1f\wdigest.dll : 1,71,520 : 03/17/2016 00:01 AM : 25d4cc773454423a944bfeb5a7b04ff0 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23392_none_a378e46de115e876\wdigest.dll : 1,71,520 : 03/18/2016 04:00 AM : e8618ef4cb8d38462d4d8a4ed7da9850 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23418_none_a3d5676fe0cf9e1f\wdigest.dll : 1,71,520 : 04/09/2016 12:24 AM : b787a7c9b6cd553649f4148ca1add394 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23452_none_a3a42603e0f575d9\wdigest.dll : 1,72,032 : 05/12/2016 08:48 PM : a8b1d330b2acd0ae690461f6e48df20a [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23497_none_a37de7c5e1116450\wdigest.dll : 1,72,032 : 07/08/2016 08:46 PM : 61fa0f6c5d5aa1ef14b0a78deda31577 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23539_none_a3c0c9c7e0deec7f\wdigest.dll : 1,72,032 : 09/02/2016 08:46 PM : fedccf1cb54068c113c3adf9b7acb0a3 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23545_none_a3b1f8b3e0eaa314\wdigest.dll : 1,72,032 : 09/13/2016 02:19 AM : 8637fc90a832686af8bef11231a17d42 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23571_none_a38d87c7e106918b\wdigest.dll : 1,72,032 : 10/10/2016 08:46 PM : cba76f0d87ed8f481cd87b023efd64af [Pos Repl]

 * C:\Windows\System32\wiaservc.dll : 5,80,096 : 11/21/2010 08:54 AM : 8dd52e8e6128f4b2da92ce27402871c1 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.1.7601.17514_none_90ba4080c9f2e648\wiaservc.dll : 5,80,096 : 11/21/2010 08:54 AM : 8dd52e8e6128f4b2da92ce27402871c1 [Pos Repl]

 * C:\Windows\System32\wininet.dll : 29,20,448 : 10/27/2016 10:46 PM : ecfcbd328c57e6ee2966b52a179016ae [NoSig]
 +-> C:\Windows\erdnt\cache64\wininet.dll : 29,20,448 : 10/27/2016 10:46 PM : ecfcbd328c57e6ee2966b52a179016ae [Pos Repl]
 +-> C:\Windows\erdnt\cache86\wininet.dll : 24,44,800 : 10/22/2016 09:42 PM : 19465502d25c5b7d54b792e3695c2a90 [Pos Repl]
 +-> C:\Windows\SysWOW64\wininet.dll : 24,44,800 : 10/22/2016 09:42 PM : 19465502d25c5b7d54b792e3695c2a90 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16618_none_7fb61d64125065aa\wininet.dll : 22,41,024 : 07/04/2013 03:01 AM : 1e79b157b16df86cbf2bc521aa07301d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16635_none_7fb86250124e4b75\wininet.dll : 22,41,024 : 06/12/2013 04:56 AM : faf6ec2460ad5fbbd38d8e1ae28b0d77 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16660_none_7fbbd516124b1755\wininet.dll : 22,41,024 : 07/26/2013 10:43 AM : ac155dd9bd1e6d3b740826a4d1c68aae [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16686_none_7fbd4cfa1249e3c9\wininet.dll : 22,41,024 : 08/10/2013 10:52 AM : aafa952e774dddb0956d3bdfae5b5b99 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16721_none_7faced3a1256e78b\wininet.dll : 22,41,024 : 09/23/2013 04:25 AM : d28b35de88d27efb27df4b1e8319e3c0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16736_none_7fad7b9c12568107\wininet.dll : 22,41,536 : 10/12/2013 02:15 PM : 9706c99daebe3feac811b239617e98c4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20742_none_68e1306a2bfc938f\wininet.dll : 22,48,704 : 06/12/2013 10:42 AM : 09bf0d9701f9d846bbc5abed003851cb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20768_none_68e2a84e2bfb6003\wininet.dll : 22,48,704 : 07/26/2013 09:30 AM : 5c49f5a791b944ad8247473abd35602d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20794_none_68e6044c2bf84584\wininet.dll : 22,48,704 : 08/10/2013 10:44 AM : 0a380c8e396975463e3f643e88ae8bdf [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20831_none_68d576fc2c057c88\wininet.dll : 22,48,704 : 09/23/2013 04:53 AM : 1377a310439639a610097ed56975ae19 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20848_none_68d5d7ce2c054946\wininet.dll : 22,49,216 : 10/12/2013 12:46 AM : 7e7f32c588da6a4554046804d8eeac55 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16428_none_e440068bb6e1438c\wininet.dll : 23,32,160 : 12/05/2013 03:02 AM : e6cb36b85be59095337427e853a5b65a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16476_none_e445358db6dc8efd\wininet.dll : 23,34,208 : 11/26/2013 12:37 AM : 9b6678db9c6a232c5a84d2fdfff8b0e1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16518_none_e4343655b6ea4626\wininet.dll : 23,34,208 : 02/06/2014 02:54 PM : 263b6e451526a90ff8b1cec759f22956 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16521_none_e435d617b6e8ac16\wininet.dll : 23,34,208 : 03/01/2014 08:40 AM : df79ce9b950c62677d232154e93a81c7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17041_none_e46de82db6be5036\wininet.dll : 22,60,480 : 03/06/2014 11:52 AM : f220ba78ab542c70211d73ae4729b2cd [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17126_none_e460a5c5b6c8b99e\wininet.dll : 22,66,112 : 05/30/2014 01:26 PM : 40bfd9d6ec8e174145f012246ca73ccd [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17207_none_e453be7db6d2bc82\wininet.dll : 22,66,112 : 06/19/2014 04:28 AM : 2ee102df0edd8a1edd3d1e9b99a91bec [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17239_none_e45691cbb6d03bc9\wininet.dll : 22,66,624 : 07/25/2014 04:22 PM : 8e71a5cb5312b8392d4da4ca37bb5868 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17280_none_e45c6045b6cad3d3\wininet.dll : 23,10,656 : 08/19/2014 02:45 AM : 39ebb9708453036a74c30c9a294023ff [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17358_none_e44dd93bb6d670c7\wininet.dll : 23,09,632 : 09/19/2014 06:03 AM : 9d98d4f390f0b14a782f3b931e613a1a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17420_none_e440beb1b6e073ab\wininet.dll : 23,65,440 : 11/06/2014 07:47 AM : 6fc2819a4f80aab2dadedfc1efee3c3f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17501_none_e433d769b6ea768f\wininet.dll : 23,58,272 : 11/22/2014 06:58 AM : 4af089160fe082e5ea5c4aa72782dca2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17633_none_e42bdacbb6f011c7\wininet.dll : 23,58,272 : 01/12/2015 06:57 AM : 9dfe41a69df70aab75cb5ba8c1109ea2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17691_none_e4320a17b6ea768f\wininet.dll : 23,58,784 : 02/20/2015 06:58 AM : 36f99bd8a0f09bdbb7850a138845a014 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17728_none_e41f98adb6f99486\wininet.dll : 23,58,784 : 03/13/2015 08:15 AM : 77b35d0fc22a2d2eac8d07c3f9784dbf [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17801_none_e41367a5b702ca62\wininet.dll : 23,52,128 : 04/21/2015 08:57 PM : f0289b3a341429117696f0279da977b6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17843_none_e4173b3db6ff6300\wininet.dll : 24,26,880 : 05/22/2015 11:20 PM : 417f80e4afba1aa9ebbd618f1c6d9165 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17914_none_e40953abb70a4c8d\wininet.dll : 24,27,392 : 06/20/2015 11:56 PM : e066fdc3a2074d926903b8c31ef3b347 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17959_none_e40ce2ebb707320e\wininet.dll : 24,27,904 : 07/17/2015 00:42 AM : c555b5c8142844ded9e3bd94e6313000 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18015_none_e46a8e15b6c167dc\wininet.dll : 24,27,392 : 08/15/2015 10:37 AM : a55305b1cacd38eac176cc532b2053ac [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18059_none_e46e341db6be33bc\wininet.dll : 24,87,808 : 09/16/2015 08:41 AM : bd06d875fb79e92daf724c91de743afa [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18097_none_e47262d5b6ba65d6\wininet.dll : 24,87,808 : 10/31/2015 03:47 AM : 033e70deee5fed5e9a3e197a2db1a618 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18124_none_e460d53bb6c88383\wininet.dll : 24,87,808 : 11/09/2015 02:23 AM : e2c385b0d816ad37616bd4c4204d0633 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18163_none_e464ed2bb6c4cf3e\wininet.dll : 24,87,808 : 12/12/2015 10:36 PM : 1258bdee548bcd771dd35485cdd176ea [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18204_none_e45404bbb6d26cc6\wininet.dll : 25,97,376 : 01/22/2016 11:01 AM : cb10939701b2b334e5ac019823fd43ef [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18230_none_e45760b9b6cf5247\wininet.dll : 25,97,376 : 02/08/2016 10:49 PM : c15649deaba6b45562009663673e23d1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18282_none_e45c349bb6cb043c\wininet.dll : 25,96,864 : 03/31/2016 05:00 AM : d2e3b1dedf6f6177d8c32b2516703a93 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18314_none_e44a3519b6d9a20e\wininet.dll : 25,96,864 : 04/23/2016 09:21 AM : d88379c0f2bdcea5adbdad175b2f23e9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18349_none_e44cc40fb6d76e38\wininet.dll : 25,97,888 : 05/21/2016 02:16 AM : ea1b9d3c7d11ca407aa89cbb266139cf [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18376_none_e4500945b6d46d5a\wininet.dll : 28,69,248 : 06/11/2016 01:14 AM : 03dd8828d1777dd0d946753c7947d1d2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18426_none_e44037e7b6e10a98\wininet.dll : 28,68,224 : 08/02/2016 10:53 AM : 33821b684222f236711f7f8c78aa9247 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18449_none_e441f423b6df8a29\wininet.dll : 29,21,472 : 09/01/2016 04:40 AM : f28b26de031d6c7ac3f393417191a22f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18499_none_e446f595b6db08dc\wininet.dll : 29,20,960 : 09/30/2016 10:47 AM : 364fd85609bed4649544de7d3978908d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18524_none_e435958bb6e8f347\wininet.dll : 29,20,448 : 10/27/2016 10:46 PM : ecfcbd328c57e6ee2966b52a179016ae [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_7ac940242f7494a4\wininet.dll : 11,88,864 : 11/21/2010 08:53 AM : f6c5302e1f4813d552f41a0ac82455e5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17720_none_7aba72dc2f804587\wininet.dll : 11,88,864 : 06/01/2012 09:53 AM : 4efc156290537bb9706d3a7a1a4b8733 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.21855_none_7b28a15548b1b7d7\wininet.dll : 11,89,376 : 06/01/2012 09:53 AM : 8f2cc83b92626a3b7e1df360720fad30 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16421_none_768731bf7476d491\wininet.dll : 13,89,056 : 06/01/2012 09:49 AM : 1bf2bcc7e3c26fd4c8ef0c9efb0cc25d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16440_none_7670919d7487f31c\wininet.dll : 13,90,080 : 06/01/2012 09:50 AM : 69151e566295e5a977fe71ffafd3b3f8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16457_none_766cc3b77489c06e\wininet.dll : 13,92,128 : 11/14/2012 11:34 AM : 5121db613e10a46a3c5085b479026aa7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16464_none_765ef2ed7494905a\wininet.dll : 13,92,128 : 01/09/2013 06:42 AM : 435e9c764e1ef70058580996452be6a2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16470_none_765021d974a046ef\wininet.dll : 13,92,128 : 02/02/2013 12:17 AM : fa274190682aa41a46b285208ed46a74 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16476_none_76562395749adef9\wininet.dll : 13,92,128 : 02/22/2013 11:50 AM : a4f6142caba82fb7293ece5ff864b440 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16483_none_764852cb74a5aee5\wininet.dll : 13,92,128 : 04/05/2013 06:30 AM : 563c71a913cac0c3de5ffcd36edb43a0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16490_none_763a820174b07ed1\wininet.dll : 13,92,128 : 05/17/2013 08:32 AM : 4fbe96d97a1e070a06f76f67255c756d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20544_none_76fe2f908da1f842\wininet.dll : 13,90,080 : 06/01/2012 09:50 AM : 244d45f786e33c169a93f70ba63babf8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20565_none_76e990028db1497b\wininet.dll : 13,92,128 : 11/14/2012 09:31 AM : 5caf48f12e8cbd96d520f4efd5b97f76 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20573_none_76dcbf828dbb32be\wininet.dll : 13,92,128 : 01/09/2013 05:25 AM : 43a6a68f1f41b13ca4d580d40dfa57ee [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20580_none_76ceeeb88dc602aa\wininet.dll : 13,92,128 : 02/02/2013 12:46 AM : 4e0669b513805a7c2a303c8ededc8e03 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20586_none_76d4f0748dc09ab4\wininet.dll : 13,92,640 : 02/22/2013 12:07 AM : e6a459c8e90c4a873c923c44f3d9510b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20593_none_76c71faa8dcb6aa0\wininet.dll : 13,92,640 : 04/05/2013 05:11 AM : 7fd2d2be22f9a319ab2fd23dd2c9968a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20600_none_77256ffe8d852049\wininet.dll : 13,92,640 : 05/17/2013 06:22 AM : 5548a99796db5ddaa32ed9b53bc3aadc [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16618_none_239781e059f2f474\wininet.dll : 17,67,936 : 07/04/2013 03:01 AM : f352db15ff74ac4a1c48ad12d423b4b1 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16635_none_2399c6cc59f0da3f\wininet.dll : 17,67,936 : 06/12/2013 05:13 AM : 9bf7c7654efd098ee3a27b49492a382a [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16660_none_239d399259eda61f\wininet.dll : 17,67,936 : 07/26/2013 08:43 AM : daa3903f06116ae9ee7ac1d1b93684a4 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16686_none_239eb17659ec7293\wininet.dll : 17,67,936 : 08/10/2013 09:29 AM : 535f6263035f2530a62d5d64ef6e73d3 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16721_none_238e51b659f97655\wininet.dll : 17,67,936 : 09/23/2013 04:58 AM : e4feb264b47360b7296aea4e052f88d8 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16736_none_238ee01859f90fd1\wininet.dll : 17,67,936 : 10/12/2013 12:33 AM : 5fd4335dcd343d0fea9fa6b18ed408d9 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20742_none_0cc294e6739f2259\wininet.dll : 17,77,664 : 06/12/2013 09:49 AM : 24ae444b165d11835ef3d38cf3cc7fa4 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20768_none_0cc40cca739deecd\wininet.dll : 17,77,664 : 07/26/2013 08:40 AM : de581a5e0e70bb63898f8776eb274428 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20794_none_0cc768c8739ad44e\wininet.dll : 17,77,664 : 08/10/2013 10:03 AM : 26bd13bb9196c2d8f8155c3c6169bc22 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20831_none_0cb6db7873a80b52\wininet.dll : 17,77,152 : 09/23/2013 05:06 AM : 67220eb57550f10e1219d57d89937456 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20848_none_0cb73c4a73a7d810\wininet.dll : 17,77,152 : 10/12/2013 12:25 AM : 06715e12e72efbc2d660a779fff32944 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16428_none_88216b07fe83d256\wininet.dll : 18,18,112 : 12/05/2013 03:02 AM : b5eb5bd3066959611e1f7a80fd6cc172 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16476_none_88269a09fe7f1dc7\wininet.dll : 18,20,160 : 11/26/2013 12:03 AM : 927fa6456ad6d7630f6854828d2fd16b [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16518_none_88159ad1fe8cd4f0\wininet.dll : 18,20,160 : 02/06/2014 02:11 PM : 9c89246184979a070b0c6ccf61c68136 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16521_none_88173a93fe8b3ae0\wininet.dll : 18,20,160 : 03/01/2014 08:02 AM : aafeab4fc9d70253f8c7e353e879e8a2 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17041_none_884f4ca9fe60df00\wininet.dll : 17,89,440 : 03/06/2014 11:11 AM : e4e829ee073e046b0eb19b5fecb19b8c [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17126_none_88420a41fe6b4868\wininet.dll : 17,90,976 : 05/30/2014 12:51 AM : 771cdbc3d62437d6db070820bb1edccf [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17207_none_883522f9fe754b4c\wininet.dll : 17,91,488 : 06/19/2014 03:43 AM : ccc198257901beea2fbf8eb1e7678356 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17239_none_8837f647fe72ca93\wininet.dll : 17,92,512 : 07/25/2014 03:35 PM : b945baa81b4805ad6bddf4d026dcfb47 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17280_none_883dc4c1fe6d629d\wininet.dll : 18,12,992 : 08/19/2014 02:16 AM : d58988722c72d265b51a54103dfc2c6f [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17358_none_882f3db7fe78ff91\wininet.dll : 18,10,944 : 09/19/2014 05:29 AM : 7ae80f921027cf88cb9d0433088a3e55 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17420_none_8822232dfe830275\wininet.dll : 18,92,864 : 11/06/2014 07:22 AM : 6dd7d61a8ef3dfec4faefeb395e77424 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17501_none_88153be5fe8d0559\wininet.dll : 18,88,256 : 11/22/2014 06:30 AM : 5e4e0e43e0a5bf9f089696dfa7a3d677 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17633_none_880d3f47fe92a091\wininet.dll : 18,88,256 : 01/12/2015 06:30 AM : f285d499ec42969d963ca49eada63218 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17691_none_88136e93fe8d0559\wininet.dll : 18,88,256 : 02/20/2015 06:31 AM : ea6ea6912f27f05c61d8d747517eb47e [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17728_none_8800fd29fe9c2350\wininet.dll : 18,88,256 : 03/13/2015 07:50 AM : c46904f2e9e121a91dddabb48d7648c3 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17801_none_87f4cc21fea5592c\wininet.dll : 18,82,112 : 04/21/2015 08:32 PM : cb5f450d21b9d76b7f01d006e4aedb40 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17843_none_87f89fb9fea1f1ca\wininet.dll : 19,50,720 : 05/23/2015 07:50 AM : e4eb138060bae0dbab1a3b71a3141fe7 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17914_none_87eab827feacdb57\wininet.dll : 19,51,232 : 06/19/2015 10:45 PM : 63b01f72fd727d5736dbef54174d8f93 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17959_none_87ee4767fea9c0d8\wininet.dll : 19,51,232 : 07/17/2015 00:12 AM : 0ac8cd2138fd10c4a0e2ff08f892359c [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18015_none_884bf291fe63f6a6\wininet.dll : 19,51,232 : 08/15/2015 10:13 AM : a8c80a92549afdd6891c8159d4c0a107 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18059_none_884f9899fe60c286\wininet.dll : 20,11,136 : 09/16/2015 08:07 AM : e401e66ccb2ae219cf41f7f901c410c1 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18097_none_8853c751fe5cf4a0\wininet.dll : 20,11,136 : 10/31/2015 03:21 AM : 832ca97817b20b74e2d74a8154630311 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18124_none_884239b7fe6b124d\wininet.dll : 20,11,136 : 11/10/2015 04:47 AM : b60461b5ced2bfae1a870c61c66966c4 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18163_none_884651a7fe675e08\wininet.dll : 20,11,136 : 12/12/2015 10:11 PM : ffa261b9252c71a6910b4f19fdc1ea57 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18204_none_88356937fe74fb90\wininet.dll : 21,20,704 : 01/22/2016 10:37 AM : 5cb71c6db91bac78e1f0e9953cab8969 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18230_none_8838c535fe71e111\wininet.dll : 21,21,216 : 02/09/2016 01:13 AM : edb9618ff3238ef0fc2734f584b13a33 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18282_none_883d9917fe6d9306\wininet.dll : 21,21,216 : 03/31/2016 04:35 AM : ee3825ffe3f31b7fcb7b4a284197361b [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18314_none_882b9995fe7c30d8\wininet.dll : 21,21,216 : 04/23/2016 08:42 AM : 8ef022e16150bfafc7dbb795c43c6ba2 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18349_none_882e288bfe79fd02\wininet.dll : 21,21,216 : 05/21/2016 02:12 AM : fdd35a049c278f21f475c488fda918ab [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18376_none_88316dc1fe76fc24\wininet.dll : 23,92,576 : 06/10/2016 11:15 PM : 167adc25991bc960ddc2d9651c55b6ff [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18426_none_88219c63fe839962\wininet.dll : 23,93,088 : 08/02/2016 10:26 AM : 64829f4ed34d8339ec39d32204718add [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18449_none_8823589ffe8218f3\wininet.dll : 24,45,824 : 09/01/2016 06:13 AM : 42b01c859a89eea6237dbd9a290df857 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18499_none_88285a11fe7d97a6\wininet.dll : 24,44,288 : 09/30/2016 10:16 AM : 61677b630a8bf2c21391c21537facbe6 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18524_none_8816fa07fe8b8211\wininet.dll : 24,44,800 : 10/22/2016 09:42 PM : 19465502d25c5b7d54b792e3695c2a90 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_1eaaa4a07717236e\wininet.dll : 9,80,992 : 11/21/2010 08:54 AM : 44214c94911c7cfb1d52cb64d5e8368d [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17720_none_1e9bd7587722d451\wininet.dll : 9,81,504 : 06/01/2012 09:53 AM : 19714fa7d7204d9bee1ee12791da9010 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.21855_none_1f0a05d1905446a1\wininet.dll : 9,82,016 : 06/01/2012 09:53 AM : 1903228fe0c7d402b26a217f8d7713fd [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16421_none_1a68963bbc19635b\wininet.dll : 11,26,912 : 06/01/2012 09:49 AM : a1236375b74ea63c75657d564890c436 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16440_none_1a51f619bc2a81e6\wininet.dll : 11,27,424 : 06/01/2012 09:50 AM : 02f98b5c0e397ad06124d84428cf8f1a [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16457_none_1a4e2833bc2c4f38\wininet.dll : 11,29,472 : 11/14/2012 07:27 AM : 7fa3a810f383588d46220967de8b64ff [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16464_none_1a405769bc371f24\wininet.dll : 11,29,472 : 01/09/2013 03:33 AM : b49b56b64f57699a1a663d2cf7d0a56f [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16470_none_1a318655bc42d5b9\wininet.dll : 11,29,472 : 02/02/2013 09:00 AM : 03728c624d05c2f157bbd46f6b7f6ea0 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16476_none_1a378811bc3d6dc3\wininet.dll : 11,29,472 : 02/22/2013 09:08 AM : c5b6468422db1c8aa36c32cbb0197e5e [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16483_none_1a29b747bc483daf\wininet.dll : 11,29,472 : 04/05/2013 03:32 AM : 2c96b3921b4cde10dbaed5aad760db67 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16490_none_1a1be67dbc530d9b\wininet.dll : 11,29,472 : 05/17/2013 03:58 AM : 6a25377a76479a0c0bf3db6fc42fe09a [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20544_none_1adf940cd544870c\wininet.dll : 11,27,424 : 06/01/2012 09:50 AM : 32569df2f9bef05dd7d56e30590edfd9 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20565_none_1acaf47ed553d845\wininet.dll : 11,29,472 : 11/14/2012 07:03 AM : 0635d714351f842d43ea184e75c4a3ff [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20573_none_1abe23fed55dc188\wininet.dll : 11,29,472 : 01/09/2013 02:11 AM : 16c45e6881449c6330567e51c13920fa [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20580_none_1ab05334d5689174\wininet.dll : 11,29,472 : 02/02/2013 09:06 AM : 1284d72c04b553ed5382ea14303d66db [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20586_none_1ab654f0d563297e\wininet.dll : 11,29,984 : 02/22/2013 09:05 AM : 490e24d5e427dfa55b1c1182f0db861c [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20593_none_1aa88426d56df96a\wininet.dll : 11,29,984 : 04/05/2013 02:25 AM : 28b2dd8dbaee306290a74ed03db3768f [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20600_none_1b06d47ad527af13\wininet.dll : 11,29,984 : 05/17/2013 03:13 AM : cc25ea1287613dc45d25a26037b4dbdd [Pos Repl]

 * C:\Windows\System32\wininit.exe : 1,29,024 : 07/14/2009 07:09 AM : 94355c28c1970635a31b3fe52eb7ceba [NoSig]
 +-> C:\Windows\erdnt\cache64\wininit.exe : 1,29,024 : 07/14/2009 07:09 AM : 94355c28c1970635a31b3fe52eb7ceba [Pos Repl]
 +-> C:\Windows\erdnt\cache86\wininit.exe : 96,256 : 07/14/2009 06:44 AM : b5c5dcad3899512020d135600129d665 [Pos Repl]
 +-> C:\Windows\SysWOW64\wininit.exe : 96,256 : 07/14/2009 06:44 AM : b5c5dcad3899512020d135600129d665 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe : 1,29,024 : 07/14/2009 07:09 AM : 94355c28c1970635a31b3fe52eb7ceba [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe : 96,256 : 07/14/2009 06:44 AM : b5c5dcad3899512020d135600129d665 [Pos Repl]

 * C:\Windows\System32\winlogon.exe : 4,55,168 : 07/17/2014 07:37 AM : 8cebd9d0a0a879cde9f36f4383b7caea [NoSig]
 +-> C:\Windows\erdnt\cache64\winlogon.exe : 4,55,168 : 07/17/2014 07:37 AM : 8cebd9d0a0a879cde9f36f4383b7caea [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe : 3,90,656 : 11/21/2010 08:54 AM : 1151b1baa6f350b1db6598e0fea7c457 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe : 4,55,168 : 03/04/2014 03:13 PM : 88ab9b72b4bf3963a0de0820b4b0b06c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe : 4,55,168 : 07/17/2014 07:37 AM : 8cebd9d0a0a879cde9f36f4383b7caea [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe : 4,55,680 : 03/04/2014 04:38 PM : 6ce2ae073bd21c542fc2c707cae944cc [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe : 4,55,680 : 07/16/2014 08:53 AM : 98aa0bfee089c7e5dadb94190d93456c [Pos Repl]

 * C:\Windows\System32\ws2_32.dll : 2,96,448 : 05/11/2016 10:32 PM : fbe1086227040618a569c27f74a12f3d [NoSig]
 +-> C:\Windows\erdnt\cache64\ws2_32.dll : 2,96,448 : 05/11/2016 10:32 PM : fbe1086227040618a569c27f74a12f3d [Pos Repl]
 +-> C:\Windows\erdnt\cache86\ws2_32.dll : 2,06,336 : 05/11/2016 08:49 PM : 59ea5753ebdae42cf92fd5b6e7ae4d53 [Pos Repl]
 +-> C:\Windows\SysWOW64\ws2_32.dll : 2,06,336 : 05/11/2016 08:49 PM : 59ea5753ebdae42cf92fd5b6e7ae4d53 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll : 2,97,984 : 11/21/2010 08:54 AM : 4bbfa57f594f7e8a8edc8f377184c3f0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.23451_none_5138e112fe368c82\ws2_32.dll : 2,96,448 : 05/11/2016 10:32 PM : fbe1086227040618a569c27f74a12f3d [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll : 2,06,848 : 11/21/2010 08:53 AM : 7ff15a4f092cd4a96055ba69f903e3e9 [Pos Repl]
 +-> C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.23451_none_f51a458f45d91b4c\ws2_32.dll : 2,06,336 : 05/11/2016 08:49 PM : 59ea5753ebdae42cf92fd5b6e7ae4d53 [Pos Repl]

 * C:\Windows\System32\ws2help.dll : 4,608 : 07/14/2009 07:04 AM : 8396c6c26aaddfe4590ccef0f419b6b7 [NoSig]
 +-> C:\Windows\erdnt\cache64\ws2help.dll : 4,608 : 07/14/2009 07:04 AM : 8396c6c26aaddfe4590ccef0f419b6b7 [Pos Repl]
 +-> C:\Windows\erdnt\cache86\ws2help.dll : 4,608 : 07/14/2009 06:41 AM : 808aabdf9337312195caff76d1804786 [Pos Repl]
 +-> C:\Windows\SysWOW64\ws2help.dll : 4,608 : 07/14/2009 06:41 AM : 808aabdf9337312195caff76d1804786 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\ws2help.dll : 4,608 : 07/14/2009 07:04 AM : 8396c6c26aaddfe4590ccef0f419b6b7 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6ace9e67456cc40b\ws2help.dll : 4,608 : 07/14/2009 06:41 AM : 808aabdf9337312195caff76d1804786 [Pos Repl]

 * C:\Windows\System32\wuauclt.exe : 1,40,288 : 05/14/2016 03:22 AM : 34356d8a4183b33e8097a3d80833faae [NoSig]
 +-> C:\Windows\erdnt\cache64\wuauclt.exe : 1,40,288 : 05/14/2016 03:22 AM : 34356d8a4183b33e8097a3d80833faae [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.5.7601.17514_none_1f3413afc64d10c5\wuauclt.exe : 51,200 : 11/21/2010 08:54 AM : 7fbfaa84fe176d9ae932abc585ab68d5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7600.256_none_d5f513f25190f276\wuauclt.exe : 57,880 : 06/03/2012 03:49 AM : c1c03ea437edda8a7d4d8786e5ae6751 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7600.320_none_d5f64d30518fd000\wuauclt.exe : 58,336 : 05/14/2014 09:53 PM : ead9e413a6ceb9fd8e2ad9dc0716c061 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.18804_none_e76d9fca65105f0b\wuauclt.exe : 1,35,168 : 03/25/2015 08:53 AM : aea602b4036cf95522818e911654f52e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.18917_none_e765d2a26515c428\wuauclt.exe : 1,39,776 : 07/09/2015 11:28 PM : 3f9239d5f65f1318a53ebaec01c092f1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.18937_none_e75032ca6525fc0a\wuauclt.exe : 1,39,776 : 07/20/2015 11:42 PM : 6fdc1fad277aef0a89b0d28f5675679c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.18979_none_e726f3ae65449e7c\wuauclt.exe : 1,39,776 : 08/26/2015 11:36 PM : ce08490157d7c871a4f1e9d8057ec2a1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.19016_none_e764aa7a6516de13\wuauclt.exe : 1,40,288 : 09/25/2015 11:36 PM : 64b432fb351118b222a5342a7a461696 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.19046_none_e7443ab6652f31e6\wuauclt.exe : 1,40,288 : 10/21/2015 00:11 AM : cdbe532602413e7fb0c395024749c7aa [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.19077_none_e724cb3c65469f10\wuauclt.exe : 1,40,288 : 11/21/2015 00:24 AM : 233ab915dbb476bfd7218db553d91dcc [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.19116_none_e764ac606516db3a\wuauclt.exe : 1,40,288 : 01/11/2016 11:53 PM : b0a43ec743402edba9527365291708a3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.19161_none_e7299b526543e83c\wuauclt.exe : 1,40,288 : 02/12/2016 11:48 PM : 1f0038f5b57d5bda7c1368ea240b4d57 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.23453_none_e7c00c697e579911\wuauclt.exe : 1,40,288 : 05/14/2016 03:22 AM : 34356d8a4183b33e8097a3d80833faae [Pos Repl]

 * C:\Windows\explorer.exe : 32,29,696 : 08/29/2016 08:34 PM : 38ae1b3c38faef56fe4907922f0385ba [NoSig]
 +-> C:\Windows\erdnt\cache86\explorer.exe : 32,29,696 : 08/29/2016 08:34 PM : 38ae1b3c38faef56fe4907922f0385ba [Pos Repl]
 +-> C:\Windows\SysWOW64\explorer.exe : 29,72,672 : 08/29/2016 08:25 PM : 6ddca324434ffa506cf7dc4e51db7935 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe : 28,72,320 : 11/21/2010 08:54 AM : ac4c51eb24aa95b77f705ab159189e24 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe : 28,71,808 : 06/01/2012 09:51 AM : 332feab1435662fc6c672e25beb37be3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe : 28,71,808 : 06/01/2012 09:51 AM : 3b69712041f3d63605529bd66dc00c48 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.23537_none_b0517adca98752cc\explorer.exe : 32,29,696 : 08/29/2016 08:34 PM : 38ae1b3c38faef56fe4907922f0385ba [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe : 26,16,320 : 11/21/2010 08:54 AM : 40d777b7a95e00593eb1568c68514493 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe : 26,16,320 : 06/01/2012 09:51 AM : 8b88ebbb05a0e56b7dcc708498c02b3e [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe : 26,16,320 : 06/01/2012 09:51 AM : 0fb9c74046656d1579a64660ad67b746 [Pos Repl]
 +-> C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.23537_none_baa6252edde814c7\explorer.exe : 29,72,672 : 08/29/2016 08:25 PM : 6ddca324434ffa506cf7dc4e51db7935 [Pos Repl]

 * C:\Windows\System32\drivers\afd.sys : 4,97,664 : 10/13/2015 10:11 PM : 9a4a1eee802bf2f878ee8eab407b21b7 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17514_none_360e4801750ca991\afd.sys : 4,99,712 : 11/21/2010 08:54 AM : d31dc7a16dea4a9baf179f3d6fbdb38c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17603_none_3618198975057170\afd.sys : 4,99,200 : 06/01/2012 09:51 AM : d5b031c308a409a0a576bff4cf083d30 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17752_none_35e10b89752ee0f5\afd.sys : 4,98,688 : 12/28/2011 09:29 AM : 1c7857b62de5994a75b054a9fd4c3825 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.18264_none_35d81beb75355772\afd.sys : 4,97,152 : 09/14/2013 06:40 AM : 314c17917ac8523ec77a710215012a65 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.18272_none_35cb4b6b753f40b5\afd.sys : 4,97,152 : 09/28/2013 06:39 AM : 79059559e89d06e8b80ce2944be20228 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.18489_none_35c7815175410855\afd.sys : 4,97,152 : 05/30/2014 12:15 AM : fa886682cfc5d36718d3e436aacf10b9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.19031_none_35f5703d751fd6ed\afd.sys : 4,97,664 : 10/13/2015 10:11 PM : 9a4a1eee802bf2f878ee8eab407b21b7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.21712_none_3695e61e8e2c13d4\afd.sys : 4,99,200 : 06/01/2012 09:51 AM : f4ad06143eac303f55d0e86c40802976 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.21887_none_364f3a028e605345\afd.sys : 4,98,176 : 12/28/2011 09:31 AM : 36a14fd1a23f57046361733b792ca8db [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.22457_none_366f8b668e482477\afd.sys : 4,96,128 : 09/14/2013 06:41 AM : 26ef7e0df4edcd898eb7a671529410b8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.22467_none_3664bb7a8e504068\afd.sys : 4,96,128 : 09/28/2013 06:44 AM : 50ab05903cbef298d135a943d4432e3c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.22705_none_36a3a0208e215d89\afd.sys : 4,96,640 : 05/30/2014 12:11 AM : bdf76c3ce993ffb6214287272708364f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.23237_none_368510aa8e380be8\afd.sys : 4,96,128 : 10/14/2015 06:20 AM : 4870e3cea0bc916b1df9c70ce57e1821 [Pos Repl]

 * C:\Windows\System32\drivers\asyncmac.sys : 23,040 : 07/14/2009 05:40 AM : 769765ce2cc62867468cea93969b2242 [NoSig]
 +-> C:\Windows\erdnt\cache64\asyncmac.sys : 23,040 : 07/14/2009 05:40 AM : 769765ce2cc62867468cea93969b2242 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rasbase-asyncmac_31bf3856ad364e35_6.1.7600.16385_none_804cc08a4e8a4516\asyncmac.sys : 23,040 : 07/14/2009 05:40 AM : 769765ce2cc62867468cea93969b2242 [Pos Repl]

 * C:\Windows\System32\drivers\beep.sys : 6,656 : 07/14/2009 05:30 AM : 16a47ce2decc9b099349a5f840654746 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys : 6,656 : 07/14/2009 05:30 AM : 16a47ce2decc9b099349a5f840654746 [Pos Repl]

 * C:\Windows\System32\drivers\bridge.sys : 95,232 : 07/14/2009 06:31 AM : 5c2f352a4e961d72518261257aae204b [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-networkbridge_31bf3856ad364e35_6.1.7600.16385_none_63dee2821fc69fce\bridge.sys : 95,232 : 07/14/2009 06:31 AM : 5c2f352a4e961d72518261257aae204b [Pos Repl]

 * C:\Windows\System32\drivers\bthport.sys : 5,52,960 : 07/07/2012 01:37 AM : 738d0e9272f59eb7a1449c3ec118e6c4 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\bth.inf_amd64_neutral_ca26c6da62d71ca8\bthport.sys : 5,52,960 : 06/01/2012 09:51 AM : 64c198198501f7560ee41d8d1efa7952 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\bth.inf_amd64_neutral_de0494b6391d872c\bthport.sys : 5,52,960 : 07/07/2012 01:37 AM : 738d0e9272f59eb7a1449c3ec118e6c4 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\bth.inf_amd64_neutral_e54666f6a3e5af91\bthport.sys : 5,52,448 : 11/21/2010 08:53 AM : 0d25b6d300ba26a5f2c3b2a8e96b158b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_bth.inf_31bf3856ad364e35_6.1.7601.17514_none_d06ac9aad230c1d6\bthport.sys : 5,52,448 : 11/21/2010 08:53 AM : 0d25b6d300ba26a5f2c3b2a8e96b158b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_bth.inf_31bf3856ad364e35_6.1.7601.17607_none_d0789c5ad225ef11\bthport.sys : 5,52,960 : 06/01/2012 09:51 AM : 64c198198501f7560ee41d8d1efa7952 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_bth.inf_31bf3856ad364e35_6.1.7601.17889_none_d024215ad264fb95\bthport.sys : 5,52,960 : 07/07/2012 01:37 AM : 738d0e9272f59eb7a1449c3ec118e6c4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_bth.inf_31bf3856ad364e35_6.1.7601.21716_none_d0f668efeb4c9175\bthport.sys : 5,52,960 : 06/01/2012 09:51 AM : 9f88e8f37c7d432a2ecaf24ee4e4714f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_bth.inf_31bf3856ad364e35_6.1.7601.22046_none_d0d5d519eb6512d8\bthport.sys : 5,52,960 : 07/07/2012 01:28 AM : f4199097323b13f0d4976fb410673177 [Pos Repl]

 * C:\Windows\System32\drivers\cdfs.sys : 92,160 : 07/14/2009 04:49 AM : b8bd2bb284668c84865658c77574381a [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-cdfs_31bf3856ad364e35_6.1.7600.16385_none_025c84b636a4ef6d\cdfs.sys : 92,160 : 07/14/2009 04:49 AM : b8bd2bb284668c84865658c77574381a [Pos Repl]

 * C:\Windows\System32\drivers\cdrom.sys : 1,47,456 : 11/21/2010 08:53 AM : f036ce71586e93d94dab220d7bdf4416 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys : 1,47,456 : 11/21/2010 08:53 AM : f036ce71586e93d94dab220d7bdf4416 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys : 1,47,456 : 11/21/2010 08:53 AM : f036ce71586e93d94dab220d7bdf4416 [Pos Repl]

 * C:\Windows\System32\drivers\CmBatt.sys : 17,664 : 07/14/2009 05:01 AM : 0840155d0bddf1190f84a663c284bd33 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\battery.inf_amd64_neutral_cb8fa151a7b7cb80\CmBatt.sys : 17,664 : 07/14/2009 05:01 AM : 0840155d0bddf1190f84a663c284bd33 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_battery.inf_31bf3856ad364e35_6.1.7600.16385_none_721c84936d812c57\CmBatt.sys : 17,664 : 07/14/2009 05:01 AM : 0840155d0bddf1190f84a663c284bd33 [Pos Repl]

 * C:\Windows\System32\drivers\drmkaud.sys : 5,632 : 12/08/2015 11:41 PM : 26fe888505e5a945b0536af9a2a27a6f [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_1f5f92106e781863\drmkaud.sys : 5,632 : 12/08/2015 11:41 PM : 26fe888505e5a945b0536af9a2a27a6f [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_3386f4c08ca19351\drmkaud.sys : 5,632 : 07/14/2009 05:36 AM : 9b19f34400d24df84c858a421c205754 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_423894ded0ba8fdf\drmkaud.sys : 5,632 : 07/14/2009 05:36 AM : 9b19f34400d24df84c858a421c205754 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7600.16385_none_bc5c4aba33d6af68\drmkaud.sys : 5,632 : 07/14/2009 05:36 AM : 9b19f34400d24df84c858a421c205754 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7601.18276_none_be4e631430f42f82\drmkaud.sys : 5,632 : 07/14/2009 05:36 AM : 9b19f34400d24df84c858a421c205754 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7601.19091_none_be33a73631090804\drmkaud.sys : 5,632 : 12/08/2015 11:41 PM : 26fe888505e5a945b0536af9a2a27a6f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7601.22472_none_bed4009d4a156717\drmkaud.sys : 5,632 : 07/14/2009 05:36 AM : 9b19f34400d24df84c858a421c205754 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7601.23290_none_bebc459d4a278b9e\drmkaud.sys : 5,632 : 12/08/2015 11:36 PM : 3f5d00dbd585b4d191c34ac5921b806f [Pos Repl]

 * C:\Windows\System32\drivers\drmk.sys : 1,16,736 : 12/09/2015 00:24 AM : c51b07394a087da666a410dbfd26663a [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_1f5f92106e781863\drmk.sys : 1,16,736 : 12/09/2015 00:24 AM : c51b07394a087da666a410dbfd26663a [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_3386f4c08ca19351\drmk.sys : 1,16,736 : 10/04/2013 07:46 AM : e0d3cd5841e5c7be7b94ba946af1e498 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_423894ded0ba8fdf\drmk.sys : 1,16,224 : 07/14/2009 06:31 AM : 21d26064aedb4988f785bb4a3a2c051e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7600.16385_none_bc5c4aba33d6af68\drmk.sys : 1,16,224 : 07/14/2009 06:31 AM : 21d26064aedb4988f785bb4a3a2c051e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7601.18276_none_be4e631430f42f82\drmk.sys : 1,16,736 : 10/04/2013 07:46 AM : e0d3cd5841e5c7be7b94ba946af1e498 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7601.19091_none_be33a73631090804\drmk.sys : 1,16,736 : 12/09/2015 00:24 AM : c51b07394a087da666a410dbfd26663a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7601.22472_none_bed4009d4a156717\drmk.sys : 1,16,736 : 10/04/2013 07:47 AM : 5c5d9ab48169b2681533c97a1df13994 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7601.23290_none_bebc459d4a278b9e\drmk.sys : 1,16,736 : 12/09/2015 00:15 AM : f44a349e2fdda53e5b46d394362af437 [Pos Repl]

 * C:\Windows\System32\drivers\dxapi.sys : 16,896 : 07/14/2009 05:08 AM : bf24d6f2ed97fe830bfd52b246f98e67 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-useros_31bf3856ad364e35_6.1.7600.16385_none_2963a67886ddf81e\dxapi.sys : 16,896 : 07/14/2009 05:08 AM : bf24d6f2ed97fe830bfd52b246f98e67 [Pos Repl]

 * C:\Windows\System32\drivers\dxg.sys : 98,816 : 07/14/2009 05:08 AM : fede0629ecb23650d48989517d4914da [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-dxg_31bf3856ad364e35_6.1.7600.16385_none_04e0334574ce0f74\dxg.sys : 98,816 : 07/14/2009 05:08 AM : fede0629ecb23650d48989517d4914da [Pos Repl]

 * C:\Windows\System32\drivers\fastfat.sys : 2,04,800 : 07/14/2009 04:53 AM : 0adc83218b66a6db380c330836f3e36d [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-fat_31bf3856ad364e35_6.1.7600.16385_none_0aa81d2771152f86\fastfat.sys : 2,04,800 : 07/14/2009 04:53 AM : 0adc83218b66a6db380c330836f3e36d [Pos Repl]

 * C:\Windows\System32\drivers\fdc.sys : 29,696 : 07/14/2009 05:30 AM : d765d19cd8ef61f650c384f62fac00ab [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\fdc.inf_amd64_neutral_bbcfca39fdc02275\fdc.sys : 29,696 : 07/14/2009 05:30 AM : d765d19cd8ef61f650c384f62fac00ab [Pos Repl]
 +-> C:\Windows\winsxs\amd64_fdc.inf_31bf3856ad364e35_6.1.7600.16385_none_5d86a514fa18ed1d\fdc.sys : 29,696 : 07/14/2009 05:30 AM : d765d19cd8ef61f650c384f62fac00ab [Pos Repl]

 * C:\Windows\System32\drivers\flpydisk.sys : 24,576 : 07/14/2009 05:30 AM : c172a0f53008eaeb8ea33fe10e177af5 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\flpydisk.inf_amd64_neutral_f54222cc59267e1e\flpydisk.sys : 24,576 : 07/14/2009 05:30 AM : c172a0f53008eaeb8ea33fe10e177af5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_flpydisk.inf_31bf3856ad364e35_6.1.7600.16385_none_42ff01d4942cc5ea\flpydisk.sys : 24,576 : 07/14/2009 05:30 AM : c172a0f53008eaeb8ea33fe10e177af5 [Pos Repl]

 * C:\Windows\System32\drivers\hidclass.sys : 76,800 : 07/03/2013 09:35 AM : 597c3699384e53cc59587ed50cce5ca2 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\input.inf_amd64_neutral_8693053514b10ee9\hidclass.sys : 76,800 : 11/21/2010 08:53 AM : 8b0e40e7e8bbf5acf390465609d89ff1 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\input.inf_amd64_neutral_fccb715ac7d8c66d\hidclass.sys : 76,800 : 07/03/2013 09:35 AM : 597c3699384e53cc59587ed50cce5ca2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_input.inf_31bf3856ad364e35_6.1.7601.17514_none_7e959f3636bd3a1c\hidclass.sys : 76,800 : 11/21/2010 08:53 AM : 8b0e40e7e8bbf5acf390465609d89ff1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_input.inf_31bf3856ad364e35_6.1.7601.18199_none_7e4402e836f9bd5c\hidclass.sys : 76,800 : 07/03/2013 09:35 AM : 597c3699384e53cc59587ed50cce5ca2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_input.inf_31bf3856ad364e35_6.1.7601.22374_none_7ede3fff500ba3b8\hidclass.sys : 76,800 : 07/02/2013 09:19 AM : a68903c267bf0ac5775fe756a9283b1d [Pos Repl]

 * C:\Windows\System32\drivers\hidparse.sys : 32,896 : 07/03/2013 09:35 AM : 856e76b3641746abbc2946bed1372098 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\input.inf_amd64_neutral_8693053514b10ee9\hidparse.sys : 32,896 : 07/14/2009 05:36 AM : 49ee2e52e6cd03947dad72f65367be06 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\input.inf_amd64_neutral_fccb715ac7d8c66d\hidparse.sys : 32,896 : 07/03/2013 09:35 AM : 856e76b3641746abbc2946bed1372098 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_input.inf_31bf3856ad364e35_6.1.7601.17514_none_7e959f3636bd3a1c\hidparse.sys : 32,896 : 07/14/2009 05:36 AM : 49ee2e52e6cd03947dad72f65367be06 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_input.inf_31bf3856ad364e35_6.1.7601.18199_none_7e4402e836f9bd5c\hidparse.sys : 32,896 : 07/03/2013 09:35 AM : 856e76b3641746abbc2946bed1372098 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_input.inf_31bf3856ad364e35_6.1.7601.22374_none_7ede3fff500ba3b8\hidparse.sys : 32,896 : 07/02/2013 09:19 AM : 100a1815f5282cffb99dd77f8bee8742 [Pos Repl]

 * C:\Windows\System32\drivers\hidusb.sys : 30,208 : 11/21/2010 08:53 AM : 9592090a7e2b61cd582b612b6df70536 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\input.inf_amd64_neutral_8693053514b10ee9\hidusb.sys : 30,208 : 11/21/2010 08:53 AM : 9592090a7e2b61cd582b612b6df70536 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\input.inf_amd64_neutral_fccb715ac7d8c66d\hidusb.sys : 30,208 : 11/21/2010 08:53 AM : 9592090a7e2b61cd582b612b6df70536 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_input.inf_31bf3856ad364e35_6.1.7601.17514_none_7e959f3636bd3a1c\hidusb.sys : 30,208 : 11/21/2010 08:53 AM : 9592090a7e2b61cd582b612b6df70536 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_input.inf_31bf3856ad364e35_6.1.7601.18199_none_7e4402e836f9bd5c\hidusb.sys : 30,208 : 11/21/2010 08:53 AM : 9592090a7e2b61cd582b612b6df70536 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_input.inf_31bf3856ad364e35_6.1.7601.22374_none_7ede3fff500ba3b8\hidusb.sys : 30,208 : 11/21/2010 08:53 AM : 9592090a7e2b61cd582b612b6df70536 [Pos Repl]

 * C:\Windows\System32\drivers\http.sys : 7,54,688 : 02/25/2015 08:48 AM : f61634bec53f73702a10de69f6dcaf57 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-http_31bf3856ad364e35_6.1.7601.17514_none_0ae701b82f7a7759\http.sys : 7,53,664 : 11/21/2010 08:53 AM : 0ea7de1acb728dd5a369fd742d6eee28 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-http_31bf3856ad364e35_6.1.7601.18772_none_0aa40ea02fad0040\http.sys : 7,54,688 : 02/25/2015 08:48 AM : f61634bec53f73702a10de69f6dcaf57 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-http_31bf3856ad364e35_6.1.7601.22976_none_0b31ae7948c7028d\http.sys : 7,54,688 : 02/24/2015 11:36 AM : 26647a4f267d13d67ed6b99eae2a7f78 [Pos Repl]

 * C:\Windows\System32\drivers\i8042prt.sys : 1,05,472 : 07/14/2009 04:49 AM : fa55c73d4affa7ee23ac4be53b4592d3 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_amd64_neutral_0684fdc43059f486\i8042prt.sys : 1,05,472 : 07/14/2009 04:49 AM : fa55c73d4affa7ee23ac4be53b4592d3 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_amd64_neutral_7a5f47d3150cc0eb\i8042prt.sys : 1,05,472 : 07/14/2009 04:49 AM : fa55c73d4affa7ee23ac4be53b4592d3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_keyboard.inf_31bf3856ad364e35_6.1.7601.17514_none_f5747347ef9876bf\i8042prt.sys : 1,05,472 : 07/14/2009 04:49 AM : fa55c73d4affa7ee23ac4be53b4592d3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_msmouse.inf_31bf3856ad364e35_6.1.7600.16385_none_aa28fd23ec0c39f9\i8042prt.sys : 1,05,472 : 07/14/2009 04:49 AM : fa55c73d4affa7ee23ac4be53b4592d3 [Pos Repl]

 * C:\Windows\System32\drivers\intelppm.sys : 62,464 : 07/14/2009 04:49 AM : ada036632c664caa754079041cf1f8c1 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\cpu.inf_amd64_neutral_ae5de2e1bf2793c3\intelppm.sys : 62,464 : 07/14/2009 04:49 AM : ada036632c664caa754079041cf1f8c1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_cpu.inf_31bf3856ad364e35_6.1.7600.16385_none_b93f4c460912265a\intelppm.sys : 62,464 : 07/14/2009 04:49 AM : ada036632c664caa754079041cf1f8c1 [Pos Repl]

 * C:\Windows\System32\drivers\ipfltdrv.sys : 82,944 : 11/21/2010 08:54 AM : c9f0e1bd74365a8771590e9008d22ab6 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rasipfilter_31bf3856ad364e35_6.1.7601.17514_none_458f8957d5cef9fa\ipfltdrv.sys : 82,944 : 11/21/2010 08:54 AM : c9f0e1bd74365a8771590e9008d22ab6 [Pos Repl]

 * C:\Windows\System32\drivers\ipnat.sys : 1,16,224 : 07/14/2009 05:40 AM : af9b39a7e7b6caa203b3862582e9f2d0 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ipnat_31bf3856ad364e35_6.1.7600.16385_none_b70d093f950ce2cf\ipnat.sys : 1,16,224 : 07/14/2009 05:40 AM : af9b39a7e7b6caa203b3862582e9f2d0 [Pos Repl]

 * C:\Windows\System32\drivers\irenum.sys : 17,920 : 07/14/2009 05:38 AM : 3abf5e7213eb28966d55d58b515d5ce9 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-irdaircomm_31bf3856ad364e35_6.1.7600.16385_none_84866db23e5a6f30\irenum.sys : 17,920 : 07/14/2009 05:38 AM : 3abf5e7213eb28966d55d58b515d5ce9 [Pos Repl]

 * C:\Windows\System32\drivers\ks.sys : 2,43,712 : 11/21/2010 08:54 AM : 24fbf5cc5c04150073c315a7c83521ee [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernelstreaming_31bf3856ad364e35_6.1.7601.17514_none_b5a6c7c6ac83a58e\ks.sys : 2,43,712 : 11/21/2010 08:54 AM : 24fbf5cc5c04150073c315a7c83521ee [Pos Repl]

 * C:\Windows\System32\drivers\mcd.sys : 22,016 : 07/14/2009 05:31 AM : 3c9f072f9dca856b9fb7a20cbd4281ac [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft.windows.h..changer-driverclass_31bf3856ad364e35_6.1.7600.16385_none_249a5cc1e06b4240\mcd.sys : 22,016 : 07/14/2009 05:31 AM : 3c9f072f9dca856b9fb7a20cbd4281ac [Pos Repl]

 * C:\Windows\System32\drivers\modem.sys : 40,448 : 07/14/2009 05:40 AM : 800ba92f7010378b09f9ed9270f07137 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-u..em-core-classdriver_31bf3856ad364e35_6.1.7600.16385_none_8bf97498085ce154\modem.sys : 40,448 : 07/14/2009 05:40 AM : 800ba92f7010378b09f9ed9270f07137 [Pos Repl]

 * C:\Windows\System32\drivers\mouhid.sys : 31,232 : 07/14/2009 05:30 AM : d3bf052c40b0c4166d9fd86a4288c1e6 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_amd64_neutral_7a5f47d3150cc0eb\mouhid.sys : 31,232 : 07/14/2009 05:30 AM : d3bf052c40b0c4166d9fd86a4288c1e6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_msmouse.inf_31bf3856ad364e35_6.1.7600.16385_none_aa28fd23ec0c39f9\mouhid.sys : 31,232 : 07/14/2009 05:30 AM : d3bf052c40b0c4166d9fd86a4288c1e6 [Pos Repl]

 * C:\Windows\System32\drivers\mrxdav.sys : 1,42,336 : 09/08/2016 08:25 PM : 98db1790f0a584e0a2528b92b052417f [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.1.7601.17514_none_72d0eaa6dc5b2edb\mrxdav.sys : 1,40,800 : 11/21/2010 08:54 AM : dc722758b8261e1abafd31a3c0a66380 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.1.7601.18201_none_72d89d3adc55e911\mrxdav.sys : 1,40,800 : 07/04/2013 03:41 PM : 1a4f75e63c9fb84b85dffc6b63fd5404 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.1.7601.18706_none_72dda82adc515987\mrxdav.sys : 1,41,312 : 12/19/2014 07:16 AM : ae3334958d8f631ff14a0aeb3d7efb3a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.1.7601.19113_none_72cfb534dc5c542a\mrxdav.sys : 1,41,312 : 01/07/2016 11:12 PM : d7adc2b83ca0b0381f75a98351f72cee [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.1.7601.22376_none_731b8c03f5a7cb25\mrxdav.sys : 1,41,824 : 07/04/2013 03:24 PM : 83a296715a67d696f101130ab44b92a7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.1.7601.22913_none_73597611f579c664\mrxdav.sys : 1,42,336 : 12/19/2014 07:23 AM : 0ae0ab07eb9166ea6030153830148c02 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.1.7601.23317_none_735d550df5765677\mrxdav.sys : 1,42,336 : 01/07/2016 11:19 PM : c5e75fd295f3707a1dd8da355faf098e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.1.7601.23542_none_7337e7a3f59325e5\mrxdav.sys : 1,42,336 : 09/08/2016 08:25 PM : 98db1790f0a584e0a2528b92b052417f [Pos Repl]

 * C:\Windows\System32\drivers\mrxsmb.sys : 1,59,744 : 10/10/2016 08:26 PM : 25f918bb5d57c99ffeb0255143d0df9a [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.17514_none_ddb772a467bcf964\mrxsmb.sys : 1,58,208 : 11/21/2010 08:54 AM : faf015b07e3a2874a790a39b7d2c579f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.17565_none_dd82635267e49e70\mrxsmb.sys : 1,58,208 : 02/23/2011 10:26 AM : c2b4651001a867ff3f8865863b592991 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.17605_none_ddc344c067b3f3f1\mrxsmb.sys : 1,58,208 : 06/01/2012 09:52 AM : a5d9106a73dc88564c825d317cac68ac [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.18909_none_ddc734d267b06a63\mrxsmb.sys : 1,59,232 : 06/27/2015 10:16 PM : d32d828a9909fa3fd5d65ed52899cfa4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.18912_none_ddb562e067bed4f3\mrxsmb.sys : 1,59,232 : 07/02/2015 00:57 AM : 1877eb1495cfbdab27d6a32f6ddf3818 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.18923_none_ddab933e67c60a3b\mrxsmb.sys : 1,59,232 : 07/15/2015 07:22 AM : 92d8abe55ade489efc9ebeadfa3fe0af [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.18933_none_dda0c35267ce262c\mrxsmb.sys : 1,59,232 : 07/15/2015 10:16 PM : b2081803d510dce174992ba880edca70 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.18939_none_dda6c50e67c8be36\mrxsmb.sys : 1,59,232 : 07/22/2015 10:15 PM : 43e1f4b0efdc244d2a83995ccd7846f7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.19018_none_ddbb3cbe67b9a03f\mrxsmb.sys : 1,59,232 : 09/29/2015 07:20 AM : acb6782973bd93760d597fc7bb37e692 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.19043_none_dd95cb8867d6755f\mrxsmb.sys : 1,59,232 : 10/16/2015 10:08 PM : a0f06b32779db8c9b4dd0eb6ef8cf71e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.19044_none_dd96cbd267d58eb6\mrxsmb.sys : 1,59,232 : 10/17/2015 10:16 PM : 01ed30775b746abccadd1c596ee4f97b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.19045_none_dd97cc1c67d4a80d\mrxsmb.sys : 1,59,232 : 10/20/2015 05:11 AM : 73addcc406b86e7da4416691e8e74bda [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.19110_none_ddb33c5467c0d2ae\mrxsmb.sys : 1,59,232 : 12/30/2015 11:13 PM : 32b85c4923d895b2fb35821a799ba38d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.19131_none_dd9e9cc667d023e7\mrxsmb.sys : 1,59,232 : 01/16/2016 11:12 PM : 55bc784c80f64f90ac9d7e2a30560752 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.19135_none_dda29dee67cc8943\mrxsmb.sys : 1,59,232 : 01/22/2016 10:29 AM : 355df71d1dd1999e8aedf986534b233c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.19160_none_dd7d2cb867e95e63\mrxsmb.sys : 1,59,232 : 02/11/2016 11:04 PM : 07f8f6b0caec7add30ebd94940a315d7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.21666_none_de0d006781015791\mrxsmb.sys : 1,58,208 : 02/23/2011 09:02 AM : cd291e3c21c61e17972dfaf8e2e2e5da [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.21714_none_de41115580da9655\mrxsmb.sys : 1,58,208 : 06/01/2012 09:52 AM : 8d841161a355809ef86819fd3c6361d3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23112_none_de3ed7cd80dca7ff\mrxsmb.sys : 1,59,744 : 06/27/2015 10:24 PM : 7490f993d0278665a09064b355bc8491 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23115_none_de41d8ab80d9f404\mrxsmb.sys : 1,59,744 : 07/01/2015 10:25 PM : e9dd0e8829567362c1051e0905174dde [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23126_none_de38090980e1294c\mrxsmb.sys : 1,59,744 : 07/15/2015 07:30 AM : f07dbc8ff60e6f38958afef3a6d50cd7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23136_none_de2d391d80e9453d\mrxsmb.sys : 1,59,744 : 07/15/2015 10:25 PM : 54ff5d75ffa8107a51a277c8791c1c4c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23142_none_de1e680980f4fbd2\mrxsmb.sys : 1,59,744 : 07/23/2015 02:05 AM : 1ccbc57fe25be27d177ff1bc4f960b6a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23153_none_de14986780fc311a\mrxsmb.sys : 1,59,744 : 08/04/2015 10:24 PM : 4d7b0528d458f5e80badfcde33713036 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23223_none_de350a1180e3da6e\mrxsmb.sys : 1,59,744 : 09/28/2015 10:23 PM : c41d42e32e465d3e15e8d25d565ea457 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23226_none_de380aef80e12673\mrxsmb.sys : 1,59,744 : 10/01/2015 10:17 PM : 1c2bce8bd456f8895ed06db281006b66 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23249_none_de256bf580eeaa5a\mrxsmb.sys : 1,59,744 : 10/16/2015 10:21 PM : 81d3d2256a486634b651e8faa31a60a8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23250_none_de11996f80fee23c\mrxsmb.sys : 1,59,744 : 10/20/2015 05:18 AM : 2ed53f050ebb446794236bb0d5e28f4f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23313_none_de3fdbe380dbbba4\mrxsmb.sys : 1,59,744 : 12/30/2015 11:19 PM : d9481c84da831290f7ab4f190eefa253 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23334_none_de2b3c5580eb0cdd\mrxsmb.sys : 1,59,744 : 01/17/2016 04:48 AM : 1f626b021798f29e96a29db20914bf5e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23338_none_de2f3d7d80e77239\mrxsmb.sys : 1,59,744 : 01/22/2016 10:33 AM : 22053a5093764f1da22a81bd3e4943ff [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23349_none_de256ddb80eea781\mrxsmb.sys : 1,59,744 : 02/10/2016 11:10 PM : 0950a57e920f5c8c56a4bcd25a1c9388 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23390_none_dde65ba5811f4f27\mrxsmb.sys : 1,59,744 : 03/16/2016 04:33 AM : 355e6e6b432892a5b20750ea5b317f3c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23391_none_dde75bef811e687e\mrxsmb.sys : 1,59,744 : 03/16/2016 11:04 PM : b7264c444d6f3e5b2d10fc23d3b1035e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23392_none_dde85c39811d81d5\mrxsmb.sys : 1,59,744 : 03/18/2016 03:08 AM : acec16415275e1ad6f7983ef472810e3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23418_none_de44df3b80d7377e\mrxsmb.sys : 1,59,744 : 04/09/2016 11:14 AM : 035c0a9a63df3f3a52b90d8f6bf0f166 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23452_none_de139dcf80fd0f38\mrxsmb.sys : 1,59,744 : 05/12/2016 08:28 PM : 10112d850c844606419c79ee24ee6016 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23497_none_dded5f918118fdaf\mrxsmb.sys : 1,59,744 : 07/08/2016 08:27 PM : b7fada5e1e55bb63f90eb9f8f016113b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23539_none_de30419380e685de\mrxsmb.sys : 1,59,744 : 09/02/2016 08:25 PM : 341c65d6d4e9ab705258ac83511f7add [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23545_none_de21707f80f23c73\mrxsmb.sys : 1,59,744 : 09/13/2016 02:02 AM : fca01b0c70dae9be557577e719469d17 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23571_none_ddfcff93810e2aea\mrxsmb.sys : 1,59,744 : 10/10/2016 08:26 PM : 25f918bb5d57c99ffeb0255143d0df9a [Pos Repl]

 * C:\Windows\System32\drivers\msfs.sys : 26,112 : 07/14/2009 04:49 AM : aa3fb40e17ce1388fa1bedab50ea8f96 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-msfs_31bf3856ad364e35_6.1.7600.16385_none_026531e2369d6d42\msfs.sys : 26,112 : 07/14/2009 04:49 AM : aa3fb40e17ce1388fa1bedab50ea8f96 [Pos Repl]

 * C:\Windows\System32\drivers\MSKSSRV.sys : 11,136 : 07/14/2009 05:30 AM : 49ccf2c4fea34ffad8b1b59d49439366 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernelstreamingsupport_31bf3856ad364e35_6.1.7600.16385_none_bde9acc8f46cb6db\mskssrv.sys : 11,136 : 07/14/2009 05:30 AM : 49ccf2c4fea34ffad8b1b59d49439366 [Pos Repl]

 * C:\Windows\System32\drivers\MSPCLOCK.sys : 7,168 : 07/14/2009 05:30 AM : bdd71ace35a232104ddd349ee70e1ab3 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernelstreamingsupport_31bf3856ad364e35_6.1.7600.16385_none_bde9acc8f46cb6db\mspclock.sys : 7,168 : 07/14/2009 05:30 AM : bdd71ace35a232104ddd349ee70e1ab3 [Pos Repl]

 * C:\Windows\System32\drivers\MSPQM.sys : 6,784 : 07/14/2009 05:30 AM : 4ed981241db27c3383d72092b618a1d0 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-kernelstreamingsupport_31bf3856ad364e35_6.1.7600.16385_none_bde9acc8f46cb6db\mspqm.sys : 6,784 : 07/14/2009 05:30 AM : 4ed981241db27c3383d72092b618a1d0 [Pos Repl]

 * C:\Windows\System32\drivers\ndistapi.sys : 24,064 : 07/14/2009 05:40 AM : 30639c932d9fef22b31268fe25a1b6e5 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rasbase_31bf3856ad364e35_6.1.7601.17514_none_6c066d50910ecf5a\ndistapi.sys : 24,064 : 07/14/2009 05:40 AM : 30639c932d9fef22b31268fe25a1b6e5 [Pos Repl]

 * C:\Windows\System32\drivers\ndisuio.sys : 56,832 : 11/21/2010 08:54 AM : 136185f9fb2cc61e573e676aa5402356 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-ndisuio_31bf3856ad364e35_6.1.7601.17514_none_ca170d32fd7da822\ndisuio.sys : 56,832 : 11/21/2010 08:54 AM : 136185f9fb2cc61e573e676aa5402356 [Pos Repl]

 * C:\Windows\System32\drivers\ndiswan.sys : 1,64,352 : 11/21/2010 08:54 AM : 53f7305169863f0a2bddc49e116c2e11 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rasbase-ndiswan_31bf3856ad364e35_6.1.7601.17514_none_515e96306dea528f\ndiswan.sys : 1,64,352 : 11/21/2010 08:54 AM : 53f7305169863f0a2bddc49e116c2e11 [Pos Repl]

 * C:\Windows\System32\drivers\ndproxy.sys : 57,856 : 11/21/2010 08:54 AM : 015c0d8e0e0421b4cfd48cffe2825879 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rasbase_31bf3856ad364e35_6.1.7601.17514_none_6c066d50910ecf5a\ndproxy.sys : 57,856 : 11/21/2010 08:54 AM : 015c0d8e0e0421b4cfd48cffe2825879 [Pos Repl]

 * C:\Windows\System32\drivers\netbios.sys : 44,544 : 07/14/2009 05:39 AM : 86743d9f5d2b1048062b14b1d84501c4 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-netbios_31bf3856ad364e35_6.1.7600.16385_none_b5d6a9d184d05567\netbios.sys : 44,544 : 07/14/2009 05:39 AM : 86743d9f5d2b1048062b14b1d84501c4 [Pos Repl]

 * C:\Windows\System32\drivers\netbt.sys : 2,62,144 : 05/11/2016 08:28 PM : e47d571fec2c76e867935109ab2a770c [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.17514_none_be8acdd10de3b1a6\netbt.sys : 2,61,632 : 11/21/2010 08:53 AM : 09594d1089c523423b32a4229263f068 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.23451_none_bee5f8b22724ae23\netbt.sys : 2,62,144 : 05/11/2016 08:28 PM : e47d571fec2c76e867935109ab2a770c [Pos Repl]

 * C:\Windows\System32\drivers\npfs.sys : 44,032 : 07/14/2009 04:49 AM : 1e4c4ab5c9b8dd13179bbdc75a2a01f7 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-npfs_31bf3856ad364e35_6.1.7600.16385_none_02667684369c39b6\npfs.sys : 44,032 : 07/14/2009 04:49 AM : 1e4c4ab5c9b8dd13179bbdc75a2a01f7 [Pos Repl]

 * C:\Windows\System32\drivers\null.sys : 6,144 : 07/14/2009 04:49 AM : 9899284589f75fa8724ff3d16aed75c1 [NoSig]
 +-> C:\Windows\erdnt\cache64\null.sys : 6,144 : 07/14/2009 04:49 AM : 9899284589f75fa8724ff3d16aed75c1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-null_31bf3856ad364e35_6.1.7600.16385_none_055adf2434ae116e\null.sys : 6,144 : 07/14/2009 04:49 AM : 9899284589f75fa8724ff3d16aed75c1 [Pos Repl]

 * C:\Windows\System32\drivers\parport.sys : 97,280 : 07/14/2009 05:30 AM : 0086431c29c35be1dbc43f52cc273887 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\parport.sys : 97,280 : 07/14/2009 05:30 AM : 0086431c29c35be1dbc43f52cc273887 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\parport.sys : 97,280 : 07/14/2009 05:30 AM : 0086431c29c35be1dbc43f52cc273887 [Pos Repl]

 * C:\Windows\System32\drivers\portcls.sys : 2,30,400 : 12/08/2015 11:42 PM : 647599cae8ca0ef2fb09c4b150bc97ff [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_1f5f92106e781863\portcls.sys : 2,30,400 : 12/08/2015 11:42 PM : 647599cae8ca0ef2fb09c4b150bc97ff [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_3386f4c08ca19351\portcls.sys : 2,30,400 : 10/04/2013 07:06 AM : 1e0b4cbba91c6b041a14ecc2186f7e24 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_423894ded0ba8fdf\portcls.sys : 2,30,400 : 07/14/2009 05:36 AM : 32e11315b5126921ffd9074840ef13d3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7600.16385_none_bc5c4aba33d6af68\portcls.sys : 2,30,400 : 07/14/2009 05:36 AM : 32e11315b5126921ffd9074840ef13d3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7601.18276_none_be4e631430f42f82\portcls.sys : 2,30,400 : 10/04/2013 07:06 AM : 1e0b4cbba91c6b041a14ecc2186f7e24 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7601.19091_none_be33a73631090804\portcls.sys : 2,30,400 : 12/08/2015 11:42 PM : 647599cae8ca0ef2fb09c4b150bc97ff [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7601.22472_none_bed4009d4a156717\portcls.sys : 2,30,400 : 10/04/2013 07:07 AM : b99d370242119ac4f67d6e8183dd6ac6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_wdmaudio.inf_31bf3856ad364e35_6.1.7601.23290_none_bebc459d4a278b9e\portcls.sys : 2,30,400 : 12/08/2015 11:36 PM : e5e8172ccbcde12f2b9a58ee9b7293c3 [Pos Repl]

 * C:\Windows\System32\drivers\processr.sys : 60,416 : 07/14/2009 04:49 AM : 0d922e23c041efb1c3fac2a6f943c9bf [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\cpu.inf_amd64_neutral_ae5de2e1bf2793c3\processr.sys : 60,416 : 07/14/2009 04:49 AM : 0d922e23c041efb1c3fac2a6f943c9bf [Pos Repl]
 +-> C:\Windows\winsxs\amd64_cpu.inf_31bf3856ad364e35_6.1.7600.16385_none_b93f4c460912265a\processr.sys : 60,416 : 07/14/2009 04:49 AM : 0d922e23c041efb1c3fac2a6f943c9bf [Pos Repl]

 * C:\Windows\System32\drivers\rasacd.sys : 14,848 : 07/14/2009 05:40 AM : 5a0da8ad5762fa2d91678a8a01311704 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rasautodial_31bf3856ad364e35_6.1.7600.16385_none_6bcef05d7f04260a\rasacd.sys : 14,848 : 07/14/2009 05:40 AM : 5a0da8ad5762fa2d91678a8a01311704 [Pos Repl]

 * C:\Windows\System32\drivers\rasl2tp.sys : 1,29,536 : 11/21/2010 08:54 AM : 471815800ae33e6f1c32fb1b97c490ca [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rasbase-rasl2tp_31bf3856ad364e35_6.1.7601.17514_none_f802520bfe8dd487\rasl2tp.sys : 1,29,536 : 11/21/2010 08:54 AM : 471815800ae33e6f1c32fb1b97c490ca [Pos Repl]

 * C:\Windows\System32\drivers\raspppoe.sys : 92,672 : 07/14/2009 05:40 AM : 855c9b1cd4756c5e9a2aa58a15f58c25 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rasbase-raspppoe_31bf3856ad364e35_6.1.7600.16385_none_b22875c7b448dfbb\raspppoe.sys : 92,672 : 07/14/2009 05:40 AM : 855c9b1cd4756c5e9a2aa58a15f58c25 [Pos Repl]

 * C:\Windows\System32\drivers\raspptp.sys : 1,11,104 : 11/21/2010 08:54 AM : f92a2c41117a11a00be01ca01a7fcde9 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rasbase-raspptp_31bf3856ad364e35_6.1.7601.17514_none_f8152447fe76675d\raspptp.sys : 1,11,104 : 11/21/2010 08:54 AM : f92a2c41117a11a00be01ca01a7fcde9 [Pos Repl]

 * C:\Windows\System32\drivers\rdbss.sys : 3,09,248 : 11/21/2010 08:54 AM : 77f665941019a1594d887a74f301fa2f [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rdbss_31bf3856ad364e35_6.1.7601.17514_none_b7fadd3b7808f9d5\rdbss.sys : 3,09,248 : 11/21/2010 08:54 AM : 77f665941019a1594d887a74f301fa2f [Pos Repl]

 * C:\Windows\System32\drivers\rdpcdd.sys : 7,680 : 07/14/2009 05:46 AM : cea6cc257fc9b7715f1c2b4849286d24 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..niportdisplaydriver_31bf3856ad364e35_6.1.7600.16385_none_30d015c257effe8b\RDPCDD.sys : 7,680 : 07/14/2009 05:46 AM : cea6cc257fc9b7715f1c2b4849286d24 [Pos Repl]

 * C:\Windows\System32\drivers\rdpwd.sys : 2,12,480 : 07/17/2014 06:51 AM : fe571e088c2d83619d2d48d4e961bf41 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..dp-winstationdriver_31bf3856ad364e35_6.1.7601.17514_none_a99b8db6eba2129b\rdpwd.sys : 2,10,944 : 11/21/2010 08:54 AM : 15b66c206b5cb095bab980553f38ed23 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..dp-winstationdriver_31bf3856ad364e35_6.1.7601.17779_none_a95fb36cebce3342\rdpwd.sys : 2,10,944 : 02/17/2012 10:28 AM : 6d76e6433574b058adcb0c50df834492 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..dp-winstationdriver_31bf3856ad364e35_6.1.7601.17830_none_a981f268ebb5dc96\rdpwd.sys : 2,10,944 : 04/28/2012 09:25 AM : e61608aa35e98999af9aaeeea6114b0a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..dp-winstationdriver_31bf3856ad364e35_6.1.7601.18540_none_a9770602ebbe1ab3\rdpwd.sys : 2,12,480 : 07/17/2014 06:51 AM : fe571e088c2d83619d2d48d4e961bf41 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..dp-winstationdriver_31bf3856ad364e35_6.1.7601.21924_none_aa1a604804c7c5cb\rdpwd.sys : 2,10,944 : 02/17/2012 10:18 AM : 0b93aa14e7dcd85cc82bc7d7d1ca9b24 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..dp-winstationdriver_31bf3856ad364e35_6.1.7601.21982_none_a9d7802c04fa3ac3\rdpwd.sys : 2,10,944 : 04/28/2012 09:21 AM : 1fe9863c6c5cc71e8e7e70f9efbd30e1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..dp-winstationdriver_31bf3856ad364e35_6.1.7601.22750_none_a9f5d4c804e3d395\rdpwd.sys : 2,12,992 : 07/16/2014 08:09 AM : 6f426dcf2dddccf6ba4dfd34e9803e5b [Pos Repl]

 * C:\Windows\System32\drivers\rmcast.sys : 1,46,944 : 11/05/2015 03:23 PM : 5bd6b1ec997ff3dd779d62e05d2079a8 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rmcast_31bf3856ad364e35_6.1.7601.17514_none_b2a3d1a09e8a89b1\rmcast.sys : 1,46,432 : 11/21/2010 08:54 AM : caf88d6573d21cd2aa27001ddbfdc74d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rmcast_31bf3856ad364e35_6.1.7601.19055_none_b2795b2c9eaa544b\rmcast.sys : 1,46,944 : 11/05/2015 03:23 PM : 5bd6b1ec997ff3dd779d62e05d2079a8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rmcast_31bf3856ad364e35_6.1.7601.23260_none_b2f3287fb7d48e7a\rmcast.sys : 1,46,944 : 11/05/2015 03:30 PM : 5f3747495a2a0dc556aa506ab49e13b4 [Pos Repl]

 * C:\Windows\System32\drivers\rndismp.sys : 41,472 : 07/05/2012 01:56 AM : 0e01641d96889bdeb22de12d30575b08 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rndis-miniport_31bf3856ad364e35_6.1.7600.16385_none_3d23a154a5966360\RNDISMP.sys : 41,472 : 07/14/2009 05:39 AM : fc6d5c50d846b795335deb3fce8b33f3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rndis-miniport_31bf3856ad364e35_6.1.7601.17887_none_3f0c0c38a2baee0b\RNDISMP.sys : 41,472 : 07/05/2012 01:56 AM : 0e01641d96889bdeb22de12d30575b08 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rndis-miniport_31bf3856ad364e35_6.1.7601.22044_none_3fbdbff7bbbb054e\RNDISMP.sys : 41,472 : 07/05/2012 01:46 AM : fdd71f94cd5580e4c1d16f96ef6c2856 [Pos Repl]

 * C:\Windows\System32\drivers\rootmdm.sys : 11,264 : 07/14/2009 05:40 AM : 388d3dd1a6457280f3badba9f3acd6b1 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-unimodem-core_31bf3856ad364e35_6.1.7600.16385_none_f08d2472ee3ef611\rootmdm.sys : 11,264 : 07/14/2009 05:40 AM : 388d3dd1a6457280f3badba9f3acd6b1 [Pos Repl]

 * C:\Windows\System32\drivers\serenum.sys : 23,552 : 07/14/2009 05:30 AM : cb624c0035412af0debec78c41f5ca1b [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serenum.sys : 23,552 : 07/14/2009 05:30 AM : cb624c0035412af0debec78c41f5ca1b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serenum.sys : 23,552 : 07/14/2009 05:30 AM : cb624c0035412af0debec78c41f5ca1b [Pos Repl]

 * C:\Windows\System32\drivers\serial.sys : 94,208 : 07/14/2009 05:30 AM : c1d8e28b2c2adfaec4ba89e9fda69bd6 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys : 94,208 : 07/14/2009 05:30 AM : c1d8e28b2c2adfaec4ba89e9fda69bd6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys : 94,208 : 07/14/2009 05:30 AM : c1d8e28b2c2adfaec4ba89e9fda69bd6 [Pos Repl]

 * C:\Windows\System32\drivers\sffdisk.sys : 14,336 : 07/14/2009 05:31 AM : a554811bcd09279536440c964ae35bbf [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\sffdisk.inf_amd64_neutral_d2425e60845d17d3\sffdisk.sys : 14,336 : 07/14/2009 05:31 AM : a554811bcd09279536440c964ae35bbf [Pos Repl]
 +-> C:\Windows\winsxs\amd64_sffdisk.inf_31bf3856ad364e35_6.1.7601.17514_none_02618e7200897e0a\sffdisk.sys : 14,336 : 07/14/2009 05:31 AM : a554811bcd09279536440c964ae35bbf [Pos Repl]

 * C:\Windows\System32\drivers\sffp_sd.sys : 14,336 : 11/21/2010 08:53 AM : dd85b78243a19b59f0637dcf284da63c [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\sffdisk.inf_amd64_neutral_d2425e60845d17d3\sffp_sd.sys : 14,336 : 11/21/2010 08:53 AM : dd85b78243a19b59f0637dcf284da63c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_sffdisk.inf_31bf3856ad364e35_6.1.7601.17514_none_02618e7200897e0a\sffp_sd.sys : 14,336 : 11/21/2010 08:53 AM : dd85b78243a19b59f0637dcf284da63c [Pos Repl]

 * C:\Windows\System32\drivers\sfloppy.sys : 16,896 : 07/14/2009 05:31 AM : a9d601643a1647211a1ee2ec4e433ff4 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\flpydisk.inf_amd64_neutral_f54222cc59267e1e\sfloppy.sys : 16,896 : 07/14/2009 05:31 AM : a9d601643a1647211a1ee2ec4e433ff4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_flpydisk.inf_31bf3856ad364e35_6.1.7600.16385_none_42ff01d4942cc5ea\sfloppy.sys : 16,896 : 07/14/2009 05:31 AM : a9d601643a1647211a1ee2ec4e433ff4 [Pos Repl]

 * C:\Windows\System32\drivers\smclib.sys : 20,992 : 07/14/2009 05:30 AM : a80348ba03e96c70852959655ca3e084 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft.windows.s…smart_card_library_31bf3856ad364e35_6.1.7600.16385_none_55f89e9f01688dc0\smclib.sys : 20,992 : 07/14/2009 05:30 AM : a80348ba03e96c70852959655ca3e084 [Pos Repl]

 * C:\Windows\System32\drivers\srv.sys : 4,64,896 : 08/12/2016 09:56 PM : ec666682fe8344cf7e6ed69e74fa9f4f [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.1.7601.17514_none_381d6eca0d132216\srv.sys : 4,68,992 : 11/21/2010 08:53 AM : 2098b8556d1cec2aca9a29cd479e3692 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.1.7601.17608_none_382c41c40d0768a8\srv.sys : 4,67,456 : 06/01/2012 09:52 AM : 441fba48bff01fdb9d5969ebc1838f0b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.1.7601.21717_none_38aa0e59262e0b0c\srv.sys : 4,67,456 : 06/01/2012 09:52 AM : 10586f14752ace786ab120ff8bb6bda4 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.1.7601.23452_none_387999f5265337ea\srv.sys : 4,64,896 : 05/12/2016 08:28 PM : f2f4b895296ee3ecce781cc2a296a5d1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.1.7601.23491_none_384d59fb26748e57\srv.sys : 4,64,896 : 07/01/2016 08:26 PM : 16897b0322dd56621df5978131130af2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.1.7601.23517_none_38a9dcfd262e4400\srv.sys : 4,64,896 : 08/12/2016 09:56 PM : ec666682fe8344cf7e6ed69e74fa9f4f [Pos Repl]

 * C:\Windows\System32\drivers\stream.sys : 69,888 : 04/11/2015 08:49 AM : 36e0ddd19038c92b7c7709bfa03f813f [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-streamclass_31bf3856ad364e35_6.1.7600.16385_none_ba5987585153b623\stream.sys : 68,864 : 07/14/2009 05:36 AM : 001cc10fa5e71ae1119115e126c8750d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-streamclass_31bf3856ad364e35_6.1.7601.18828_none_bc83bb464e46cc20\stream.sys : 69,888 : 04/11/2015 08:49 AM : 36e0ddd19038c92b7c7709bfa03f813f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-streamclass_31bf3856ad364e35_6.1.7601.23033_none_bcfd5ed567713c6a\stream.sys : 69,888 : 04/11/2015 08:57 AM : 0747e74e8bc611e3a3b215c04263c20e [Pos Repl]

 * C:\Windows\System32\drivers\tape.sys : 29,184 : 07/14/2009 05:31 AM : 6e316c01cba8b785fe495f5cc4f48c6f [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft.windows.h..pedrive-driverclass_31bf3856ad364e35_6.1.7600.16385_none_ee1ec21ed6ff8107\tape.sys : 29,184 : 07/14/2009 05:31 AM : 6e316c01cba8b785fe495f5cc4f48c6f [Pos Repl]

 * C:\Windows\System32\drivers\tdi.sys : 26,624 : 11/21/2010 08:54 AM : 6f020a220388eca0ab6062dc27bd16b6 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-tdi-driver_31bf3856ad364e35_6.1.7601.17514_none_c5144dfb4c96036b\tdi.sys : 26,624 : 11/21/2010 08:54 AM : 6f020a220388eca0ab6062dc27bd16b6 [Pos Repl]

 * C:\Windows\System32\drivers\tdpipe.sys : 15,872 : 07/14/2009 05:46 AM : 3371d21011695b16333a3934340c4e7c [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..es-transportdrivers_31bf3856ad364e35_6.1.7600.16385_none_37a129135e68497e\tdpipe.sys : 15,872 : 07/14/2009 05:46 AM : 3371d21011695b16333a3934340c4e7c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..es-transportdrivers_31bf3856ad364e35_6.1.7601.17779_none_399662915b82edbf\tdpipe.sys : 15,872 : 07/14/2009 05:46 AM : 3371d21011695b16333a3934340c4e7c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..es-transportdrivers_31bf3856ad364e35_6.1.7601.21924_none_3a510f6c747c8048\tdpipe.sys : 15,872 : 07/14/2009 05:46 AM : 3371d21011695b16333a3934340c4e7c [Pos Repl]

 * C:\Windows\System32\drivers\tdtcp.sys : 23,552 : 02/17/2012 10:27 AM : 51c5eceb1cdee2468a1748be550cfbc8 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..es-transportdrivers_31bf3856ad364e35_6.1.7600.16385_none_37a129135e68497e\tdtcp.sys : 23,552 : 07/14/2009 05:46 AM : e4245bda3190a582d55ed09e137401a9 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..es-transportdrivers_31bf3856ad364e35_6.1.7601.17779_none_399662915b82edbf\tdtcp.sys : 23,552 : 02/17/2012 10:27 AM : 51c5eceb1cdee2468a1748be550cfbc8 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-t..es-transportdrivers_31bf3856ad364e35_6.1.7601.21924_none_3a510f6c747c8048\tdtcp.sys : 23,552 : 02/17/2012 10:17 AM : 7463523827b104317de03a87c6d3ea1b [Pos Repl]

 * C:\Windows\System32\drivers\tdx.sys : 1,18,272 : 10/13/2015 10:10 PM : aa77eb517d2f07a947294f260e3aca83 [NoSig]
 +-> C:\Windows\erdnt\cache64\tdx.sys : 1,18,272 : 10/13/2015 10:10 PM : aa77eb517d2f07a947294f260e3aca83 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.1.7601.17514_none_4863cdbaf2b532f8\tdx.sys : 1,19,296 : 11/21/2010 08:54 AM : ddad5a7ab24d8b65f8d724f5c20fd806 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.1.7601.18658_none_483c7a50f2d21ee0\tdx.sys : 1,19,296 : 11/11/2014 07:16 AM : 70988118145f5f10ef24720b97f35f65 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.1.7601.19031_none_484af5f6f2c86054\tdx.sys : 1,18,272 : 10/13/2015 10:10 PM : aa77eb517d2f07a947294f260e3aca83 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.1.7601.22865_none_48b848380bfa8bbd\tdx.sys : 1,18,272 : 11/11/2014 07:26 AM : 5fcf588bbd2358538db17dd0a0a31813 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.1.7601.23237_none_48da96640be0954f\tdx.sys : 1,17,760 : 10/14/2015 06:20 AM : 37a9cda299bd9e35e84b03ea2bc5a2cc [Pos Repl]

 * C:\Windows\System32\drivers\udfs.sys : 3,28,192 : 11/21/2010 08:53 AM : ff4232a1a64012baa1fd97c7b67df593 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-udfs_31bf3856ad364e35_6.1.7601.17514_none_049f9db233833b25\udfs.sys : 3,28,192 : 11/21/2010 08:53 AM : ff4232a1a64012baa1fd97c7b67df593 [Pos Repl]

 * C:\Windows\System32\drivers\usb8023.sys : 19,968 : 02/12/2013 09:42 AM : 92b3172e8c14c1444682f510843a9988 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rndis-usb-microport_31bf3856ad364e35_6.1.7600.16385_none_20e1b69f6c5c4250\usb8023.sys : 19,968 : 07/14/2009 05:39 AM : d0fe8cb5f84303e73ff0754437fad3d1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rndis-usb-microport_31bf3856ad364e35_6.1.7601.18076_none_22d3cb2d6979c81c\usb8023.sys : 19,968 : 02/12/2013 09:42 AM : 92b3172e8c14c1444682f510843a9988 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rndis-usb-microport_31bf3856ad364e35_6.1.7601.22248_none_237fda36827d43e8\usb8023.sys : 19,968 : 02/12/2013 09:29 AM : a6db4451eefe7b9ef5bd0c5fe0c09125 [Pos Repl]

 * C:\Windows\System32\drivers\usbcamd2.sys : 32,896 : 11/21/2010 08:54 AM : 292a8e03b3fce04e39b5be9b14132030 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-usbcamd_31bf3856ad364e35_6.1.7601.17514_none_fdae66ff8eda989e\USBCAMD2.sys : 32,896 : 11/21/2010 08:54 AM : 292a8e03b3fce04e39b5be9b14132030 [Pos Repl]

 * C:\Windows\System32\drivers\usbccgp.sys : 99,840 : 08/17/2016 02:10 AM : 28b81917a195b67617af7dcf4dfe5736 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\usb.inf_amd64_neutral_153b489118ee37b8\usbccgp.sys : 98,816 : 06/01/2012 09:51 AM : 6f1a3157a1c89435352ceb543cdb359c [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usb.inf_amd64_neutral_269d7150439b3372\usbccgp.sys : 98,816 : 11/21/2010 08:53 AM : 481dff26b4dca8f4cbac1f7dce1d6829 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usb.inf_amd64_neutral_42d7284868af1f40\usbccgp.sys : 99,840 : 11/27/2013 07:11 AM : dca68b0943d6fa415f0c56c92158a83a [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usb.inf_amd64_neutral_8b3e07e01c1828b1\usbccgp.sys : 99,840 : 08/17/2016 02:10 AM : 28b81917a195b67617af7dcf4dfe5736 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.17514_none_291e6c652511ddb0\usbccgp.sys : 98,816 : 11/21/2010 08:53 AM : 481dff26b4dca8f4cbac1f7dce1d6829 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.17586_none_28d4bd852548d3f5\usbccgp.sys : 98,816 : 06/01/2012 09:51 AM : 6f1a3157a1c89435352ceb543cdb359c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.18251_none_28f00f5d2535239b\usbccgp.sys : 99,840 : 09/04/2013 05:41 PM : accea6bc68d0c9a78eb97ee159028b4e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.18328_none_2917830d25167e50\usbccgp.sys : 99,840 : 11/27/2013 07:11 AM : dca68b0943d6fa415f0c56c92158a83a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.21692_none_294f893c3e722a54\usbccgp.sys : 99,328 : 06/01/2012 09:51 AM : 19ad7990c0b67e48dac5b26f99628223 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.22441_none_29847dfa3e4aa49b\usbccgp.sys : 99,840 : 09/04/2013 07:07 AM : 30353ddfc28c4f1ef4464dcef994d678 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.22526_none_299f212a3e35e893\usbccgp.sys : 99,840 : 11/27/2013 07:12 AM : 91d3c92a44fc682dd791147604e79152 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.23529_none_29a20b403e334e39\usbccgp.sys : 99,840 : 08/17/2016 02:10 AM : 28b81917a195b67617af7dcf4dfe5736 [Pos Repl]

 * C:\Windows\System32\drivers\usbd.sys : 7,808 : 08/17/2016 02:10 AM : 614a71b78c6807d95a30a89b5a69669a [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbd.sys : 7,936 : 06/01/2012 09:51 AM : cca2ab1752a61f29c3c941cd79d78cea [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_c17f781c40b8b7eb\usbd.sys : 7,808 : 08/17/2016 02:10 AM : 614a71b78c6807d95a30a89b5a69669a [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_d5d6e7e900318837\usbd.sys : 7,808 : 11/27/2013 07:11 AM : ffa06ef43987ed0dd42ad59b260c0c78 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_f935002f367d5bb0\usbd.sys : 7,936 : 07/14/2009 05:36 AM : 63c8d74bed9f80f4dd0aa7a3101eb639 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.17514_none_1be864e21a2d2b97\usbd.sys : 7,936 : 07/14/2009 05:36 AM : 63c8d74bed9f80f4dd0aa7a3101eb639 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.17586_none_1b9eb6021a6421dc\usbd.sys : 7,936 : 06/01/2012 09:51 AM : cca2ab1752a61f29c3c941cd79d78cea [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.18251_none_1bba07da1a507182\usbd.sys : 7,808 : 09/04/2013 05:41 PM : 861c197502a5057e68f0ac75d9efcdd7 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.18328_none_1be17b8a1a31cc37\usbd.sys : 7,808 : 11/27/2013 07:11 AM : ffa06ef43987ed0dd42ad59b260c0c78 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.21692_none_1c1981b9338d783b\usbd.sys : 7,936 : 06/01/2012 09:51 AM : 9fed58941ec600a96cb0cc37ec841ffb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.22441_none_1c4e76773365f282\usbd.sys : 7,808 : 09/04/2013 07:07 AM : 32d0297fb5b0d9eeb20ed5e7cf825725 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.22526_none_1c6919a73351367a\usbd.sys : 7,808 : 11/27/2013 07:12 AM : 1a13dcabd19d093b4d3949ce33ef1fa1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.23529_none_1c6c03bd334e9c20\usbd.sys : 7,808 : 08/17/2016 02:10 AM : 614a71b78c6807d95a30a89b5a69669a [Pos Repl]

 * C:\Windows\System32\drivers\usbehci.sys : 56,320 : 08/17/2016 02:10 AM : b626f048318dae65a3317f0592be592c [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbehci.sys : 52,736 : 06/01/2012 09:51 AM : c025055fe7b87701eb042095df1a2d7b [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_c17f781c40b8b7eb\usbehci.sys : 56,320 : 08/17/2016 02:10 AM : b626f048318dae65a3317f0592be592c [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_d5d6e7e900318837\usbehci.sys : 53,248 : 11/27/2013 07:11 AM : 18a85013a3e0f7e1755365d287443965 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_f935002f367d5bb0\usbehci.sys : 52,224 : 11/21/2010 08:53 AM : 74ee782b1d9c241efe425565854c661c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.17514_none_1be864e21a2d2b97\usbehci.sys : 52,224 : 11/21/2010 08:53 AM : 74ee782b1d9c241efe425565854c661c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.17586_none_1b9eb6021a6421dc\usbehci.sys : 52,736 : 06/01/2012 09:51 AM : c025055fe7b87701eb042095df1a2d7b [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.18251_none_1bba07da1a507182\usbehci.sys : 52,736 : 09/04/2013 05:41 PM : 311c1dd1088e55beae15954d17f50646 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.18328_none_1be17b8a1a31cc37\usbehci.sys : 53,248 : 11/27/2013 07:11 AM : 18a85013a3e0f7e1755365d287443965 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.21692_none_1c1981b9338d783b\usbehci.sys : 52,736 : 06/01/2012 09:51 AM : db1d7bfac2ae51766aad8f4edad753d0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.22441_none_1c4e76773365f282\usbehci.sys : 52,736 : 09/04/2013 07:07 AM : 7b01f9e957aa6d7f8520bb9e229df0e2 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.22526_none_1c6919a73351367a\usbehci.sys : 53,248 : 11/27/2013 07:12 AM : f7ffdf2a1d19a76a87759126b244c816 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.23529_none_1c6c03bd334e9c20\usbehci.sys : 56,320 : 08/17/2016 02:10 AM : b626f048318dae65a3317f0592be592c [Pos Repl]

 * C:\Windows\System32\drivers\usbhub.sys : 3,43,552 : 08/17/2016 02:10 AM : 390109e8e05ba00375dcb1ed64dc60af [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\usb.inf_amd64_neutral_153b489118ee37b8\usbhub.sys : 3,43,040 : 06/01/2012 09:51 AM : 287c6c9410b111b68b52ca298f7b8c24 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usb.inf_amd64_neutral_269d7150439b3372\usbhub.sys : 3,43,040 : 11/21/2010 08:53 AM : dc96bd9ccb8403251bcf25047573558e [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usb.inf_amd64_neutral_42d7284868af1f40\usbhub.sys : 3,43,040 : 11/27/2013 07:11 AM : 8d1196cfbb223621f2c67d45710f25ba [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usb.inf_amd64_neutral_8b3e07e01c1828b1\usbhub.sys : 3,43,552 : 08/17/2016 02:10 AM : 390109e8e05ba00375dcb1ed64dc60af [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbhub.sys : 3,43,040 : 06/01/2012 09:51 AM : 287c6c9410b111b68b52ca298f7b8c24 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_c17f781c40b8b7eb\usbhub.sys : 3,43,552 : 08/17/2016 02:10 AM : 390109e8e05ba00375dcb1ed64dc60af [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_d5d6e7e900318837\usbhub.sys : 3,43,040 : 11/27/2013 07:11 AM : 8d1196cfbb223621f2c67d45710f25ba [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_f935002f367d5bb0\usbhub.sys : 3,43,040 : 11/21/2010 08:53 AM : dc96bd9ccb8403251bcf25047573558e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.17514_none_291e6c652511ddb0\usbhub.sys : 3,43,040 : 11/21/2010 08:53 AM : dc96bd9ccb8403251bcf25047573558e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.17586_none_28d4bd852548d3f5\usbhub.sys : 3,43,040 : 06/01/2012 09:51 AM : 287c6c9410b111b68b52ca298f7b8c24 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.18251_none_28f00f5d2535239b\usbhub.sys : 3,43,040 : 09/04/2013 05:42 PM : 280e90cbf4b2ddd169f0728cb44d726f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.18328_none_2917830d25167e50\usbhub.sys : 3,43,040 : 11/27/2013 07:11 AM : 8d1196cfbb223621f2c67d45710f25ba [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.21692_none_294f893c3e722a54\usbhub.sys : 3,43,040 : 06/01/2012 09:51 AM : 8b892002d7b79312821169a14317ab86 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.22441_none_29847dfa3e4aa49b\usbhub.sys : 3,43,040 : 09/04/2013 07:07 AM : 90c0e5cf8fd5c25b41e7c10473edb6bd [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.22526_none_299f212a3e35e893\usbhub.sys : 3,43,040 : 11/27/2013 07:12 AM : 245fe7fc634d6a993e682e0a9eba4abb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usb.inf_31bf3856ad364e35_6.1.7601.23529_none_29a20b403e334e39\usbhub.sys : 3,43,552 : 08/17/2016 02:10 AM : 390109e8e05ba00375dcb1ed64dc60af [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.17514_none_1be864e21a2d2b97\usbhub.sys : 3,43,040 : 11/21/2010 08:53 AM : dc96bd9ccb8403251bcf25047573558e [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.17586_none_1b9eb6021a6421dc\usbhub.sys : 3,43,040 : 06/01/2012 09:51 AM : 287c6c9410b111b68b52ca298f7b8c24 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.18251_none_1bba07da1a507182\usbhub.sys : 3,43,040 : 09/04/2013 05:42 PM : 280e90cbf4b2ddd169f0728cb44d726f [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.18328_none_1be17b8a1a31cc37\usbhub.sys : 3,43,040 : 11/27/2013 07:11 AM : 8d1196cfbb223621f2c67d45710f25ba [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.21692_none_1c1981b9338d783b\usbhub.sys : 3,43,040 : 06/01/2012 09:51 AM : 8b892002d7b79312821169a14317ab86 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.22441_none_1c4e76773365f282\usbhub.sys : 3,43,040 : 09/04/2013 07:07 AM : 90c0e5cf8fd5c25b41e7c10473edb6bd [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.22526_none_1c6919a73351367a\usbhub.sys : 3,43,040 : 11/27/2013 07:12 AM : 245fe7fc634d6a993e682e0a9eba4abb [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.23529_none_1c6c03bd334e9c20\usbhub.sys : 3,43,552 : 08/17/2016 02:10 AM : 390109e8e05ba00375dcb1ed64dc60af [Pos Repl]

 * C:\Windows\System32\drivers\usbport.sys : 3,27,168 : 08/17/2016 02:10 AM : 43f6bed028fa27d3f3ce852edbbe0f81 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbport.sys : 3,25,120 : 06/01/2012 09:51 AM : ae259c75f9a0b057b6bf9e9695632b09 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_c17f781c40b8b7eb\usbport.sys : 3,27,168 : 08/17/2016 02:10 AM : 43f6bed028fa27d3f3ce852edbbe0f81 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_d5d6e7e900318837\usbport.sys : 3,25,120 : 11/27/2013 07:11 AM : 12feb33791920678f8433701c822bcfd [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_f935002f367d5bb0\usbport.sys : 3,25,120 : 11/21/2010 08:53 AM : b6d64ee607637301ff8c33139b4950de [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.17514_none_1be864e21a2d2b97\usbport.sys : 3,25,120 : 11/21/2010 08:53 AM : b6d64ee607637301ff8c33139b4950de [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.17586_none_1b9eb6021a6421dc\usbport.sys : 3,25,120 : 06/01/2012 09:51 AM : ae259c75f9a0b057b6bf9e9695632b09 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.18251_none_1bba07da1a507182\usbport.sys : 3,25,120 : 09/04/2013 05:41 PM : e73a7a04fdac9dd46ee2a4257f09e91c [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.18328_none_1be17b8a1a31cc37\usbport.sys : 3,25,120 : 11/27/2013 07:11 AM : 12feb33791920678f8433701c822bcfd [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.21692_none_1c1981b9338d783b\usbport.sys : 3,25,120 : 06/01/2012 09:51 AM : 985205ef2e427b4f5e464f0f0f8671f0 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.22441_none_1c4e76773365f282\usbport.sys : 3,25,120 : 09/04/2013 07:07 AM : 4cfd8c18a0ac9c448263c6b8f12159d5 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.22526_none_1c6919a73351367a\usbport.sys : 3,25,120 : 11/27/2013 07:12 AM : d7322da647332ab0fa3809555bb04325 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.23529_none_1c6c03bd334e9c20\usbport.sys : 3,27,168 : 08/17/2016 02:10 AM : 43f6bed028fa27d3f3ce852edbbe0f81 [Pos Repl]

 * C:\Windows\System32\drivers\USBSTOR.sys : 91,648 : 02/03/2016 11:37 PM : d029dd09e22eb24318a8fc3d8138ba43 [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbstor.inf_amd64_neutral_0725c2806a159a9d\USBSTOR.SYS : 91,648 : 11/21/2010 08:53 AM : d76510cfa0fc09023077f22c2f979d86 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbstor.inf_amd64_neutral_1eb5ea4d83600226\USBSTOR.SYS : 91,648 : 02/03/2016 11:37 PM : d029dd09e22eb24318a8fc3d8138ba43 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbstor.inf_amd64_neutral_26b33263a639795d\USBSTOR.SYS : 91,648 : 06/01/2012 09:54 AM : fed648b01349a3c8395a5169db5fb7d6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbstor.inf_31bf3856ad364e35_6.1.7601.17514_none_a6ac5425ae72a584\USBSTOR.SYS : 91,648 : 11/21/2010 08:53 AM : d76510cfa0fc09023077f22c2f979d86 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbstor.inf_31bf3856ad364e35_6.1.7601.17577_none_a66e757baea0992f\USBSTOR.SYS : 91,648 : 06/01/2012 09:54 AM : fed648b01349a3c8395a5169db5fb7d6 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbstor.inf_31bf3856ad364e35_6.1.7601.19144_none_a68baf39ae8b37fd\USBSTOR.SYS : 91,648 : 02/03/2016 11:37 PM : d029dd09e22eb24318a8fc3d8138ba43 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbstor.inf_31bf3856ad364e35_6.1.7601.21680_none_a6e64054c7cca389\USBSTOR.SYS : 91,648 : 06/01/2012 09:54 AM : 36106ac439edfbb7b8bdbf99079c7590 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbstor.inf_31bf3856ad364e35_6.1.7601.23344_none_a7154deac7a8d4ee\USBSTOR.SYS : 91,648 : 02/03/2016 11:49 PM : e161ee674da4d1f121edbc5719fe61aa [Pos Repl]

 * C:\Windows\System32\drivers\usbuhci.sys : 30,720 : 08/17/2016 02:10 AM : cfeaaf96e666e3dcbd8f6dff516784ae [NoSig]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbuhci.sys : 30,720 : 06/01/2012 09:51 AM : 62069a34518bcf9c1fd9e74b3f6db7cd [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_c17f781c40b8b7eb\usbuhci.sys : 30,720 : 08/17/2016 02:10 AM : cfeaaf96e666e3dcbd8f6dff516784ae [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_d5d6e7e900318837\usbuhci.sys : 30,720 : 11/27/2013 07:11 AM : dd253afc3bc6cba412342de60c3647f3 [Pos Repl]
 +-> C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_neutral_f935002f367d5bb0\usbuhci.sys : 30,720 : 07/14/2009 05:36 AM : 81fb2216d3a60d1284455d511797db3d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.17514_none_1be864e21a2d2b97\usbuhci.sys : 30,720 : 07/14/2009 05:36 AM : 81fb2216d3a60d1284455d511797db3d [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.17586_none_1b9eb6021a6421dc\usbuhci.sys : 30,720 : 06/01/2012 09:51 AM : 62069a34518bcf9c1fd9e74b3f6db7cd [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.18251_none_1bba07da1a507182\usbuhci.sys : 30,720 : 09/04/2013 05:41 PM : a83d0ec9ae4c31704442099d40ba2471 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.18328_none_1be17b8a1a31cc37\usbuhci.sys : 30,720 : 11/27/2013 07:11 AM : dd253afc3bc6cba412342de60c3647f3 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.21692_none_1c1981b9338d783b\usbuhci.sys : 30,720 : 06/01/2012 09:51 AM : 23d13cd7d90e8857f06647fed5d0f3dd [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.22441_none_1c4e76773365f282\usbuhci.sys : 30,720 : 09/04/2013 07:07 AM : 9462e6b70615c1703d4a95fa61fc54a1 [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.22526_none_1c6919a73351367a\usbuhci.sys : 30,720 : 11/27/2013 07:12 AM : 2e682dce4319a90e02a327f8a427544a [Pos Repl]
 +-> C:\Windows\winsxs\amd64_usbport.inf_31bf3856ad364e35_6.1.7601.23529_none_1c6c03bd334e9c20\usbuhci.sys : 30,720 : 08/17/2016 02:10 AM : cfeaaf96e666e3dcbd8f6dff516784ae [Pos Repl]

 * C:\Windows\System32\drivers\vga.sys : 29,184 : 07/14/2009 05:08 AM : 53e92a310193cb3c03bea963de7d9cfc [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-standardvga_31bf3856ad364e35_6.1.7600.16385_none_f881232cf3b0c322\vga.sys : 29,184 : 07/14/2009 05:08 AM : 53e92a310193cb3c03bea963de7d9cfc [Pos Repl]

 * C:\Windows\System32\drivers\videoprt.sys : 1,29,024 : 07/14/2009 05:08 AM : e7353d59c9842bc7299faeb7e7e09340 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-videoport_31bf3856ad364e35_6.1.7600.16385_none_180f3dba1e158073\videoprt.sys : 1,29,024 : 07/14/2009 05:08 AM : e7353d59c9842bc7299faeb7e7e09340 [Pos Repl]

 * C:\Windows\System32\drivers\wanarp.sys : 88,576 : 11/21/2010 08:54 AM : 356afd78a6ed4457169241ac3965230c [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-rasbase_31bf3856ad364e35_6.1.7601.17514_none_6c066d50910ecf5a\wanarp.sys : 88,576 : 11/21/2010 08:54 AM : 356afd78a6ed4457169241ac3965230c [Pos Repl]

 * C:\Windows\System32\drivers\ws2ifsl.sys : 21,504 : 07/14/2009 05:40 AM : 6bcc1d7d2fd2453957c5479a32364e52 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys : 21,504 : 07/14/2009 05:40 AM : 6bcc1d7d2fd2453957c5479a32364e52 [Pos Repl]

Checking HOSTS File:

 * HOSTS file entries found:

  127.0.0.1       localhost

Program finished at: 11/13/2016 06:56:45 PM
Execution time: 0 hours(s), 39 minute(s), and 45 seconds(s)
 

RogueKiller V12.8.0.0 (x64) [Nov  7 2016] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/download/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Jason [Administrator]
Started from : C:\Program Files\RogueKiller\RogueKiller64.exe
Mode : Scan – Date : 11/13/2016 19:04:23 (Duration : 04:26:22)

¤¤¤ Processes : 0 ¤¤¤

¤¤¤ Registry : 0 ¤¤¤

¤¤¤ Tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ WMI : 0 ¤¤¤

¤¤¤ Hosts File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: Hitachi HDS721010CLA630 SCSI Disk Device +++++
— User —
[MBR] 6681d296408ed02c4b084b4ab1804ed3
[BSP] bca040eb6102ff943544c1f669def297 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 468682 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 960067584 | Size: 467556 MB
3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 1917622272 | Size: 17529 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 … OK
User = LL2 … OK

+++++ PhysicalDrive1: WDC WD10EACS-00ZJB0 SCSI Disk Device +++++
— User —
[MBR] 1cbdcc22c0e77a3c0ee6d4bfcce2359d
[BSP] 8b895bef0c4d35f03f4627106808efd5 : Windows XP|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 99998 MB [Windows XP Bootstrap | Windows XP Bootloader]
1 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 204796620 | Size: 853861 MB
User = LL1 … OK
User = LL2 … OK

+++++ PhysicalDrive2: Generic- SD/MMC USB Device +++++
Error reading User MBR! ([15] The device is not ready. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] The request is not supported. )

+++++ PhysicalDrive3: Generic- Compact Flash USB Device +++++
Error reading User MBR! ([15] The device is not ready. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] The request is not supported. )

+++++ PhysicalDrive4: Generic- SM/xD-Picture USB Device +++++
Error reading User MBR! ([15] The device is not ready. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] The request is not supported. )

+++++ PhysicalDrive5: Generic- MS/MS-Pro USB Device +++++
Error reading User MBR! ([15] The device is not ready. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] The request is not supported. )
 

My apologies for not replying but I received no notification of this for some reason and only saw your reply when I came here to remind you to respond.

 

There were still entries in your FRST and ComboFix logs that need to be dealt with therefore, while I check the logs you've sent, please send a new FRST log and make sure there is a checkmark next to Addition.txt before running the scan.

 

Thanks

 

satchfan

Hey, no problem at all.

Here's the new FRST.txt


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
Ran by [removed] (administrator) on JASON-HP (17-11-2016 01:21:33)
Running from C:\Users\[removed]\Desktop
[removed] Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\BCMWLTRY.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Acunetix Ltd.) C:\Program Files (x86)\Acunetix\Web Vulnerability Scanner 7\WVSScheduler7.exe
() C:\Program Files (x86)\Common Files\Microsoft\Care Suite\ADUService\ADUService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Flux Software LLC) C:\Users\Jason\AppData\Local\FluxSoftware\Flux\flux.exe
(i-Funbox.com) C:\Program Files (x86)\i-Funbox DevTeam\iFunBox_x64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Dropbox, Inc.) C:\Users\Jason\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Tenorshare Co,Ltd) C:\Program Files (x86)\ReiBoot\TenorshareReibootService.exe
() C:\Program Files\Reliance 3\bin\MonServiceUDisk.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Tweaking.com) C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\HPTouchSmartSyncCalReminderApp.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.)
HKLM\…\Run: [ZAM] => C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [13823216 2016-10-04] (Zemana Ltd.)
HKLM-x32\…\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKLM-x32\…\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKU\S-1-5-21-4001190308-645597301-758162152-1001\…\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2860832 2016-10-13] (Valve Corporation)
HKU\S-1-5-21-4001190308-645597301-758162152-1001\…\Run: [f.lux] => C:\Users\Jason\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)
HKU\S-1-5-21-4001190308-645597301-758162152-1001\…\Run: [Dropbox Update] => C:\Users\Jason\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-11] (Dropbox, Inc.)
HKU\S-1-5-21-4001190308-645597301-758162152-1001\…\Run: [iFunBox] => C:\Program Files (x86)\i-Funbox DevTeam\iFunBox_x64.exe [2783232 2015-07-27] (i-Funbox.com)
HKU\S-1-5-21-4001190308-645597301-758162152-1001\…\Policies\Explorer: [NoInstrumentation] 0
Lsa: [Notification Packages] scecli c:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-11-12] (AVAST Software)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jason\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-11-08] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2016-10-28]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-11-12]
ShortcutTarget: Dropbox.lnk -> C:\Users\Jason\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk [2016-10-28]
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.1
Tcpip\..\Interfaces\{3B544C44-ABC4-4105-A677-4FC0AC8AC0CE}: [DhcpNameServer] 192.168.0.1 192.168.0.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-4001190308-645597301-758162152-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131227698710338198&GUID=00000000-0000-0000-0000-000000000000
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131227698710494198&GUID=00000000-0000-0000-0000-000000000000
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-4001190308-645597301-758162152-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-4001190308-645597301-758162152-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE09&ocid=UE09DHP
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-4001190308-645597301-758162152-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-11-12] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21] (HP Inc.)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-06] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-11-12] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-06] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-08-06] (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-08-06] (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-09-23] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\naweriweentcofise\Profiles\qtj95ygw.default-1458962998159\Profiles\qtj95ygw.default-1458962998159 [not found]
FF DefaultProfile: edgp4kre.default
FF ProfilePath: C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\Profiles\tseaflte.default-1477925802081 [2016-11-17]
FF NetworkProxy: Mozilla\Firefox\Profiles\tseaflte.default-1477925802081 -> type", 0
FF ProfilePath: C:\Users\Jason\AppData\Roaming\Firefox\Firefox\Profiles\edgp4kre.default [2016-10-28]
FF Extension: (Skype Click to Call) - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-12-19] [not signed]
FF Extension: (Skype Click to Call) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-12-19] [not signed]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-11-12]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-11-12]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKU\S-1-5-21-4001190308-645597301-758162152-1001\…\SeaMonkey\Extensions: [[removed]] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-12] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-12] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-10-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-10-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-10-10] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-06] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-06] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll [2014-01-16] (McAfee, Inc.)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-08-10] (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-09] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2012-10-13] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems)
FF Plugin HKU\S-1-5-21-4001190308-645597301-758162152-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Jason\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2016-10-31] <==== ATTENTION
CHR Extension: (Avast Online Security) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-07-13]
CHR Extension: (Bigasoft Video Downloader Pro) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\jpnkpjikgipojkofgjjkfgdhfanggcdm [2016-10-22]
CHR Extension: (Skype Click to Call) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-10-22]
CHR Extension: (Google Wallet) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-13]
CHR Extension: (Fast search) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pbdpajcdgknpendpmecafmopknefafha [2016-10-22]
CHR Extension: (Gmail) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-13]
CHR Profile: C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2 [2016-11-17]
CHR Extension: (Adblock Plus) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-09-20]
CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2016-10-27]
CHR Extension: (Skype) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-10-20]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Fast Video Downloader) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nocpfkkbaekckhcoekockfbidpcjgkbd [2015-08-27]
CHR Extension: (Video Cutter) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nodkcjollmmjidmcnhloaoahmciabnai [2015-08-28]
CHR Extension: (Hola - Unlimited Proxy VPN) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\opalpjjboefohnelaemnhdhlceibbcgl [2015-12-07]
CHR Extension: (Chrome Media Router) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-28]
CHR Extension: (26c8690aab4ced4ac840b6bf26e16a77_2) - C:\Program Files (x86)\Google\Chrome\Application\26c8690aab4ced4ac840b6bf26e16a77_2 [2016-06-01]
CHR Extension: (26c8690aab4ced4ac840b6bf26e16a77) - C:\Program Files (x86)\Google\Chrome\Application\26c8690aab4ced4ac840b6bf26e16a77 [2016-02-18]
CHR Profile: C:\Users\Jason\AppData\Local\Google\Chrome\User Data\System Profile [2016-11-07]
CHR HKLM\…\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI